
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft
File: tgdgRQHeNgl2jFunxMypxWth-dU.mft (raw, json)
Hash identifier: mYubSaR+hThu/87DStVeo8mOOBz+G+yvPPpWZsHOEVQ=
Subject key identifier: 90:35:76:32:10:FC:8D:86:39:F3:0B:C8:FB:48:9F:7D:A1:A6:CF:CA
Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5
Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5
Certificate serial: 019CBDDF3000DCF343053FB368FC7781A6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft
Manifest number: 0110
Signing time: Thu 05 Mar 2026 12:00:46 +0000
Manifest this update: Thu 05 Mar 2026 12:00:46 +0000
Manifest next update: Fri 06 Mar 2026 12:00:46 +0000
Files and hashes: 1: 5bgXaKN4hNNnz1DSnp5RelfVjjU.roa (hash: dYGhF0WHwXTYiuMBvgCo0Nh2zgJTOeCE4oHJREko2dE=)
2: 6T1nn_O5VRNDU8iBXnRdEWu-Aa0.roa (hash: GjGIlQY+4mGEDueTUd6aChvkiLsbdqdShxrmkeYWZCE=)
3: 87E4xEnMZKLQ9-adCMFtqO3gxKc.roa (hash: 1s6eBRJk43stGn8sUQskaNANXR+WBZp4/9zkxTmF/w8=)
4: 8s6AG_0JrzjWg4BaNcXSsAEn3Qg.roa (hash: G1f9dVArvUO/qswkLFrkSyJeGmiXCkjeasIS9BOQinY=)
5: BXTPXysSBRPuUoSICW7HfZCr-Dw.roa (hash: +AZDE7fpWxbiq4XsQ/ZUYVAIhS86drQiS4sJ0QHcFJ0=)
6: Nv0Yk6F1P6EmulDV2AnvKDplxCs.roa (hash: Q5u0M56Cc14RBzwK7HGbwu5ZxQ2s50/RHubrsAelkTw=)
7: Uv6m5Ze8bGG3Zo-jWPLZit_cFAU.roa (hash: jJYA/CveQeDzpZWlaXQqIIF2Ui2N++3iqqXHakxy7Dw=)
8: Vx08NQyiV20g8Ga81BIS8rvDmyo.roa (hash: yt3nJJYF4J5PBamsoXkhQ12AqDswJfK8nDygu/ErBYE=)
9: ivPir5hTVZ6-2KvBi__rc2C4xp4.roa (hash: XwUyUM1eJM6QiCA3EZbvx9TyrTpnC6U24WwWURBAOW4=)
10: l1zzaU-q12nJ_8HhmrchfHRCS-0.roa (hash: Zlyw0gSFTXLUc8CDvWYZw2HjLJJb5vGb6M3Zn4aUG2c=)
11: tgdgRQHeNgl2jFunxMypxWth-dU.crl (hash: M5iCUNhUlcjB/y8oIzlav+CaY1MPHqswIaplMcWrFpo=)
12: zGh2HbLQZnyjxYkNHHK5OUHYSzI.roa (hash: L1lyFIExE7ptfYv6B8KltqdYf/AvedX5c7QVNHU4hz0=)
13: zcAeP7CyuYSzvCr5z4QkpSpd_Fo.roa (hash: BZtxwPUla4tLZ+cA+wlMKxMd59rsmlSfQPWZuQ9tMPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:df:30:00:dc:f3:43:05:3f:b3:68:fc:77:81:a6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5
Validity
Not Before: Mar 5 12:00:46 2026 GMT
Not After : Mar 6 12:00:46 2026 GMT
Subject: CN=9035763210fc8d8639f30bc8fb489f7da1a6cfca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:60:fc:45:f4:04:f0:28:6f:4d:34:40:9e:
70:3f:74:18:64:26:e4:04:4b:46:23:85:f2:71:e8:
be:d3:3b:b5:f5:35:92:e7:18:eb:6b:12:8c:ba:66:
fd:67:cf:a1:9c:50:2b:0d:5f:f1:7a:60:af:35:c8:
12:87:9b:0e:3a:72:9e:07:74:2a:29:f2:19:d8:1e:
ef:c5:2e:af:95:68:6f:a7:b0:ab:b4:ef:e4:73:7b:
33:6b:6b:9a:ed:bb:47:17:ee:42:26:21:bd:77:6d:
7b:c3:1b:0e:f7:ad:c0:3e:f0:71:3e:b9:c0:26:04:
bf:ac:53:ab:d6:b3:15:ce:a1:7f:00:a4:1f:fc:a8:
26:5a:01:67:65:96:c6:32:ca:f5:45:ee:7b:b2:b9:
f8:d5:2c:5f:13:e9:e6:13:4a:7b:62:58:ba:16:60:
1d:db:3d:30:bd:c2:0b:ae:1e:f6:13:1f:8b:85:be:
f0:bb:c7:f1:db:ec:6d:5a:ee:92:77:a4:2c:b6:a7:
d3:d5:ba:7f:57:8e:dc:c7:1e:08:35:77:f7:50:04:
6d:8b:b1:b6:ec:ab:f2:17:f3:c2:03:00:75:57:3b:
47:de:79:91:b3:b1:48:2b:b0:ba:90:75:6a:81:30:
7e:46:c2:44:98:2c:1f:d9:a1:41:2a:b5:96:c3:ec:
44:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:35:76:32:10:FC:8D:86:39:F3:0B:C8:FB:48:9F:7D:A1:A6:CF:CA
X509v3 Authority Key Identifier:
keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5b:f2:61:08:b8:8e:42:b1:6e:e4:ff:71:53:9a:ef:9b:75:
fd:81:a4:4c:ad:d7:6a:87:ae:90:ea:29:8b:94:b3:27:f0:72:
0b:d7:f4:d9:b5:53:59:dc:0a:7c:95:53:74:9a:38:38:18:a6:
1d:43:fc:3e:57:02:53:50:ce:eb:b5:70:6f:f5:0c:13:22:63:
6c:de:24:22:54:d4:03:f5:d5:46:e4:75:41:8a:b2:04:f3:fc:
89:96:53:67:41:11:29:8a:bb:84:bd:96:b0:95:46:69:4a:77:
f6:b2:fa:fa:f7:fa:05:f5:f1:1f:1c:f5:e1:72:31:87:c1:da:
18:a3:be:4c:cf:31:f0:d9:9a:17:08:1a:23:2a:82:15:49:fe:
cd:09:ea:8d:c2:a3:d0:a1:97:9b:0e:3f:4d:02:7c:24:0f:d4:
3f:d1:65:02:28:c2:40:7a:e2:ff:6b:07:90:29:36:14:b4:98:
b3:ce:53:82:31:ed:d3:d6:26:60:00:bf:b0:c5:28:f6:23:3d:
99:00:cf:31:96:44:44:01:aa:85:88:40:fe:e0:18:28:31:1a:
ed:93:a1:37:ec:54:41:b3:b8:6e:ce:91:10:ff:86:50:ae:1d:
19:ac:c8:1d:b0:54:3a:b5:5a:60:f8:eb:c4:51:36:85:a6:74:
d2:e0:b3:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy93zAA3PNDBT+zaPx3gabiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2
MWY5ZDUwHhcNMjYwMzA1MTIwMDQ2WhcNMjYwMzA2MTIwMDQ2WjAzMTEwLwYDVQQD
Eyg5MDM1NzYzMjEwZmM4ZDg2MzlmMzBiYzhmYjQ4OWY3ZGExYTZjZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsORg/EX0BPAob000QJ5wP3QYZCbk
BEtGI4Xycei+0zu19TWS5xjraxKMumb9Z8+hnFArDV/xemCvNcgSh5sOOnKeB3Qq
KfIZ2B7vxS6vlWhvp7CrtO/kc3sza2ua7btHF+5CJiG9d217wxsO963APvBxPrnA
JgS/rFOr1rMVzqF/AKQf/KgmWgFnZZbGMsr1Re57srn41SxfE+nmE0p7Yli6FmAd
2z0wvcILrh72Ex+Lhb7wu8fx2+xtWu6Sd6QstqfT1bp/V47cxx4INXf3UARti7G2
7KvyF/PCAwB1VztH3nmRs7FIK7C6kHVqgTB+RsJEmCwf2aFBKrWWw+xEwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJA1djIQ/I2GOfMLyPtIn32hps/KMB8GA1UdIwQY
MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt
YjlkZDUxMDgyNjU1LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1
LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlvyYQi4
jkKxbuT/cVOa75t1/YGkTK3XaoeukOopi5SzJ/ByC9f02bVTWdwKfJVTdJo4OBim
HUP8PlcCU1DO67Vwb/UMEyJjbN4kIlTUA/XVRuR1QYqyBPP8iZZTZ0ERKYq7hL2W
sJVGaUp39rL6+vf6BfXxHxz14XIxh8HaGKO+TM8x8NmaFwgaIyqCFUn+zQnqjcKj
0KGXmw4/TQJ8JA/UP9FlAijCQHri/2sHkCk2FLSYs85TgjHt09YmYAC/sMUo9iM9
mQDPMZZERAGqhYhA/uAYKDEa7ZOhN+xUQbO4bs6REP+GUK4dGazIHbBUOrVaYPjr
xFE2haZ00uCzUQ==
-----END CERTIFICATE-----
Generated at Thu Mar 5 22:03:13 2026 by rpki-client