
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
File: C6yCgEcArTZTi_hvNMBz6XFDDaU.mft (raw, json)
Hash identifier: IYievgQ9S483N0n1TIDs6WgfGKBvMCmpbAaxYsuOpXA=
Subject key identifier: 64:81:1D:EE:D2:D0:12:DF:CA:B4:F9:D0:58:D7:9A:F7:BB:CD:8E:10
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial: 019D38D2D68E180BFC2E5909F9CEF1234BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
Manifest number: 189F
Signing time: Sun 29 Mar 2026 09:00:34 +0000
Manifest this update: Sun 29 Mar 2026 09:00:34 +0000
Manifest next update: Mon 30 Mar 2026 09:00:34 +0000
Files and hashes: 1: 3zbGyukfQlvWlz1rIu3MF0i9ZQA.roa (hash: C8VCXrjogu4GEXHN+4VlV1RhYCbxfqeG8eCfQQqvC/8=)
2: 4zWqGYcx90MSsSObTI71OMevGLI.roa (hash: 2KPRh6/VRnqwHzM72EcE6I/hpiMNrQvfbcobdTHvrp8=)
3: 7qF8DvtzC3jirhL3pV2eCHws_Sw.roa (hash: PlA0iR4i8nMPJDQi1dSKU0Vsn1Phg8l6qs5AKvbNobk=)
4: C6yCgEcArTZTi_hvNMBz6XFDDaU.crl (hash: BJur8W0boxV1qWxpG2tDx6h1mNRKP26UHhBvTRuyA9w=)
5: TYL3fd3U3hdntx9HEZmBNJvIfy8.roa (hash: e+FavOHdj6PxW9K+YpaIIbMqrQ5M/B4rSbRg/GiLGdY=)
6: X36wvkpUD5ZEtmHolX5djkBU7G8.roa (hash: 1peSiVa6+f8j5mPTp+kwnGd3XE3ejw1Eh+Z8/AWETA0=)
7: f5RT_hHMbwUMnFt-JoJl9jk0aq8.roa (hash: R7CzcVcdr1m+4aUYrv9u7aRaRpqSiQ4h6Ml1XYdGdCM=)
8: jIq1ZwfYXAAqF6SypiZfEAegC9E.roa (hash: v2vJlBOD+C5w7yw+8XzyFUOoQGvh/5fPqoNiFmi6fEA=)
9: molvQvJ_lXsmLhzkv5IAyHx3jBE.roa (hash: ix0VFib2vtnH3hKp8PnHjw409S+kU6b3YPQlaCcVI/k=)
10: sE6ob5p7cvBS3YZqxyoPQMbjYxc.roa (hash: dhUKIHoGV1Pe+2e5vIvUmP73NR0v7KSZ4nk35w2qwfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d6:8e:18:0b:fc:2e:59:09:f9:ce:f1:23:4b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
Validity
Not Before: Mar 29 09:00:34 2026 GMT
Not After : Mar 30 09:00:34 2026 GMT
Subject: CN=64811deed2d012dfcab4f9d058d79af7bbcd8e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6e:5b:7d:b4:9e:12:ee:61:a9:56:5f:86:56:
c8:47:b9:41:dc:35:cb:ab:2a:98:68:4f:14:45:03:
9a:1e:ac:3a:03:1f:d7:2d:63:f9:e8:61:6d:d1:1f:
99:05:8e:90:c1:30:3b:2d:f5:37:5e:e0:6b:1b:c1:
f6:d4:71:f2:47:2a:2a:b5:3b:89:93:81:c6:b6:9d:
3d:ef:f0:89:d2:cc:d2:f4:3e:2c:17:89:d7:2e:93:
e3:93:a4:5a:e4:36:de:b3:6a:2b:94:ea:5e:0a:4a:
f7:cc:0d:a7:22:31:f4:63:04:53:c8:ef:10:ce:29:
a2:69:70:c4:21:6f:5b:c9:11:08:c0:b1:80:ab:75:
db:67:e3:b5:62:7a:ce:0c:5e:79:51:fc:7b:80:d4:
d2:04:c2:46:d0:76:ff:2f:2a:05:3a:22:a3:a7:e5:
c9:55:84:a2:b7:b8:db:86:a5:a7:44:99:d6:d1:c6:
7f:76:63:7d:1d:b6:38:57:db:e2:16:e2:64:88:50:
c4:95:1c:8d:dd:4f:f0:8c:07:34:bc:80:01:5b:dc:
55:cc:3f:36:c6:dd:dd:04:b4:c6:11:d1:5a:cf:52:
43:78:ae:27:30:50:b0:9d:56:58:8e:d8:5e:90:f1:
99:57:db:b0:7e:60:64:45:aa:4e:e9:4d:d3:81:01:
b3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:81:1D:EE:D2:D0:12:DF:CA:B4:F9:D0:58:D7:9A:F7:BB:CD:8E:10
X509v3 Authority Key Identifier:
keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ea:1c:29:d6:7d:1a:6e:60:30:8d:50:ea:25:05:a2:5a:9d:
0d:21:40:65:1c:d3:46:94:0f:b4:cd:c4:e7:ff:81:45:58:e4:
52:e5:55:d1:38:c6:51:09:c6:a1:8d:74:77:39:f5:27:bf:ce:
11:27:48:66:46:9e:06:b8:59:11:97:6c:b5:74:00:bb:74:f6:
f1:7f:92:c1:ee:f3:31:9f:a5:d3:15:bf:98:44:46:a5:b5:36:
c8:5f:d7:3b:d2:4c:4a:2b:68:43:e6:22:da:b9:99:dd:7a:bf:
68:38:e9:17:54:a7:41:72:9a:4e:e0:da:5e:e2:ec:c8:36:95:
68:57:b5:36:36:20:32:34:27:52:1b:14:86:31:e4:6d:cf:f6:
f0:b1:ab:8e:2f:f1:e8:bc:a1:2e:b1:26:04:f4:8d:d3:ba:24:
ea:cb:e3:ad:d3:c7:7c:1a:c6:80:c6:65:29:b4:de:70:dc:cd:
8b:4c:e4:6f:03:49:f1:da:ea:c2:6b:6f:75:bb:cf:01:7d:17:
79:7e:f7:4c:c3:a8:30:39:19:f6:89:7f:89:ff:7c:82:33:98:
2d:28:74:dc:6a:c9:fd:f4:28:90:31:f4:f6:7b:68:42:65:f3:
19:2e:6a:aa:4b:24:5e:90:78:19:99:6c:a3:4a:cb:d8:1e:72:
15:0d:07:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040taOGAv8LlkJ+c7xI0vSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYWM4MjgwNDcwMGFkMzY1MzhiZjg2ZjM0YzA3M2U5NzE0
MzBkYTUwHhcNMjYwMzI5MDkwMDM0WhcNMjYwMzMwMDkwMDM0WjAzMTEwLwYDVQQD
Eyg2NDgxMWRlZWQyZDAxMmRmY2FiNGY5ZDA1OGQ3OWFmN2JiY2Q4ZTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA825bfbSeEu5hqVZfhlbIR7lB3DXL
qyqYaE8URQOaHqw6Ax/XLWP56GFt0R+ZBY6QwTA7LfU3XuBrG8H21HHyRyoqtTuJ
k4HGtp097/CJ0szS9D4sF4nXLpPjk6Ra5Dbes2orlOpeCkr3zA2nIjH0YwRTyO8Q
zimiaXDEIW9byREIwLGAq3XbZ+O1YnrODF55Ufx7gNTSBMJG0Hb/LyoFOiKjp+XJ
VYSit7jbhqWnRJnW0cZ/dmN9HbY4V9viFuJkiFDElRyN3U/wjAc0vIABW9xVzD82
xt3dBLTGEdFaz1JDeK4nMFCwnVZYjthekPGZV9uwfmBkRapO6U3TgQGzPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSBHe7S0BLfyrT50FjXmve7zY4QMB8GA1UdIwQY
MBaAFAusgoBHAK02U4v4bzTAc+lxQw2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hNzI4OTEtZGUyZi00MTU2LWEwMTEt
NDNmNjRiY2VhOTlkLzEvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9hNzI4OTEtZGUyZi00MTU2LWEwMTEtNDNmNjRiY2VhOTlk
LzEvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAseocKdZ9
Gm5gMI1Q6iUFolqdDSFAZRzTRpQPtM3E5/+BRVjkUuVV0TjGUQnGoY10dzn1J7/O
ESdIZkaeBrhZEZdstXQAu3T28X+Swe7zMZ+l0xW/mERGpbU2yF/XO9JMSitoQ+Yi
2rmZ3Xq/aDjpF1SnQXKaTuDaXuLsyDaVaFe1NjYgMjQnUhsUhjHkbc/28LGrji/x
6LyhLrEmBPSN07ok6svjrdPHfBrGgMZlKbTecNzNi0zkbwNJ8drqwmtvdbvPAX0X
eX73TMOoMDkZ9ol/if98gjOYLSh03GrJ/fQokDH09ntoQmXzGS5qqkskXpB4GZls
o0rL2B5yFQ0HtQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:13 2026 by rpki-client