
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: DxDvEQN5MbU35SUuq3TRWsLmPb+bdJj5ZuFH7S5unEo=
Subject key identifier: 1E:90:38:ED:77:4F:69:E2:F6:76:87:1C:0B:AE:7B:60:8A:8B:1E:A1
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019C9BC199AEEBB6397144C892D688FF868A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 1885
Signing time: Thu 26 Feb 2026 21:01:22 +0000
Manifest this update: Thu 26 Feb 2026 21:01:22 +0000
Manifest next update: Fri 27 Feb 2026 21:01:22 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: hmrGbghBjnCGvOxtvTRw76zRUY958nyMjQ79JNI/9Dg=)
4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9b:c1:99:ae:eb:b6:39:71:44:c8:92:d6:88:ff:86:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Feb 26 21:01:22 2026 GMT
Not After : Feb 27 21:01:22 2026 GMT
Subject: CN=1e9038ed774f69e2f676871c0bae7b608a8b1ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:e8:1d:44:58:d8:12:37:b4:4d:13:5b:9b:
e9:ef:12:a9:f7:9d:cc:a0:c5:64:8d:a5:2b:68:b1:
27:0b:92:19:25:4b:fb:b0:1d:27:4d:5f:a0:5c:3f:
90:05:f5:ab:0e:58:cf:96:25:c3:85:ae:5d:df:8b:
0f:45:cc:fc:cf:98:05:c2:aa:cc:e1:ef:ce:f2:6d:
50:98:50:9a:53:15:67:9a:9b:11:90:63:2e:40:ed:
d2:9b:6b:06:e1:99:d1:2d:41:3a:3d:64:41:28:96:
3f:22:a0:ae:cb:12:9a:a3:e8:5e:9d:bf:78:90:86:
d4:0f:a7:73:28:98:59:36:db:d5:e5:e8:65:c7:9c:
40:85:39:4d:4a:2a:29:2b:a7:bd:28:57:7a:28:20:
3d:ae:e8:78:26:18:27:13:6a:4d:b1:2e:f7:37:db:
d7:6b:7a:4b:a3:ab:16:7e:d4:b7:87:f3:f8:af:f5:
cd:e9:da:c2:20:85:a8:10:94:6f:2d:90:9b:ba:1f:
76:46:25:3a:30:66:c8:e7:40:8c:03:f1:5e:2e:0a:
0c:d2:4d:8c:95:87:a7:f0:d9:da:d2:93:4f:e5:6c:
d8:23:78:dd:dc:64:20:5b:10:42:41:10:48:90:63:
7c:4d:25:06:55:ae:c7:97:0a:0d:aa:29:64:2f:56:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:90:38:ED:77:4F:69:E2:F6:76:87:1C:0B:AE:7B:60:8A:8B:1E:A1
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b8:2b:3d:29:87:57:fa:a5:24:33:f6:5a:d1:ed:1a:24:cf:
68:6f:f5:63:f8:a1:cc:e0:e2:8d:95:37:af:ec:9b:ac:61:18:
6a:fb:de:8c:4d:58:68:5d:bc:ed:d9:a7:e4:73:96:90:08:12:
87:78:04:d2:f3:13:8f:dd:d0:35:40:d2:72:d5:20:50:b6:78:
c8:2d:87:a5:34:19:95:7c:c6:19:91:d0:c9:ba:3d:e2:1d:54:
ff:5d:21:50:1e:0e:a3:87:84:ef:d9:a0:c4:8a:b6:8a:df:95:
fb:91:84:8c:33:af:61:e5:54:cc:f9:93:74:f7:a1:a7:55:c0:
41:0f:a0:31:bf:44:2a:d8:fc:6d:77:35:89:15:38:c5:46:c3:
b8:6e:aa:2a:cf:97:db:ed:df:cb:be:ab:7d:6c:3b:c8:71:8b:
86:68:62:2b:6f:4f:65:b6:64:93:34:e0:3e:79:22:33:db:a8:
79:24:08:b0:34:b4:c8:63:be:5a:8c:5f:df:f4:67:cb:ab:51:
9b:96:43:5a:1f:1c:b2:a2:e8:fb:30:b8:bd:11:52:b6:56:d7:
b8:b4:ca:42:3a:47:dd:b7:c3:fc:ae:10:b3:fc:30:ae:61:c7:
85:b0:30:48:1e:4d:a8:ba:fc:aa:d2:3f:12:ca:bb:44:37:7e:
af:a3:14:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 06:03:23 2026 by rpki-client