
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: fV7dsb1RAsR3utuGCTMOl5Af1pXTxN88XgJOI9qEtAc=
Subject key identifier: D3:18:6A:44:37:60:78:76:08:33:99:6D:35:4E:3E:02:51:FD:67:53
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019DA642A0D90B1F3AAFD83CF437F7D3F04E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 190F
Signing time: Sun 19 Apr 2026 15:01:17 +0000
Manifest this update: Sun 19 Apr 2026 15:01:17 +0000
Manifest next update: Mon 20 Apr 2026 15:01:17 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: CsKlHBJi/t27/fhaONqPL8aiBQzUlmMk75ZjZXqkNq0=)
4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:42:a0:d9:0b:1f:3a:af:d8:3c:f4:37:f7:d3:f0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Apr 19 15:01:17 2026 GMT
Not After : Apr 20 15:01:17 2026 GMT
Subject: CN=d3186a44376078760833996d354e3e0251fd6753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:0b:4e:ea:0c:fa:96:27:65:58:34:7d:3f:
2e:35:9d:f9:14:af:5d:31:35:fd:44:c9:42:8d:85:
32:eb:34:5d:eb:19:2d:16:d5:b9:3d:c5:c1:cd:e9:
c3:26:c9:c6:0e:fc:b3:8a:81:f8:3e:dc:d2:ea:8d:
54:0e:5e:5a:fd:04:00:08:0b:47:de:ed:07:4d:e3:
1a:e9:3e:69:21:ed:d4:6c:ff:3c:6b:c5:9c:ac:9b:
99:a9:02:b9:08:c4:2c:29:4d:d1:2f:a4:5c:9f:7c:
f6:94:36:c1:0a:4b:45:80:f8:db:73:28:49:2b:48:
da:2e:bf:71:02:4f:60:33:e1:4d:df:95:6a:28:19:
bd:85:ee:f3:b5:40:0a:63:73:8c:3d:57:29:92:99:
01:4d:fe:74:9a:05:5f:9d:5f:2a:9e:0e:8a:53:c7:
2e:a0:1a:43:e5:8d:72:49:c6:dd:38:23:57:73:fb:
c9:69:77:4e:f5:18:9b:09:f0:d2:af:28:ef:6d:c7:
81:04:6b:f0:a0:d3:2f:23:6e:d0:52:c6:81:9b:ba:
f5:78:19:bf:31:7f:de:9f:5a:8a:6b:75:e8:da:7e:
e9:ef:7a:9a:a6:af:b6:e1:39:70:25:98:3a:59:ec:
41:7c:16:22:b0:ab:15:0e:c8:ef:9c:d9:ba:93:be:
65:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:18:6A:44:37:60:78:76:08:33:99:6D:35:4E:3E:02:51:FD:67:53
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3f:bf:2e:39:aa:56:57:9c:33:c8:89:b2:14:db:d2:19:89:
c1:d0:73:6c:9b:18:2c:d6:2d:d0:cb:88:a0:c9:0c:6b:6e:ff:
59:d0:a2:4d:3e:ab:41:57:b8:52:65:c7:79:26:7d:fc:3e:82:
48:a7:c1:c8:4a:ef:0b:45:94:c9:1f:64:97:37:8c:83:4e:ff:
4a:3a:1d:3c:49:fe:89:92:ae:50:46:57:2f:12:ff:9a:7a:ca:
6d:a0:81:47:72:4e:43:7c:4d:29:0f:b6:95:15:28:ca:e9:3b:
f4:bf:5f:d9:ad:6e:67:0a:ca:47:3a:64:ef:ee:b5:d6:80:3d:
07:d5:5c:05:2d:b8:95:c5:90:a1:1d:5e:9a:a2:d7:71:f4:be:
11:41:d3:1e:7f:4c:22:c4:12:32:8a:24:8f:57:48:0d:06:f4:
bc:70:b2:76:35:fc:d7:56:fa:c9:8e:94:f0:7d:7d:1d:47:91:
9d:de:13:ec:33:0f:7e:e0:a3:d5:90:95:9a:3a:c6:cd:c2:70:
2c:a1:72:93:2b:c8:bd:da:29:18:22:69:33:ed:59:99:3f:5f:
57:9d:7e:8c:a3:b5:9a:21:3d:39:10:7d:b0:e9:c9:73:5c:f1:
de:26:bf:ce:b4:58:ea:a1:9f:e0:89:ef:6d:30:39:0e:a8:1c:
b1:bf:78:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 00:50:30 2026 by rpki-client