
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier: gkUrcr80EVESimzje39adkfuwFYsy2oDlBbzG+hOhu8=
Subject key identifier: F3:C2:5E:3F:9A:C6:9F:13:8A:29:65:22:B3:44:67:15:59:E8:D2:F8
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019DE890CC3EA72EC782EF3898BE0AF4BAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number: 0FAE
Signing time: Sat 02 May 2026 12:01:36 +0000
Manifest this update: Sat 02 May 2026 12:01:36 +0000
Manifest next update: Sun 03 May 2026 12:01:36 +0000
Files and hashes: 1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=)
3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
4: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=)
5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
7: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: bkOGG67AtUj+aA1t6q3/QCB55cvqO6LXhtIAbGiFx4A=)
9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e8:90:cc:3e:a7:2e:c7:82:ef:38:98:be:0a:f4:ba:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: May 2 12:01:36 2026 GMT
Not After : May 3 12:01:36 2026 GMT
Subject: CN=f3c25e3f9ac69f138a296522b344671559e8d2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:cb:a1:b7:5a:94:6d:53:12:d1:e2:d4:c8:
92:31:0b:be:35:bc:78:41:5e:10:45:ef:6e:04:f7:
c1:de:cc:ec:1f:12:2b:14:b7:70:fe:ae:c1:8b:59:
c8:9e:20:72:63:da:e3:88:33:80:38:13:89:6a:a3:
79:d0:b3:7b:3a:3a:24:5d:8d:4d:4a:36:c1:02:44:
dd:4a:e8:4d:51:aa:80:08:34:19:1e:49:18:f5:f9:
bb:a3:90:20:58:c4:9a:6b:71:5a:2e:32:7c:44:c7:
52:47:69:15:59:f9:80:ad:9f:fc:f4:16:a2:56:22:
e4:3b:94:76:6a:8d:a7:85:b8:96:08:98:cb:cf:f5:
d0:db:7b:44:50:7a:3e:df:cc:64:15:73:41:af:5e:
08:b9:c8:f7:aa:0d:8d:e3:a0:87:ae:6a:a6:76:3d:
32:ce:87:9b:32:b6:9b:5c:ee:46:18:5c:9f:9e:ab:
35:ab:e2:81:9f:6b:f2:f2:e0:84:07:7f:a4:9c:6c:
5f:69:92:60:9b:c1:81:a6:ff:9c:44:67:ae:b8:94:
6a:3c:62:85:8a:47:15:74:35:d9:44:ce:98:d4:31:
64:02:41:7b:84:0e:39:51:67:9c:e1:61:15:95:20:
f7:e3:6a:cf:99:15:78:c9:21:2c:11:14:b9:41:08:
dc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C2:5E:3F:9A:C6:9F:13:8A:29:65:22:B3:44:67:15:59:E8:D2:F8
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3f:75:34:7b:23:ce:92:46:2d:42:dc:6e:c1:c6:99:17:6e:
34:70:03:17:28:2f:09:46:48:4a:8b:86:e6:e8:b1:1e:c8:5e:
1e:d0:51:cf:d5:c6:40:cf:4d:d9:e6:13:1c:53:99:8c:e8:be:
37:05:7d:26:f6:5a:f3:47:7f:9b:e9:cf:3e:d9:93:1a:96:87:
0c:29:32:b3:86:5c:16:67:00:1d:a4:88:88:77:9e:54:76:34:
be:b6:14:57:d3:00:f7:d8:f8:ad:f2:95:16:7a:6d:88:cd:d7:
5a:c3:21:92:fb:6c:b8:20:8c:41:c1:5c:6e:be:b1:97:c2:5c:
f5:f5:86:de:68:1e:9c:36:94:b0:1d:9f:ba:a1:28:9e:98:8c:
7d:b8:fc:01:bb:bd:5e:b8:80:10:53:00:a8:cb:c1:ad:ca:62:
dc:da:82:c8:cc:f1:38:b5:05:c6:de:68:52:84:ca:5e:6f:2e:
4c:b8:26:2a:9f:2b:fd:8e:9a:a1:50:ed:a3:b1:59:84:d8:4b:
19:fa:73:ad:dc:c5:14:3e:cb:6d:cf:56:bf:68:64:29:34:05:
c4:72:d3:6a:00:37:4c:86:76:1c:f8:3b:5a:d7:0c:c1:f7:9f:
3d:c4:4d:c5:ce:15:bc:ac:41:ed:23:b4:e8:3d:46:3a:d1:0c:
36:eb:4d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 19:37:18 2026 by rpki-client