
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: /03J34FRKAiWwFInMnNWXLmvMNsff9ZMhzWwrQvgt0k=
Subject key identifier: DD:B7:01:EC:B6:A8:81:A7:EF:F0:9D:EC:E2:22:E4:BD:23:E9:18:E1
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019D571472B4B7ADF5ACCFA47591ED5FADC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 18E6
Signing time: Sat 04 Apr 2026 06:00:50 +0000
Manifest this update: Sat 04 Apr 2026 06:00:50 +0000
Manifest next update: Sun 05 Apr 2026 06:00:50 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: sLT0YKaRMQd1QtKI7PmCxhMcuw1sBxkXlcLw4nq5wl8=)
4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:57:14:72:b4:b7:ad:f5:ac:cf:a4:75:91:ed:5f:ad:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Apr 4 06:00:50 2026 GMT
Not After : Apr 5 06:00:50 2026 GMT
Subject: CN=ddb701ecb6a881a7eff09dece222e4bd23e918e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:ba:5f:d1:46:16:cc:c6:b6:c8:58:cf:be:
92:61:5d:2f:27:b4:cf:bb:d3:ad:96:81:2a:2c:65:
b8:66:11:a9:4f:9a:a5:3d:fe:b9:3a:96:78:e3:29:
de:fb:9f:2d:2e:e6:76:de:8d:3e:5a:46:3b:64:e7:
45:11:55:e9:99:f3:2b:15:89:31:78:30:33:ae:ed:
78:68:95:73:99:63:16:8f:a9:f8:ec:2b:fa:7c:27:
f4:bf:6b:34:ea:07:d6:ed:5e:c6:3b:d6:11:a2:b8:
4e:d9:36:6a:07:22:94:47:6f:1f:ab:c9:54:79:a4:
e6:97:98:41:b3:89:24:b5:b4:9b:18:01:54:c1:c9:
4e:d1:9f:6f:9d:82:b6:cd:c2:8c:72:e1:84:29:ff:
c8:9c:67:43:a3:dc:eb:78:33:d6:e3:94:62:fb:b1:
b0:16:b6:7b:d9:f9:3d:a8:e5:c6:40:3d:18:24:5c:
33:9e:53:42:81:a1:b1:e9:1d:f9:13:18:38:95:99:
02:c3:08:b9:f6:c6:f6:de:58:3c:72:ed:2e:82:33:
94:9c:ef:b4:f1:cd:e5:17:29:33:79:f4:f5:74:be:
67:24:c6:a5:af:de:67:40:12:05:89:0e:99:1b:6e:
81:2f:bb:fb:90:45:72:2a:67:ed:47:e0:7c:41:3c:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B7:01:EC:B6:A8:81:A7:EF:F0:9D:EC:E2:22:E4:BD:23:E9:18:E1
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f4:36:2f:22:6d:5e:ac:39:cb:a0:7a:89:90:d4:80:71:7c:
71:cc:83:ca:93:f4:d0:47:e3:f9:57:a9:23:9d:3d:47:1e:9b:
2a:e0:17:7c:9d:d5:15:80:5e:aa:3c:30:73:56:21:69:bc:52:
7f:b2:37:14:7a:df:11:f1:2b:50:6a:eb:3a:4e:bd:30:7d:fa:
54:1a:4d:a2:55:d9:de:94:7c:ee:5b:7a:a0:9d:79:be:f2:ba:
5c:52:6b:8e:87:5b:e9:bf:43:db:15:63:a3:8b:1a:5c:a2:03:
c9:24:96:84:9d:60:18:14:be:c6:bd:59:f2:c2:a8:00:a9:9e:
57:f3:14:b9:1a:26:dd:60:93:08:56:a4:84:40:d5:fc:3b:02:
3a:14:64:81:03:68:46:30:00:f5:59:7d:9a:08:be:f0:ae:83:
b2:43:fa:eb:88:85:53:c3:db:28:bc:05:b7:89:de:74:4e:26:
6f:06:ac:c8:2e:09:38:94:65:0e:45:8a:bc:ad:97:08:cc:87:
80:8b:62:54:6d:8c:7c:d6:91:0c:92:b0:d0:70:01:06:73:7b:
48:8f:8d:04:e0:0d:a4:60:49:78:37:76:2b:92:52:97:3c:52:
46:71:82:6e:17:79:14:d8:3d:73:6d:af:1e:48:df:c1:f7:3d:
ea:13:a9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 4 11:15:59 2026 by rpki-client