
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
File: OroRckcuqAJl0SmCln3gqLC8WQE.mft (raw, json)
Hash identifier: KMuerrdbLPK81ERa2NSBfT2GBiMvgnE/U1EFq0Y/6Fo=
Subject key identifier: AD:F9:B7:73:6D:43:B3:A2:73:A9:26:68:C6:BA:69:01:18:C5:9A:A3
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 019CE2C6E45A957D051AFAE63DA023D07565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
Manifest number: 1895
Signing time: Thu 12 Mar 2026 16:00:11 +0000
Manifest this update: Thu 12 Mar 2026 16:00:11 +0000
Manifest next update: Fri 13 Mar 2026 16:00:11 +0000
Files and hashes: 1: 1--uZd9q-jqlCwf4KSHTkKxdp1P0.roa (hash: yJgoBtaw97/X+Yl828Ilk6xaEg2wiibhZ1X313r+u+s=)
2: 1k6LBboYndm8KPxxnHHSfyA330M.roa (hash: X46ysx2IUyKm6jXZ7VDJJwqGgs4SwZUKvqkP6KVxSfQ=)
3: 6iaqLomTHcn35nOgS7u2_TW-xhs.roa (hash: Mi7/BGP/3N9pUm1kAumWXNagsUDM+4h/oInYolOAkPE=)
4: 8BEgv2DgNKbNbNuzLHl3VGFIGL8.roa (hash: SQFbOHpDcvay1MqsdXqe1YtJV1othwB2O5ZriM/HbH0=)
5: DcqHCtebdDgiEuSQXxi6ig8mM8o.roa (hash: cRfNZKkpr+LQ6VmzZJFfJ/S+gQUsEnhyoZIF9XUOHHw=)
6: Jbj7ynIvhap5I_QFhGzfNQth1KM.roa (hash: Z7XUHDDtftkWoWOYjRWVurOY4SlFKKJE535VEXNm4iU=)
7: LmZ65ahj31rbnRy9vWbROzqmhcU.roa (hash: SvoOUMNxC/Ob/2VuP/7YeBr/5a0sbiKFw1vWGYN+3kw=)
8: OroRckcuqAJl0SmCln3gqLC8WQE.crl (hash: lneZEhXekJWsOgJA5kyANc/FgHxrSEzX2zQCBNkwgEU=)
9: Rfztg_t5JVeMZSj2mDqPGyp9q44.roa (hash: /89m2QYUYW/bhcHvnKgQT+IpW6Y9wQwv8T9fEb+5DrQ=)
10: TB2uobnUVymGTH4RA03gIOhAZRg.roa (hash: 6oz05ThoSNjSotd8Y3/7ZJcBXHZDvJhujoU9Z+4I/C0=)
11: ZuhzTaDClxjmQVXxvnkYsTWFFGQ.roa (hash: sV8EfVihdKiLsfcrDwHQZu5bOJ9OiQzvEOBbJ1cZbxk=)
12: _Z7JEWza1bSPD-7PWbG0vX89s3o.roa (hash: OZMVtPUDYR+RELQo2A6anCLj+47zVFIRgvSkDtlYuQw=)
13: g3dNjS4XgY8klkPhCyZdKToAlGM.roa (hash: peZC7FKDdVQt9t0rZ2GL+oL22WvV/nKBVc+dvOTk7TE=)
14: gB_s-WdUnxEPR2XESWswld-SB24.roa (hash: qRp5667FdJ5J3f1BulVc/pqFyv4XSQMc14cF/bbrQac=)
15: h2z5PFUk9kCOYl2Qfq1nfpB1Cow.roa (hash: bmKxTPlO70DQG41qe3REDk+7OXfpbhyEVC0cTa4zyE0=)
16: iCDLvxYdAykrIxvCC48ohuJmwcs.roa (hash: Ume17i9/BCAtK0RFxYp+aFptPOFLeGk5A4An1t7V2u4=)
17: ixvTApwJ0LOFuR5J5-NGSIKMqNk.roa (hash: BDKxCeeuSykbUbxzQ/ZPnLJUCKHXvds6WrwRPz6ZbCc=)
18: kLMCAdWt-C1DGHHOXeLpbWBGn-8.roa (hash: 6/BkbF3Xl0wXeX45+UDxiyzqx4P3HQHvsaM0t24sFCU=)
19: nZX_nzH3JzTrJeZ8L9ZU0lIyk-4.roa (hash: BdZa7hgF5JlHhd3QhsJDvnmYPHKo0HSuto3Mzwo2NpU=)
20: pO0qGsq_BKRgOQ_8WYJpqKXk4C0.roa (hash: P0kO1Oni6LjDeROb0o6wKxl0oRXYlJoyDIs7yU4qHZQ=)
