
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
File: MH9f4nQKK23kw3CdKWQRWzyWfaE.mft (raw, json)
Hash identifier: tuQj5iBlkc/78dBzqbPxZHOPPxpcWZ9bPS2qns+iUM8=
Subject key identifier: 58:B9:24:F3:84:E3:2E:D4:1E:BB:35:82:26:07:7B:16:FF:14:B9:FB
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 019A2252460F6BA20D471B98D84BBE517526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
Manifest number: 17C3
Signing time: Sun 26 Oct 2025 21:00:08 +0000
Manifest this update: Sun 26 Oct 2025 21:00:08 +0000
Manifest next update: Mon 27 Oct 2025 21:00:08 +0000
Files and hashes: 1: 00Mkn4ALhz2_PsYkyEOx1I4Ersw.roa (hash: /nCoLNktQTRkwf19+RkLZm6+K8Um4Om/CE/FhAF+NuE=)
2: 1-COYrNmS4Yj9DuD0Iitd9unCCQQ.roa (hash: JYNBrYFYnRoWLArFqkMLwPLI1r5eBOC15oN7aK1rASQ=)
3: 1-lpBuKXXx8g9yxpi6iuVgN2ZkaU.roa (hash: RgZnA77LWWsGNIxky5OwYiVUFovIqwLxtj+NYBSAZ9M=)
4: 1dc_AoVDsergaSgV7R-3yql_9KE.roa (hash: a9qa0YzuaGBz3jd/Pf5UATBtpu300fCkvirZYtsQepA=)
5: 3WNl-m7gCvquDzEDrkwIQEg6pro.roa (hash: FxKNwejyJuuX0RG0vdRP0TUvJlDOzXxsIbbdxEYJvWM=)
6: 6EnYKRUPOG0Bajz58Rzdix-x9Hs.roa (hash: hj5dsY/14wcoPQMYFN+FDqGIoYmYmbl7lzQUbFpSl9g=)
7: 6FhDGvyiE15m5in3JxEtWm2LQvU.roa (hash: Qb2nBgiw2wjL0NKInr8G6lRKGlTQkFAoRZAC/5y/JJ8=)
8: 7uyz50yy6Hw96HGzOKfD1adh_ck.roa (hash: n4kWCxw/NHUiGeVP5x0IvmrVoASb0wzvbCgftEjfsB8=)
9: 95jWS9jKpRrroELAnGEuEqeiVuk.roa (hash: 9oQPUKrBIIejm5soFm9BOrvY+R8e49uut81KixCREME=)
10: C9rTZ6_iu1FXRg451e341Atg3Z0.roa (hash: XcWEYMD9cUcIh2EC0BBKyyITu1rFp8td9cXo80ANEyQ=)
11: Camuu63_kpRUf6FxMmJ-Ok-oBwc.roa (hash: +iIyFBA3ZhKNuVhyNzUqDLxWmuz7/LHtk6wG8bzNLCw=)
12: Dcl4o4Mo7N0s3M3iAQoKIPl9m2g.roa (hash: SVwXdwnjQoGTLQZCk0CvIrT8UoqR6f7tYRnOAGH0NIA=)
13: EdlEeGF0p-ph_-EZ90A8Cv8g-lo.roa (hash: bxOL6/VDd4hVc81yHqPsVHT8CDLp/qHPAVWZhIxPWDQ=)
14: F4z4cRp1o2-2fDGziBvSnYHbVpM.roa (hash: 2wAWhkLWWqS0rO2Q1Az6KgQGqplVuffj57lG+uTxooM=)
15: H4YuarFLRv2DKAM6083yrFzz9JY.roa (hash: fMRUn4uvKnHkcfGAlHBm1byeQeTo8bCHBsHlwHjMTDA=)
16: JI0eb8S1GNh05B8yRPp4g-MmznE.roa (hash: vofbBr6agtDCq9C2DcAavwwJSfex0/8B3Z91wfqPM6M=)
17: KF8itGoY1xLI5AYmY-m8xyJCd-M.roa (hash: 3x8CCjFbHcFE+DJK2zQRD0PbpgAm7tcfoBUcCbuoWVU=)
18: KSKxvPfPoQ3-9nZ5IaAyZyw0eVA.roa (hash: Ldllwbeq3sVnl6+zDKpnVxt8zPewHEjiNMebEvP4PkM=)
