
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
File: 5llvGxY8qwxFqE7rEyYbZfGiKWI.mft (raw, json)
Hash identifier: pNyzzOpgpbE/WRU8uwBFULeXsLr7QKyatBx4Fa3iQDU=
Subject key identifier: 6B:2E:76:BD:9F:19:AC:C2:D0:21:33:23:E2:C0:1D:9B:11:36:27:E1
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 019D37C0AEE6B6946F11ED41503635DF1078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
Manifest number: 18A2
Signing time: Sun 29 Mar 2026 04:01:07 +0000
Manifest this update: Sun 29 Mar 2026 04:01:07 +0000
Manifest next update: Mon 30 Mar 2026 04:01:07 +0000
Files and hashes: 1: 1yFoGNscUr4CLW6dqLRm33BUYvg.roa (hash: JRIdLqy0jettzG16H9R0buawd/EdTcCwurGOVeJ4no4=)
2: 5llvGxY8qwxFqE7rEyYbZfGiKWI.crl (hash: l2VJnv4daCOueuhX/l+fwoh/qrfQMFbSI38M+ET/Bpw=)
3: 7Qfl9Mds2YXiGHI1bUT6XiSxVL4.roa (hash: q1b4P2s3t9bFP69gx0VvlkJ2k9wbhF00vIOXxyF0Vvc=)
4: 7TjKnhX5D5deQHoXLUoiSMDy9Y0.roa (hash: v9zlg7kFGnsHSQNcetbSYedV3Coh51JEiDo9qlPpjd0=)
5: KyVhfqtkBsFTeLR6r-rmi2OSi4s.roa (hash: I4wHLPw8A0l6Nh6OwevrOypXlF/JR2vemPdaafwkJEI=)
6: RCGO8Oq5yEvN1IZ3X284dzzUQeU.roa (hash: LRdALHDMlvzEn3Mzy4S60miqNChz9RLJWshvg3Evc1c=)
7: RSoSsFPa67XJSU_rYMFvnteNoQk.roa (hash: EJat0fz8NMFL7YZfeXLEntqwJOOPR75hReV0Lx+zuHc=)
8: RZbOGzmRLKUkDrECsvD-FTI72cc.roa (hash: Fab+2t5Dd13ANxnSLzfHbZtJxR4520ho/Mfi1jtgezI=)
9: WahD60c8L22Ycb_BALwXUk0StuA.roa (hash: EVO53sqtSZqWFofeupHa94Am0ZrXjRJrcXXcGrDKcaU=)
10: __bescsDyAwNYJKFrHMgdDKxm34.roa (hash: ACM4zhp6ticayTpOrFeCe1H0xbn/X4/ekQ3eaJIxNvI=)
11: aBBjIklmYlMWX-vmbHGnuwsWD2M.roa (hash: +tC+W98mtUX2QstLidBAPcpltrAwZl6PNr50mq8krSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ae:e6:b6:94:6f:11:ed:41:50:36:35:df:10:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Mar 29 04:01:07 2026 GMT
Not After : Mar 30 04:01:07 2026 GMT
Subject: CN=6b2e76bd9f19acc2d0213323e2c01d9b113627e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:49:2f:82:0b:03:2c:52:6f:1b:08:c3:26:
51:b6:41:b6:8f:0d:5d:2f:48:c6:5a:6a:b0:69:6e:
65:62:c0:19:82:d4:1d:0f:c5:ff:0f:53:8e:55:16:
5b:c8:e4:8b:a4:55:69:40:f9:e4:81:83:70:8d:bb:
8c:8a:73:4c:ca:bb:d2:29:bd:84:87:42:9c:a7:8c:
56:c9:e8:3c:6e:d3:d4:7c:39:a8:6d:82:fc:0f:f6:
ce:fe:94:08:a2:59:68:a4:c0:f4:97:d8:30:4c:6d:
d7:a6:67:f3:8f:2c:35:01:14:91:87:5d:74:e4:aa:
ee:7a:24:f3:0e:4c:b3:33:d5:9a:57:2c:63:d1:77:
d7:ca:26:d1:81:e9:37:f5:e2:1c:8a:69:31:54:6b:
2f:bd:82:0c:b2:27:c7:8c:61:35:e2:32:10:3e:3c:
49:aa:e1:3d:7a:a4:ce:16:53:68:8a:a4:b2:ba:43:
2d:34:ae:26:6f:b4:c4:8c:53:d1:d4:85:19:73:c8:
