
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: ZHGpT1zkd7IyGEqFzCYM5u/WdBmY95JQhfLGco5S2qM=
Subject key identifier: 4F:F7:A0:EB:3A:FB:10:21:85:C4:C0:C6:7E:03:70:7C:F8:49:D7:B0
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019CD3C27ADE8EEB22473173393220A9077E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 18A2
Signing time: Mon 09 Mar 2026 18:01:03 +0000
Manifest this update: Mon 09 Mar 2026 18:01:03 +0000
Manifest next update: Tue 10 Mar 2026 18:01:03 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: fTHOxaQLbJWB2H/r8CXI0kb0A122WEV2LmEwVpWyS6c=)
4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Mar 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d3:c2:7a:de:8e:eb:22:47:31:73:39:32:20:a9:07:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Mar 9 18:01:03 2026 GMT
Not After : Mar 10 18:01:03 2026 GMT
Subject: CN=4ff7a0eb3afb102185c4c0c67e03707cf849d7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:5f:eb:87:15:c9:62:42:71:12:26:de:dd:
eb:8f:fa:a9:59:f8:2a:b9:4f:b8:2a:8f:06:98:bd:
af:f6:be:76:93:41:97:65:3c:bc:0a:7e:58:79:40:
13:42:96:af:c7:37:0e:e0:12:6f:86:2e:e9:6e:3b:
90:2d:af:a1:e7:b7:72:b6:ce:fa:57:b9:08:66:0c:
a5:f6:e2:68:4b:84:5f:94:45:fd:ba:ff:5b:c8:53:
04:d4:91:cb:b7:53:cd:09:33:aa:d7:13:5e:26:af:
d6:2b:15:98:f0:1b:4e:2d:d2:75:b6:aa:36:7e:37:
ef:a7:58:5f:bf:7c:ca:f1:56:58:d3:ac:5a:46:b0:
a1:c0:82:9e:98:08:38:17:3a:29:d4:0a:3b:d0:7b:
d3:21:7e:35:92:66:4b:15:c5:0c:b9:7b:b5:11:1b:
f7:de:e7:47:53:a9:a4:bc:3e:cb:58:00:e3:69:de:
eb:bb:1a:c6:8f:a7:8f:02:51:8f:0d:c3:85:22:32:
02:94:4d:6c:b5:38:94:80:9c:8a:e2:27:e1:22:9f:
53:86:51:87:cb:be:dd:fb:24:12:00:cd:a9:cb:de:
ae:b0:ca:6c:7d:07:cf:44:4b:46:b5:3e:4d:85:ea:
94:a0:f2:d6:25:e7:c5:28:e4:97:bf:d4:58:3f:e2:
fb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F7:A0:EB:3A:FB:10:21:85:C4:C0:C6:7E:03:70:7C:F8:49:D7:B0
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cf:6f:b4:3e:60:6f:7d:b0:4b:89:96:ec:8f:e6:f3:94:d9:
96:3d:ec:79:b3:c0:66:7b:ad:44:e4:ca:d6:a6:8c:ea:f6:f9:
55:e6:10:f2:fa:fc:09:f2:68:1a:35:63:2c:7c:8d:19:17:95:
6d:27:a3:19:68:85:69:5d:db:1d:ac:3e:95:8f:9e:22:f7:f3:
f4:f4:bb:6a:27:8b:fe:18:c9:04:d4:9e:1d:f3:78:76:6c:eb:
bb:98:56:99:5f:35:66:7b:3d:41:c4:a2:18:47:b0:98:4c:d6:
20:42:cc:34:a8:20:46:e3:8c:19:c9:4b:df:13:af:e0:a5:ee:
65:d6:12:8f:af:1d:69:e8:77:c4:3b:5f:e4:c8:7e:38:ac:e5:
f8:d4:12:d0:86:da:89:69:98:8e:9f:2a:8a:e4:ec:53:2a:38:
e6:64:df:eb:6f:03:87:1c:d0:99:15:6b:cd:77:eb:d1:5c:96:
d1:35:22:88:72:39:13:28:b4:b3:90:73:3a:50:89:eb:c6:fa:
df:03:49:55:39:15:fb:54:ac:98:00:f7:73:5e:92:a8:1f:32:
d4:85:7d:e5:9d:a8:1e:e7:c2:62:3e:98:62:88:3e:9a:b6:c0:
24:1f:8d:68:e3:25:1d:84:7f:93:25:a2:03:81:c8:62:86:b7:
21:f5:1c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 02:20:29 2026 by rpki-client