
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
File: 1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json)
Hash identifier: m7JoT5tta19IOWgTi40kqP9Y1V92tjixAICw4qP3ueg=
Subject key identifier: 64:56:23:3C:6C:22:3D:2D:B5:BE:23:90:6B:A3:E6:88:74:2D:21:B7
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 019CE410D043B1FFA3F630BCAC4DCE9F9C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
Manifest number: 1515
Signing time: Thu 12 Mar 2026 22:00:32 +0000
Manifest this update: Thu 12 Mar 2026 22:00:32 +0000
Manifest next update: Fri 13 Mar 2026 22:00:32 +0000
Files and hashes: 1: 1-EC4g1z7TKmKDC6BMJKVgcX5rqM.roa (hash: VN5SDY0+gW7ILuHoqlm/fJEeG3YnPoZJ808VzHVdxfM=)
2: 12-QpuXSG6_8hdl7cf1qgoYRbQ0.roa (hash: mN467/7GywnhA1L7FMjs4ZJkbmIwDxnvQEUBR43WDpM=)
3: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: 5+0q4tg8eJT8WAg3b54fq96nA7BsOVowkjEfM4yGlKo=)
4: CVL1CK8Ow2cSKBowHcHY0tF8Sjo.roa (hash: ld+tNyBKiP3cgMuyEV6zi3LHUSVViRV1Xe7EeZEcgOs=)
5: CxFnlcYg39ZYyt30Rxwv9-jU18M.roa (hash: PqEFTHTRRCUiFEUL4Hq4adx4g6udRtY758KFRZ8Fbok=)
6: FMbL96iQpCty4qIBkAJ_RJOMzSA.roa (hash: U1ZJWf8z6q8ClFNuRu2kF6I7Zw69c0JaWgC8UR5LTdI=)
7: GvCaLEMtreWe0TE7iBl-Fn1BAQU.roa (hash: Orxttow5nHsbqOjaRE9vUN+mw4qCsQAWnb1ehA7+MP0=)
8: LYO4EVL97axXFG4_1JIRGo_Gcr0.roa (hash: M8NjdLPy4NRB155rg30Ob5fe1Garsp+Fkc/ASUzAL08=)
9: NZPmGfMlXNXVCIzj2BQPnQI3e_8.roa (hash: zE5S0+ZJF7WaGLugEvIAwCS9/+Sc61x6ImWftYSyXwA=)
10: OmMFI95X2qnhZDKjI6slDjGRNqk.roa (hash: Pn7MijhIBVlC/zjDS4+PEDcrihjLjcsRGTtxI7Cgocg=)
11: SKrkFUElNTW-RJXzA9GZbuLjByQ.roa (hash: o0t432S7k6ID0P9LUaLorXFdDHZox3y0pV4ne0vCm/w=)
12: Scp2nM5P7b3JtI-qLRoRM-zY2DQ.roa (hash: ReY7U0Hu+rWmNt1KbWijPc8uks4szEsfEvUJpvT89z4=)
13: SgqvO9qBL1fWo3aBJRZpGp4K-S0.roa (hash: BHxiE3ULzbcJ44lDjqkW1hve5g/jINED6rwFK00YXx0=)
14: UNh9HBTbmAczkdMFcByOEAYWU0Y.roa (hash: W4lijVHAWghHFrkC7iuPEmv32YE3H28oL8DpFRFvg/c=)
15: WSvHFGzj7Vgob_0_S9OtU-eYECo.roa (hash: wV4wq5Kwh3/1RV581fA5ENpc2zmKMDZQlEmeVs08398=)
16: YXqFBM3Wgxl248Uckf87jL9-Y10.roa (hash: R/aH1v+NPoF+QYmVFlQRN2Ii0gntVyI3TwXZnW5icOc=)
17: bHsFJaLyCQLt5X5fjeTKRh55ODY.roa (hash: DVWoYx/VlrYQI2tOsueyBqYwG1Fx4jRd1Wy2fvfG26I=)
18: dca88p-eNfR0RjuTT48u3qYdsU4.roa (hash: LkTWX4mzrSibQMirmPorFtvVIp4ZsztyLfP+2xn0pJE=)