21: pxwmw3bWAUG0G2zeWP6wAlWdZpo.roa (hash: TGTRkz6GAsY4o7A1nVyZO49OKe6IHq8N/DzCAZl1Ss0=)
22: u8wDHAu62fejNzSsl66nMVncyJ8.roa (hash: DS9lRY1FbYp3Sl7zQdRRW/sRlCsiVp9bm3HNS4WoCpo=)
23: vDtti9xnyakhZ1WWiOjhX42Cz4E.roa (hash: C355/1wMzaPIkZLvnFKM+IMHqthGrw6arcc7tCzyvb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:c6:e4:5a:95:7d:05:1a:fa:e6:3d:a0:23:d0:75:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Mar 12 16:00:11 2026 GMT
Not After : Mar 13 16:00:11 2026 GMT
Subject: CN=adf9b7736d43b3a273a92668c6ba690118c59aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:86:f7:e7:81:3e:fc:f6:4e:f8:db:8f:c8:64:
ea:bc:e1:61:9b:2d:c6:2e:70:8c:09:a6:53:20:a9:
ce:2e:ae:fc:df:ca:5f:90:c8:a8:a5:93:77:63:97:
ee:e3:75:d8:60:c8:f7:f9:18:ee:9e:2e:f4:44:3d:
d6:50:d4:17:c2:31:22:ed:29:fc:f0:c5:88:2e:d6:
d2:1b:ee:13:e7:dc:c4:b9:4e:9a:f0:85:a2:78:16:
b7:89:f4:c6:15:4a:4d:0d:e7:72:92:7e:cb:a8:69:
8b:46:15:cb:4c:67:ca:67:9a:fa:5c:c2:34:51:4e:
a8:6e:24:3c:b2:60:f1:d0:01:95:37:77:5c:97:8e:
7b:c4:4a:d2:9f:fe:40:50:5e:d5:33:54:98:b7:e4:
3f:65:20:d0:fc:c7:d2:ee:65:73:6d:64:bd:da:10:
10:af:e1:c3:a0:9d:71:99:6a:b5:0b:74:fb:a2:0e:
12:43:42:79:eb:53:76:9c:86:62:cf:0b:cd:61:bb:
4f:bc:e1:30:7c:07:4d:a7:0f:39:cc:fb:39:2b:de:
48:de:55:be:10:6b:7d:90:49:56:89:4c:06:fe:88:
67:95:61:5e:db:4e:a0:01:1e:73:4d:7c:22:4d:43:
27:60:8c:61:10:8f:2a:85:ce:64:41:b1:62:22:1c:
79:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F9:B7:73:6D:43:B3:A2:73:A9:26:68:C6:BA:69:01:18:C5:9A:A3
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:74:df:9c:88:10:7d:b1:7e:63:27:06:8e:27:ca:34:a7:73:
a3:3c:f8:06:89:e1:8e:dd:a5:82:1c:cb:05:e2:5b:b3:c2:fe:
e1:3e:f4:fc:e3:14:d9:c8:24:01:ee:c1:da:5d:70:f6:59:d7:
e1:e9:96:34:77:c0:b7:84:62:54:42:ac:b9:69:0c:2b:8b:dd:
0c:6d:70:d9:5a:52:ea:60:71:e7:e7:d6:ae:e0:13:43:57:7b:
03:ea:51:7f:de:51:f4:9e:96:24:5e:19:8e:7d:0f:bb:dd:ce:
d3:e1:8d:81:34:c0:d6:27:5e:6b:5e:ec:da:8a:7a:ef:fe:e8:
ff:85:c4:72:bb:6c:cb:13:fa:fe:5f:68:cb:a2:2b:88:31:a4:
b8:59:b4:24:bf:b0:de:6f:0c:c1:7a:b6:09:2b:bc:08:df:ae:
cd:49:31:ce:41:a5:eb:99:b5:d6:59:b9:a3:09:47:8f:84:f3:
d7:b9:89:70:77:81:e6:af:25:9d:45:f8:90:58:9b:2a:64:8c:
3f:c8:7d:58:6b:0c:77:89:62:3f:67:c6:d0:75:cc:5e:a0:d7:
f4:30:12:f6:0a:cc:ad:6b:2f:01:db:ca:7f:fa:ce:33:5f:1b:
63:fa:b2:df:26:81:2c:85:8d:fa:e4:c1:2e:7a:d0:71:60:d1:
ea:80:ea:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:17:51 2026 by rpki-client