19: MH9f4nQKK23kw3CdKWQRWzyWfaE.crl (hash: Za0WQ7wsnbYvcL12vTZIk7oymolsPz0kn1EBYyq61Eo=)
20: Na5QZvVlGuZQeLfXORY_9aEEYSo.roa (hash: 7zaWEKU6Pa667pchWMlNtONL4EFj3rNY7MR9JwlAuWs=)
21: NfrImU14VyPFoYoWbQqSwcjt0NE.roa (hash: MQdzlW7R+JzkpiS+Sg0oeOl5PeyecnB8iAb1AGvWxuA=)
22: OoYqylkHzmwaVAMQUI6VbW19fUY.roa (hash: GTuWmeM87GVOh1bcDtRCfkyFY8mWiN9eSfyMgGPB+zE=)
23: RYzhujVp6gIBgIh6wj1hAB_7rVc.roa (hash: dxOdcde2n2siUlRnNLCGHKOg3YoidL7qLRsEX5nlICY=)
24: StSv8ki3Hfy1kt0rrrfueNG7XQE.roa (hash: n5KuwRYffa0Ye2MfTHYi4Ou9cVdpBRC7za9HK1Mdc+U=)
25: UpgKqZKDk6DocsIHKTjtNdmcKOA.roa (hash: ks27GBa0bjdMoWqX1B0YBEH3qIWHeKCvjtYKHznBta4=)
26: W1J1-YCCiOxiAdhCBpIGiI6-ens.roa (hash: qQljpaYP6KShT3JCLBM16HPQvI04wWe99FsoBr17EDc=)
27: XZVtjWmGJy5TJN5gkclvuaDTx08.roa (hash: +A3dF//QsJfJLVvgoQOwQfNBd3HuH3X5Enj0ICpyoDU=)
28: Z9ftDVnLuDarY233BHukY7esuz0.roa (hash: 8IP/yjkR/p4P5xW7keZ1mbS3Olm9wSVSpmHnR8UNIxY=)
29: a5vhXTFxFnmVktk1fpfvlo_HM2M.roa (hash: jBANqiVsO0TchdCr8Pw27uhxGmAd9aIES2vzyb+GsNU=)
30: aJaJGtMfWNSQiA_bAEWtiLHd_FQ.roa (hash: K2mPF2eHRJwmWDINxTS4kipEwWDutquLs7wNrJd3zo4=)
31: afF1dxl_LmNwCvwOu-CxTaBAPsE.roa (hash: 2PsecFqYTcXE3Me2mMpOXpuvsS4y86LFqJBD0VQl4Yk=)
32: hIqJAfSnn9KNywKp0QfHCh8jdEs.roa (hash: SVYSpB2PXKZBd+1YFg4Zcu+R5qUNSr3ksyKlguLNrhk=)
33: k4dE6GVK9WXXHG3YD6YqaU59DBE.roa (hash: gfljlL3cqgD/q79IzT5OLmzpfKZUJCewNF1J+kEHTmM=)
34: kTAZ1eq_4NqZeUF8WiyBjLmzzOM.roa (hash: FbN3ktB3aIhk7lj6tCA82i2iYB31YzcLrswYNQRr2fk=)
35: m3-MxjwFGNnDf8jTTqX1e91a7rg.roa (hash: 9iAPPIgHqVmIrbnk1/uNszzl+9R/1IZgQLeSx78jY20=)
36: nPLIjH6A9Mvf1F8HtLDzWb8jIMc.roa (hash: Kkbt3awiC7wXEdfElBvXbg7tTE4YJO5Q0eMabJjQuQ0=)
37: o033YbxU_4pqzhTYeW8KgBTyJFQ.roa (hash: dhvpupNA3tAu+C5YNjmZoQsdlwc5TGF6rdYGFnIKpdI=)
38: ogWtRj9AJ-3VS3wVOcqhrepWr84.roa (hash: z7l4qX9iNc6t/itsLZx/1qV94NBFb0s6x69mJ0YgY6g=)
39: qWfH_VKoWWUUQ8bi1qKxTuV0KIA.roa (hash: x3hukl87lsHfId1sEhc10WEbYF6R3yTOTAtjx/H0dM4=)
40: rXpni-4ALcocOhcZ1QqAO1mIJGA.roa (hash: FRAHJFSzOsHBC4a0opWl+1Gehcqt2UuiLhry14uVIHQ=)
41: wSL45AIT5EJXXFGp5vg6M2DPNCk.roa (hash: 1wb4FcpLDXgZHELKVN0aczuYaHIxl0jPkQS+LI1QUhs=)
42: yMSRSUOaD_I9-_w6JSkVSof-73c.roa (hash: IIoX68dv6Vr/WkUd893+l+Jc8xvnAeBmWPaJowHnKOE=)
