
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier: ahUdzVgq+laDHAmutG4CCtqmygEYxYyPnNScvejdkw8=
Subject key identifier: 78:F4:76:13:CE:17:5F:A1:4B:9D:3D:B2:15:E1:D4:3F:7E:5D:FA:F8
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019C8F4A2642A050FF2BA5E0F4B138890877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number: 0EFA
Signing time: Tue 24 Feb 2026 10:55:27 +0000
Manifest this update: Tue 24 Feb 2026 10:55:27 +0000
Manifest next update: Wed 25 Feb 2026 10:55:27 +0000
Files and hashes: 1: 1-1nP27bm3gAzWksm3Aa1woQLmTg.roa (hash: 4vMUg/+4aVf6LxIWRfZOUaawIS1qe+jvPE0nds6yR2Q=)
2: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
4: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
5: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
6: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
7: Z0BON6E806_VujIu13j4rp4udFU.roa (hash: Dg0DZ41kSt9T8YvEtYfHhtMj9H1Pn0HsQ9ZBprqVWR8=)
8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: 7cFYQvKqFmloF7nGmHHsKJeZ5WncA4Fwhbwj3Bdcb3A=)
9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Feb 2026 07:20:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:4a:26:42:a0:50:ff:2b:a5:e0:f4:b1:38:89:08:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Feb 24 10:55:27 2026 GMT
Not After : Feb 25 10:55:27 2026 GMT
Subject: CN=78f47613ce175fa14b9d3db215e1d43f7e5dfaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ff:bf:66:9a:72:f9:ed:48:2d:ac:29:cd:4f:
3c:80:85:7a:0b:06:b2:80:51:53:fd:1e:33:27:0e:
f1:43:4e:12:25:96:3e:07:fb:9f:c7:0d:6f:cd:ad:
8c:f0:df:0d:05:af:9c:2b:ff:8d:6b:c0:10:16:21:
c0:01:d0:1a:93:de:20:3b:b3:fd:ca:e7:dc:2a:ff:
5a:05:43:79:61:5b:4f:dd:02:1e:62:1c:b4:21:ac:
56:18:d9:da:86:2f:81:a7:a8:e9:0e:e8:0a:40:81:
72:9a:d1:7f:91:14:4f:b1:7c:ac:fd:2b:39:82:00:
d6:aa:72:0a:fd:70:b8:53:fc:96:44:64:84:26:64:
1e:ab:cb:b6:46:b9:4c:b5:95:89:e9:82:8e:ad:05:
2e:44:73:3b:88:bb:4b:09:5f:81:97:a4:96:da:b9:
f5:e5:fb:0e:ea:e0:58:02:70:1c:4b:83:e2:fc:27:
bf:bd:d8:ea:2f:66:d8:d7:e9:90:d5:e8:d0:15:ea:
d1:5e:4d:00:74:73:26:e9:12:ff:39:5a:10:3b:78:
35:a6:cb:68:aa:b7:b9:12:04:3c:07:3b:5a:ea:1b:
a2:88:00:cc:64:56:fc:24:82:2c:11:43:ef:d6:fa:
b7:b8:c6:e8:cb:3f:ca:80:6c:59:61:03:de:d6:43:
17:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F4:76:13:CE:17:5F:A1:4B:9D:3D:B2:15:E1:D4:3F:7E:5D:FA:F8
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d1:15:36:28:a8:96:ce:e3:0c:90:f2:3a:83:24:99:d5:cd:
39:01:2c:af:92:a0:1f:94:75:52:5d:ab:73:8d:49:44:50:d6:
ea:94:32:db:90:2e:6d:57:e0:44:e3:9e:29:15:2a:e5:ed:5b:
45:50:fc:87:13:00:d6:33:7a:b4:f1:71:64:29:3e:c1:fa:23:
6d:61:99:50:35:dd:a0:db:e6:b7:b8:dc:7d:73:87:69:f9:9e:
1d:c5:3a:eb:15:a3:7c:13:13:b1:31:b2:02:2a:48:66:e9:3d:
50:63:4c:56:75:a4:cc:b5:b1:a7:06:7f:da:99:1b:1a:dc:ab:
dc:a2:b7:6f:1f:87:e4:c0:49:f7:5b:6e:ad:17:c8:19:6d:3a:
c4:83:a7:6f:c0:c1:e9:9d:63:24:66:6f:12:a1:c9:35:6f:4b:
0e:1a:06:ee:a9:bb:37:0c:a0:68:2a:65:42:66:21:b2:c5:40:
c9:33:84:82:05:3b:d4:55:d7:b7:03:b0:5b:bd:5b:ae:e2:74:
87:3f:74:74:12:15:e9:5e:25:85:9e:4b:3a:b9:22:50:49:17:
ac:01:d4:31:d3:8f:47:3e:1b:3a:e6:9f:8a:cd:59:bf:33:20:
bb:f0:55:16:5f:2d:1b:80:fb:1b:56:c7:ea:5d:78:51:b3:5c:
77:24:b2:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyPSiZCoFD/K6Xg9LE4iQh3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy
ZGE3NGQwHhcNMjYwMjI0MTA1NTI3WhcNMjYwMjI1MTA1NTI3WjAzMTEwLwYDVQQD
Eyg3OGY0NzYxM2NlMTc1ZmExNGI5ZDNkYjIxNWUxZDQzZjdlNWRmYWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf+/Zppy+e1ILawpzU88gIV6Cway
gFFT/R4zJw7xQ04SJZY+B/ufxw1vza2M8N8NBa+cK/+Na8AQFiHAAdAak94gO7P9
yufcKv9aBUN5YVtP3QIeYhy0IaxWGNnahi+Bp6jpDugKQIFymtF/kRRPsXys/Ss5
ggDWqnIK/XC4U/yWRGSEJmQeq8u2RrlMtZWJ6YKOrQUuRHM7iLtLCV+Bl6SW2rn1
5fsO6uBYAnAcS4Pi/Ce/vdjqL2bY1+mQ1ejQFerRXk0AdHMm6RL/OVoQO3g1psto
qre5EgQ8Bzta6huiiADMZFb8JIIsEUPv1vq3uMboyz/KgGxZYQPe1kMXXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHj0dhPOF1+hS509shXh1D9+Xfr4MB8GA1UdIwQY
MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt
YzE5OTQyNzM3ZTZkLzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk
LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9EVNiio
ls7jDJDyOoMkmdXNOQEsr5KgH5R1Ul2rc41JRFDW6pQy25AubVfgROOeKRUq5e1b
RVD8hxMA1jN6tPFxZCk+wfojbWGZUDXdoNvmt7jcfXOHafmeHcU66xWjfBMTsTGy
AipIZuk9UGNMVnWkzLWxpwZ/2pkbGtyr3KK3bx+H5MBJ91turRfIGW06xIOnb8DB
6Z1jJGZvEqHJNW9LDhoG7qm7NwygaCplQmYhssVAyTOEggU71FXXtwOwW71bruJ0
hz90dBIV6V4lhZ5LOrkiUEkXrAHUMdOPRz4bOuafis1ZvzMgu/BVFl8tG4D7G1bH
6l14UbNcdySyXQ==
-----END CERTIFICATE-----
Generated at Tue Feb 24 14:46:42 2026 by rpki-client