
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json)
Hash identifier: /0bwNtRNvZPWZeXbknPXPfeCsEn4k32WUjNUMfuI+9E=
Subject key identifier: A9:A0:3F:C5:36:54:9B:A8:74:31:B9:2B:B6:3E:79:35:5F:50:D0:FA
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01A0BAD455C710CA5B62AC78DEA63035A869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
Manifest number: 070A
Signing time: Sat 19 Sep 2026 18:01:12 +0000
Manifest this update: Sat 19 Sep 2026 18:01:12 +0000
Manifest next update: Sun 20 Sep 2026 18:01:12 +0000
Files and hashes: 1: 1-BlSXqYyBKUdfU94NGff_PAPul4.roa (hash: 5sWUhwz5Gcq5/MhNhTcOvD2uhQ0tuUa+W9GIH9V8OaQ=)
2: 1fRolkRjd-APCzNnG-5bwuoOqNg.roa (hash: uECN6gUKiv+lFioLhpnkI4G1xAlKUZVG1VCjkCRQOjI=)
3: 2F897qCWvfh11SUzKWZ5JUV2vMs.roa (hash: BDm7sSnQsdMShImHFreyfB5QnyPZWja62eMfrLC52Z0=)
4: 3DigKmaWxP-qw4TMo5nSEFFHNlw.roa (hash: SFQibSW8pDXFPKPG5MbvdKYY13AwQ4A4xl349zx1iCA=)
5: 91LDPauwCWQ9godr-xheoc62kZY.roa (hash: pLiJYVDF484K9mWtl+JKcTe0VgA4TfPZgkN8+ZrNjMs=)
6: 9XRLK1OdgukwixTDk2AKzFzTzbs.roa (hash: GCjLjdeI8luwyn1PGNY8s6Ygk/m/2VfxU7ui9AQ53ww=)
7: 9ohNILRN251EJCEOaFSvlOoDNJg.roa (hash: 2WRd0d2oEyTbSuOnacVQb9zr84nnPee4Alvgcj+3gVU=)
8: GrLjV0K1rg-_e4Na2PiEv2R8YXk.roa (hash: 9wH2XPtuxgQ1BMZZEBYsg16k1bgpNYguMty8atBuYf4=)
9: H9OemdXyC7tAgnmNPQ8cKr4kXek.roa (hash: Y6oksDUVORVjfAcT/DowbWJFqVZVzW3cfm1/KNkAcoU=)
10: Jt1l3PmmzdbcYP2rfmhzsDtcPhI.roa (hash: zt/605nd1EgOMLhSVE8EHytRNsfa1q/ziCZNE0ebjzg=)
11: PI0GWokWQCIYbfxBSxMKrWG4rlA.roa (hash: qRwJTh2gHSy2lv6qJPXbAlMzsB4kzURHt7CqQP0XkRU=)
12: PTZMdAT0hDazMuAsVI3CEFaCfvE.roa (hash: Z9gyi8MZGuuvG1z3xCSCxfacu9FwpO6Pum1TmCZXgaA=)
13: RH_HIlkMBo61W-LSnPnGJ5s3Jos.roa (hash: 7jSM+R7ontglcAC1koxA8s1vIKZN1w9IqBWxZkjEi38=)
14: Y0JbxOj_u8eJzUeHjUqUp5ZzdjI.roa (hash: upN3TgIZvGzCE5YLEWAdPuZbKmynb15EXTQ5pfRhfMc=)
15: Y8GAhpOcUIyfO0CyQe49bNXAI8k.roa (hash: 49fIprccRJUVDzFPqcsAmiCiqNfTbqtbpr/g64iaVzQ=)
16: avrcnfB12N6L1uAItV4pxr4ZeBk.roa (hash: UCrkK/t7tVltSG/GoHf/iVcJnaXfqtG/1ac64yo7m4E=)
17: hMoYvytTC8MSE72GcaOmUQp55TM.roa (hash: QNj9222JszfBwsXWHLHqGbqHpk9emhsVOXPVoX1Flpc=)
18: ipercfJU5O8E0XasUBHV6tWGchQ.roa (hash: HApdigE0Ka0edSDTXKLYJ8nXJSrgF6YaO6XyN4xCAg0=)
