
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
File: 1BGrxMBGirKJHqrK26DcA3eTb9U.mft (raw, json)
Hash identifier: 0nk3a4cablei3TB1Kpln36mF3pH2xJVnp5G8uILi3NE=
Subject key identifier: 9A:AE:99:2F:07:9E:72:25:37:C6:0E:3A:E7:1A:5F:44:0F:69:CA:4B
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 019CE5C8A4BC54DB8544B79128882BC52200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
Manifest number: 1876
Signing time: Fri 13 Mar 2026 06:00:57 +0000
Manifest this update: Fri 13 Mar 2026 06:00:57 +0000
Manifest next update: Sat 14 Mar 2026 06:00:57 +0000
Files and hashes: 1: 1-hrB_4i445lAPatm9pXp75UPr1I.roa (hash: YEzNTLD9wfX8VjD6MK1Rs1n5S4HzUgswhciPZWTMqSc=)
2: 1BGrxMBGirKJHqrK26DcA3eTb9U.crl (hash: GSmT2psVxO+i5xiGYmFj23BeAaleoR4XTrSOjlf28L4=)
3: 1OiPrxPQn3lkIhfte5yQ-6wFTA8.roa (hash: z9/vDo3XxLBhdAOAkVfQRjghVloHXSHSVsc9PHpJpsk=)
4: 359PtD2aT4lYVKLtb8GpHiwDpSM.roa (hash: +hV5lfZcoxfXxvE4zajqvEY/eOPBG4IbY8Wpf+1cu3I=)
5: 3TVHsbS8DDbS5jFNHXliJUV-vt0.roa (hash: VNMhI1DbQRZPhe0DLvYfFvfWzVgThx5w3CClRDwW+eI=)
6: 3x1Z8euWyQ8oU2eTqmH2oNYDUlg.roa (hash: hzh/xwb8heLsOXwzZrTck/MAmVN9avO1bZxPN2Q3Qc4=)
7: 6zpsdnIXKDCxVFEhevxRA4_zSCs.roa (hash: OPbPEb2Sk8Js+TBK52PtXkK2BFw7aQaLU/bCQ0DpgQ0=)
8: CjqRUuv68PFiU7765GT5HXOx8Bw.roa (hash: PvucfJQmBJoQyaNYzAVmEi/q9uSQDhp1g2JhGdUwoW0=)
9: EtSMAsHbVT4Pxm9MD2bBL5Zv5fA.roa (hash: pwqZR3sLomznVe36SGqzsoCNYDQVFyLcuDqHZembszU=)
10: I7Gi0c9R1I2nkTBa_FilFRmrh1A.roa (hash: rgMw3gFLvDe2bJ2gkzdn82gcIPRZuH5eYyiNhuqG2wY=)
11: IUnxJCEXGpjb9x8O-AKLChbdKH4.roa (hash: ngyGAWfnTLrenQ1MiPj1AnwG2yKMniipm+cR6MK1lC0=)
12: MMG6kAYHdbSTZ5cmO-QHmBxivT4.roa (hash: gTpV76Ww0BCzvfD9wYqWRlnMaGyxOQ5bU1mc1SqNJxs=)
13: _0yShHb3_Lvo8oOIhf1dP9etifM.roa (hash: C5c+j5BtUc+Edi1FogFMem4oHE95WUZxlK525NIu8Uk=)
14: bYA_hDz-uHsDwzycumiOlbXWrtA.roa (hash: Yl9BNnwj6zQSqqxSRXXKmcquJUlgVyqLxCnPkLZIOXw=)
15: beBz1EHSK0ejZhV2Z5PmcoiuBnM.roa (hash: mDHGqDcF8EKgwMgysUIVSZ+OvPwZjW1FW23RjIyMX4g=)
16: g0RaLD65-oQgpyqHw6Rb1clt6Us.roa (hash: MBY8mcPfd1xDaI5XexA7xmIlVnR5RWaKP5T2lgf3SaQ=)
17: idbIVY02MqkT2W1Sz2Hn6vm7Wgc.roa (hash: iSNlVvk976S8zGXNaqHMWJhFzSvDbSMz0/sY5GUQxFg=)
18: jPMCixDvfVo9glBXbNMOz86F-rU.roa (hash: yq4kSM4l08bAj6xNIMbu+OFNBQBF0qIIeLACLieVs2o=)
19: keMt9GC91bHZXuQ0h87FQe-gBaY.roa (hash: W4gS8hqr2Jgdapo27zgTBxXWuHg7t03Y6FgU8O4hTKw=)
20: mPZY1GYZYbQ6yjTCuTRg1ZzMsqw.roa (hash: BLYdcZ3Gbdmq0apl8BQS+jPj3Rqpg+Sj0dliHzXdyWM=)
21: okpxkpXVkTuoxcjFPQV6FQoe0Gg.roa (hash: hH8YmXQn5X8TblBZy3b0UzoPWUDgyN7U0BO4gNmqkZc=)
22: rdklJtnIsRPpCMnxSS1GGHIWCtI.roa (hash: i2J/w0/vFTIyr+KWAGpYaVRFjg90ISDIds54aojdKiA=)
23: xrEslglVuEnnQ0vF9Dsq9qhfjps.roa (hash: Qjzp64QTM1xn969UZDkr+b0btpansANNv6kwoq7jiQo=)
24: zX07X_H3K2-11ztBe_0TWCV6UDU.roa (hash: m7+UubbmMpsAyslPYtLacfeBJL7t5bWeQmDZDfKFeeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:a4:bc:54:db:85:44:b7:91:28:88:2b:c5:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Mar 13 06:00:57 2026 GMT
Not After : Mar 14 06:00:57 2026 GMT
Subject: CN=9aae992f079e722537c60e3ae71a5f440f69ca4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cc:50:cf:21:5d:c0:da:e7:41:a6:5b:8f:d3:
