
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json)
Hash identifier: BA29zGbMcasTwrqpFdayC6Mo4VN3W1JZ72tPBGlPxf8=
Subject key identifier: 1D:A2:06:87:36:1E:1A:43:88:51:CC:EA:F5:79:39:10:FC:2B:6C:6A
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 019CE146A994E9ECDAD27629E0E2A8FE6301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
Manifest number: 1440
Signing time: Thu 12 Mar 2026 09:00:30 +0000
Manifest this update: Thu 12 Mar 2026 09:00:30 +0000
Manifest next update: Fri 13 Mar 2026 09:00:30 +0000
Files and hashes: 1: 0hcq4PZX-1xxmrjFSYjLo3wgxq8.roa (hash: fBvZPJmlkoGB3cHe8R1wzHuEiD2O7hJFr9Ij0HVMY1c=)
2: 4uhQK-ahMU-b686CpY3ebuHDcxA.roa (hash: jPmzy29N69ytvo0+nxFYwzpNOf0HZh68Epxb4V5zrHQ=)
3: 9JMNSgr9GTZCq7ECk8aWcWWpSWc.roa (hash: ZYWDq0P6qMgiPXizLcgupz8/qvO2gFU/jwxMaGxycaw=)
4: AygaSJoY4X-N8pcfdiWT-0OzTH0.roa (hash: GpuGRR+uDCRH0KzkkUeOxZxQXmqHI/G6tCUG41o6giA=)
5: Gz0_KsyuxF_Mtua-1HhemOuZcQg.roa (hash: IbzaI7YpmiRgkQae6jLRwhProyJ2PzVbvEcbQ3Zj2TA=)
6: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: oYpvxiP5WCyWnHNEPXbxy8IIJ3rHYIT7tHT2ZkZKmi4=)
7: ONFJ7LphZxOGZ2K2zbv66AhtweY.roa (hash: DDngO20oZwmh9SFw7vnZ3c/5+t8eB0azTMW7fa0PcqY=)
8: _og34UxL66HAf1x6tJdapHB1KD4.roa (hash: MIlbN2zWAQQHEFQMrsU48v1H/MqxZJmHAhuOJZrCJMw=)
9: gZE3Te4FZ7-Lp4GEJQvQEkwqiDA.roa (hash: r4RCM40eYHCKKFN/sAxepQztxTn6V46H7fRE/7G8fQU=)
10: lwmtxoWx5clkivlnh1Kh10qANc8.roa (hash: aox9Sa8RSdnqNanp7vV3UK2GlMEf/ITdwIirj370CTo=)
11: pUjgfHpSLJEroItVeYdePetGeno.roa (hash: 3GHGFzGCi0a87nJzoUGj4P1u3SwU6ateFJ0oPnoaNEM=)
12: ygZyjuYzflVbHgfVvcHOxvuu0E4.roa (hash: IH0YWQaBGEjd+Nsl8K72F6uJWsgW3OOY75p4PPRBdZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:46:a9:94:e9:ec:da:d2:76:29:e0:e2:a8:fe:63:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Mar 12 09:00:30 2026 GMT
Not After : Mar 13 09:00:30 2026 GMT
Subject: CN=1da20687361e1a438851cceaf5793910fc2b6c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:1c:b9:1e:4a:f6:28:38:e2:d2:ac:00:84:
7f:ff:c1:a9:a1:3c:d8:de:d6:d4:07:e4:cf:c8:05:
ac:6b:16:8a:82:ee:d4:d3:34:10:68:aa:18:d6:34:
51:7c:1c:26:68:65:26:6f:87:57:0a:d0:f1:c7:24:
e5:b9:61:c4:88:35:ef:ad:59:c6:f8:2a:f9:f1:c5:
72:8c:fc:89:9d:87:64:cf:2a:fd:8c:25:a0:21:b6:
ed:90:e6:19:ce:07:14:2a:8d:c6:73:eb:9b:b6:4c:
fb:90:48:25:80:5e:92:15:0e:27:f5:2d:c8:55:94:
ee:0e:11:f4:bc:61:70:97:63:96:c1:a4:79:bc:70:
11:5e:00:e6:fc:6b:da:d5:1c:91:bc:4b:3f:ff:8a:
2a:e8:7a:e9:86:8f:d0:3c:f3:fd:fb:6f:7c:90:c7:
48:67:76:e2:98:a8:13:e1:4d:08:52:54:da:ec:79:
07:70:94:bd:41:3b:1b:53:3e:d1:6f:28:42:43:55:
42:c5:98:e2:56:dd:46:80:a6:54:5b:72:6a:9f:8d:
59:62:6c:df:f9:27:8d:69:22:b6:c9:78:e0:59:47:
aa:e6:5f:d7:8f:74:23:25:c7:4a:c2:6b:33:b1:f3:
2d:b3:0b:a4:e8:da:50:ca:bf:87:8c:ae:1e:1a:a1:
1c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A2:06:87:36:1E:1A:43:88:51:CC:EA:F5:79:39:10:FC:2B:6C:6A
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:94:b4:10:5f:62:91:7a:6a:af:45:d4:30:a8:30:ee:d6:7d:
86:a6:f4:e5:4c:4f:5f:da:12:7b:cd:74:06:ae:4d:52:a0:e6:
fa:8a:de:04:59:38:ea:ba:9b:09:4e:76:08:72:df:99:35:ef:
24:21:0a:92:76:4d:0c:c6:73:54:e8:5f:46:f7:87:29:6d:19:
e3:42:af:74:eb:64:68:98:e6:08:c4:1b:9b:fc:9c:3d:64:99:
b9:36:aa:c0:ff:42:6e:3a:ee:b8:f5:d9:5b:09:be:a6:a4:a8:
bd:81:be:82:87:f4:68:b4:6c:6c:44:6f:d4:80:15:3a:70:45:
a9:18:b9:26:0c:75:d4:02:53:52:05:4a:9c:d7:82:42:5e:1a:
6b:5b:45:6f:ce:7a:2b:b9:36:8e:ad:a7:13:ea:c1:9d:f4:43:
2e:0d:d7:aa:0a:e2:58:06:68:4a:fd:b7:2a:06:79:04:dd:3a:
87:eb:58:c7:27:ba:62:8e:a3:90:05:97:38:19:60:6d:72:21:
ed:87:9a:bb:9f:f7:ee:f3:95:d5:d3:d6:54:ec:1a:89:70:9a:
a9:7a:03:f2:4f:f4:ff:ee:9b:cf:eb:a8:7d:6b:63:ab:05:23:
86:4a:27:f4:98:e7:1b:bb:1c:93:a8:99:62:c1:80:42:01:c4:
b3:e5:a5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 11:02:00 2026 by rpki-client