
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: H3TN38bTZnP7YkDF5FTIO+MQPW564wbFxb4DgyZPtTA=
Subject key identifier: 8D:D4:84:C5:2B:60:81:8A:BB:25:AE:3F:1C:52:D4:82:6A:64:7D:26
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019D3262AB6E60601B9A5DB605E490EA1C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 18D3
Signing time: Sat 28 Mar 2026 03:00:20 +0000
Manifest this update: Sat 28 Mar 2026 03:00:20 +0000
Manifest next update: Sun 29 Mar 2026 03:00:20 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: Cm+YNr+72e0joUP27dRNeZ9EZdoZ1eyTkgNNyWK6Jag=)
4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:62:ab:6e:60:60:1b:9a:5d:b6:05:e4:90:ea:1c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Mar 28 03:00:20 2026 GMT
Not After : Mar 29 03:00:20 2026 GMT
Subject: CN=8dd484c52b60818abb25ae3f1c52d4826a647d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:0d:9e:3e:f3:3f:70:30:2e:0e:c1:16:01:
da:79:f9:06:cc:c0:1f:91:c0:61:02:03:a6:db:8f:
7b:1a:36:80:c1:3e:6f:72:d8:0f:c8:fc:5d:f9:bc:
3a:c0:f4:87:75:84:06:1d:6d:df:8e:0d:0f:2e:81:
78:61:23:f3:76:22:b1:32:60:19:60:fa:de:08:54:
3e:80:ed:70:50:59:17:c5:32:ee:28:9d:36:9f:ae:
f0:a4:56:a6:d0:07:47:74:52:62:f8:73:8f:44:af:
02:2f:f0:0c:41:df:f1:fe:24:f0:b6:71:24:f8:99:
37:d3:a2:c3:f9:61:52:4b:c2:d1:f2:43:9f:09:04:
fc:0c:3c:2b:1b:3e:e0:be:b5:76:2e:60:a2:fc:15:
de:a8:17:a9:2f:80:1b:67:a8:a4:d5:19:97:92:5d:
4f:cc:f0:c8:ae:e7:e7:54:55:9f:a2:3c:d8:83:13:
7e:fa:ca:1f:cb:01:90:5a:3d:bb:de:28:0e:26:95:
53:91:12:d2:59:4d:48:b7:01:7c:0e:d0:22:92:0d:
cc:6f:dd:00:30:79:ca:38:ea:b6:22:a3:98:c4:0b:
3f:4c:44:9e:4f:af:67:62:48:f5:a4:58:c8:01:73:
dc:23:59:82:74:5e:09:08:f1:97:5e:c5:66:63:57:
cc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D4:84:C5:2B:60:81:8A:BB:25:AE:3F:1C:52:D4:82:6A:64:7D:26
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b0:08:57:92:ea:fd:6b:f7:05:7e:88:0c:ed:6b:1d:0c:53:
55:e0:14:39:f8:99:ce:a3:b9:80:4c:17:28:84:14:32:25:5e:
17:ff:9f:d6:d1:a1:90:7e:9e:e8:ab:c1:21:7b:76:73:79:d5:
94:9b:79:e6:33:32:a6:b5:93:21:e3:14:ab:b9:d3:6e:48:b3:
a5:1f:ad:ca:89:2b:a2:0c:04:91:75:f1:90:b0:10:0f:65:91:
f1:e2:fd:95:61:5f:88:8b:72:1c:20:6e:47:24:06:06:c5:0c:
80:8f:96:d0:8d:b9:55:1f:27:ed:04:6e:ab:62:15:fe:df:60:
66:67:9d:9e:7b:35:4d:81:91:06:9e:12:2a:c5:a0:93:80:8f:
09:b3:1b:fb:5b:0c:44:89:7e:ac:a1:79:03:14:2b:8b:f9:a8:
05:c7:08:06:2d:4c:3a:00:ef:eb:15:08:4a:5b:09:e9:55:74:
a7:a6:9f:6d:b7:2f:a4:2d:20:6d:6b:96:3e:1b:91:1a:7a:3b:
33:e6:89:66:bc:64:e7:7d:b7:19:e4:46:59:94:28:b8:c5:1c:
68:28:05:1c:d8:b2:5c:01:c9:91:7f:4b:24:e8:24:d3:90:59:
82:05:56:37:af:aa:f8:b3:79:af:54:d8:83:5e:93:fd:06:a7:
04:50:52:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 06:37:31 2026 by rpki-client