
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: 6RKczGgyhODBYRhX1VbGkJYuRdJJQfhtb13pPWqn/b0=
Subject key identifier: 12:EA:46:33:0D:E6:94:BF:7C:4B:AD:31:A2:C9:B8:72:69:67:62:A4
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019D156B1A0FE7456D0F6C6AEE3E1811A083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 18C4
Signing time: Sun 22 Mar 2026 12:00:33 +0000
Manifest this update: Sun 22 Mar 2026 12:00:33 +0000
Manifest next update: Mon 23 Mar 2026 12:00:33 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: JyEcVYytTPi651WErhqM4I2Y/vFpkfp2eWLTnufvWWI=)
4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:15:6b:1a:0f:e7:45:6d:0f:6c:6a:ee:3e:18:11:a0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Mar 22 12:00:33 2026 GMT
Not After : Mar 23 12:00:33 2026 GMT
Subject: CN=12ea46330de694bf7c4bad31a2c9b872696762a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a0:c4:e6:d8:73:ac:80:da:cf:af:07:49:dd:
00:db:3e:8c:d7:df:c1:3d:c4:6a:08:19:8e:0a:fb:
07:a9:02:69:29:38:69:73:7a:c5:6f:5e:88:eb:c3:
55:8e:f6:40:01:05:42:a1:47:7e:5d:2b:62:48:b4:
8f:87:45:99:3c:fb:72:6e:61:0d:e1:4a:43:fa:87:
75:10:cd:50:08:9c:70:4d:aa:f8:58:45:15:8b:bd:
03:82:26:c7:0c:73:d6:57:74:99:31:3a:eb:50:31:
3a:94:0c:9a:88:76:6d:4b:9e:90:7c:b4:0d:f6:bb:
52:76:3a:32:f3:cb:28:d1:3f:57:9e:d6:68:97:bd:
aa:cd:4c:80:b1:78:80:69:5f:5a:f3:72:83:e1:90:
61:47:4f:9e:05:61:83:eb:ef:da:49:20:f6:f1:7a:
7c:6b:00:7f:41:9d:4f:90:8b:60:04:10:71:07:3c:
60:f3:3f:73:7e:bb:6f:91:21:38:61:7d:db:4d:37:
f8:61:fc:37:6a:eb:f2:64:7e:bd:be:3d:ac:36:6a:
d7:9c:91:7f:fc:38:88:09:46:a4:a1:62:b2:2e:b0:
40:c1:3d:ba:bd:59:43:68:85:62:f6:56:25:76:15:
49:bb:d3:2b:a2:7b:50:31:d9:43:73:da:f2:bb:6c:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EA:46:33:0D:E6:94:BF:7C:4B:AD:31:A2:C9:B8:72:69:67:62:A4
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d7:50:9f:80:db:5d:35:6f:50:e4:e2:89:a2:76:33:06:9a:
09:9b:12:18:6d:99:67:99:cd:c2:5a:f0:22:ba:57:98:6c:49:
80:14:db:5a:18:85:d0:72:f1:d1:b6:29:fb:b0:97:d0:46:82:
b3:e8:20:a4:2c:5b:42:1a:48:df:b1:82:20:eb:ae:2b:27:c6:
59:c4:3c:f0:47:2b:77:75:59:de:57:2c:84:28:66:83:5b:15:
f4:8d:b0:ef:8e:93:38:11:0c:55:33:4a:88:19:95:32:31:84:
7b:f5:4c:80:7d:8e:07:37:57:ad:c1:97:db:cf:df:2c:d4:b9:
9d:ab:d6:a5:e0:c9:3f:7c:38:bb:c6:2c:ae:1d:49:98:92:f8:
4a:dd:a5:5b:11:20:b4:d2:6d:89:c3:c2:53:70:6e:cc:c9:2e:
bc:f8:5e:14:f0:08:2b:77:98:e7:0e:01:20:36:da:af:11:8d:
eb:81:65:13:81:a6:5a:88:1b:53:2a:4b:7f:8b:f5:79:aa:b4:
c5:4d:39:47:c1:8a:d3:16:bb:70:bb:26:50:05:6d:28:17:64:
5e:02:3b:84:a6:8c:06:b6:d6:8b:af:a4:e3:66:fc:a5:1b:26:
85:74:88:78:f1:33:95:d6:ca:f1:6d:68:92:34:07:38:e2:c6:
b9:44:54:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 21:42:57 2026 by rpki-client