19: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: XDSEBNL5aCd8m51fgi8EFm45nnuR6+nlKXmtrQCJm5M=)
20: jC80DyZfd08kqUPQfGLYtFSpqeA.roa (hash: QkkRAI+hrNUAThXm4mIodhuWyIPzbk15zdb1sYevpvs=)
21: pU_XrlPF8BXSflHv1k6RicQ4hQQ.roa (hash: Zwjahs4SIZZ7mXWd1Naf3bCGTp7nVeEdZf7T1NQzjwE=)
22: r6qKV9nEirBUwP3KmuLyUTNtefg.roa (hash: iWqKDpTKfBVdyUC9r9QWpqk9OSg69kGIRh/unEHarFg=)
23: xJkF66cCvGxEcbXW72kYSvCe9pc.roa (hash: 8ukNpwANOCXSCFQousC6/SlMGWqDu4dvIjSPXAjmXlo=)
24: xQPVpv6oDfVejRnWElQGbmYJcaY.roa (hash: y3RHPAzs8tten2VXnVg+llQRjecqqHar32AXcJuIcWg=)
25: xg0VuiXqoXiww-GJ9D2_ljEA2vs.roa (hash: uA7hO9E7hUzauisNryngMo6HASraVHp6A2BgzZx4YIE=)
26: y78xNtcYu21c47h3KufgEPgZVnE.roa (hash: MwiDwZITS/z04aTqMBZZx2J7qe1RkzKld+egFNWQZro=)
27: ycFTntx4cs4onGaGpj0o47JW98Y.roa (hash: Ttb49ZN4wbdVcFXW70bm/uwe/p5I14QSBI+L4GbrQys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ba:d4:55:c7:10:ca:5b:62:ac:78:de:a6:30:35:a8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Sep 19 18:01:12 2026 GMT
Not After : Sep 20 18:01:12 2026 GMT
Subject: CN=a9a03fc536549ba87431b92bb63e79355f50d0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:ee:de:d0:ec:fe:b0:d8:de:2f:dc:9a:f0:
6e:34:94:4c:07:fc:bc:f3:ee:5a:c4:c7:58:ba:16:
95:3e:14:38:65:e6:90:6c:f7:46:16:67:ca:ad:5b:
0e:00:02:2b:2f:c7:a4:56:a9:a4:0b:08:c8:ad:77:
f6:6e:81:f7:24:42:16:5a:1e:98:8e:cb:97:54:4e:
07:50:a9:c1:a9:f2:12:2b:86:35:59:a2:6b:7e:e1:
49:d5:9b:46:fe:9e:b3:84:0c:51:0b:f7:0b:48:55:
b6:54:0d:28:00:9e:6b:59:ac:82:79:2c:05:a9:f9:
3b:75:44:20:ca:89:4c:3f:bd:22:46:b6:10:0c:92:
31:92:f7:b0:66:ef:fd:4a:ad:93:11:c5:e4:99:fc:
88:6c:ad:2b:9e:ca:36:38:1c:e4:cb:c5:55:10:e0:
12:22:b0:38:47:ad:94:f2:9e:30:fa:e4:b9:46:4f:
d6:9c:30:30:19:b4:c2:93:37:f0:19:75:07:59:30:
a5:a5:cb:eb:49:11:df:d8:8c:b0:7a:1d:42:60:f4:
55:99:53:c5:65:14:34:94:3d:d8:06:ce:15:78:b0:
bc:00:d9:65:c9:1e:07:e1:7a:b1:30:1a:79:53:3c:
bf:bc:35:7d:d1:e8:16:22:f5:2e:66:0c:56:69:17:
e9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A0:3F:C5:36:54:9B:A8:74:31:B9:2B:B6:3E:79:35:5F:50:D0:FA
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d3:92:56:c5:f9:ae:e4:3e:58:fd:1f:d0:45:93:8b:a9:3d:
