
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
File: sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft (raw, json)
Hash identifier: oxZIy4tiun0qLzo9LWxLHJ/RglQqJ7rju/1he4jXqeA=
Subject key identifier: 9C:D7:50:86:79:71:E0:3F:6D:E7:5F:39:5C:7F:4D:E6:FF:96:1D:9B
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 01A0822E003C56F613E9CE9A1156B377C3C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
Manifest number: 1ABB
Signing time: Tue 08 Sep 2026 18:00:47 +0000
Manifest this update: Tue 08 Sep 2026 18:00:47 +0000
Manifest next update: Wed 09 Sep 2026 18:00:47 +0000
Files and hashes: 1: 0NoIA4B1o_RwUOm9ByU8OFq-7hk.roa (hash: r1a5OydsBxO6MEl6yChWRAdGUgqH3oCyJLH5bIwTve8=)
2: 0QgAlgZPZqrv19rDzeh3eHUVUjI.roa (hash: /jOhKcUSCUKeMR6n8Ebwwi0KkeTixMIdUhS75UG1AFs=)
3: 0geZMvmwvZ4SsgUxE-raaM8yExg.roa (hash: wGsmWUUx+InKH/pHEB+22Iwd2em8rXE3d7MMVtqDdGg=)
4: 5qOLrCet16wYK8yjm6p9aPX1OW8.roa (hash: aLONT4uYmvdAHS5doL36LjtRsNGUktugfKwJ4Vmavww=)
5: 7gDN7EJRIbXvng7FLvulsEyFNQg.roa (hash: 2ANMwLPHY4Y2iK08k4DZVMBAFMAac+xiJJMzAa6Zd0k=)
6: 88OxeMyclDuCM-XGy1vyZJ0MjVI.roa (hash: NrH1CK+Qlg4Jb0s5eAUMievQdVKIQaKIT+Afju3AdMA=)
7: 8hVYPel1lCj54Itf-JZ0swg4NDU.roa (hash: 8vXpZvSQqRcIJBkv6M0oSSAAy8ttmBeMTFPoznBxM14=)
8: B9eEu8e4yIdtPqrh_iA5W7OUpOQ.roa (hash: 8CVCh5ZQ80XsLZZ+eaWcwJcJBHEenQUirqskEgN4w2A=)
9: BPyJKL2LEjqnxrjcu1EWzSfZjCI.roa (hash: IW2t1m5gIiuXHedBDTfnG+PcIt6emdN2QigirAHjYwY=)
10: CZNr-FwVxvFfoT22yU8bGCzzZ7M.roa (hash: Wzkp2Bw/RSltq5x7qjxHcTSrEnODOhExu4krbiNOdxY=)
11: E5M5U2XEaV0_ZLbju-437p796kM.roa (hash: X6isN7JVdmF8RcBDJcyVYM6jru4rJKHv7tm1TKRBlWo=)
12: ESQzOzeCQdOdNKaSULK_KDS-Vv8.roa (hash: P3UhHzMIrXrW1sYxsrpjcxmtJE+6n7C8qAN8QS4+6hw=)
13: GjZ1JpvrKQS1iLcDNvLVb2T5EBI.roa (hash: d0OoK7akyC1bmNgU+wnwXuN9qnkRWPDQso9AjYii7HI=)
14: H-2qY4a7c8MlesaJzQyd4k8aP5w.roa (hash: zxe6qu6AhRtbkeK3hWiyERWLP3LHCnSy6HKCWXJfa78=)
15: I8Iy4_ziF9l-jO-WdRwMy8_bW0A.roa (hash: mpJX+t/0+wMiXhav0ZYODkUjhmBnFQ5EDp/Bv/DB4Fc=)
16: JP09kOOoDIPck9bP_vL_59ocq9I.roa (hash: y6UcXCGlAhYpDHZzGmM1JK8hUvLWF5EeltfmarDuJwQ=)
17: KTJFQteRCANTvA65MRCPcY6keWI.roa (hash: SJgqnyoA5yppcwIcY4Epl8G3jQ3qaYPyItQmLsqRVO8=)
