
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: N5t3H5jEaB3M059TzR1Gujd4Bu04CGwLE/pMrWWxDH4=
Subject key identifier: 31:2D:07:A6:47:86:97:7D:EE:3B:D7:E5:48:C0:1D:C6:BC:07:9B:6B
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019D34514F53C23D82E739012EF009E6A656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 18D4
Signing time: Sat 28 Mar 2026 12:00:36 +0000
Manifest this update: Sat 28 Mar 2026 12:00:36 +0000
Manifest next update: Sun 29 Mar 2026 12:00:36 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: uyVdeora7pI1qMTj91UZMHLkdBoXxtziBG92FHo32K0=)
4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:51:4f:53:c2:3d:82:e7:39:01:2e:f0:09:e6:a6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Mar 28 12:00:36 2026 GMT
Not After : Mar 29 12:00:36 2026 GMT
Subject: CN=312d07a64786977dee3bd7e548c01dc6bc079b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:f9:a1:4e:d5:df:21:3d:ff:7d:5c:c9:42:
f0:fd:fc:49:5a:00:ce:03:c0:ee:5b:69:c8:79:eb:
23:e3:90:3d:d5:9b:16:3f:13:69:8e:00:c3:eb:a5:
76:6a:c7:8a:19:ce:cb:b7:47:c3:6d:bd:4e:01:47:
e9:21:a9:93:43:62:a6:90:6e:bd:37:7b:89:15:fa:
0b:d2:13:bb:c2:f4:02:51:ab:52:ab:94:8d:cf:1c:
08:d4:19:57:9c:9c:4c:17:21:97:26:55:9f:90:39:
e6:af:d1:ca:77:da:64:5b:60:c4:89:0c:b8:eb:60:
1a:ad:16:46:f0:bf:29:54:59:89:71:12:9b:6d:2b:
d2:37:fb:a6:0c:7e:e6:e9:b8:62:01:7f:06:6a:08:
04:96:36:69:da:76:4d:17:30:e6:0f:c4:d2:71:3d:
0e:d6:4a:19:92:44:cb:ba:d5:86:69:7b:42:4a:bd:
0b:3d:77:7c:ec:9b:b4:e0:11:f7:35:72:d1:de:92:
96:1d:f7:6d:78:b9:02:f5:7f:32:d6:32:a9:c7:dd:
29:99:58:88:8d:45:18:a3:36:47:e9:14:d5:8b:1b:
dc:02:5f:5f:41:ff:9e:46:dd:70:bc:dc:fe:94:c8:
39:eb:22:ae:63:73:ec:1c:49:92:84:0b:0e:17:31:
52:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2D:07:A6:47:86:97:7D:EE:3B:D7:E5:48:C0:1D:C6:BC:07:9B:6B
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:98:9b:c9:54:d7:74:c0:6e:d2:90:76:d7:18:5a:ae:ab:90:
fc:58:78:80:3c:0f:87:8c:d1:4a:a0:19:07:f1:22:33:2a:f1:
5f:e1:98:63:d1:1e:83:ac:21:32:30:63:de:da:2b:12:35:e7:
c7:67:a8:a4:25:49:28:c0:27:4c:55:75:f9:7d:f5:1e:d0:f2:
03:ba:99:88:7e:b2:19:f7:e3:3f:fc:6b:2f:2f:96:4e:05:35:
03:23:5d:b0:b3:dc:f2:94:d2:ab:b3:81:40:98:3d:03:20:18:
7c:37:c1:68:ef:9f:9e:d9:19:35:fe:29:47:7d:59:6b:b6:ea:
28:21:13:d6:ed:d2:95:fc:57:2d:24:cd:29:ef:a1:e5:57:85:
61:3e:d9:95:f0:fa:22:9b:42:94:6e:a5:13:ae:01:99:24:f2:
18:4f:97:8e:44:8a:47:d4:b4:bf:40:43:55:1c:53:85:d8:ee:
bf:ba:06:5a:ff:0e:82:73:b6:68:dd:1e:d9:14:c8:9b:0b:68:
f3:7b:a0:a7:a6:be:ce:64:49:57:e6:e0:f7:d0:b4:5c:cf:cb:
9b:6f:e4:57:19:9b:24:3f:10:be:54:8a:5e:d9:64:3a:94:00:
a3:de:88:c6:0b:7f:6e:5d:a7:88:74:d7:2c:86:e9:5f:63:0e:
dd:0b:6f:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ00UU9Twj2C5zkBLvAJ5qZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl
M2ZlZjMwHhcNMjYwMzI4MTIwMDM2WhcNMjYwMzI5MTIwMDM2WjAzMTEwLwYDVQQD
EygzMTJkMDdhNjQ3ODY5NzdkZWUzYmQ3ZTU0OGMwMWRjNmJjMDc5YjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOT5oU7V3yE9/31cyULw/fxJWgDO
A8DuW2nIeesj45A91ZsWPxNpjgDD66V2aseKGc7Lt0fDbb1OAUfpIamTQ2KmkG69
N3uJFfoL0hO7wvQCUatSq5SNzxwI1BlXnJxMFyGXJlWfkDnmr9HKd9pkW2DEiQy4
62AarRZG8L8pVFmJcRKbbSvSN/umDH7m6bhiAX8GaggEljZp2nZNFzDmD8TScT0O
1koZkkTLutWGaXtCSr0LPXd87Ju04BH3NXLR3pKWHfdteLkC9X8y1jKpx90pmViI
jUUYozZH6RTVixvcAl9fQf+eRt1wvNz+lMg56yKuY3PsHEmShAsOFzFSCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEtB6ZHhpd97jvX5UjAHca8B5trMB8GA1UdIwQY
MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt
NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz
LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZibyVTX
dMBu0pB21xharquQ/Fh4gDwPh4zRSqAZB/EiMyrxX+GYY9Eeg6whMjBj3torEjXn
x2eopCVJKMAnTFV1+X31HtDyA7qZiH6yGffjP/xrLy+WTgU1AyNdsLPc8pTSq7OB
QJg9AyAYfDfBaO+fntkZNf4pR31Za7bqKCET1u3SlfxXLSTNKe+h5VeFYT7ZlfD6
IptClG6lE64BmSTyGE+XjkSKR9S0v0BDVRxThdjuv7oGWv8OgnO2aN0e2RTImwto
83ugp6a+zmRJV+bg99C0XM/Lm2/kVxmbJD8QvlSKXtlkOpQAo96Ixgt/bl2niHTX
LIbpX2MO3Qtvbw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 19:50:15 2026 by rpki-client