
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
File: k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json)
Hash identifier: gd2oLwLcpZTu1amjpiYQknC3xP1TJZd+e/IHgra/hc8=
Subject key identifier: F7:A3:60:1E:01:D1:52:8E:A0:B4:6E:01:F2:E5:D3:55:21:3D:C9:CC
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 019CEC01E2DBFFA5BEB9DD1479E5E358C67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
Manifest number: 193B
Signing time: Sat 14 Mar 2026 11:01:12 +0000
Manifest this update: Sat 14 Mar 2026 11:01:12 +0000
Manifest next update: Sun 15 Mar 2026 11:01:12 +0000
Files and hashes: 1: 09U_5477hiaEijiQMLjVjpqJmg8.roa (hash: yMPG61P25HSZAK63L04QqxwUcW3YlOvOIox2xnqiee4=)
2: 1-ZdPMcjvQDwjz87axUV9KCm36k0.roa (hash: TeKd+yra8tZ6iaKrm5ZW/lYfbS4XH/DTQXyvhbbMSjU=)
3: 12J5auJGnMEfTUqZqs0Y3krx_EA.roa (hash: gz3Tmv3Kd/VmlXrt56re7837jRA+HGbjJtx1pqOJ4L8=)
4: 1GFAtlcUlaf60DpxTvgEzaWM7tE.roa (hash: dykia7zXWwpqogUCseZJgA+Bn3OQBUTsK2CryV1n4C4=)
5: 1H2LBwxOS6ZK7kP0bHuOOjYLFXM.roa (hash: lM8jCRUWD5XjSKSKG5x5Vcw7snm2M+L123CpHLdB1I8=)
6: 4GX1Ni9yLaCvTEGIQlZsxLHRTos.roa (hash: T211nr5nONytfyxD2+OF8RONzopw0czC1ekAAyc52II=)
7: BVNGTt8uEfptl8LHqCuP3kOpdcg.roa (hash: WOkCvrVCojpbDJ9AWqXg096xx3M+xHQMny/jk9IrI1w=)
8: Bc1DSexhRBiZBQOgVQAlTdkhX3Q.roa (hash: 7kPReetcAngcOP4ru2IMcnS7I8gBGxc6kgxVJ3yYfMM=)
9: EfsJnQ3fWNGuLHN2Qj7lFcxFPDY.roa (hash: fRjDXyYWBIV0igVEoIZnUlJBKpIyjajsg/tbcl1aWrc=)
10: GI33crLs1YhbryhcezjNjDVjS1g.roa (hash: KA1gXvMpl17ErTAeepPr4wN+L34jC9m0lf4C1BjqtxU=)
11: HknmMTuhAYntuaPmJU-hL30K1OU.roa (hash: xo2ci6AUqJlHuEbTAtg/Zs/u5qObc3gQe3SW3qvrxvg=)
12: KTSZoqFeca-_Q6n1KMEhLLL8dWA.roa (hash: o1/RiBn3II/bJglE4RL5UD9dzxw8QVEjbH+MNAs/ja0=)
13: LPg31pzkTWkBFd5VkhWAhJYXkUg.roa (hash: sZITIveFCEPkBNgiGaf17e1IWr92FHLNfIQ4l6MrRt4=)
14: MBWbo0gJNUF21y9_s0U9-L-gg-w.roa (hash: KJBcJ0bJ4ljItOEBSZKOlZMC7qCSi0K3VjmcYAZx/Kw=)
15: NkrF-O5v7s9V8zsG8ziIKUJW3zk.roa (hash: 2LcYAm16dFHvjzNIaAwM1NGSLS+Z5iohtj1HatvcojI=)
16: NmJmwlutv_IvFi3e_LxUKjazcWo.roa (hash: AOpRXCzEN8lkNPZMkSOpIJal5kxV1r16xrm4BY0TiAY=)
17: PR0BE2bcAqdH-QpKc10VO9s_9Ys.roa (hash: 3ymRfYxNTHdzgs2oZ2sd1ciZ1rijeOdKeNaxvj0p7lc=)
18: PcRlmmm4vwJ0aAWANQfoJLu8JlM.roa (hash: r2sdqFxswUapxKmUKjgKowQrusIzAAN8c0IuaYf5OZA=)
19: Q2QENuhPgsVbgwNPIY4HpL4Yl6s.roa (hash: 2GKn2PAieyHRa/TsYWX239kz98GUSYpRBaKi2ST0IME=)
20: XdUMhvG9oQPrrKzfUCLk3WwhmTk.roa (hash: Fdb4wKKqvaQQ76cnrCYhan8GU6QyggYtFJ+x0hn2N1g=)
21: d-T7NIGaWpT2DLlBqllIl5AUmls.roa (hash: yfHg6m67OQDNEJ1EP+mfmTlQNfHXyZHnJwh2okmA5Gw=)
22: doXoLHTiktReTfBMpV7aaxzN6w4.roa (hash: u65ppJ58k3Ix5VH9in1iUfkowYq8lbUh/JWax+/tYoM=)
