
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: LRHSrN+dtIBPSgQKWLoHgSBd5iZEYacHZmXmvgIoxF8=
Subject key identifier: 25:87:CA:76:B7:8C:24:C7:B0:50:E6:2F:E1:FA:2F:39:B1:4F:A2:5D
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019DF75F119867D506C42838EC8741D6402A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 1939
Signing time: Tue 05 May 2026 09:01:35 +0000
Manifest this update: Tue 05 May 2026 09:01:35 +0000
Manifest next update: Wed 06 May 2026 09:01:35 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: I2qn5cekKoj7SunQzEVe0DKnFTw3f6lg01//hpw+dag=)
4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 09:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f7:5f:11:98:67:d5:06:c4:28:38:ec:87:41:d6:40:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: May 5 09:01:35 2026 GMT
Not After : May 6 09:01:35 2026 GMT
Subject: CN=2587ca76b78c24c7b050e62fe1fa2f39b14fa25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:10:90:e8:f2:42:37:79:56:38:0e:cc:4b:
3c:33:0a:98:56:22:57:95:48:30:f2:a4:61:c0:ee:
84:37:c6:65:b3:71:79:67:8c:7b:32:00:1d:0a:17:
82:20:23:97:52:0f:7d:7c:61:d4:ef:6e:28:9a:5e:
63:3b:9a:cd:f2:3f:f0:28:b6:3b:a9:bd:05:3c:da:
6d:1a:fd:47:64:4e:75:63:60:f6:74:60:f6:71:42:
ee:3a:18:3d:ad:b9:00:bc:e6:bf:0f:30:5e:63:ec:
f6:1a:97:68:19:7e:4f:bd:65:31:07:11:0f:c4:04:
d5:62:86:20:a1:16:ae:e3:28:5f:ac:d5:fa:55:38:
bb:0b:19:6b:69:15:20:e4:ab:2a:6d:76:c3:d5:39:
8a:a5:a1:aa:e5:c7:7b:b8:56:91:7d:6b:29:c3:97:
da:11:12:bd:ee:a6:82:16:7e:e5:fd:41:c0:cd:f5:
2a:68:6b:ec:ae:fb:49:4f:15:8a:02:7d:83:c0:66:
5a:a3:33:32:52:ca:c9:0b:bb:63:e2:c4:fd:d0:be:
e2:ae:68:59:88:b1:a1:fc:df:8f:3d:45:70:52:cf:
ec:20:5c:a0:48:b7:f5:e4:57:99:15:c1:90:c6:01:
11:0a:ce:14:af:7b:01:1b:ea:46:22:d1:ec:c7:32:
6e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:87:CA:76:B7:8C:24:C7:B0:50:E6:2F:E1:FA:2F:39:B1:4F:A2:5D
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:50:8a:2e:83:7c:1c:0a:01:a0:21:9a:d2:33:2d:6e:0c:6b:
c7:d8:0a:90:e8:ea:af:25:e6:72:8b:1a:70:8c:1c:38:03:35:
f2:53:0c:40:30:e5:17:4c:4e:b3:39:7d:ad:3e:3f:96:01:fc:
45:c2:28:50:4e:91:9e:9d:b8:97:94:cd:22:1c:72:ae:30:78:
fb:c3:6c:f5:ae:8b:80:16:95:1f:7e:e4:5d:f7:98:5b:4f:82:
be:b0:4e:64:08:8a:36:aa:8b:d9:8c:0b:7e:66:79:77:8b:7b:
7c:4e:cd:9d:ba:ba:9d:e0:5c:a9:b6:59:e0:33:6e:29:92:65:
06:e9:ef:32:8f:ab:7c:98:75:d4:e6:05:9c:cf:92:e9:f9:13:
59:de:53:12:85:d9:06:a0:75:ef:89:ff:6a:34:ec:6e:2f:6c:
62:20:9c:5a:6b:1f:59:3e:6f:25:b9:3f:8a:1c:80:2d:5f:53:
29:63:3e:1d:2c:df:4d:10:84:e6:ae:4a:d7:7d:a1:a5:15:12:
7a:ab:ef:83:ac:81:50:46:02:98:ec:14:c7:c5:63:af:66:35:
b6:bc:9a:1a:bd:65:ed:45:28:ca:c5:55:6b:e6:f4:c6:e5:f5:
66:02:84:a0:90:2a:0d:e4:c4:e0:81:a9:32:8e:84:58:c0:fa:
e3:bb:d2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 15:07:22 2026 by rpki-client