18: KUICOncS7D3aHrthtZYJyWJb3so.roa (hash: Z4YgeJXr9hd8vt3s+AhagMsktbm/uNe90ZBrA2ghNV4=)
19: KqoK91yGuY-2JxPeicjszywFvF8.roa (hash: HMKR8L6Cvd/XsjM4WH7lB5hoYsp4gB00NoNY7QUAD3A=)
20: RGqCvj9uTQazu4yVrY0uHX8imBc.roa (hash: xBw16ZaoKz3+2dPg6gUCa4pN1RDhHcc1C4AmW+IOCt0=)
21: Tx4nNjRtwFbSFmUyNe0g3ERtKlw.roa (hash: kCLOm6CnSZXutMZvLsHNUNkxlqUEdGOIfaDrL0BbKRI=)
22: UhGW6dl-ME2u7P68oZQR4ngjVTM.roa (hash: yHH1bOJVbDxIUnOJRWdM16USF7uKpZsUS8QEK6mDBRM=)
23: XFwhkREkiCuis-x8G3Sppv-Bqow.roa (hash: OLOGsI2X7RE16wC+U4hSm6vZWwQ0fXQvkhO0lzPvMig=)
24: bUpsiGX-aGb34WbdNOIw9DZiH4s.roa (hash: xl03C5kmFTt0TLdmB8hxX8SxfLM5FDJ9iWqRX+kYeCg=)
25: ficnaqwZz9Eh17Tv92zrRP5UQnc.roa (hash: 3WSz2U210ojYNjYboRvj8jx8Z0W1JYVkUfqakNPoQvo=)
26: gB1pX4BxgfU_EYAITWsbI-n7JYM.roa (hash: 9HJZFE7Q9DE0uz+hhoDcpQ1v4qVPN4Dd5bNQtWv7Amk=)
27: h-DVLaLD3fOk7-r7yygvP-7G82w.roa (hash: bSqucFKTvyfgzaeGNnQuczPNKsSuEyi+XX78lRREfAM=)
28: hTPkcwELxJZyDnpp_4uPjK6uTWk.roa (hash: dstDHLyzAWv51zrNJrSqvTpN7X8CLl+/BjDhR+EfQtQ=)
29: imYPU-rTgiLBfbGJuTyuhX4TUZQ.roa (hash: 6orNc0rnhJILmpahuHtYwHjk8ytv9c4LqO9tdEs0kIU=)
30: jlEQqU8_vmkBR6hGRkj_btgUHEU.roa (hash: oUDpi5fHOC9AehxlR0Gt+x3Ku/0yIOWr5eUkAw2h5UA=)
31: kNXSQnW7_P8ntSSXDnxRMraKaXM.roa (hash: +oQBr9RLzJ3lq6HjViqWYy3YdmDFC0LINq7kQQBGd/A=)
32: opvih5xxd1A3a7secRqTbCxccI4.roa (hash: JJj7osBgzvQYD1FDJBv3PuuwK/WNsWoujvTBrwDuoEU=)
33: rOXSxFVdlGz4p5dzWag5xGv4b-s.roa (hash: PVmZOOJojEPRoDhr9z8ZMA/VoX6FKNqWidv30DvvQcA=)
34: s4NM_hszI3NHoc-KUiwIxLtS-BE.roa (hash: hggXHUncC0nQtN6/Yxfqom6znMWdj3u4WYY/vXLUvws=)
35: sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl (hash: l9SXgDyzRMb3mlzB4oWZy3gqm8nuCsHPtu/hXYvXSuo=)
36: sZNRmX5-TWMqt6EpnEWQ2z3JLLw.roa (hash: vs+YC5ijta6AkuKsZWovwWmRuOBXgPOrn33z33jIpW8=)
37: tE6zrDYdj3KiYaKvZZw-m5wUUEw.roa (hash: pkquP667+a+Kvcmf+y2tDteV7M1Wm88bqo9mUrnbncY=)
38: uBzvm71VAJIjS9oXOzzgbdAbwTQ.roa (hash: Km5VRE7tBd96n2M5uc47Oim9JP4lJW6hKMdElqTzBXs=)
39: uYot5tEJfj6hFOwNQEImMW--BM0.roa (hash: ecbB/eDwUVf9YE82kPBIYgrYl7TjhzTaHG92py1d/js=)
40: uayznK7Xi1PmLEKqmmhtj-vOYjA.roa (hash: x1gn7thHOYGkGoiVnRfnkNxllHObo5dXi6/secIcsj4=)
41: vWRrWwtAN_AuXjapNHLwhv1SIBo.roa (hash: fe7bV4O9Sg+YHMh3WE3GIDnP0xzL2AGZaC/cvFRSiHw=)
