
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: +vbNmV0OrmlKJgJuoyTGG45LNqLbAdtjIt7McCFa20w=
Subject key identifier: 67:EF:76:EB:ED:9A:E9:02:2E:A8:99:4C:02:58:30:35:97:2D:0C:FB
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019DC717124E5E9FB441C665D5C146237A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 1920
Signing time: Sun 26 Apr 2026 00:01:11 +0000
Manifest this update: Sun 26 Apr 2026 00:01:11 +0000
Manifest next update: Mon 27 Apr 2026 00:01:11 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: h6NNNZ0UKKz8G8EQcbEfGeU0CnLV3Sj9UBKNrsn1RKE=)
4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Apr 2026 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c7:17:12:4e:5e:9f:b4:41:c6:65:d5:c1:46:23:7a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Apr 26 00:01:11 2026 GMT
Not After : Apr 27 00:01:11 2026 GMT
Subject: CN=67ef76ebed9ae9022ea8994c02583035972d0cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:2e:db:6b:ff:85:f3:5c:89:c7:e9:f7:4a:
d7:cb:a4:bf:da:26:42:77:81:b5:68:02:81:9b:31:
31:7b:aa:15:ed:78:78:8e:4f:d2:be:66:4b:18:a0:
ec:37:2e:02:1b:16:cb:f3:99:6f:f8:b8:94:9f:7d:
9b:7f:37:e9:b1:90:ae:b2:7a:61:24:45:ca:48:da:
17:f4:d8:a4:51:bb:cc:6a:79:5b:1c:17:d7:9e:f2:
5e:b7:6e:ef:2a:d3:f0:06:f3:1b:dc:a6:13:cd:30:
58:91:38:a2:b8:1e:53:38:c8:ba:66:8c:be:44:fb:
12:58:de:9f:d2:a7:e3:69:fb:93:ad:2f:a0:48:62:
b0:b6:67:61:10:f7:92:b5:72:2c:c0:5e:56:ed:b4:
86:1d:d1:e9:7a:4d:71:b2:a4:91:61:eb:d1:20:ec:
a3:00:a0:7c:7e:4c:2a:26:c8:12:d5:36:1f:21:50:
f1:fc:17:e4:a4:9a:7e:df:58:c0:03:87:a9:55:76:
36:16:56:6e:76:70:c8:ea:03:d2:41:b9:6a:b9:ec:
de:df:05:1a:95:8c:59:b5:f9:fb:e7:08:75:6f:55:
10:e8:c2:c8:95:e0:14:34:fb:3b:f0:cc:08:a4:33:
e1:dd:f1:54:36:f0:62:bb:36:94:1f:20:35:08:1e:
a1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EF:76:EB:ED:9A:E9:02:2E:A8:99:4C:02:58:30:35:97:2D:0C:FB
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c5:9e:d7:bf:32:6b:a6:fa:44:7d:f5:7e:7b:ae:a4:3e:6c:
83:2c:b8:68:2b:0b:24:13:3c:f6:21:9d:29:1b:f6:5a:5d:21:
1e:28:22:2c:e2:05:e8:81:db:d4:7d:ac:d4:32:a3:fc:2b:ec:
76:81:a2:55:09:3e:09:46:e4:c6:c8:97:96:df:b9:ff:da:0b:
25:9d:db:98:8d:ad:70:73:af:50:31:dc:0a:95:18:8a:40:15:
a3:b1:cf:b7:02:3b:c2:86:ef:b6:59:eb:da:91:f3:c6:76:2f:
35:67:f1:5d:6c:98:cb:09:c2:8b:6a:6d:86:a7:6f:da:fe:47:
10:5f:05:4b:5f:65:2c:0b:f8:3e:12:05:c8:61:d4:fa:01:21:
12:c1:54:fd:75:17:72:4b:29:c9:a3:ed:cf:87:c6:e8:50:50:
8f:6a:40:cf:d4:aa:9f:06:df:45:19:27:2d:8e:4f:05:bf:c4:
91:00:18:20:80:ca:ca:ba:e8:38:92:80:32:51:b8:ad:82:38:
da:8f:0d:18:95:78:e6:b4:1d:5e:f0:18:81:b1:db:ce:a9:27:
4d:93:c8:52:2d:1a:2f:1a:da:10:97:a6:2a:9f:68:06:ff:3a:
6d:d5:70:a7:a9:ea:b0:59:6e:3b:2b:0e:27:43:d0:d7:a7:28:
9c:c7:27:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 26 06:55:19 2026 by rpki-client