
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
File: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft (raw, json)
Hash identifier: IX6emEonRmrmdn8BJf0K3GYPPbopNMZN0vCf1RwxO0s=
Subject key identifier: 42:53:05:F7:EB:B4:33:80:EF:F4:41:9E:87:CC:85:B5:2E:60:A7:98
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 019CE4B62BFFF29C892A0B4EF8AE931BE011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
Manifest number: 1871
Signing time: Fri 13 Mar 2026 01:01:09 +0000
Manifest this update: Fri 13 Mar 2026 01:01:09 +0000
Manifest next update: Sat 14 Mar 2026 01:01:09 +0000
Files and hashes: 1: 67pKVcBP4g1ka7BHnXY8o1GjatI.roa (hash: NHI8d7vH5tjpxPomV3eBVCOa5aQTAvgW0GwAOx6HDCM=)
2: 6oyqxH6fbfCjScGv2qC0XiD5gCU.roa (hash: X2pwG2wmLfB4M+6njFbtbY0lJjAJiNG8E4ePk2t5PZ8=)
3: BG7hZwdKTnkeh7F43mqTspITrC4.roa (hash: 9w3fRT22xu3zZICYpxgXI0CEKv6s/N6rtv0UUVT3l1A=)
4: E3UcI6HbofZm_snwFtZqoqwg5-4.roa (hash: d4QiFFj+amh2JyYpNEFn0n/k8uKNUlkfpX81m7S5ZMs=)
5: FKX17PHtkRiTG0VO4fdkemmP9q0.roa (hash: 46njTd7Whv8oDcKQQcq166dpo8DO+HMFvA14eGT2kvA=)
6: Ig2ees5HLfOePoZmV44oy1ypzFU.roa (hash: Xt9yas6tqq8RhgQUndyXvcQyGrhriLDFS4gSQyBaGSk=)
7: KsuuqZuzWciosvKgFRPXzNp2Gcs.roa (hash: fH9tuqcfvS+JzHyWBgJi96fMfx/uXZQsaH9PlzbW4JY=)
8: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl (hash: P1bnLX1d97O1sDWRJknswQie7zKDh6sS3sAjMmkFyyA=)
9: k0wZqmhMQI1_yKbqeg-OeoA8ghg.roa (hash: okOMVmkk1MoA9VfXhi+YW9SB7pABGOjg3hztcxMcS9k=)
10: nzPG4vwX1IeVP2cSHRY5OFKnn24.roa (hash: OLyA9Gv/rl69xwJleWIyqhvz9X35ZOv/7WlzFp3vKrM=)
11: qOQMcO_XSSMHONHJzrh7779P3jo.roa (hash: ade5av8pqt7Ksv1kVj/c8U/iRecFohg4Rxixd7NnxeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b6:2b:ff:f2:9c:89:2a:0b:4e:f8:ae:93:1b:e0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Mar 13 01:01:09 2026 GMT
Not After : Mar 14 01:01:09 2026 GMT
Subject: CN=425305f7ebb43380eff4419e87cc85b52e60a798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dd:cf:bb:53:ea:49:20:88:f2:64:b5:88:92:
90:69:d6:39:51:c4:a1:17:86:5a:a8:4d:de:8b:96:
12:c2:13:c9:31:b6:20:62:11:0f:91:fd:b1:c7:08:
04:b4:5c:5e:ba:d8:7e:93:05:fb:69:bd:b1:7f:ad:
f2:29:fa:14:4e:82:f5:29:d7:86:c7:8c:1e:42:a0:
44:ce:e6:b0:0a:81:f0:5b:df:c9:46:18:0c:7d:58:
62:40:86:e3:d0:46:30:d8:60:c7:15:49:eb:34:6e:
e2:b1:0f:b3:82:c8:59:1f:9f:1c:01:5f:48:41:52:
15:c3:77:90:41:4f:00:4b:4f:1b:dc:26:01:b9:6c:
a0:23:9b:39:4d:32:38:39:a7:7c:c0:0f:3a:f1:ac:
02:79:93:60:25:6d:fc:d1:e2:f1:2e:0d:ee:c4:68:
f1:b3:3a:2a:d1:a8:0a:32:27:37:06:58:26:37:76:
67:1f:96:a9:65:1e:f3:f3:c8:17:9f:ec:25:21:f2:
bc:3d:7e:61:6c:78:b0:f6:f4:3d:90:3a:47:88:8f:
5f:b3:94:ec:1a:0f:ee:a0:fb:e8:59:0d:cf:ef:b6:
4c:11:46:07:9d:9a:53:da:76:d8:95:34:41:dc:c2:
6b:4a:ba:9f:4a:69:dc:87:03:13:c6:27:cf:24:94:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:53:05:F7:EB:B4:33:80:EF:F4:41:9E:87:CC:85:B5:2E:60:A7:98
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:95:65:c4:31:cb:9d:58:8a:dc:e7:ea:fe:8d:67:a0:d7:cf:
9d:90:39:e5:fc:f3:66:3c:88:4e:66:da:22:8f:d2:f7:5e:64:
00:5d:9e:f1:bb:ee:4a:b1:31:59:e5:be:47:42:b4:47:b8:a0:
a4:c7:e0:f6:2f:15:45:cc:7c:80:b5:5e:f8:5a:e0:90:7e:17:
56:5c:3e:f1:bf:b8:76:53:68:b4:cf:ec:92:e5:5f:7a:c4:10:
c1:8a:94:a0:21:fa:a1:3c:06:43:fc:83:8c:f9:7a:fa:40:90:
3d:a2:81:9e:b8:63:a5:aa:9d:49:e1:9f:db:b7:ad:f7:af:15:
cd:35:c9:90:a9:32:25:ae:37:8c:75:98:70:29:c2:08:9f:fc:
f9:f8:f2:48:b5:70:25:f2:79:bc:1f:13:74:f4:2d:3f:ff:4d:
40:4c:96:ea:8e:ed:af:c8:90:a3:bd:70:fc:f7:f2:3c:6b:c9:
db:f3:89:bf:2c:ca:1a:f6:96:90:9e:4d:96:14:a0:47:7d:bb:
31:dc:b1:97:32:05:13:66:03:26:04:e4:0d:b2:8d:e8:7d:29:
d4:85:cb:b8:5a:7c:48:5f:2d:55:14:fe:9d:de:63:5c:ae:74:
91:5b:0a:ac:ee:f6:7e:08:2b:d3:62:b1:9c:e7:09:c8:38:e7:
57:0e:38:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:07:45 2026 by rpki-client