
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json)
Hash identifier: dA9Pu2H9Y9d+7jlchn7ZjLUUPT1zqY9R8Wk3QlUs9ns=
Subject key identifier: 9B:2F:3E:BD:AD:6C:26:0C:34:DB:65:6B:2E:23:36:BE:AB:F2:DA:E9
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019E91DD3CDBD8C14741A4B95F765FB8913B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
Manifest number: 1A62
Signing time: Thu 04 Jun 2026 09:00:55 +0000
Manifest this update: Thu 04 Jun 2026 09:00:55 +0000
Manifest next update: Fri 05 Jun 2026 09:00:55 +0000
Files and hashes: 1: 0EJd6KM5OKs4ZeWtakfKi4LfHMQ.roa (hash: lq/+jqUsuGMmo0V5eC2lYaf4+vkz0NSEYMEZoOw+h8M=)
2: 0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa (hash: ZS7xsxHoPgLo7pXTeMFQba/WrlLyuKrD/OKsytQQliA=)
3: 3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa (hash: iqDDjW5cOG97r4sM2JSgMTij8ljbDdlavJlc1sdy2is=)
4: 4anZiDch9d6oi83TQFLyB4qT99g.roa (hash: gEOKEHS2zoAD8h95bY8JWc94frKYylDhR359To9K6dI=)
5: 6vLBlvAYnt5lDDOZcjpwfzHCOik.roa (hash: KihGwXVua6pirrjPV5VriwFVirqc9ZJjTQEykToX1o4=)
6: Au6ztzaYOL8tiA06L7XgEOvNL7w.roa (hash: 2gixSAvahjHMVkdyFo4/SHHkZ2SyI5tRyn1jTT+SjAw=)
7: Axyirs6pJ3W80QJ3YDoIci5zTRg.roa (hash: 43m1rEQkLo40I+R1w7uE4v2Z71kSfJJ3j7fM0HCzcL4=)
8: BSJwseKs8IstwvoydvzKDO4yjpk.roa (hash: 6WIA++2azmJG3DLJYorfCdBV6cXv3FDFWjwIcVYK2xA=)
9: BaNXpsDq6-N9oos8dJUS_8wrDB0.roa (hash: R59taLcL8XgECkHUD04YKkgGCAVhyLMLkoR8FN3GBXU=)
10: CMxaRehAS-NJPoJRiOZs5vD8m8s.roa (hash: TH/swbW7E8102sySsE86cpKCx/bBoBo1mAPp0XnPa5U=)
11: Fmg3wL_o3aopIsEQbXgCHXFam4E.roa (hash: OY+cWfR5jYsnEPm1uZa4VUsODu3TKMDkMdv4TNeG75Q=)
12: HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa (hash: jPcgyS0A0CPg28Gnyk8yUak3J7zu53iE6b9g60+fx4M=)
13: Rr2zhV2BMuYwAMQjOZC17bpA4NM.roa (hash: EMKdr17+gur82xEd8d0NLRU71QAL7ROjLErF0ye4dUQ=)
14: V2KSUUK3NKjzpMrOniGAS6f0lYc.roa (hash: HcEBW9Swj6mWiXzSBMZMgQ58umIWR03BqrfbmgIYn1s=)
15: XJXC8rN2wu4yrnBhr9DvP03wKlg.roa (hash: pCQBoLdKmxtmBQ2vu5ZofXpEqg/wmN1dQJ6QlNip1Wc=)
16: a-kJ5knumGsOVePmAFmyw3gQk6M.roa (hash: n8W4R2uTKKGh4Y7lziZkfCB7vbLNy8V5BszYGmNeHKQ=)
17: a3awGspUbD83lR3SbJMhhWhWXUU.roa (hash: 4wacv1ZaHYO9NbaUGd81FOMwUiV7hBGJzXqLo1BRDrY=)
18: bAQWAvcm3T6rfyaf7ljIBvlFtAM.roa (hash: 2DAvyPmgh36vWxZnNmX769qlQ+GKNipPDNKBhtCFjHA=)
19: cpXnQ54ogNeEFY_Pmix7pjKtsVY.roa (hash: kjAIzOeWynNpPehvnohJeIDqQVE5YFpuq0XNwmJJBro=)