43: zfjWVaBt_BelAB4wLgicMa-3gUk.roa (hash: mUXFCeRc2Y4QqbwjvPvmqd3yvXigvxAWleegmSOAAXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:52:46:0f:6b:a2:0d:47:1b:98:d8:4b:be:51:75:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Oct 26 21:00:08 2025 GMT
Not After : Oct 27 21:00:08 2025 GMT
Subject: CN=58b924f384e32ed41ebb358226077b16ff14b9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:10:c5:b0:b7:23:ce:9b:fe:fe:e4:c5:0c:4b:
4e:9c:35:8c:64:d8:79:d2:d7:8a:55:20:d7:20:c5:
c4:e7:40:cc:f8:bf:ac:1f:c5:67:9a:5e:b5:20:03:
c0:4e:ec:b2:e5:1e:eb:76:15:f7:55:0a:9e:c3:97:
92:d5:7e:35:77:a6:45:75:e8:a7:97:9e:ef:df:62:
4c:b6:78:d8:68:20:25:46:37:d0:28:71:54:42:25:
7a:39:55:9d:25:1c:81:a5:ca:f8:46:2d:18:88:cc:
87:6b:8e:ff:9d:bb:87:db:fe:90:f0:3e:a8:15:b2:
6c:35:c6:c7:65:ff:c3:5c:05:a9:dd:fa:22:04:24:
7c:36:51:1d:14:8f:6f:7d:0f:b6:c2:da:d2:73:34:
30:86:2f:99:e0:87:24:e9:2e:6b:63:94:68:ac:27:
00:71:bc:b8:a2:06:8c:c7:5b:d9:e6:cd:e3:05:c3:
c7:2d:b5:64:66:22:e9:bc:59:89:42:90:0c:24:82:
a2:f2:db:10:47:17:40:42:ad:13:0e:d2:88:27:c1:
a8:aa:c0:f5:1c:69:bd:58:94:1e:ec:52:ec:b1:0e:
a2:80:f6:26:b9:77:56:a4:fe:17:2f:ed:db:6c:32:
d5:ad:1b:4a:d0:19:25:2f:45:06:25:f3:cd:b9:39:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B9:24:F3:84:E3:2E:D4:1E:BB:35:82:26:07:7B:16:FF:14:B9:FB
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:70:96:68:8a:86:f3:d7:d6:83:33:38:f9:0f:02:ff:41:4e:
2d:b3:bc:49:fa:a2:c9:a0:30:3c:2f:55:ea:1d:cf:3f:5e:c4:
e3:ed:88:fc:fc:dc:ca:bc:86:96:1d:e3:ae:66:62:de:11:b4:
f0:a9:5f:ca:3a:29:19:d5:8e:07:94:43:fe:66:44:d7:d9:93:
00:89:88:54:f1:7e:9c:1e:b7:d4:fa:21:88:25:ea:2d:02:a5:
7c:af:97:ea:d2:b7:ec:75:a4:90:3f:05:fa:31:c1:98:9e:ec:
91:6c:9e:30:dd:e7:44:17:b2:02:bc:39:15:cd:9e:a8:33:96:
5f:b7:fd:40:e7:fb:ec:d9:63:ca:23:6b:09:1e:0d:5b:07:7a:
26:8c:07:49:31:4d:d2:01:97:ba:9b:98:37:99:1a:bd:99:b7:
de:c4:5c:da:fd:f0:59:81:69:88:7f:f2:bb:0d:aa:24:47:36:
fc:18:fd:4c:be:fa:28:89:dd:31:94:b9:b9:10:a0:66:23:d5:
b1:1c:5c:07:cc:df:2b:4b:53:ea:28:54:f5:a5:cc:04:e5:cd:
aa:8b:c9:d8:d4:ea:4a:21:56:d0:c0:1e:04:be:6a:10:fb:27:
f3:4a:d2:0b:9b:f4:11:d5:dc:30:d5:ab:e2:9d:17:5e:eb:99:
a3:e6:c9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 00:01:25 2025 by rpki-client