fe:16:9b:b4:30:99:43:0b:49:ae:46:fa:a0:24:65:
dd:34:82:ae:ea:96:71:42:42:f1:f5:2a:96:81:c5:
e5:9d:b1:6f:8f:7b:84:ae:6f:86:59:13:54:af:21:
73:f3:1d:f6:7f:39:78:4f:00:40:ea:6f:0e:c9:63:
d3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2E:76:BD:9F:19:AC:C2:D0:21:33:23:E2:C0:1D:9B:11:36:27:E1
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:aa:56:ab:03:38:c1:1f:a8:81:3b:d6:42:e6:58:11:2e:91:
0e:f2:2e:fe:ce:76:2b:28:4c:71:3e:f8:8d:72:67:6b:a6:7f:
38:5f:c7:70:2f:f1:0e:bf:2b:b0:4a:17:e3:e2:71:91:90:76:
82:99:ee:19:f7:aa:ad:01:a6:45:a4:0b:2d:0f:e1:25:c7:da:
7e:f7:a0:fa:c2:9a:37:e0:4d:90:1f:4f:f1:d3:01:04:27:b0:
bd:c1:3c:93:8b:a8:48:6c:8b:7e:19:86:6b:12:b0:f0:b6:28:
27:fa:3b:ff:f0:a3:cd:0b:0a:07:c4:9a:4e:10:77:6d:8a:4c:
ab:26:4d:dc:d1:9f:5b:12:a7:0d:88:f2:78:bf:eb:71:3b:ef:
3f:ce:a1:a1:8b:3b:fa:64:70:0b:ca:b3:64:13:6f:89:73:0c:
a4:3d:ce:3e:26:7e:1b:59:4d:07:2a:80:31:aa:2a:cf:14:1a:
50:9f:e4:19:28:03:d9:6e:27:5a:68:d9:76:0f:36:1d:af:be:
bb:7a:68:2e:2b:01:0a:08:eb:b2:df:7a:45:8b:cb:05:31:1f:
be:51:20:16:ca:8c:82:b9:e1:5e:8a:5b:41:e6:3d:2b:9a:b0:
af:62:81:08:48:98:39:30:22:ca:21:b5:47:54:5e:23:05:04:
82:a4:da:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wK7mtpRvEe1BUDY13xB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh
MjI5NjIwHhcNMjYwMzI5MDQwMTA3WhcNMjYwMzMwMDQwMTA3WjAzMTEwLwYDVQQD
Eyg2YjJlNzZiZDlmMTlhY2MyZDAyMTMzMjNlMmMwMWQ5YjExMzYyN2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu51JL4ILAyxSbxsIwyZRtkG2jw1d
L0jGWmqwaW5lYsAZgtQdD8X/D1OOVRZbyOSLpFVpQPnkgYNwjbuMinNMyrvSKb2E
h0Kcp4xWyeg8btPUfDmobYL8D/bO/pQIollopMD0l9gwTG3Xpmfzjyw1ARSRh110
5KrueiTzDkyzM9WaVyxj0XfXyibRgek39eIcimkxVGsvvYIMsifHjGE14jIQPjxJ
quE9eqTOFlNoiqSyukMtNK4mb7TEjFPR1IUZc8j+Fpu0MJlDC0muRvqgJGXdNIKu
6pZxQkLx9SqWgcXlnbFvj3uErm+GWRNUryFz8x32fzl4TwBA6m8OyWPTQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsudr2fGazC0CEzI+LAHZsRNifhMB8GA1UdIwQY
MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt
ZTA1MzRlMjM4NTliLzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli
LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6pWqwM4
wR+ogTvWQuZYES6RDvIu/s52KyhMcT74jXJna6Z/OF/HcC/xDr8rsEoX4+JxkZB2
gpnuGfeqrQGmRaQLLQ/hJcfafveg+sKaN+BNkB9P8dMBBCewvcE8k4uoSGyLfhmG
axKw8LYoJ/o7//CjzQsKB8SaThB3bYpMqyZN3NGfWxKnDYjyeL/rcTvvP86hoYs7
+mRwC8qzZBNviXMMpD3OPiZ+G1lNByqAMaoqzxQaUJ/kGSgD2W4nWmjZdg82Ha++
u3poLisBCgjrst96RYvLBTEfvlEgFsqMgrnhXopbQeY9K5qwr2KBCEiYOTAiyiG1
R1ReIwUEgqTavA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:57 2026 by rpki-client