
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: zA7h5P4NWNSXpuykZ3OD0Q29s2bu4ybFWdJPLZoNXG8=
Subject key identifier: 83:FB:58:31:A1:B0:74:0E:33:61:69:F4:3F:EF:71:DD:E5:EA:02:C3
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019D382DDC2EB32F66007FBCC284741A89BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 18D6
Signing time: Sun 29 Mar 2026 06:00:22 +0000
Manifest this update: Sun 29 Mar 2026 06:00:22 +0000
Manifest next update: Mon 30 Mar 2026 06:00:22 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: RhOGzTbT9WMupb1jPCFZdZt23Qyn+TlsyEBbeClGiJ4=)
4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:dc:2e:b3:2f:66:00:7f:bc:c2:84:74:1a:89:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Mar 29 06:00:22 2026 GMT
Not After : Mar 30 06:00:22 2026 GMT
Subject: CN=83fb5831a1b0740e336169f43fef71dde5ea02c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:0f:89:6a:a3:16:bc:41:bb:17:45:c0:37:
38:03:05:28:df:cc:4a:39:b0:5f:64:80:91:ab:a7:
e9:09:42:0d:6c:bf:0b:78:c4:cc:91:19:c4:80:95:
a5:f1:28:1d:e6:83:f2:3a:c9:05:f0:4e:15:e1:a9:
f9:ed:47:33:b6:78:ed:76:05:7f:11:61:20:71:63:
ac:34:aa:4d:ea:fa:6e:16:03:b5:59:fa:d2:a2:91:
45:c8:5a:60:e1:5a:a5:22:13:2f:39:88:bb:a9:02:
58:10:9f:ea:55:06:b6:d6:44:43:55:d4:86:e1:53:
d4:74:e2:ec:87:df:bb:fc:d0:01:68:8e:12:6b:44:
72:1c:44:3a:5f:e1:3c:a1:fe:9f:01:00:c4:05:f6:
f5:ab:28:49:b8:a1:ce:da:9c:47:32:93:15:28:f2:
02:cd:e1:13:b4:33:85:1d:52:f7:fe:0a:66:65:e0:
20:b3:5f:10:9b:02:d9:1d:b9:ee:15:e7:d4:08:11:
f7:05:08:0b:a9:38:ca:d9:8a:8a:5a:5d:ca:f2:91:
5e:2b:f5:be:98:3c:cf:06:df:ab:ab:eb:6e:7a:0f:
5c:43:e2:d6:4a:82:bf:c5:ae:6a:f1:ab:58:9d:f4:
97:b0:70:e2:31:ed:83:75:2b:8f:ac:c3:c5:27:9d:
1f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FB:58:31:A1:B0:74:0E:33:61:69:F4:3F:EF:71:DD:E5:EA:02:C3
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:16:1b:96:81:23:ca:cf:ba:be:2e:2b:04:2b:9b:c2:f4:fc:
bb:85:0a:e5:bb:7f:69:74:39:4c:ae:13:01:9c:67:e2:53:c3:
34:f0:7d:a3:cf:90:c9:ae:29:db:1f:ee:63:70:2e:81:bb:ce:
d2:38:71:f0:c4:24:cb:81:cd:c3:66:1d:e5:17:5d:c7:06:9a:
0a:d1:1a:2f:54:99:df:19:7b:61:80:48:40:b4:d3:86:f7:0a:
37:56:fd:35:e0:60:84:0c:fc:7b:27:2e:d7:c9:33:9d:89:96:
63:69:02:11:d9:e4:d5:49:f3:37:97:7c:39:a9:71:68:0a:a0:
2b:a8:52:ba:68:53:6c:d6:be:41:04:9e:ad:34:b1:80:f6:24:
82:23:81:2a:66:00:8f:91:49:2e:62:43:dd:11:c7:90:d1:9b:
e6:25:08:68:06:58:58:dc:42:fa:40:9b:70:00:df:73:62:b6:
ab:38:3f:7b:68:fc:c8:0a:76:0b:22:d4:f8:03:34:25:fd:3b:
22:24:42:16:11:69:5d:76:c4:7c:ed:27:25:45:14:e9:7b:ad:
35:0a:87:26:4e:23:56:4f:9f:f2:4d:00:0e:11:f5:38:bb:80:
3f:71:a1:87:28:96:5e:27:2a:2a:eb:03:3b:81:a5:26:39:cb:
45:62:67:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:26 2026 by rpki-client