
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: 4q63vrQ5ePHw/zCvezhULD+/L/HXnCb+gfSy/QoeGK4=
Subject key identifier: 60:CB:58:36:E1:0B:E3:DF:44:66:18:0D:0F:31:D3:C3:BB:BF:3C:14
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019D26CCD712E8B756DBDF2FFE6F73273BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 18CD
Signing time: Wed 25 Mar 2026 21:00:51 +0000
Manifest this update: Wed 25 Mar 2026 21:00:51 +0000
Manifest next update: Thu 26 Mar 2026 21:00:51 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: spmdQZ3q9OTYUqr1ve041Gzrj/2UuZ9S0xM+NGi4sYU=)
4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d7:12:e8:b7:56:db:df:2f:fe:6f:73:27:3b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Mar 25 21:00:51 2026 GMT
Not After : Mar 26 21:00:51 2026 GMT
Subject: CN=60cb5836e10be3df4466180d0f31d3c3bbbf3c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:c5:e5:28:1f:2b:02:29:50:f7:f9:ad:4d:
5a:63:b4:3c:e3:8d:66:9f:14:72:23:45:ba:da:0a:
d3:cc:4f:92:00:b9:9f:7d:08:68:f4:4b:9f:dd:d6:
fe:d0:90:ed:49:06:9e:bb:a2:7c:30:16:a1:a4:9b:
53:bd:ae:43:07:f5:79:01:9f:a0:4a:fc:ab:b8:cb:
45:62:35:9c:a8:eb:1e:b1:1d:c9:fa:dd:7d:27:d3:
9a:10:be:2c:50:64:0b:4c:ff:78:cb:cd:3b:1f:45:
13:a4:1c:25:0c:96:ce:fe:39:71:22:cb:8b:71:87:
99:92:c0:7f:99:db:18:51:9f:88:e1:4b:be:c5:b5:
23:89:19:f8:30:95:ef:f0:81:6c:13:49:d5:45:db:
44:f5:f1:e8:40:e3:67:1c:9f:61:c1:79:ff:ee:76:
d6:30:e8:b5:05:6e:1f:21:67:bc:f5:bd:82:61:1b:
16:5b:85:3f:2d:ff:a0:49:0e:d8:34:5c:d1:35:15:
53:a3:df:18:03:35:49:9f:be:2f:21:1a:ce:7d:51:
59:e9:31:d3:92:37:cf:f8:46:df:82:ed:ca:03:a2:
da:44:72:f0:3f:e8:15:c7:a7:98:7b:f1:3f:8f:84:
bc:2d:56:7a:e7:5f:0e:b8:e0:3a:1d:99:7d:66:c5:
95:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CB:58:36:E1:0B:E3:DF:44:66:18:0D:0F:31:D3:C3:BB:BF:3C:14
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:1f:52:19:da:f4:e5:4f:13:b7:8a:20:29:d0:fe:9b:cb:0e:
15:f4:fc:ba:5a:fb:87:dd:ff:f5:a9:80:3f:c8:3d:ca:37:9c:
ef:66:57:3e:3f:d7:74:02:78:94:40:8c:34:44:00:6e:2b:6e:
a5:17:8b:32:c3:85:35:f8:3b:9a:19:46:3c:17:5b:9f:68:86:
f9:98:34:79:0c:b7:f1:61:95:a5:22:1e:26:06:04:27:87:46:
ce:18:04:58:1b:41:c6:a8:3a:81:e7:94:70:c1:71:99:6c:97:
12:8e:a7:be:09:96:28:a0:40:be:60:4a:5c:81:11:23:43:4f:
b1:fb:6c:81:68:5b:28:13:d7:42:46:f1:d0:3d:0f:b5:39:89:
fb:01:74:4a:bc:6b:b9:e6:34:03:fd:ac:fe:58:fc:1f:a8:9a:
ae:36:b1:06:17:53:0f:ff:69:9f:a0:be:68:66:c7:12:fc:6d:
09:80:fb:21:33:12:7a:44:6a:7c:fd:70:a6:24:99:2a:c8:32:
3d:0f:7b:a5:6b:28:3e:a1:5c:2e:12:23:00:44:ae:b8:c2:85:
36:58:fa:fa:29:57:a2:7b:44:e2:f1:e8:0d:18:d9:db:c1:94:
00:1f:16:77:70:78:82:0d:9e:34:eb:59:5e:c4:6c:f6:d1:da:
e1:b9:8a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:19:17 2026 by rpki-client