23: ffYq-L6IF5A1eEt-6kmXeqiLTEg.roa (hash: V/c7nnmIxq7wGT+zNqjDEgAFjLwZAHkQ5tJpi+FOxXA=)
24: g2vfqgEzdRfPfaQ54TL9IaZRWX8.roa (hash: Jfx5wikYLOlvElqE/kSmJvHZBwL/6aUVzQP/HGEVTDg=)
25: g7nwBeOxQca4p1gJmlcvZTQkau0.roa (hash: FavQ6CRQcjKgIrZXgYVi+d4cOktZxZM6dThhUqCqkNs=)
26: iVQy5SoSM4zkBUfQGE_Ln3tM0tE.roa (hash: u0/p39IWrD8QpSLa+CIZwp7Qq2RGh/gjiOP2gVYoORQ=)
27: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: qsgmixjyYwhKn75ZeidGZKGuxLRxAgK1NLa1/WRVQCk=)
28: kO28vN71hMLo6EWqWOHMnUbNINw.roa (hash: yrx+6WC9+Fc0jDkatpgg+fkV9j7jDjcj9lkqM+sgnA0=)
29: l7Roa3smZDJ-vTeHH3psSnXeo-A.roa (hash: kcERe/PNUx80u10ZpY891WUn5xBSVUP+AKxB0Aofgu8=)
30: lTWEkgJKELlSipjMtxAwhYWB7pA.roa (hash: J6isN9PWN65bgatPG4qkpJ6/vf7Bogjcg3QwVkpblQA=)
31: mLoML0jRjU9a2uYSxG0FhUvSMSY.roa (hash: LR5WVjHhKIdgC9ju1n2sYaLSUk17/p/X6vMLPIfVGlw=)
32: mjbnqLotBlCBkSiQuDYF8zPGRF0.roa (hash: EmvUyDRTMJpdJSvKaF1pisS1peYvcacBGirsGuT1bNg=)
33: nDwfIo5saGj88LUS8elZ2qwUrSQ.roa (hash: ooowu32q8bCUvHLcrXAQSaLMBllvF3r6TgZWOqyoYoE=)
34: q1bz7lipoEEvzR36Y8eq26tIMF0.roa (hash: FPqu+aTHRlxWMSNZDCq3DHl+OclP1ZhNEHEfxgak6Pg=)
35: qeMEQq5mjVyLDKGOkTIG-4qgJh4.roa (hash: JB0yLutFPlTAHm0qtRBdGmzvyjdgQXRn5jXVkQE0VpI=)
36: sKmeiayA9VEeFneHBogrVXd9Dz8.roa (hash: gixYXs8OW9/FjuOE8LqMnrageVpFQza4LwILa+VJgTM=)
37: sZCbewzNcJjTBjxem97hWYKvmvk.roa (hash: pBXuND0hdHjfR+PuCizv3EBh1tny6KBYU3iXmqWVtnY=)
38: t-vB5k9vNf95Sy02gmlc7kzthBM.roa (hash: OrKjBBR94ybF7MkPb+Et2zFHVo5BlytZWpThhYDz7qI=)
39: uNtHRxaxwBw6gSyUZCs4yT-j2xk.roa (hash: A7D9AWZnklXMj/BsUu0p3Vm6yBi0gldhQ+2LodCAbRg=)
40: uWLj6KIkJnGYRGP8Fno-15j4tn8.roa (hash: iGfMEOesyUW+HTUiwzS3P+I+yEqpwW76TFwMDJIhgIU=)
41: vHv3grLhsL3LXc-xD1rnHznkiNc.roa (hash: 1B8P3zbfNsnRQ4BM3TGB8f+ii6bodRHadKkmAMlajpE=)
42: yZpAfpKE-GitpdSlHfBT_ZU3XFY.roa (hash: lGR73TawMx4j8TSEDhTCJjGn0TUFsHE7aBJ2N1mIm20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:01:e2:db:ff:a5:be:b9:dd:14:79:e5:e3:58:c6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Mar 14 11:01:12 2026 GMT
Not After : Mar 15 11:01:12 2026 GMT
Subject: CN=f7a3601e01d1528ea0b46e01f2e5d355213dc9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:42:5d:14:71:88:61:06:af:37:7c:f0:44:
dc:f8:4c:08:72:b4:a7:98:0e:d8:c0:e0:6f:82:3a:
d5:92:33:2f:5c:14:c7:0e:a3:5b:a2:84:20:0c:39:
d3:46:ce:5f:b2:08:da:61:96:bf:ce:c2:cc:be:dd:
07:56:40:72:e4:96:e3:56:d1:8d:0a:4f:54:ae:27:
ba:e2:d4:bf:1a:df:25:74:68:14:c9:1a:49:e8:a2:
67:b7:e6:f4:d8:9f:8b:e4:1c:ee:00:ba:09:8e:0d:
e3:a6:f8:18:aa:b4:8a:ae:94:6c:4d:e4:c4:ea:24:
1b:b8:31:d6:ca:d8:11:1e:a4:04:b1:d0:8e:b6:ae:
