
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: xROX/KrxWyj24Z0Vve2yWx5WHzldcGmf5Uu0ymkkavA=
Subject key identifier: 85:F6:86:56:9A:2C:41:8C:41:72:A1:0B:34:A4:FF:85:4A:D0:81:EE
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019DC14BC69FAD1860B8D75805F115E9CC76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 191D
Signing time: Fri 24 Apr 2026 21:01:01 +0000
Manifest this update: Fri 24 Apr 2026 21:01:01 +0000
Manifest next update: Sat 25 Apr 2026 21:01:01 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: dxhSNdfgcGMev9SNsXFoyBRiUaad6/TsTf18dqnXQlY=)
4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c1:4b:c6:9f:ad:18:60:b8:d7:58:05:f1:15:e9:cc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Apr 24 21:01:01 2026 GMT
Not After : Apr 25 21:01:01 2026 GMT
Subject: CN=85f686569a2c418c4172a10b34a4ff854ad081ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:0d:4b:70:1d:09:b5:ec:44:8e:75:51:04:
04:c2:5f:d9:35:0d:d8:42:98:22:97:ed:df:6b:f5:
28:30:3c:8c:01:fe:e5:5d:99:ec:4d:46:6f:a5:f0:
20:6a:da:75:79:f2:3b:ad:29:4d:f1:94:2e:95:ad:
68:1b:a6:b7:c1:5a:7f:01:b8:ec:51:3c:e5:a2:cf:
99:13:1e:7c:c4:13:9e:44:a0:6b:4f:bd:0d:61:dd:
35:e9:3f:8e:41:90:7a:5b:ba:26:af:45:f9:d0:06:
ac:3e:64:f2:fa:22:06:65:42:ce:03:ea:7e:1f:b7:
93:b3:ee:fd:c4:6b:2b:b5:37:c2:67:6a:7a:2e:ec:
74:11:8b:5c:52:f0:ad:07:f1:84:70:be:bf:a0:b8:
d4:e0:b1:9a:ed:4b:d1:f4:dd:77:d8:52:71:04:36:
b0:d5:42:f0:46:04:02:69:5c:95:4d:cc:f7:59:52:
be:10:da:80:ae:15:0c:5e:72:57:29:fa:dc:53:a5:
1a:15:7e:cb:bb:32:fc:37:32:78:a4:a2:c2:a3:32:
44:3c:22:86:22:d3:3a:9d:de:57:69:a9:4a:ba:e7:
fe:66:e9:1e:9b:41:cd:c0:2f:8d:da:8e:99:7c:2f:
64:f1:e5:6e:0f:c4:2b:dc:2c:49:45:55:68:ea:1b:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F6:86:56:9A:2C:41:8C:41:72:A1:0B:34:A4:FF:85:4A:D0:81:EE
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:26:35:a8:64:c0:2b:96:e2:8b:7d:bf:9d:81:0d:cd:a1:72:
aa:59:40:32:0a:6c:9f:df:a8:24:dd:40:f8:2c:4e:6e:66:7c:
99:43:cb:62:74:a9:f0:95:a7:ce:99:22:cd:09:ca:37:78:1b:
be:d6:73:66:12:0d:59:fd:55:77:f6:61:e7:fa:8e:70:cd:a1:
68:d3:88:ec:9e:a6:e3:4e:86:6b:6c:3d:d6:45:ad:fe:4e:60:
7b:6a:6e:73:16:af:6e:f2:cd:6c:b1:37:4c:48:58:20:6f:68:
79:ab:1a:a1:dd:70:ba:b5:e5:f5:5d:28:81:26:d4:c7:e0:17:
4d:8f:e0:a6:8c:5d:d1:47:dd:00:ec:49:f9:a2:e6:39:99:1f:
c5:df:2c:c3:4f:0f:e5:10:fd:da:e5:22:b8:2e:79:0e:5d:a8:
a0:27:0b:b3:cb:ae:08:fa:85:31:f4:f6:0b:95:78:c2:dd:6d:
c2:2a:3e:63:a5:13:6b:1f:ca:f7:b2:f1:ce:29:eb:80:28:6a:
e8:c0:8f:aa:fb:aa:4d:ba:2d:a9:d7:b7:02:38:1f:ff:39:b6:
16:44:82:35:72:4e:93:3c:31:00:34:35:46:c3:a2:af:aa:c5:
58:00:6f:14:c7:69:c6:f8:ec:af:e3:a3:9b:90:de:2c:ae:be:
5d:07:91:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 05:30:07 2026 by rpki-client