
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier: sWgm7Jty12ffwddUvYf803485WPiXxL/udHEXFmfhUE=
Subject key identifier: 5E:0B:E4:42:5B:DC:31:5C:54:C1:5C:FB:1D:BF:BD:CB:02:30:52:1C
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019DFBA94E2E9D4F4D8C005E9C338AEF65E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number: 0823
Signing time: Wed 06 May 2026 05:01:09 +0000
Manifest this update: Wed 06 May 2026 05:01:09 +0000
Manifest next update: Thu 07 May 2026 05:01:09 +0000
Files and hashes: 1: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=)
2: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
3: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
4: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
5: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
6: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
7: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
8: RW1Mn5jGY_fNwEa4nhfDdOF4euY.roa (hash: rormOO+Scyvc6/IMwyduU2PX9d097afAopSHjpl3a98=)
9: RnPVD9gf9jZqdZp1P8aZvT1Sy1E.roa (hash: 3pjV0gpZSof9VU2uFqwQB+SFUSkzl8zy0feUmyfywNM=)
10: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
11: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=)
12: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
13: cfZY6a_P68a48WrfPdh2ybzN0mo.roa (hash: vz82xH5oEj0u8LL1xE6ynS2ZCw12kUa4tRY5hXJQvWw=)
14: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
15: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: iLij3+AgWrZcBkzecapKnxPaePpuqLP1j2eDC1VwNrc=)
16: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
17: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=)
18: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
19: pOZHVjX8onM9oBBZ12RCzAbquBs.roa (hash: pOOINsyyZRyr8GyLY4+525uladm5E7MLq4xyYrftyKY=)
20: tCmMoUtYFPQDVVVvD1xexWaYCPs.roa (hash: 8vL7GZMxy/ZTgYn7qa4CYEJlWKlh7uFIJGQ6a6Vvspg=)
21: u4PnfQwbctib9UTp0Hw6JFAFmdE.roa (hash: yGfK2ekpYvk3JD4bO1Q/D68AgiBMT6ISuB31ixaUwhQ=)
22: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fb:a9:4e:2e:9d:4f:4d:8c:00:5e:9c:33:8a:ef:65:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: May 6 05:01:09 2026 GMT
Not After : May 7 05:01:09 2026 GMT
Subject: CN=5e0be4425bdc315c54c15cfb1dbfbdcb0230521c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:61:c5:5c:eb:34:88:a3:99:e3:db:2a:d7:
74:45:0f:a2:8d:2d:eb:7c:40:d1:b4:31:58:6b:9f:
63:67:b6:a4:5a:68:61:e0:f9:20:74:cc:b3:af:0c:
c7:70:69:e5:0d:23:d3:af:8c:2b:93:d9:91:f9:cb:
25:4a:f5:15:ce:48:e0:c2:99:26:95:95:58:c4:ed:
1a:95:12:ab:c1:08:1e:e4:04:95:dc:4f:bf:ad:0e:
62:3e:fb:9a:1d:a6:84:35:fc:d1:e7:fc:67:7a:7e:
b1:f4:cd:b0:c1:d4:5b:df:da:fc:5b:f6:8c:1c:25:
24:d9:a6:68:07:74:92:18:3e:c9:d8:37:bc:75:1e:
c4:77:66:d4:6b:ab:3e:05:ca:80:32:28:d1:63:69:
f4:45:95:8a:15:1e:b5:d6:99:9d:7e:f9:01:18:33:
94:8e:ad:97:c2:3b:44:06:cf:cb:72:3a:1c:5b:93:
39:89:61:43:57:50:b2:b8:6c:30:a3:33:dc:7a:9e:
38:16:2f:8b:6b:89:24:fb:26:bd:0d:8a:e8:35:f3:
99:0e:8b:c8:b8:94:be:be:fd:bb:b5:19:16:4e:20:
84:21:1b:2a:83:5b:c0:38:76:8c:b2:6a:2d:13:f9:
d7:b1:5b:a7:a0:2a:2a:bc:24:4d:ec:3b:12:7f:5f:
d4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0B:E4:42:5B:DC:31:5C:54:C1:5C:FB:1D:BF:BD:CB:02:30:52:1C
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:73:ed:83:75:1f:36:51:b9:25:3b:d9:1d:aa:16:8a:30:3e:
3a:49:77:cb:7d:a6:d9:b7:e2:18:1b:1d:e0:ba:fc:6d:17:d2:
f4:72:8f:0e:8f:e8:a9:12:79:b1:38:ef:dd:eb:ce:99:0a:1b:
2d:a7:40:41:41:80:33:dd:3f:ee:43:57:72:09:0a:84:b3:1e:
a0:81:0d:71:e3:d1:57:ff:41:6e:01:fd:f9:7c:33:2a:1d:46:
1e:73:be:b8:36:b4:d6:a8:7d:ac:42:96:f7:38:5f:d8:18:f1:
f1:b4:08:43:50:15:0f:b5:57:47:59:13:39:4f:bb:e4:6a:e7:
ed:8b:8f:b1:06:f4:6b:45:6e:2a:e7:eb:94:85:02:cd:29:70:
48:6b:ef:c1:88:09:b0:a8:34:1f:3b:09:14:45:20:bc:82:89:
32:a2:63:a4:26:74:ef:a5:b0:aa:cf:54:a9:e8:8d:a5:b1:53:
21:45:f1:5c:3f:3b:37:b9:4e:70:1e:0f:49:f8:a8:1e:f9:fe:
53:84:0f:e4:23:8e:9c:84:68:ef:d9:a1:72:e0:73:b9:cf:97:
55:10:ee:fd:0f:cb:d6:e5:df:ea:53:3a:3f:83:93:5f:0f:bd:
31:a0:b7:aa:79:3c:c3:3d:c6:41:26:a9:5e:af:4e:c0:24:7f:
e4:92:c3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 15:15:42 2026 by rpki-client