
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
File: snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json)
Hash identifier: xwPUn+KUxhCGtrHe6WNL7ftM4aA3qCU3o/AcIn/FJDE=
Subject key identifier: E8:E6:7B:5B:56:0D:F1:31:46:F7:7F:53:D0:4A:B8:C7:1D:BC:50:36
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial: 019CF9862708DA8842D0E105D95152CBADFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
Manifest number: 139C
Signing time: Tue 17 Mar 2026 02:00:44 +0000
Manifest this update: Tue 17 Mar 2026 02:00:44 +0000
Manifest next update: Wed 18 Mar 2026 02:00:44 +0000
Files and hashes: 1: 604DVjW89FcTF-J3OlDY0xygtP0.roa (hash: DEfDKsdOogNIkUL8SOV8s+auFLI8n9dOB4Wep4bTTqg=)
2: 8Lu4DZzB_vxfnH6NwGiNXO689Ug.roa (hash: rEMwOO6lSnO1YlEyeJow58wL/2TfCKPn4IBjRuIkc0Y=)
3: 8lPmNR8kC5qE5Lxt_zKmkqCnA_M.roa (hash: Ik4QED5F6sI3OJklEdpUYZ0TKdybSr6g6ZurSavfP2U=)
4: EIJhIjJtEMnHVUQ212bTckjgB0I.roa (hash: EybXD780CwAqGIpHjiQwUZRlhbfLzk1+eybY/uGp/io=)
5: G25W8rWynHVqOw08BsNDQCX7r4k.roa (hash: lP+BuX9RXuXg15DfmgethXUeCq5zgrMORumyH2g7dwI=)
6: LDiAx4mH-l2McqHvkuEwEg3VQmo.roa (hash: hHjSOBQ7GK7UhrCnhltMggAjTsVyGTTWQh8ZK+1z/d8=)
7: RZ7OjE_uz9kQm_N05glcQaVKBCI.roa (hash: FZSwjKnEe/WNTvIFtlBH2t2jJQlqscx5RYqxrilnkJM=)
8: Wt9ypheec9GpOk_86DTL3w6D2tk.roa (hash: aRWLUqX5vTU61VSd9AOD3yJeqO5wgKqFkxtzxw3VLKA=)
9: b1C5tQPSDgyOYMEa2vtiHCVTu3w.roa (hash: m+CwEMaGPey4t5aVnMPNBJGIOj9PYMcxJas6I4mb38c=)
10: ci2RBJP7wBZT9607Ek93x3v-DJg.roa (hash: rQsPZOnMLyTQdUIKObokqHCmODTdjtz2irzXClA4KLY=)
11: ezjdknW8yKvW_oPzf0czr_SHPos.roa (hash: Ke5tCHtNlbJY4VFVoI0K+8QDexK6VL6V1j/4AYy554g=)
12: jU4Lr0RWqeKwbtj_mpkI_cSuuKQ.roa (hash: yPSwJ7BnVd6OtmjXkcMdWkJgliiWudINiSFU9FCJQiQ=)
13: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: KNbnzNIsYrpLiNV9Hwj4INdapCrfRKcENBEDJVIHSs8=)
14: xeKu-YZxEc8ydQI0uzpgttKRF9s.roa (hash: OIvXQcQeayjejLI4847MVkofRUX3vV1PuAUvz7Z84Jc=)
15: yYo92JwdAK0Yb36h4od0SkR-8PQ.roa (hash: UkVRpXuv1yNCqqHU2bi8PbnwrwXCTcNm+/wk+zbOQNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f9:86:27:08:da:88:42:d0:e1:05:d9:51:52:cb:ad:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Validity
Not Before: Mar 17 02:00:44 2026 GMT
Not After : Mar 18 02:00:44 2026 GMT
Subject: CN=e8e67b5b560df13146f77f53d04ab8c71dbc5036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b6:ce:dd:c5:40:56:a8:d6:2a:44:9a:d5:ca:
c6:ac:fa:7b:ed:aa:27:4f:8e:64:f2:2f:2a:b8:22:
25:1d:2d:96:14:38:e8:cd:90:73:8d:46:4c:34:dd:
44:f1:cf:06:31:45:11:14:0c:7d:90:8e:54:a3:4f:
2d:85:11:35:ca:8d:49:4b:37:9c:66:ef:02:8a:34:
7e:8e:a6:f6:4b:67:a2:6f:72:81:b0:f4:0b:5c:32:
6c:d3:5a:b8:cc:52:8c:09:88:47:34:ee:5f:5d:24:
b1:9e:08:db:2d:82:85:2e:c4:a1:34:84:a9:27:4a:
42:13:e3:93:7b:fa:52:de:ea:09:4c:1e:98:ee:26:
1e:7c:b5:b6:8f:1e:be:45:d6:da:ea:78:8e:8a:63:
1d:f1:b5:11:0a:ab:f8:ff:8b:10:3a:d4:7d:e7:58:
b2:ca:0e:46:88:dc:24:f3:59:5c:e0:3e:59:ad:ab:
b1:a1:d6:ee:46:b0:9f:c8:85:38:0b:42:1c:0e:c4:
45:49:c4:05:8d:b1:02:f5:be:14:e3:ad:9b:c0:63:
4d:eb:25:82:03:04:4a:4e:5a:41:98:ae:93:91:b0:
10:d7:6f:58:a9:07:03:99:56:7d:fa:31:4c:18:52:
61:32:b6:42:3b:a7:1d:4a:12:51:b9:1d:9b:45:3b:
7b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E6:7B:5B:56:0D:F1:31:46:F7:7F:53:D0:4A:B8:C7:1D:BC:50:36
X509v3 Authority Key Identifier:
keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:df:f6:f4:d6:58:5f:b4:eb:ec:df:b7:d5:34:ef:c0:a7:9d:
aa:a0:4b:7b:80:21:0f:43:23:1d:33:94:2e:60:38:8c:c7:69:
fc:f4:20:01:95:70:58:a7:2c:95:be:c2:9d:12:04:a4:f3:33:
5f:4a:13:e1:3b:32:b7:b1:74:9e:13:f5:7e:3b:c9:a7:0f:c5:
e0:3c:dd:22:df:10:a1:73:04:56:56:14:ae:8f:05:8f:48:ad:
bd:33:3a:be:af:f5:4a:83:e5:10:58:77:d5:0b:18:d3:aa:b1:
fe:43:d6:c7:2c:a1:4b:ba:0b:38:35:cb:db:76:59:f5:78:45:
c2:23:9d:f0:6e:4c:e7:74:42:1c:79:e9:04:7d:f5:93:fb:e8:
d0:a4:5f:ca:3d:f3:e3:76:11:bd:dd:f7:c5:d4:d5:c0:13:13:
2f:4b:b5:f9:c6:cd:0e:a6:2e:b7:75:cf:23:88:c7:54:5b:7d:
c4:9f:80:d0:22:d6:5c:1b:ba:b8:b2:b9:73:98:8f:8e:2f:6b:
e0:bc:1c:b2:ce:e7:94:78:65:de:ba:60:88:c1:40:a2:97:4e:
a9:4d:ed:0d:35:73:99:e6:ed:a9:ca:a8:2d:c9:5a:36:af:19:
cc:b4:e5:3d:91:d5:fd:5c:7d:2d:21:f4:b0:68:fc:80:f3:54:
a7:44:2a:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZz5hicI2ohC0OEF2VFSy637MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz
YmEyZjEwHhcNMjYwMzE3MDIwMDQ0WhcNMjYwMzE4MDIwMDQ0WjAzMTEwLwYDVQQD
EyhlOGU2N2I1YjU2MGRmMTMxNDZmNzdmNTNkMDRhYjhjNzFkYmM1MDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LbO3cVAVqjWKkSa1crGrPp77aon
T45k8i8quCIlHS2WFDjozZBzjUZMNN1E8c8GMUURFAx9kI5Uo08thRE1yo1JSzec
Zu8CijR+jqb2S2eib3KBsPQLXDJs01q4zFKMCYhHNO5fXSSxngjbLYKFLsShNISp
J0pCE+OTe/pS3uoJTB6Y7iYefLW2jx6+Rdba6niOimMd8bURCqv4/4sQOtR951iy
yg5GiNwk81lc4D5ZrauxodbuRrCfyIU4C0IcDsRFScQFjbEC9b4U462bwGNN6yWC
AwRKTlpBmK6TkbAQ129YqQcDmVZ9+jFMGFJhMrZCO6cdShJRuR2bRTt7dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjme1tWDfExRvd/U9BKuMcdvFA2MB8GA1UdIwQY
MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt
NTA0ZjI3NjY3NjBmLzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm
LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYd/29NZY
X7Tr7N+31TTvwKedqqBLe4AhD0MjHTOULmA4jMdp/PQgAZVwWKcslb7CnRIEpPMz
X0oT4Tsyt7F0nhP1fjvJpw/F4DzdIt8QoXMEVlYUro8Fj0itvTM6vq/1SoPlEFh3
1QsY06qx/kPWxyyhS7oLODXL23ZZ9XhFwiOd8G5M53RCHHnpBH31k/vo0KRfyj3z
43YRvd33xdTVwBMTL0u1+cbNDqYut3XPI4jHVFt9xJ+A0CLWXBu6uLK5c5iPji9r
4Lwcss7nlHhl3rpgiMFAopdOqU3tDTVzmebtqcqoLclaNq8ZzLTlPZHV/Vx9LSH0
sGj8gPNUp0Qqbg==
-----END CERTIFICATE-----
Generated at Tue Mar 17 05:49:49 2026 by rpki-client