19: dhB_IkqPVgi3yJTzlaxBzpa9CMs.roa (hash: /dJFhGziZtLlMMTjECful8AqChnK1t2jnoBopwI8PGs=)
20: fKoGmparJHlozAcZTA3yAU4ZJcg.roa (hash: 60cR3HY+vUpddXNenTUdu1Z2bcSowrKZj1dsz2XqYPY=)
21: fzXSzzRGH69X9HG_DPX1UIdlnMc.roa (hash: 5e/q/Of0/VbRaI+58tUil5lHG2B8yQNHwFd7IDN7AnA=)
22: hsF-37Wxovsq4ET3HfuSoaGDtNM.roa (hash: S++/ePDHA6COSJvBXLPEIeF68zg4DsT2XPbEQ6Z+HgM=)
23: kf6WXwERUB2UK5WtXxsSJIgK76M.roa (hash: AXIUerhFG2dZ79X7fDQJvKC1a+E/4xiBLLeUOOiGwH4=)
24: nOZiS9ipdCo86_2swgfQMd065RY.roa (hash: 284FGn82DHerRbpzHLbn3Hc5ZwaGcd6vcd6k3JnrdOM=)
25: rZRJXwJNJ3BfK_DT3CgjF4Gzyag.roa (hash: rFZHyfSVT5PCl89WaarZZiQd7lJ5nZroQNMf7o6RjwQ=)
26: rfIN427V9zPCMZ-z5PwfYOKvWvE.roa (hash: /rLACCeghRFqZopyBKHtIJ9ZVC/Uf5aLpLTNEVJcleE=)
27: rx5FrArsEh1Pd7b0NgJ2Xd6ltaE.roa (hash: e1BXfn+1OHZJUEKq2u7HgsMulbmjg22+GP7JrrmxT/4=)
28: sbLArHFCdDYFp-yc45bbnWWHLZk.roa (hash: 50x3swjFzea0ZMQjb8qdEs7d3Kpvn0F3/nLybrYDPSY=)
29: v0WTRVyIOMbnSSTHqyRygXScgPU.roa (hash: AwqC2DBh8s09B6HD8Dw/C/8pvsrZMaYsxFJg6FacTeA=)
30: xQ0hxU5h6aCqKoBozq3lc-OZvS0.roa (hash: dqVw1zy09p9At+bsRY80wcRAlgN5UMI3c+HTy+z8Ljo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:10:d0:43:b1:ff:a3:f6:30:bc:ac:4d:ce:9f:9c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Mar 12 22:00:32 2026 GMT
Not After : Mar 13 22:00:32 2026 GMT
Subject: CN=6456233c6c223d2db5be23906ba3e688742d21b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:10:85:ea:cc:41:ad:d0:6c:e3:42:72:86:
1e:a8:20:06:6f:4c:c1:5e:e4:49:9c:ec:9e:43:db:
e6:48:7f:af:2b:34:f0:54:63:c1:c4:a5:78:44:39:
3d:ce:b9:5d:4d:90:21:98:d6:6d:e5:6c:ab:66:af:
06:b4:93:66:4b:d2:a4:66:e0:15:2a:86:76:f8:dd:
3a:47:b5:4e:4f:b7:56:85:82:de:9e:45:a4:b3:43:
65:9e:ac:7a:b0:96:33:b5:6f:95:d2:7b:ea:54:7a:
9a:19:39:9d:e8:9a:72:6d:ca:c9:1d:f4:a4:28:6a:
73:24:75:39:96:cd:14:7a:95:f5:55:2d:f6:40:9d:
49:19:95:bf:45:84:37:1e:08:15:83:5c:22:51:59:
d5:20:0d:f0:5d:39:df:c2:41:17:80:e2:13:4e:e2:
8e:a5:f7:40:f5:1e:50:1b:82:ef:fe:55:89:86:88:
4c:b7:03:6f:df:78:33:51:ab:6e:a9:ce:e5:3e:df:
4d:de:9b:85:31:10:da:67:da:6d:b8:72:25:2b:1e:
ec:2c:ce:75:bc:17:f8:7a:4a:08:c7:b9:db:f5:0e:
12:fa:83:6c:69:a4:d4:67:0d:92:62:32:fa:b6:98:
