
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
File: zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json)
Hash identifier: bV8A6SC2WCcQt5uVtgJT79tizT8LMAsjPRPrH9agh2w=
Subject key identifier: 3A:C7:46:C5:BA:5E:26:7A:C7:15:4C:AA:26:F6:97:03:80:9A:1B:DA
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 019CCAF5DB6807F973DBE42090A5921582CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
Manifest number: 11C9
Signing time: Sun 08 Mar 2026 01:00:35 +0000
Manifest this update: Sun 08 Mar 2026 01:00:35 +0000
Manifest next update: Mon 09 Mar 2026 01:00:35 +0000
Files and hashes: 1: C-6-XT-tXjpgvzRBmQRVXaJvVdI.roa (hash: cI18XK4120S5J9FafE4nfPOUgjzzLDAqRssaJqmX93Y=)
2: HLHqvk87Ei7Rb8vncCXmuWA4l5w.roa (hash: qoKJ0OJaCDjYFA4CcCaaIa7Qb7ARu8S3G8wQDaTgwyY=)
3: IPuHLZBymKRXYx-YnfPe_MhR0yA.roa (hash: yDZxC0qnt1slcECmxYfcCYbXQ2iv0xHTebHw2m4awwA=)
4: IuTc0D5cqqVRFXq-RLQjTdtK6t4.roa (hash: N7kuEXPqq2dxL/74FimXDyw5h1aaFIYNRarT9mB1gww=)
5: Urq4lcycVWIKLaNn45V1NeLCyy0.roa (hash: HZbjp+4QSo6sI0SFI/WlujxWaBNVqSA8sXC1QOrQVus=)
6: W_Ul3KlfZZAZTwhKXluxrjuY6M4.roa (hash: snU7qHYKC5pKjBymlSHVqbxFqXGFJcMqdpyod8cQYhI=)
7: _w5UYdFDNzYlLB7LTgg14uRWoQ0.roa (hash: FNlNd2XH5rtIbYtOhYBckkDJYb7wBJCjDTN6zqyAzfM=)
8: cWmuz8rWpsLyYzFuVbnm5r2sozM.roa (hash: j0YU3bB3glv/xEPniuCcBHAL2FOz8BwUw+pnEkDQbqM=)
9: fQbrkFWCEhPNbu1hyR8j_r0b60M.roa (hash: jbrDBJXSw3JZiZBS6EObxYKJvQO6pJEX+TDEGx0U8/g=)
10: iz6H1ZCD2HQkbI3iycWGNl4m8ko.roa (hash: Bg8lotV37nzdSO1p2B8HlIju7cM6vDj8KLbRXCZGkQ8=)
11: lP0gYz-W1ovfpkmjcjSdNrUJxIQ.roa (hash: L4mLka0+J2eAetfCFGY56nD40J5l29wgcwJKHDZ8NEY=)
12: q4kW0iz1-xCx1rCC3Q5buZRP_nQ.roa (hash: /LZ/55ZcvlNKCTvLv/6z/+QEwO6/nIaHAOm8aSJ7fUI=)
13: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: 2PtKL+YxiJeqYcW+VK+spYZC2AMYRLxoqhwflV5vJd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:f5:db:68:07:f9:73:db:e4:20:90:a5:92:15:82:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Mar 8 01:00:35 2026 GMT
Not After : Mar 9 01:00:35 2026 GMT
Subject: CN=3ac746c5ba5e267ac7154caa26f69703809a1bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:f8:07:23:28:10:49:3c:f0:0f:7b:58:d7:
32:b4:7a:46:86:da:ab:ce:82:21:39:06:64:e4:84:
44:e3:18:0e:ae:15:b1:85:49:3d:e5:c4:95:ae:db:
06:17:e5:2b:58:05:42:a7:1c:3c:b2:39:90:cb:c1:
2d:ab:10:78:0a:b9:e9:12:75:7f:f4:3d:35:e6:52:
88:53:9d:6a:2d:27:e5:f4:a8:65:46:b6:0f:91:1b:
05:f1:58:0a:11:53:31:ed:24:42:dc:28:1f:1c:1e:
a3:f2:e7:cf:99:d8:89:7c:6a:bf:7f:9a:2b:be:6e:
44:66:57:b9:49:fe:77:48:ac:91:15:36:38:a8:99:
7f:e0:47:f0:29:da:e2:d6:b3:9a:dd:b7:b1:76:c7:
65:6d:dd:5a:e8:15:cd:86:4b:4e:7f:d2:17:22:70:
da:94:c4:58:98:ce:6e:e3:0b:ed:a9:37:c5:32:0b:
f7:db:3a:d1:11:4d:01:e6:b6:e4:ac:07:f7:51:0b:
71:60:0c:ed:8d:14:fc:82:25:4c:c5:4f:3a:e0:78:
6f:31:54:a4:6d:c2:d7:2a:26:ff:1f:e3:b7:0d:42:
92:f0:32:66:19:d3:7d:78:3f:81:18:38:be:ee:44:
37:d0:88:78:02:99:fb:b5:44:71:ab:91:af:43:cf:
3e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C7:46:C5:BA:5E:26:7A:C7:15:4C:AA:26:F6:97:03:80:9A:1B:DA
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:17:78:e2:ac:26:2f:5b:65:60:f5:54:e1:2e:08:a1:b8:85:
11:e5:c7:18:2d:3d:f1:ec:b9:8a:74:77:52:79:89:99:1a:e2:
c6:ef:2a:5e:9f:67:85:7b:10:ea:62:6e:db:36:6b:a5:e9:12:
b1:08:b5:d5:c3:7e:32:90:3c:35:92:47:9e:7a:fc:f9:55:08:
64:94:48:15:98:c2:17:35:48:14:ab:55:d1:cf:7b:c4:05:7b:
80:c5:01:f4:ab:bd:ab:1f:7e:60:8b:fe:7c:e6:2e:75:c5:ab:
b4:9e:ca:f4:27:44:a1:c2:b5:aa:62:be:a9:cb:f6:e5:f2:13:
b6:cf:2a:f2:42:7c:ab:dd:d5:b3:68:1a:ba:2c:5f:b4:a4:28:
8b:ec:0f:b0:f6:35:03:f1:22:df:ad:fe:ae:73:a3:14:ca:93:
60:46:bf:08:81:69:f8:d3:88:33:ab:8a:6c:f1:e3:1e:57:90:
b4:5f:f7:45:27:fb:7a:ed:29:a1:35:b2:b1:8a:1c:cb:b7:c8:
a7:a8:67:02:f1:87:a4:5d:94:2d:61:62:d0:d2:19:56:ee:6f:
93:32:e1:2c:d3:ae:51:7a:c9:54:e0:8a:e5:0b:a2:46:81:7e:
ec:b6:72:5a:d2:79:76:be:59:fc:26:50:51:bf:15:c5:24:38:
8c:54:32:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 04:54:36 2026 by rpki-client