ae:de:6d:ce:bc:d2:20:5b:b7:f9:91:2c:df:a3:17:
72:b1:5c:0f:5b:89:fb:f3:51:44:e4:43:58:14:df:
68:51:45:83:b3:bd:a2:ac:56:8b:f4:3e:8a:ef:8b:
92:c7:16:24:e9:70:33:14:df:3f:a9:89:5e:f4:72:
2c:36:ed:23:90:66:61:59:9e:71:48:b9:7f:b5:76:
d5:a3:dd:c2:f1:82:8c:81:3b:a9:16:a0:2c:95:5c:
33:d8:88:d4:83:2d:f0:03:1a:f8:41:1d:78:e5:06:
f3:7b:25:eb:aa:e7:1d:ee:02:18:f6:e3:46:69:e9:
ac:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A3:60:1E:01:D1:52:8E:A0:B4:6E:01:F2:E5:D3:55:21:3D:C9:CC
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:38:77:e0:a5:52:71:95:a4:31:d1:92:f3:8e:1e:bd:37:ce:
25:bd:f3:8a:ca:43:33:72:c9:5b:5f:e1:fd:c8:64:ee:47:dd:
eb:5a:28:eb:b4:9d:7d:a4:7e:06:9b:27:46:d4:32:6f:83:cb:
0e:06:49:e0:b9:1b:14:66:60:b5:22:b4:58:37:af:15:ed:82:
d3:66:90:c8:1a:05:02:45:47:0d:af:3d:1b:30:ae:6d:b2:6c:
c0:29:88:e9:6f:68:f6:90:5b:07:e1:70:a5:59:18:cf:32:2a:
bc:e3:9d:7b:50:c9:b6:60:10:9c:cf:85:ce:e8:69:ba:f5:6a:
93:d8:71:e1:4b:ea:82:3a:98:3f:d4:d3:cf:ce:e9:b9:36:88:
9c:37:76:69:fe:99:fc:be:9e:62:55:a9:35:1c:93:cf:43:e1:
fa:96:ce:9b:08:88:91:e2:ad:ec:4f:92:d4:9b:ac:ac:7d:75:
6d:f9:5a:cb:e0:ae:2c:ef:dc:8d:82:f2:ed:f5:e4:5b:0f:91:
cb:02:2d:6f:ce:13:49:3e:92:b0:e1:a0:03:b0:3f:e9:9c:c9:
4b:37:18:a6:ed:91:6d:dc:30:ef:fd:83:e1:09:b4:1f:3d:59:
99:e2:ad:f4:bd:36:bd:84:45:83:27:26:07:98:51:cd:61:ea:
ca:81:17:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzsAeLb/6W+ud0UeeXjWMZ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjYwMzE0MTEwMTEyWhcNMjYwMzE1MTEwMTEyWjAzMTEwLwYDVQQD
EyhmN2EzNjAxZTAxZDE1MjhlYTBiNDZlMDFmMmU1ZDM1NTIxM2RjOWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMVCXRRxiGEGrzd88ETc+EwIcrSn
mA7YwOBvgjrVkjMvXBTHDqNbooQgDDnTRs5fsgjaYZa/zsLMvt0HVkBy5JbjVtGN
Ck9Urie64tS/Gt8ldGgUyRpJ6KJnt+b02J+L5BzuALoJjg3jpvgYqrSKrpRsTeTE
6iQbuDHWytgRHqQEsdCOtq6u3m3OvNIgW7f5kSzfoxdysVwPW4n781FE5ENYFN9o
UUWDs72irFaL9D6K74uSxxYk6XAzFN8/qYle9HIsNu0jkGZhWZ5xSLl/tXbVo93C
8YKMgTupFqAslVwz2IjUgy3wAxr4QR145QbzeyXrqucd7gIY9uNGaemsKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPejYB4B0VKOoLRuAfLl01UhPcnMMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTh34KVS
cZWkMdGS844evTfOJb3zispDM3LJW1/h/chk7kfd61oo67SdfaR+BpsnRtQyb4PL
DgZJ4LkbFGZgtSK0WDevFe2C02aQyBoFAkVHDa89GzCubbJswCmI6W9o9pBbB+Fw
pVkYzzIqvOOde1DJtmAQnM+FzuhpuvVqk9hx4UvqgjqYP9TTz87puTaInDd2af6Z
/L6eYlWpNRyTz0Ph+pbOmwiIkeKt7E+S1JusrH11bflay+CuLO/cjYLy7fXkWw+R
ywItb84TST6SsOGgA7A/6ZzJSzcYpu2Rbdww7/2D4Qm0Hz1ZmeKt9L02vYRFgycm
B5hRzWHqyoEX7w==
-----END CERTIFICATE-----
Generated at Sat Mar 14 21:47:33 2026 by rpki-client