
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier: hyG5A8QxpgU/GmuztkY+8Ds0hCxbT+W4gD4NLuDgdtE=
Subject key identifier: C3:C8:B9:3C:69:DD:00:FC:A2:5E:1B:1F:BE:A7:61:13:8C:40:96:EE
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019E1D22FE1012C36342AC5E9D35B19900B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number: 0836
Signing time: Tue 12 May 2026 17:01:32 +0000
Manifest this update: Tue 12 May 2026 17:01:32 +0000
Manifest next update: Wed 13 May 2026 17:01:32 +0000
Files and hashes: 1: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=)
2: 1qKLqB7YGK13o6kurhGQsYZetmo.roa (hash: 1gJBGB9klrHZSwVL2SLeIR4sc4/6k+hLxWUNUcJftrk=)
3: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
4: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
5: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
6: HSZJOMMgqldMqXCQrjEqHsBDzGw.roa (hash: 9AQVGhxSXSd9IT7bQVwCvuQJIeCspjGvlwwEhQZYorE=)
7: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
8: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
9: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
10: RW1Mn5jGY_fNwEa4nhfDdOF4euY.roa (hash: rormOO+Scyvc6/IMwyduU2PX9d097afAopSHjpl3a98=)
11: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
12: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=)
13: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
14: cfZY6a_P68a48WrfPdh2ybzN0mo.roa (hash: vz82xH5oEj0u8LL1xE6ynS2ZCw12kUa4tRY5hXJQvWw=)
15: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
16: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: rOwdBl6dhtcw5A7lmNazEVO+c88chnu+AbOUhrEGquo=)
17: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
18: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=)
19: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
20: pOZHVjX8onM9oBBZ12RCzAbquBs.roa (hash: pOOINsyyZRyr8GyLY4+525uladm5E7MLq4xyYrftyKY=)
21: tCmMoUtYFPQDVVVvD1xexWaYCPs.roa (hash: 8vL7GZMxy/ZTgYn7qa4CYEJlWKlh7uFIJGQ6a6Vvspg=)
22: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=)
23: x0w0SJYyBODLjpKGKi2OvtCd5BY.roa (hash: /oU3eS+zy0/9a9tpbxNFxOY3NXEHHhBLy521R4xGw7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:fe:10:12:c3:63:42:ac:5e:9d:35:b1:99:00:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: May 12 17:01:32 2026 GMT
Not After : May 13 17:01:32 2026 GMT
Subject: CN=c3c8b93c69dd00fca25e1b1fbea761138c4096ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4e:f3:96:11:ad:e1:b7:c0:f5:a9:57:66:5e:
c6:73:19:c1:81:d0:b0:fd:27:6c:55:6d:fd:25:f9:
c1:a4:0d:df:eb:39:ed:55:77:47:9e:0e:b5:bd:e2:
d8:a2:a6:f1:f5:7c:be:2b:c5:02:05:f8:82:04:b6:
7b:22:49:b4:3a:72:3d:3d:71:c4:2a:bb:98:2c:3d:
d4:24:d6:c7:b6:13:e4:76:54:8d:aa:97:44:b6:03:
0e:0f:38:21:04:1d:fb:5d:50:29:bb:8d:bf:9b:b9:
12:f9:bb:c9:13:2e:c2:02:c7:1e:78:3b:1b:10:71:
96:7c:f1:b7:4a:54:40:5e:16:6f:13:aa:43:6d:5d:
71:1f:14:9b:b8:39:fe:21:7e:c0:b5:90:78:d1:f2:
70:de:13:88:d0:23:00:e5:a0:6c:a4:9f:8c:26:c5:
a9:ac:a6:fa:87:47:da:36:00:bf:c5:f7:4a:e7:d7:
db:52:f7:c4:7b:e2:4b:4d:08:b3:31:b4:dc:2a:6f:
69:43:8d:38:99:d3:af:bd:ad:96:11:7f:55:96:0e:
c2:0a:95:4e:5c:79:bd:e9:97:98:e0:27:44:f7:77:
d1:a2:ef:5e:7f:f4:f6:c5:78:55:58:e7:c7:e3:5b:
3a:d5:05:dd:b0:71:5a:2a:f7:dd:53:47:03:86:76:
fa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C8:B9:3C:69:DD:00:FC:A2:5E:1B:1F:BE:A7:61:13:8C:40:96:EE
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:89:d9:b5:a4:43:90:ea:aa:49:4f:b6:36:24:36:36:93:4c:
7c:a0:8b:e7:af:ea:82:ba:4d:6a:5d:5a:ff:61:0a:20:37:31:
7f:a5:92:44:3a:b2:89:41:8d:2e:ee:9c:b6:7d:b1:4c:18:55:
1d:a9:28:37:58:76:97:85:eb:51:7d:1f:c3:e6:0b:be:ee:3e:
71:5c:5b:2e:66:2e:f8:ab:a9:42:dd:05:19:eb:0c:70:6a:e0:
40:a8:b8:e7:e7:45:d3:97:9d:4f:6e:4f:e6:84:a3:bf:e8:da:
11:11:ec:bc:b7:78:7b:ef:a7:ca:8f:4d:83:92:fe:37:82:2b:
5e:85:0b:d0:44:60:c7:9c:09:8f:13:2f:4f:31:47:41:d9:c1:
6f:7d:54:c0:c0:db:cb:a4:df:2e:db:bc:0c:7f:29:f7:a7:f9:
79:38:e3:9d:73:55:0d:e1:b4:88:fc:a1:01:78:07:7d:4b:65:
7c:b8:3a:4a:63:5a:2c:7c:60:90:61:87:b6:5b:bc:82:f5:b9:
3f:24:a2:79:f3:ed:1a:94:3e:b5:ca:7f:74:27:3f:73:5c:67:
84:33:15:de:ba:8d:ab:23:04:92:44:b1:fb:e6:e3:0e:e5:f7:
c3:3b:68:bd:6d:2a:cc:19:32:58:ff:3a:cb:e1:e4:f1:73:32:
b8:d4:e2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:21:56 2026 by rpki-client