11:27:f3:20:7f:a1:44:24:1a:00:c0:ff:4d:8b:23:58:62:9f:
f5:98:19:db:76:9d:bf:f9:37:49:d9:58:7c:90:7f:b1:0a:ac:
ff:28:69:d6:7e:af:4f:57:42:ed:8f:c9:70:5b:db:4e:02:e7:
bb:05:50:f2:13:d5:3f:97:f6:a2:20:c6:f3:fe:a6:a6:3f:f2:
e1:41:81:57:22:84:56:82:94:f2:a9:13:34:f5:a9:f7:63:a0:
7d:79:1a:96:fd:60:76:e5:c2:86:65:c9:f1:9c:1d:07:55:db:
7a:b7:85:e1:82:fb:69:ce:a3:7d:bf:8f:0b:e5:59:3f:7e:e7:
3d:8f:de:3f:b2:b2:7d:41:a9:28:09:54:34:80:03:72:02:f8:
75:e8:27:c6:98:35:5b:f8:79:55:79:df:c5:52:9e:cb:84:2c:
7e:22:ab:e8:2f:e6:9b:37:89:66:d2:15:c0:d1:36:a4:da:f4:
90:6b:ce:0c:70:fc:0a:33:de:0b:39:b0:0d:f2:3d:6e:44:40:
eb:21:eb:ab:3d:3f:a7:e1:12:ba:ce:64:f2:b3:85:c9:94:ef:
01:be:7c:bb:ff:b1:12:c4:52:8d:5d:b9:52:80:42:2c:d8:f7:
44:f4:45:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC61FXHEMpbYqx43qYwNahpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1
YTYyNDQwHhcNMjYwOTE5MTgwMTEyWhcNMjYwOTIwMTgwMTEyWjAzMTEwLwYDVQQD
EyhhOWEwM2ZjNTM2NTQ5YmE4NzQzMWI5MmJiNjNlNzkzNTVmNTBkMGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pTu3tDs/rDY3i/cmvBuNJRMB/y8
8+5axMdYuhaVPhQ4ZeaQbPdGFmfKrVsOAAIrL8ekVqmkCwjIrXf2boH3JEIWWh6Y
jsuXVE4HUKnBqfISK4Y1WaJrfuFJ1ZtG/p6zhAxRC/cLSFW2VA0oAJ5rWayCeSwF
qfk7dUQgyolMP70iRrYQDJIxkvewZu/9Sq2TEcXkmfyIbK0rnso2OBzky8VVEOAS
IrA4R62U8p4w+uS5Rk/WnDAwGbTCkzfwGXUHWTClpcvrSRHf2Iyweh1CYPRVmVPF
ZRQ0lD3YBs4VeLC8ANllyR4H4XqxMBp5Uzy/vDV90egWIvUuZgxWaRfpIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmgP8U2VJuodDG5K7Y+eTVfUND6MB8GA1UdIwQY
MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt
MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz
LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtdOSVsX5
ruQ+WP0f0EWTi6k9ESfzIH+hRCQaAMD/TYsjWGKf9ZgZ23adv/k3SdlYfJB/sQqs
/yhp1n6vT1dC7Y/JcFvbTgLnuwVQ8hPVP5f2oiDG8/6mpj/y4UGBVyKEVoKU8qkT
NPWp92OgfXkalv1gduXChmXJ8ZwdB1XbereF4YL7ac6jfb+PC+VZP37nPY/eP7Ky
fUGpKAlUNIADcgL4degnxpg1W/h5VXnfxVKey4QsfiKr6C/mmzeJZtIVwNE2pNr0
kGvODHD8CjPeCzmwDfI9bkRA6yHrqz0/p+ESus5k8rOFyZTvAb58u/+xEsRSjV25
UoBCLNj3RPRFoA==
-----END CERTIFICATE-----
Generated at Sat Sep 19 21:01:28 2026 by rpki-client