
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier: 9fzw20oq3IpEYulRBPF9prY68j3oYYBW0D+k+ha+2O4=
Subject key identifier: 6A:04:DF:96:8D:8C:90:BA:C7:C2:27:B0:8C:6F:AB:53:DA:52:7F:97
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019E0D0A764A6F3E9F539E52BB8995DE87B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number: 082C
Signing time: Sat 09 May 2026 14:00:49 +0000
Manifest this update: Sat 09 May 2026 14:00:49 +0000
Manifest next update: Sun 10 May 2026 14:00:49 +0000
Files and hashes: 1: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=)
2: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
3: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
4: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
5: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
6: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
7: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
8: RW1Mn5jGY_fNwEa4nhfDdOF4euY.roa (hash: rormOO+Scyvc6/IMwyduU2PX9d097afAopSHjpl3a98=)
9: RnPVD9gf9jZqdZp1P8aZvT1Sy1E.roa (hash: 3pjV0gpZSof9VU2uFqwQB+SFUSkzl8zy0feUmyfywNM=)
10: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
11: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=)
12: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
13: cfZY6a_P68a48WrfPdh2ybzN0mo.roa (hash: vz82xH5oEj0u8LL1xE6ynS2ZCw12kUa4tRY5hXJQvWw=)
14: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
15: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: fHbCrL+WkJSB0e+36J9PnvFXjfg7xZ5JWWSa91+ZumA=)
16: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
17: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=)
18: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
19: pOZHVjX8onM9oBBZ12RCzAbquBs.roa (hash: pOOINsyyZRyr8GyLY4+525uladm5E7MLq4xyYrftyKY=)
20: tCmMoUtYFPQDVVVvD1xexWaYCPs.roa (hash: 8vL7GZMxy/ZTgYn7qa4CYEJlWKlh7uFIJGQ6a6Vvspg=)
21: u4PnfQwbctib9UTp0Hw6JFAFmdE.roa (hash: yGfK2ekpYvk3JD4bO1Q/D68AgiBMT6ISuB31ixaUwhQ=)
22: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 May 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0d:0a:76:4a:6f:3e:9f:53:9e:52:bb:89:95:de:87:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: May 9 14:00:49 2026 GMT
Not After : May 10 14:00:49 2026 GMT
Subject: CN=6a04df968d8c90bac7c227b08c6fab53da527f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:60:af:75:64:fe:1b:7a:b1:6b:4c:c3:75:27:
7f:de:54:18:cb:b8:5f:8b:d4:77:db:49:67:3d:ef:
33:82:97:77:bc:3c:9d:b7:92:49:ea:d1:da:bd:16:
a8:b4:4a:7b:cf:7e:94:4a:d5:ac:f5:4c:76:d1:d2:
b7:46:20:9c:4a:08:90:c0:a2:bd:98:31:c6:ee:58:
e5:6e:b6:87:20:67:14:89:84:fb:33:c5:b5:e9:04:
52:91:19:be:42:05:06:41:05:e3:d7:ef:6c:e8:dd:
96:99:b7:60:d2:7a:3e:9c:72:16:36:a5:83:a5:3d:
bc:07:17:31:32:83:2e:2b:d8:75:ff:47:b3:d4:97:
1f:fc:23:9a:a8:b2:41:cb:8d:f6:98:b4:16:64:da:
fa:01:b6:97:af:46:e4:3d:ea:3d:f5:e4:2c:b8:d8:
e7:77:e7:5e:11:62:00:cd:22:94:25:5f:2c:d3:09:
13:38:db:45:7e:a8:6f:c7:b7:93:41:c3:5c:b2:51:
ab:1b:bd:0d:34:8a:b0:f8:19:02:c3:f4:7e:65:25:
59:41:dc:0d:9f:98:2a:3a:a9:a8:8c:83:f1:d2:30:
24:56:44:8d:c9:6a:3a:6d:17:55:b4:26:03:e4:40:
f2:64:4c:e3:f7:b4:78:da:d9:c2:a4:83:16:d2:1f:
5a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:04:DF:96:8D:8C:90:BA:C7:C2:27:B0:8C:6F:AB:53:DA:52:7F:97
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:42:fe:7d:31:4c:1d:8c:62:c0:b4:c4:08:91:c2:10:eb:77:
c0:36:b5:08:ae:e4:51:8a:9d:65:66:d8:67:9d:5b:9e:5c:a6:
a0:77:77:8f:61:37:70:af:ae:ec:46:44:be:f9:f8:9f:53:fc:
78:62:56:55:47:98:1f:bf:54:42:32:30:cf:a5:04:5c:70:dd:
c2:43:1b:5a:c6:f1:87:f8:fc:0e:9b:7f:a3:65:1f:4c:ba:f3:
ed:da:d2:2b:06:d3:3d:80:18:d0:f4:e5:2f:25:d0:9b:5a:5b:
55:08:43:b4:36:29:e5:6b:34:16:7d:8c:10:dc:4d:25:70:01:
0e:ac:34:05:5a:40:79:47:f6:3f:94:90:f8:f3:96:d8:85:19:
9c:85:ff:c1:45:6a:13:5b:19:6a:1a:df:f6:56:61:7e:56:07:
8f:c8:b4:40:b1:8f:78:58:d8:89:8d:e7:2f:c4:15:fa:eb:e7:
9a:ac:f6:1c:b1:ce:6b:f8:ea:49:00:6d:c8:d2:2b:05:99:84:
20:d7:2c:cd:27:82:b3:6e:e8:73:30:4a:cd:c7:c4:c1:7e:bc:
75:e8:4c:1b:3b:7f:c3:2c:97:a7:d0:b7:c1:3f:bd:8e:79:64:
39:a0:9f:4d:f6:48:5e:1d:6c:63:eb:81:97:af:69:69:8e:aa:
25:b5:b1:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4NCnZKbz6fU55Su4mV3oezMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjYwNTA5MTQwMDQ5WhcNMjYwNTEwMTQwMDQ5WjAzMTEwLwYDVQQD
Eyg2YTA0ZGY5NjhkOGM5MGJhYzdjMjI3YjA4YzZmYWI1M2RhNTI3Zjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WCvdWT+G3qxa0zDdSd/3lQYy7hf
i9R320lnPe8zgpd3vDydt5JJ6tHavRaotEp7z36UStWs9Ux20dK3RiCcSgiQwKK9
mDHG7ljlbraHIGcUiYT7M8W16QRSkRm+QgUGQQXj1+9s6N2Wmbdg0no+nHIWNqWD
pT28BxcxMoMuK9h1/0ez1Jcf/COaqLJBy432mLQWZNr6AbaXr0bkPeo99eQsuNjn
d+deEWIAzSKUJV8s0wkTONtFfqhvx7eTQcNcslGrG70NNIqw+BkCw/R+ZSVZQdwN
n5gqOqmojIPx0jAkVkSNyWo6bRdVtCYD5EDyZEzj97R42tnCpIMW0h9a7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoE35aNjJC6x8InsIxvq1PaUn+XMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0L+fTFM
HYxiwLTECJHCEOt3wDa1CK7kUYqdZWbYZ51bnlymoHd3j2E3cK+u7EZEvvn4n1P8
eGJWVUeYH79UQjIwz6UEXHDdwkMbWsbxh/j8Dpt/o2UfTLrz7drSKwbTPYAY0PTl
LyXQm1pbVQhDtDYp5Ws0Fn2MENxNJXABDqw0BVpAeUf2P5SQ+POW2IUZnIX/wUVq
E1sZahrf9lZhflYHj8i0QLGPeFjYiY3nL8QV+uvnmqz2HLHOa/jqSQBtyNIrBZmE
INcszSeCs27oczBKzcfEwX68dehMGzt/wyyXp9C3wT+9jnlkOaCfTfZIXh1sY+uB
l69paY6qJbWxAw==
-----END CERTIFICATE-----
Generated at Sat May 9 21:40:17 2026 by rpki-client