
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: vp7MAiyIdX8ypiFarUe56Q7kj6q4w8gp1kgOk/zLxPw=
Subject key identifier: D3:14:EC:10:2D:0E:6C:1A:73:7E:CF:4A:6E:BF:4D:D9:E7:AF:DA:98
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019CF0BA1A967CD1E1DB762AA1229A40F19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 18B1
Signing time: Sun 15 Mar 2026 09:00:54 +0000
Manifest this update: Sun 15 Mar 2026 09:00:54 +0000
Manifest next update: Mon 16 Mar 2026 09:00:54 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: hzNZAHTFdNSCT3E3nVup/2MSK5oA5OnSZHsv1aCYlS4=)
4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f0:ba:1a:96:7c:d1:e1:db:76:2a:a1:22:9a:40:f1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Mar 15 09:00:54 2026 GMT
Not After : Mar 16 09:00:54 2026 GMT
Subject: CN=d314ec102d0e6c1a737ecf4a6ebf4dd9e7afda98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:cd:eb:a2:fd:cf:c7:59:00:ec:df:e8:85:
5a:57:f8:76:a5:c4:19:40:e5:c6:d8:3c:9f:05:62:
c0:13:ce:41:53:3b:f8:bc:11:1e:3a:81:4f:aa:95:
11:7a:f5:d7:8e:48:2f:13:af:03:c9:84:38:24:7e:
4f:8b:06:4a:7a:28:61:60:58:6d:2f:6b:f8:e5:59:
f8:9b:26:3a:bf:76:ec:ef:de:da:f2:dc:c1:ec:1a:
51:e7:21:92:ea:b8:e6:83:4f:fb:c8:05:66:3f:28:
03:75:51:9f:2e:71:15:c1:86:ed:fb:16:70:28:5b:
97:18:fe:60:7c:5e:af:fc:16:7c:63:97:d7:3f:0f:
63:11:67:72:97:d7:05:11:9e:d4:79:c2:8a:f2:57:
98:d9:bd:ad:b8:c1:e4:65:74:2c:47:b3:09:ba:bb:
6e:b5:3b:56:aa:58:1a:ef:1b:d8:30:2c:91:f4:9a:
e2:3a:9e:22:80:19:02:4f:fb:23:26:26:61:14:c5:
1d:ea:23:c8:38:a0:b1:2e:f1:5a:ee:ec:48:4f:05:
5c:88:d8:9f:52:14:bd:0e:be:d7:5d:db:02:93:3d:
71:3a:df:4c:0e:10:86:e7:bf:3e:47:96:a1:44:da:
a0:a0:9b:6f:97:f9:8a:bf:e6:03:13:cd:aa:d3:5f:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:14:EC:10:2D:0E:6C:1A:73:7E:CF:4A:6E:BF:4D:D9:E7:AF:DA:98
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ba:d9:f6:85:3f:5b:89:dc:17:aa:e3:be:1a:23:81:b9:ed:
b6:c4:88:21:69:f4:60:a7:fa:c8:81:38:5c:5c:83:3d:00:31:
bf:37:11:da:2b:18:24:f2:d3:60:c8:2b:ea:4e:0f:91:77:85:
65:dd:29:cb:61:01:8e:72:41:be:9c:a7:77:99:3a:21:a6:bb:
4b:df:d8:bf:53:c5:9d:2d:9e:a0:1c:a1:b4:1f:4e:c8:60:9b:
87:69:d8:ee:50:29:b6:55:83:5a:b8:d3:f0:7a:c5:26:00:ba:
43:00:93:b2:94:5f:df:2c:4c:3d:6c:2a:41:25:e7:15:e1:e1:
6c:65:d1:68:35:87:04:a8:08:5d:da:17:ee:41:af:3f:9a:ab:
64:4c:97:6c:db:7f:38:a5:26:65:a8:6b:e4:3b:7b:3b:dd:8f:
75:79:a2:c1:95:cc:f7:4c:3e:ac:a0:c9:67:d1:2d:6d:3e:bc:
70:d5:d8:4b:c3:08:85:4d:92:82:b2:09:6d:32:ac:16:82:df:
56:bc:3f:30:05:ae:1e:74:06:39:e0:c4:9f:b2:fd:a4:ef:7b:
5f:d8:f9:3c:63:9e:89:8b:d4:4e:a7:25:cb:34:3a:cb:11:15:
52:10:17:d0:a1:31:d4:a0:3d:c6:71:d5:16:e1:b3:e1:b3:4d:
eb:e4:3d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 13:41:22 2026 by rpki-client