20: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: zcDiyQqs1q+ynZpKkRCk6v0ERKzV5gnKLh+eTWMOLF8=)
21: eEhMeiaypyt_S7BVopD2YgmSnOw.roa (hash: uB9NgFQsx1uvRWrD7GiIwr7cOwywAd7AGSIePb5dgOc=)
22: h_6Her04c1VJUqOWTEw-vF2QdJM.roa (hash: yF/TMLj4VWrNBEx6DvDlSkH38v+bAFKzWGIqdaI3ArE=)
23: hdqbXqEEo0WcDbUPmcA4zHyMx9g.roa (hash: wTfh43Z2dxSuhlyGF6sDvzrntnhstLzn2fKCtG4m1og=)
24: hok6Qp96mKVdQQjarDAvvs1bUeM.roa (hash: 5zV7NiDuzjvbffwRhWRdC6edDv2RAzy2F0ZnadV/k8Y=)
25: jiLj3J5Bo3BCH5suARVlgU11bTo.roa (hash: LLpF3BIcUDVwpwXHzsowIz6eBq6bJYstoP6xzZ9ogdE=)
26: jp5nTIoItTHIHDPX2kZzUPRHlto.roa (hash: HE9yyxrPG49EMZWs9Brm5CRMxvDO542oZ8FihK7J/do=)
27: k2hVczUytlMTlC7CthfEzA0_AVM.roa (hash: RZTmxWFEle9vhsLQ7A7rVZuwhzSq7fez8fzezedwpMk=)
28: nFYNbXy0JhIyEmPla3EPZiB915M.roa (hash: 4Q1qQA0cyqLu7/tHU6Hpa7PqUUZygk8E+2ueMWgOYPc=)
29: r-spS_s4o3tHQBEBuSgZxxRzODk.roa (hash: r+m8p33XcobkJHbwUm4VvDqKa1R52exPo6p81YpRS1w=)
30: sQrvyzK7N0wULm1wo0uM6xtxoDE.roa (hash: RQiHy4v+nKjO+WuHpQyymNIHaVpKrkrIV4MD67pQ4Kg=)
31: u2zHl19ZbKXvPmvwNMcLmzmNdVQ.roa (hash: WRAI6nEvaTJojleXKNb/BhG/0hyUOSj983OO/f7RP2A=)
32: wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa (hash: nD3Q9hGrHrUTsDLGxXCpl182FjBypKufxutT4cbNcEU=)
33: x3F23iRQbtjJBNjfKFqgqyoJJL8.roa (hash: EUZDFPNG/vNavhD9eHX3iVCctpxXMUJXztOTBmE2pTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:dd:3c:db:d8:c1:47:41:a4:b9:5f:76:5f:b8:91:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jun 4 09:00:55 2026 GMT
Not After : Jun 5 09:00:55 2026 GMT
Subject: CN=9b2f3ebdad6c260c34db656b2e2336beabf2dae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:e0:f1:3c:a3:8d:31:ac:31:67:42:0b:e5:
16:4e:a2:20:d2:16:14:ee:a3:50:1d:cc:2a:d9:31:
4c:e8:cc:fd:22:b9:64:6d:01:72:fc:09:e4:9d:bb:
cc:e2:cb:5a:a1:ac:b9:b4:23:72:96:c5:47:b4:37:
f9:96:ff:5b:9f:11:8b:35:fc:ce:78:22:a4:cd:22:
2e:d1:5e:5c:cb:a9:02:87:3f:dc:b7:68:64:4c:77:
b2:34:48:08:b6:e5:6e:7e:ba:6f:85:63:91:2a:43:
5c:ff:ab:5b:af:19:21:02:a5:31:55:71:40:33:38:
07:30:ff:49:27:24:6a:9e:b3:44:77:91:61:11:e1:
d5:99:4d:18:1c:69:55:9f:3e:aa:ff:9d:4e:0f:11:
70:c8:c1:4d:df:c0:23:35:63:ee:ae:79:e7:4b:e9:
9e:fa:e5:cf:9e:3f:ce:e5:7a:74:3a:08:bd:6b:22:
56:f4:59:e8:bf:b4:0f:2f:1b:5e:38:fa:d4:15:ea:
f6:91:bc:b3:ff:3b:54:4a:87:ca:a1:9c:8e:c0:d7:
37:2d:fb:3c:ed:02:fb:27:e9:55:95:ba:28:05:81:
38:d4:80:38:62:48:82:44:29:ed:ea:33:d1:9e:8a:
2a:99:85:24:f9:f0:d5:9d:a8:b9:63:a1:88:bf:ac:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2F:3E:BD:AD:6C:26:0C:34:DB:65:6B:2E:23:36:BE:AB:F2:DA:E9
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ec:33:7a:15:b0:c1:c4:3e:d6:50:1e:91:26:cd:a1:9e:54:
84:42:d3:8e:3a:9d:ec:99:8f:61:c2:b0:c8:99:e3:fa:42:ad:
51:f5:9c:35:28:01:29:f2:1f:61:e4:d4:cc:b4:84:c5:ab:1a:
2a:ad:b6:df:a6:d9:b2:35:f6:14:3c:64:95:96:81:f8:f9:7b:
59:b4:77:ad:7d:fb:0a:22:c9:78:f8:ca:57:46:99:02:51:dd:
57:e9:0f:9d:e8:17:d3:00:7f:bf:49:77:e1:9f:47:c6:fc:53:
0e:80:54:25:ed:93:e7:04:4d:9c:1d:c5:51:c6:69:99:68:eb:
37:0a:4b:da:99:d6:a3:0e:87:92:27:e5:fe:70:91:05:ac:f1:
43:5e:ee:7b:0f:63:4b:62:5f:73:13:d6:58:bb:52:cd:0b:82:
37:04:ab:6f:a6:fe:ff:d0:4d:79:37:db:bf:72:1c:39:1a:96:
61:12:ed:f5:c2:af:b3:91:0f:b2:1b:74:e5:14:7b:02:87:0c:
2f:dc:6c:87:5c:ca:b5:cf:21:bb:2c:27:92:d4:67:30:bd:b9:
33:96:01:f7:b9:c7:06:ba:a0:09:8a:3c:26:cd:9b:41:5c:9f:
bf:24:1f:ac:6c:01:d8:ba:70:44:8c:39:5f:ef:42:b0:bb:68:
b6:c6:1e:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6R3Tzb2MFHQaS5X3ZfuJE7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjYwNjA0MDkwMDU1WhcNMjYwNjA1MDkwMDU1WjAzMTEwLwYDVQQD
Eyg5YjJmM2ViZGFkNmMyNjBjMzRkYjY1NmIyZTIzMzZiZWFiZjJkYWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXrg8TyjjTGsMWdCC+UWTqIg0hYU
7qNQHcwq2TFM6Mz9IrlkbQFy/AnknbvM4staoay5tCNylsVHtDf5lv9bnxGLNfzO
eCKkzSIu0V5cy6kChz/ct2hkTHeyNEgItuVufrpvhWORKkNc/6tbrxkhAqUxVXFA
MzgHMP9JJyRqnrNEd5FhEeHVmU0YHGlVnz6q/51ODxFwyMFN38AjNWPurnnnS+me
+uXPnj/O5Xp0Ogi9ayJW9Fnov7QPLxteOPrUFer2kbyz/ztUSofKoZyOwNc3Lfs8
7QL7J+lVlbooBYE41IA4YkiCRCnt6jPRnooqmYUk+fDVnai5Y6GIv6wA5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsvPr2tbCYMNNtlay4jNr6r8trpMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOewzehWw
wcQ+1lAekSbNoZ5UhELTjjqd7JmPYcKwyJnj+kKtUfWcNSgBKfIfYeTUzLSExasa
Kq2236bZsjX2FDxklZaB+Pl7WbR3rX37CiLJePjKV0aZAlHdV+kPnegX0wB/v0l3
4Z9HxvxTDoBUJe2T5wRNnB3FUcZpmWjrNwpL2pnWow6Hkifl/nCRBazxQ17uew9j
S2JfcxPWWLtSzQuCNwSrb6b+/9BNeTfbv3IcORqWYRLt9cKvs5EPsht05RR7AocM
L9xsh1zKtc8huywnktRnML25M5YB97nHBrqgCYo8Js2bQVyfvyQfrGwB2LpwRIw5
X+9CsLtotsYeGQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 12:08:27 2026 by rpki-client