7b:94:57:31:d8:36:4a:79:f3:93:4c:a6:04:6a:b2:
3f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:56:23:3C:6C:22:3D:2D:B5:BE:23:90:6B:A3:E6:88:74:2D:21:B7
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:4c:4a:dc:34:b4:45:3f:95:dd:45:a2:db:e2:2e:f9:d9:f6:
b0:41:c5:af:df:98:f7:43:ff:9d:d6:97:16:8d:2b:9a:04:6e:
ed:72:0d:c2:f4:e9:a9:c6:e4:76:c1:c3:4b:82:9d:a7:bf:3d:
1c:cb:e1:9c:61:8a:c5:81:3b:50:1d:28:99:fe:40:2f:48:15:
18:22:82:df:c5:29:1b:11:c3:c5:20:6b:04:15:3f:e0:3f:a9:
76:84:5e:03:24:29:e4:70:82:f9:72:12:45:78:d5:5f:fb:ef:
be:7f:25:eb:ea:2d:c3:3c:64:f5:d9:d5:a6:bf:5b:9a:90:7b:
ee:ee:d2:e2:63:e2:3c:8d:3e:ac:55:7b:12:7d:6b:3c:d6:ba:
e7:bc:ff:88:a0:20:10:4d:ef:ba:24:2f:74:f3:00:69:d8:bc:
e8:1b:53:94:1d:2b:83:b9:f2:23:79:4a:4b:37:a5:93:dd:dd:
1d:3d:2d:28:5e:c8:ef:da:23:af:4a:b4:7c:2b:b2:c6:1e:ec:
48:c1:23:26:af:04:cd:af:c3:09:bc:2c:5f:35:63:cf:3e:dd:
e7:a0:c8:31:82:25:20:fc:c0:b5:12:df:0e:07:1b:cd:0a:0d:
5a:5b:1c:55:a4:02:aa:e4:70:b6:f0:6a:65:cd:0c:ea:5b:74:
71:77:55:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkENBDsf+j9jC8rE3On5xVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjYwMzEyMjIwMDMyWhcNMjYwMzEzMjIwMDMyWjAzMTEwLwYDVQQD
Eyg2NDU2MjMzYzZjMjIzZDJkYjViZTIzOTA2YmEzZTY4ODc0MmQyMWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru0QherMQa3QbONCcoYeqCAGb0zB
XuRJnOyeQ9vmSH+vKzTwVGPBxKV4RDk9zrldTZAhmNZt5WyrZq8GtJNmS9KkZuAV
KoZ2+N06R7VOT7dWhYLenkWks0Nlnqx6sJYztW+V0nvqVHqaGTmd6JpybcrJHfSk
KGpzJHU5ls0UepX1VS32QJ1JGZW/RYQ3HggVg1wiUVnVIA3wXTnfwkEXgOITTuKO
pfdA9R5QG4Lv/lWJhohMtwNv33gzUatuqc7lPt9N3puFMRDaZ9ptuHIlKx7sLM51
vBf4ekoIx7nb9Q4S+oNsaaTUZw2SYjL6tph7lFcx2DZKefOTTKYEarI/tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRWIzxsIj0ttb4jkGuj5oh0LSG3MB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqUxK3DS0
RT+V3UWi2+Iu+dn2sEHFr9+Y90P/ndaXFo0rmgRu7XINwvTpqcbkdsHDS4Kdp789
HMvhnGGKxYE7UB0omf5AL0gVGCKC38UpGxHDxSBrBBU/4D+pdoReAyQp5HCC+XIS
RXjVX/vvvn8l6+otwzxk9dnVpr9bmpB77u7S4mPiPI0+rFV7En1rPNa657z/iKAg
EE3vuiQvdPMAadi86BtTlB0rg7nyI3lKSzelk93dHT0tKF7I79ojr0q0fCuyxh7s
SMEjJq8Eza/DCbwsXzVjzz7d56DIMYIlIPzAtRLfDgcbzQoNWlscVaQCquRwtvBq
Zc0M6lt0cXdVRg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 03:49:15 2026 by rpki-client