84:e3:44:81:64:fa:6b:c4:35:ba:a5:74:e5:87:88:
07:f2:7c:f4:19:45:77:9a:e8:f7:85:f1:22:85:b0:
15:36:0a:a4:dd:8c:ce:cb:13:a5:33:e7:fc:4f:57:
1c:85:00:7f:b7:34:35:73:30:4d:01:3f:7e:d2:90:
f1:d3:30:dd:f9:1c:af:8e:8e:06:36:5a:94:64:7e:
dd:d2:6f:54:0c:e1:ee:a0:4d:bb:e9:07:47:6b:42:
d1:dd:ad:df:7e:20:e6:8b:c9:62:1d:e4:2b:bd:c4:
ea:19:98:2c:6e:ec:fa:57:b9:a3:06:3e:cb:4f:c7:
2d:ee:ed:37:a9:02:87:58:6b:d6:b9:19:da:df:25:
68:5d:11:81:a7:53:3a:80:70:23:cb:09:b1:e8:e7:
5b:fd:86:62:44:ca:63:cd:9e:7f:d4:01:a4:dd:e2:
bb:e4:2b:66:82:a8:bc:dd:da:98:46:48:b8:e0:48:
34:02:c6:b3:a3:a7:c6:3c:e1:11:20:eb:44:32:f1:
a1:1e:a2:35:7f:90:4f:17:24:6f:ba:6a:5e:05:2a:
a2:61:12:cc:e0:54:36:85:bc:7d:d0:3b:c9:42:33:
84:c9:5d:ec:2c:b9:16:8f:e4:68:f1:8e:b3:f4:52:
55:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AE:99:2F:07:9E:72:25:37:C6:0E:3A:E7:1A:5F:44:0F:69:CA:4B
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d0:1d:25:53:a6:d2:d5:77:3a:d0:4f:97:49:dc:9d:9c:a0:
0b:04:52:df:0a:21:9d:1d:c5:04:3d:d2:ef:17:71:a5:9d:3c:
8d:ed:3a:d1:a4:53:26:a2:d5:3c:c5:2a:9d:a2:02:2d:6e:2a:
49:53:cd:0c:b3:12:09:bc:fb:a0:d9:b6:b9:88:bf:6d:83:00:
cc:52:a9:f4:2e:09:21:dd:d7:09:45:c7:49:3d:09:78:64:7d:
07:cf:5f:e8:8f:db:a8:fc:43:07:e1:90:f5:7a:aa:a7:24:04:
a5:16:d0:dc:08:29:99:90:ed:7a:b3:0c:0a:39:fc:dd:d5:54:
ac:65:3f:48:32:6e:6c:54:a7:2e:4d:2b:64:95:cb:d4:19:7a:
87:85:3b:aa:12:e2:41:0f:aa:1f:91:0c:69:eb:47:64:ee:26:
20:9a:46:a9:b0:09:69:f0:a3:4c:43:2d:c9:d2:d4:53:f6:18:
f5:b8:7c:f0:ad:cc:11:d0:87:28:8e:bf:2b:fb:de:63:ed:58:
55:cb:d7:d4:fd:51:7d:de:57:5a:b9:80:c3:18:f0:cf:53:83:
e6:9c:0e:f9:e5:5f:79:60:dc:4c:d6:f6:9b:78:3a:61:74:14:
a8:af:a2:b9:da:ce:2d:06:96:0b:60:96:f3:2f:16:23:30:70:
6d:10:e6:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlyKS8VNuFRLeRKIgrxSIAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5
MzZmZDUwHhcNMjYwMzEzMDYwMDU3WhcNMjYwMzE0MDYwMDU3WjAzMTEwLwYDVQQD
Eyg5YWFlOTkyZjA3OWU3MjI1MzdjNjBlM2FlNzFhNWY0NDBmNjljYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sxQzyFdwNrnQaZbj9OE40SBZPpr
xDW6pXTlh4gH8nz0GUV3muj3hfEihbAVNgqk3YzOyxOlM+f8T1cchQB/tzQ1czBN
AT9+0pDx0zDd+Ryvjo4GNlqUZH7d0m9UDOHuoE276QdHa0LR3a3ffiDmi8liHeQr
vcTqGZgsbuz6V7mjBj7LT8ct7u03qQKHWGvWuRna3yVoXRGBp1M6gHAjywmx6Odb
/YZiRMpjzZ5/1AGk3eK75Ctmgqi83dqYRki44Eg0Asazo6fGPOERIOtEMvGhHqI1
f5BPFyRvumpeBSqiYRLM4FQ2hbx90DvJQjOEyV3sLLkWj+Ro8Y6z9FJVCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqumS8HnnIlN8YOOucaX0QPacpLMB8GA1UdIwQY
MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt
YjBmNGI5YzM3ZTQ5LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5
LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9AdJVOm
0tV3OtBPl0ncnZygCwRS3wohnR3FBD3S7xdxpZ08je060aRTJqLVPMUqnaICLW4q
SVPNDLMSCbz7oNm2uYi/bYMAzFKp9C4JId3XCUXHST0JeGR9B89f6I/bqPxDB+GQ
9XqqpyQEpRbQ3AgpmZDterMMCjn83dVUrGU/SDJubFSnLk0rZJXL1Bl6h4U7qhLi
QQ+qH5EMaetHZO4mIJpGqbAJafCjTEMtydLUU/YY9bh88K3MEdCHKI6/K/veY+1Y
VcvX1P1Rfd5XWrmAwxjwz1OD5pwO+eVfeWDcTNb2m3g6YXQUqK+iudrOLQaWC2CW
8y8WIzBwbRDmBQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 14:32:36 2026 by rpki-client