42: xAqWyuVJfTBU5sO6tZYwZQPSFtM.roa (hash: MWM191D6m++4D2OGJ0Gjx6X+AoLdVo9Xw0WCymZXSQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:2e:00:3c:56:f6:13:e9:ce:9a:11:56:b3:77:c3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Sep 8 18:00:47 2026 GMT
Not After : Sep 9 18:00:47 2026 GMT
Subject: CN=9cd750867971e03f6de75f395c7f4de6ff961d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:77:e4:35:09:ce:fc:2c:7d:4f:b1:e2:f0:fe:
65:50:65:ce:c8:0a:57:e4:3d:5c:e9:16:2a:58:34:
11:2e:b4:11:7b:42:af:4d:a1:0f:e4:36:92:3f:46:
db:53:e4:89:a8:7d:8e:55:47:bd:e0:ec:55:8f:68:
83:6b:c2:95:27:95:4d:3c:68:99:1c:dd:59:70:3a:
32:44:58:8f:b4:7f:97:e8:e3:37:12:b4:93:26:dd:
51:2b:2c:bf:d3:91:fb:f4:e9:96:0f:1b:bd:37:80:
5a:d5:d4:f5:c7:60:3e:e7:e2:88:f9:bb:a3:28:6d:
06:72:4e:74:6a:f2:39:b3:6c:5e:66:c2:90:be:25:
9d:f7:58:fd:46:06:7a:74:35:bb:46:85:ec:5d:f2:
00:2c:ff:e9:7c:b0:84:45:20:85:06:6e:cf:c8:96:
7c:47:51:22:f6:b4:86:9e:3a:45:fc:44:56:30:81:
87:e0:65:c4:54:c4:73:b1:ee:41:f2:fc:01:90:68:
31:a5:7b:48:ff:d9:80:cb:48:66:80:c0:6e:3c:69:
92:1b:fb:e5:74:1d:b3:6f:33:da:f7:3e:89:48:e4:
51:3a:dc:43:d0:6b:f7:2a:a3:bc:72:da:92:7f:e4:
a9:1a:cf:fc:bb:17:02:1e:dc:71:a5:60:f9:f1:01:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D7:50:86:79:71:E0:3F:6D:E7:5F:39:5C:7F:4D:E6:FF:96:1D:9B
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c3:9c:cd:26:ef:ee:ad:99:0c:49:1b:54:52:d5:52:d6:3d:
04:55:a0:eb:b9:f4:28:8d:31:b1:eb:86:cb:a6:99:bd:e0:4a:
42:ec:35:78:8e:16:32:67:a2:56:6b:59:1d:66:65:6e:b6:c3:
89:81:bd:d0:74:77:25:d4:be:0b:b2:7b:39:dc:e9:86:b9:1a:
93:cd:87:e2:b6:13:07:be:8b:c5:8b:d1:10:34:a4:68:01:a6:
c9:98:09:2e:80:08:42:36:61:16:13:d2:62:d3:46:f0:5d:88:
2b:f9:42:b9:ca:dd:2b:5e:c6:3a:99:43:ca:46:6c:75:56:24:
ca:e7:2d:66:4d:3d:02:5b:f0:44:50:01:26:84:a8:ab:b8:30:
d9:9d:0b:22:fc:88:62:cc:de:25:80:33:9f:59:0c:11:1b:5c:
ad:e3:7f:f8:d6:4a:51:e7:1e:00:73:86:87:55:ce:ad:63:be:
04:06:1b:35:88:0f:a8:6b:be:2a:a0:2f:02:37:75:ab:00:fc:
94:4e:bb:00:f6:6a:41:c2:ae:bc:aa:b7:d1:6c:ce:76:74:77:
bd:71:63:e7:49:4d:9c:79:bc:f1:e3:f3:94:eb:9b:5e:33:bf:
74:5d:0b:b4:a7:3e:61:79:6e:83:c8:83:6a:8d:2c:ca:1c:cf:
5b:07:a1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 04:45:16 2026 by rpki-client