
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: Hu400LVTMj4eHj/JtxIA6uT2RMvI6HUBM4atOR5hyjg=
Subject key identifier: FC:FC:6B:F0:B4:EB:4A:B4:9C:07:9B:86:21:45:FB:FB:6F:DC:4E:32
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019D3C0AB3BB14B0C4EC76F6E1A3056B2DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 18D8
Signing time: Mon 30 Mar 2026 00:00:27 +0000
Manifest this update: Mon 30 Mar 2026 00:00:27 +0000
Manifest next update: Tue 31 Mar 2026 00:00:27 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: r03nZVCQnKBT9Vx0tmjO1LA+WEM/RsVUb/dIJx3e9is=)
4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3c:0a:b3:bb:14:b0:c4:ec:76:f6:e1:a3:05:6b:2d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Mar 30 00:00:27 2026 GMT
Not After : Mar 31 00:00:27 2026 GMT
Subject: CN=fcfc6bf0b4eb4ab49c079b862145fbfb6fdc4e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:d3:83:84:15:30:20:58:3c:d6:9f:6e:25:
8a:ad:d4:1f:21:18:86:00:d3:4b:19:0f:2f:e0:82:
27:30:e4:68:1e:c1:66:d2:a4:7b:d7:89:8a:e2:71:
3d:1b:c7:4c:93:d8:c6:a3:0a:12:b4:cc:f5:57:a8:
44:1c:6f:0f:bb:69:5a:d2:84:fb:77:69:5e:f9:00:
29:c8:c3:80:38:78:8d:07:d4:9c:c7:2d:91:af:8c:
08:16:f5:74:95:77:7a:09:28:e4:8f:0b:07:e6:85:
52:b5:35:ed:12:4a:d2:1e:38:eb:dd:08:1e:fb:6b:
33:78:f4:bd:4e:16:08:6d:84:06:26:b9:e4:16:96:
af:b5:d8:06:ff:b5:0a:04:7f:58:7a:2f:9e:01:1b:
fb:c0:8a:12:e2:56:01:03:90:f7:a7:21:6f:23:cc:
fa:20:dc:cd:71:27:d1:d8:8a:0d:2c:f4:c1:31:9b:
8a:8a:21:cc:73:ad:35:65:46:37:52:4e:be:35:9b:
27:61:a4:1c:bb:e3:b9:3f:76:fd:e1:01:f7:67:80:
29:01:cf:62:82:1b:7e:40:ab:bf:de:51:12:72:74:
bc:4f:49:20:5e:06:2e:9f:46:ef:28:dd:10:62:de:
3e:c5:68:0e:a8:ee:00:4f:3b:4b:f0:6b:de:e2:dd:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FC:6B:F0:B4:EB:4A:B4:9C:07:9B:86:21:45:FB:FB:6F:DC:4E:32
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b5:ee:14:65:31:84:e5:63:52:69:fc:f8:a6:a8:fb:cf:72:
00:01:73:a9:7a:a9:33:3e:ab:7f:66:31:75:05:cc:b7:de:76:
4c:e5:54:5d:ba:85:3c:6d:e7:fd:b8:8b:9e:78:9b:1d:ef:f8:
4f:cd:30:aa:53:28:3e:f3:e4:63:e3:d7:b9:90:21:17:74:99:
29:9c:db:d8:66:5d:fc:60:79:40:61:d2:88:5f:82:10:0d:f1:
31:1f:2d:e4:da:46:10:f8:5b:0e:ee:94:14:8f:10:0b:aa:27:
a9:a7:d5:15:13:30:cc:1a:df:8c:0c:74:f1:2d:04:96:8d:19:
63:86:f8:b1:75:4e:f0:1c:80:2b:cb:1a:42:84:11:ab:2d:c3:
52:7f:39:28:cd:0a:eb:91:aa:bd:71:4a:db:32:0f:d1:53:cc:
15:41:21:c4:72:c9:c6:37:e6:51:36:4b:6e:fa:3b:79:04:91:
c3:87:fa:73:69:88:2c:4c:50:93:1d:de:db:96:ba:53:bb:d2:
0a:65:65:f1:ba:ef:90:9c:ca:b4:cc:c9:1d:66:10:67:cf:d3:
44:63:f5:26:e6:60:ef:08:49:16:0c:0f:4b:e0:8f:1e:ca:8b:
2b:17:11:7a:2e:b5:28:78:72:99:73:c9:21:7f:d9:e2:08:5e:
8a:54:d8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 03:32:56 2026 by rpki-client