
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json)
Hash identifier: RDCHOekLyKcpMvjg6OYAlVHJqMmQPL8Xjhpk485+TTo=
Subject key identifier: 5D:BA:F3:45:04:1E:CC:50:D8:22:67:0B:65:06:40:CB:28:C7:6D:B6
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 019DCF759DDF6C5245EE29D457D4133CB6CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
Manifest number: 18FC
Signing time: Mon 27 Apr 2026 15:01:24 +0000
Manifest this update: Mon 27 Apr 2026 15:01:24 +0000
Manifest next update: Tue 28 Apr 2026 15:01:24 +0000
Files and hashes: 1: 1iiQznngAAUoJBg2IRNbTIROLgA.roa (hash: IfOiJ0y8Jxc7SmQONu8fFngEQ795WWF+gFMreRxG3CU=)
2: A5PgGRLn4kXJK7rp7MRelJlQCGs.roa (hash: uoHX6U7FvckkMUmhHzgYs1oGVMNEJnR2TmiJTsJFLvY=)
3: Bzo_VHzhyMxVmlaGb7eDpMOzKNw.roa (hash: faAu0B/ZNdAR9cPNQILlVsqLeHnhVt95YfA/GQi7kCw=)
4: GIo6XBIIGKLKY5fo-2KAJGPCwGY.roa (hash: KkZCoIa9nndDPKaAqxfqTYTtr6XtVmuZC5N9YIEfldg=)
5: MASv_rraqDJSYbqgrPz4hvaUE2c.roa (hash: cVsPoSNgg1jdtpq+zgxbSf3SDxFypt0t/a96jTQx6hE=)
6: NzbIi-FrPomQ6ctOPJJUrBGgm1I.roa (hash: PdBiVtgjdqqfmsvkZMECcdaQfrG9aEwqLBPPRyETYkY=)
7: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: MQSVnh7y+/TAVShHmwgbiu+6ZrWtbNPwRTWhIfcIjQ8=)
8: bzkVBP_m0QOkL7HvzQFXrT5rq10.roa (hash: NzVgHolIVrpawCE7CDio6iuv1mdZYc6KIW6NA0eXBBI=)
9: mYCgzMMLmytKRnOj2evTKXyD7RY.roa (hash: GCTRGWHhVLG1eRed5O+OKJViuXcIBMgxNBXiPDt9Fi0=)
10: mr3eytu19hz9X8102ddOQBMhaCs.roa (hash: rgExvt59Z6M78VouciXS9dA08jr+rMik1ukA2amoJZc=)
11: pUmN_6XpWcEqw-3rUBgKOFddqas.roa (hash: Cn7MMw/oqRiT9o2HCgwnJRlue/qjCZYJ4u8zRlj1ypM=)
12: w-PDKFF3prApvO2JzmgAyow-O5c.roa (hash: yGP/NbSbCcqtvQkL6kf+yxHQ3/xxKzetGY7fqt3Etok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:9d:df:6c:52:45:ee:29:d4:57:d4:13:3c:b6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Apr 27 15:01:24 2026 GMT
Not After : Apr 28 15:01:24 2026 GMT
Subject: CN=5dbaf345041ecc50d822670b650640cb28c76db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:12:f8:d1:61:ba:91:b6:de:46:80:50:55:87:
a5:1e:79:4f:5b:b5:aa:e5:11:eb:07:f9:08:55:95:
4b:22:92:12:bc:82:ba:71:b4:5b:e6:0a:d4:42:01:
f2:90:23:22:7d:a1:52:ed:93:93:81:b4:55:ca:78:
52:45:23:d7:6a:13:32:a1:f0:fc:fc:c2:97:71:81:
66:90:d6:13:e7:e7:fa:b1:59:9c:8b:55:75:9a:c0:
72:b0:ea:fe:db:f5:58:ff:98:d0:00:52:59:15:55:
8a:ac:d8:74:12:b0:5d:2f:33:46:3e:26:30:21:3d:
ee:95:b6:15:dc:d5:73:0f:c0:c6:0b:74:a1:78:2f:
80:6f:0b:f7:86:57:2a:5d:d9:b3:9d:8a:c3:1e:eb:
03:b9:dd:3b:a9:79:b8:ee:bb:d2:cb:cc:e2:17:2a:
6a:51:f4:b8:ba:77:f2:f8:4d:53:67:0d:72:49:bc:
5d:f4:23:fb:9c:48:36:ac:5a:6f:66:6a:88:aa:7f:
eb:51:b9:6f:21:4d:95:d4:aa:49:27:e2:fe:94:22:
e7:08:ab:a3:9b:63:b2:80:03:29:a3:d6:e3:56:f1:
6f:ba:e4:4e:43:b2:d4:d9:19:91:dc:0c:ac:46:7c:
78:48:4a:16:3c:bc:e6:23:45:d2:0b:c7:62:95:e5:
83:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BA:F3:45:04:1E:CC:50:D8:22:67:0B:65:06:40:CB:28:C7:6D:B6
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:48:30:11:1b:9f:2c:a2:59:30:68:87:b2:ca:93:fb:61:6f:
a5:82:b5:74:59:63:e0:d9:e3:98:25:a7:48:56:01:fa:ac:40:
10:d5:00:48:2e:1c:2c:0f:a7:17:e8:d4:b0:63:b8:d5:f2:49:
9f:6d:94:7c:6a:89:61:bc:22:55:bb:9e:de:08:ff:e8:ec:d0:
56:78:bc:2c:ae:6a:f3:72:20:0d:34:ee:9e:57:95:9f:8e:9b:
a8:60:95:9b:e2:72:14:05:68:70:c8:05:61:0d:43:53:87:bd:
c0:8f:89:c0:98:19:cb:db:10:cc:8e:b3:12:f5:ca:24:ca:11:
c5:5c:d2:37:e2:a9:a9:95:ea:5f:de:b5:56:d5:ed:9b:ca:a2:
a6:65:cf:9d:2b:c8:6c:33:01:da:f8:5c:df:98:ff:f2:92:c5:
64:f6:db:ed:ab:d5:05:14:55:1e:38:0c:81:de:d5:00:18:69:
2c:50:8d:12:95:c7:cc:f3:39:e6:37:8f:95:ff:d3:9b:ab:cd:
a4:ef:7e:8f:a0:06:02:40:f2:55:64:e1:07:02:1c:77:18:aa:
24:1f:d8:77:f4:e4:9e:a4:7f:5c:a5:e9:a9:c7:9b:d6:d7:ef:
f1:70:6c:38:a1:b5:a9:22:7a:cc:cc:7c:95:4d:46:1d:1b:b7:
7c:09:d0:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PdZ3fbFJF7inUV9QTPLbKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4
YmUxYmQwHhcNMjYwNDI3MTUwMTI0WhcNMjYwNDI4MTUwMTI0WjAzMTEwLwYDVQQD
Eyg1ZGJhZjM0NTA0MWVjYzUwZDgyMjY3MGI2NTA2NDBjYjI4Yzc2ZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BL40WG6kbbeRoBQVYelHnlPW7Wq
5RHrB/kIVZVLIpISvIK6cbRb5grUQgHykCMifaFS7ZOTgbRVynhSRSPXahMyofD8
/MKXcYFmkNYT5+f6sVmci1V1msBysOr+2/VY/5jQAFJZFVWKrNh0ErBdLzNGPiYw
IT3ulbYV3NVzD8DGC3SheC+Abwv3hlcqXdmznYrDHusDud07qXm47rvSy8ziFypq
UfS4unfy+E1TZw1ySbxd9CP7nEg2rFpvZmqIqn/rUblvIU2V1KpJJ+L+lCLnCKuj
m2OygAMpo9bjVvFvuuROQ7LU2RmR3AysRnx4SEoWPLzmI0XSC8dileWDOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2680UEHsxQ2CJnC2UGQMsox222MB8GA1UdIwQY
MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt
N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm
LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEgwERuf
LKJZMGiHssqT+2FvpYK1dFlj4NnjmCWnSFYB+qxAENUASC4cLA+nF+jUsGO41fJJ
n22UfGqJYbwiVbue3gj/6OzQVni8LK5q83IgDTTunleVn46bqGCVm+JyFAVocMgF
YQ1DU4e9wI+JwJgZy9sQzI6zEvXKJMoRxVzSN+KpqZXqX961VtXtm8qipmXPnSvI
bDMB2vhc35j/8pLFZPbb7avVBRRVHjgMgd7VABhpLFCNEpXHzPM55jePlf/Tm6vN
pO9+j6AGAkDyVWThBwIcdxiqJB/Yd/TknqR/XKXpqceb1tfv8XBsOKG1qSJ6zMx8
lU1GHRu3fAnQYQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:47:28 2026 by rpki-client