
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
File: SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json)
Hash identifier: GIRP4bjCCyhiq0L99luzTYU1KGXGnRT68VAts2gURd8=
Subject key identifier: 63:FC:4D:26:31:C8:72:0A:FA:8F:8E:D9:7A:88:97:48:58:FF:89:45
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 019CE4B5F94858F2F92CC7AC60D46961AA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
Manifest number: 0DC5
Signing time: Fri 13 Mar 2026 01:00:56 +0000
Manifest this update: Fri 13 Mar 2026 01:00:56 +0000
Manifest next update: Sat 14 Mar 2026 01:00:56 +0000
Files and hashes: 1: 8DylJ6bMwHx9Bdrvn2E9Zu5-6Yc.roa (hash: vmfPrDMZxv7M04Wo8WXPZw8AXlVkf20vtyHb5e8KwgU=)
2: 9Cp-MTJ4qLd92W1VLnGQl0LXr-c.roa (hash: 5gwGzTjze+ZsjYP/6JdA+Sy/zd3Nz2uvd4XnkQoXRfg=)
3: CiMQMlsaob6RUwchgCgnZuTjr8s.roa (hash: Ar1fgrhz+dRsI5kSs4y0oWEzM2iAvsmrTdXD/xtv77Y=)
4: E4JbKjh9d4V-tkS22c4Y2xMCkFg.roa (hash: 7djPzKioQUY77MCLFItH4oWSHNi6vM51IHyM3Wgv2dk=)
5: My1lWafqU6ikUvtq4M-ub2MxD1I.roa (hash: UvpW6m+Ws53gXcKKs+IbQFznyrhTBzwk2z9Qv12jd1c=)
6: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: V/WVqDMNwogKXK0WnObhcygH6TlC27/tNQrUUMhBd0E=)
7: UVRNeFdK0MFmPktuaxuakdFBiyw.roa (hash: Qe3jYuCQSRz8rrbqzPjF4ta2+ILAQBCmo8wsXzpnbtM=)
8: YfIHk0vhXMsawbQpQSUx4NkqARo.roa (hash: jyjsv+8CT/zFqpfSyQvWtrC5fl6L+Qm0Q0VVf1vxxCM=)
9: f9XaNrWrnsnye9Nnn2-Ly1K5UOI.roa (hash: W/HCDixp3chA9F+ml8Y61wZheEIzzJOIG7tl8p8DNMs=)
10: g3ikyABmwYnsstzPEiwf1y3JZw4.roa (hash: iV6diY2/uvF2VPragiyPeS/YOKkeG7Rg1youKOMMysY=)
11: iRf_gs5n9xup496QtRtuInpoD-U.roa (hash: BDQw7Ot2/EiioII6Hz7qQJc1eJwtGMRxOvQFtmCg1xA=)
12: jteFQiK73wa6i4lrpiIPNofIe0U.roa (hash: G8t6kOJLv2x/ceaMNLBszGM9PcNzECaWuzPtlc+XAqM=)
13: lHqP6_LNIJjH2DY1nkYIw_wx6vg.roa (hash: HTFvctpryJcVZOxTlZV4EEM5WCYV9Pw93rtuaN3DxLg=)
14: mjB_YwpdfbzEMOoCN657fTyMgX4.roa (hash: zKy3p/lM5a5D8i2Rw65iFKwlrzxpy3cP+UdwJk2L738=)
15: qJcccqDxWrdJegvnpo2s2Knlr7s.roa (hash: PcVnyenRgB6ckra0K+D+gtKFqypcoJpDoAUxyPbLxQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:f9:48:58:f2:f9:2c:c7:ac:60:d4:69:61:aa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: Mar 13 01:00:56 2026 GMT
Not After : Mar 14 01:00:56 2026 GMT
Subject: CN=63fc4d2631c8720afa8f8ed97a88974858ff8945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:06:1e:8b:a8:02:1b:e0:79:0e:33:ae:8e:
84:ef:df:55:0f:b1:87:4d:7d:c2:9c:01:7e:16:82:
7b:fa:04:17:29:96:c4:75:fa:f2:b3:33:76:9f:f1:
85:70:af:f0:87:86:8b:2d:1b:49:44:be:83:f9:9c:
9b:93:66:1c:e1:89:5b:05:da:5b:08:f8:b2:e1:98:
2f:15:17:7f:7e:4e:02:18:25:35:6b:c7:10:f8:29:
65:67:b8:c1:b5:ce:d8:3d:5b:88:7b:52:d6:6d:5b:
06:65:a1:72:1a:37:c1:8a:0e:a2:54:a2:5f:b0:f6:
67:09:fd:0e:f7:d9:d3:b0:a6:87:bc:9f:20:05:8f:
74:76:35:fb:84:da:91:d9:b4:4a:4f:dd:f0:6d:36:
b2:47:cb:40:04:8f:84:7b:4b:0e:63:8f:c4:24:4b:
c4:a4:77:6d:04:e9:b7:38:73:1b:2d:e4:f3:ff:56:
d2:8b:a4:1c:1b:4a:7d:4e:40:9b:c3:9d:ae:12:2a:
48:3d:94:02:b7:3c:0c:df:25:6d:93:80:a8:17:00:
a8:0b:b5:84:30:45:2e:21:10:c3:c3:b7:36:53:7f:
54:23:13:6c:8b:51:82:96:1b:c5:56:80:84:07:6d:
04:61:7a:eb:5d:17:c7:a2:fe:d2:1d:f1:b2:ae:54:
e6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FC:4D:26:31:C8:72:0A:FA:8F:8E:D9:7A:88:97:48:58:FF:89:45
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f8:fd:33:85:6c:ae:8a:b9:d3:84:b1:8e:4e:9d:db:42:6e:
05:fb:1d:03:41:34:f3:48:3c:84:99:ed:98:d7:32:f4:77:76:
65:c3:65:b6:52:17:7c:ac:1a:a4:72:95:25:27:87:41:f4:56:
c0:1b:63:ea:bb:16:78:87:45:22:e5:ee:2f:31:c6:74:29:fa:
48:07:d8:7d:fb:80:0a:0c:eb:3b:49:08:7b:22:8a:24:87:8d:
55:bb:94:61:64:60:cd:52:50:4e:af:7d:13:29:75:c8:10:64:
f6:b9:19:61:02:e6:04:70:fa:f6:5a:c9:05:b7:26:82:a3:90:
11:3b:ce:a5:04:0b:8d:2a:86:ba:a2:e8:bd:c4:44:ad:36:c6:
c2:d2:0c:e4:f1:dc:9b:d5:56:0a:22:0b:61:76:9b:0c:97:d7:
4d:f4:79:e7:57:c2:0c:8d:88:dd:c9:38:0d:35:d0:6a:4a:39:
29:11:af:d3:9d:9d:6d:82:3d:6f:7c:33:a8:29:ed:8f:9f:27:
b5:32:df:26:e6:ad:6c:30:2d:e9:9d:82:3e:48:59:b9:d0:a5:
f6:92:67:a3:8c:b4:0c:b1:71:88:1f:66:6f:78:7a:a7:c0:d4:
05:67:cb:a3:f9:51:dd:dd:bf:a3:e6:d0:44:90:af:68:49:9b:
e9:a9:35:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzktflIWPL5LMesYNRpYapBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4
NGU4YzYwHhcNMjYwMzEzMDEwMDU2WhcNMjYwMzE0MDEwMDU2WjAzMTEwLwYDVQQD
Eyg2M2ZjNGQyNjMxYzg3MjBhZmE4ZjhlZDk3YTg4OTc0ODU4ZmY4OTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwgGHouoAhvgeQ4zro6E799VD7GH
TX3CnAF+FoJ7+gQXKZbEdfryszN2n/GFcK/wh4aLLRtJRL6D+Zybk2Yc4YlbBdpb
CPiy4ZgvFRd/fk4CGCU1a8cQ+CllZ7jBtc7YPVuIe1LWbVsGZaFyGjfBig6iVKJf
sPZnCf0O99nTsKaHvJ8gBY90djX7hNqR2bRKT93wbTayR8tABI+Ee0sOY4/EJEvE
pHdtBOm3OHMbLeTz/1bSi6QcG0p9TkCbw52uEipIPZQCtzwM3yVtk4CoFwCoC7WE
MEUuIRDDw7c2U39UIxNsi1GClhvFVoCEB20EYXrrXRfHov7SHfGyrlTm2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGP8TSYxyHIK+o+O2XqIl0hY/4lFMB8GA1UdIwQY
MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt
YjBkNzJlOTEwZWZlLzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl
LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPj9M4Vs
roq504Sxjk6d20JuBfsdA0E080g8hJntmNcy9Hd2ZcNltlIXfKwapHKVJSeHQfRW
wBtj6rsWeIdFIuXuLzHGdCn6SAfYffuACgzrO0kIeyKKJIeNVbuUYWRgzVJQTq99
Eyl1yBBk9rkZYQLmBHD69lrJBbcmgqOQETvOpQQLjSqGuqLovcRErTbGwtIM5PHc
m9VWCiILYXabDJfXTfR551fCDI2I3ck4DTXQako5KRGv052dbYI9b3wzqCntj58n
tTLfJuatbDAt6Z2CPkhZudCl9pJno4y0DLFxiB9mb3h6p8DUBWfLo/lR3d2/o+bQ
RJCvaEmb6ak12w==
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:14:07 2026 by rpki-client