
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier: 0M9WmWutjj/03lnQORSSM1T9GW9nnJ7dXZdgF3AlWsc=
Subject key identifier: 2F:37:B0:F4:D9:FF:7F:99:68:8A:26:D2:0D:C7:2B:C3:2A:2C:8E:B5
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019DF9BAF07CA05ACE3F92155DB8852E4E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number: 0822
Signing time: Tue 05 May 2026 20:01:11 +0000
Manifest this update: Tue 05 May 2026 20:01:11 +0000
Manifest next update: Wed 06 May 2026 20:01:11 +0000
Files and hashes: 1: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=)
2: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
3: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
4: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
5: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
6: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
7: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
8: RW1Mn5jGY_fNwEa4nhfDdOF4euY.roa (hash: rormOO+Scyvc6/IMwyduU2PX9d097afAopSHjpl3a98=)
9: RnPVD9gf9jZqdZp1P8aZvT1Sy1E.roa (hash: 3pjV0gpZSof9VU2uFqwQB+SFUSkzl8zy0feUmyfywNM=)
10: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
11: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=)
12: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
13: cfZY6a_P68a48WrfPdh2ybzN0mo.roa (hash: vz82xH5oEj0u8LL1xE6ynS2ZCw12kUa4tRY5hXJQvWw=)
14: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
15: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: XmocJCkiyR1gPd+mq/WpOZu6fC/pkbfCmn6v8L5DoFk=)
16: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
17: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=)
18: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
19: pOZHVjX8onM9oBBZ12RCzAbquBs.roa (hash: pOOINsyyZRyr8GyLY4+525uladm5E7MLq4xyYrftyKY=)
20: tCmMoUtYFPQDVVVvD1xexWaYCPs.roa (hash: 8vL7GZMxy/ZTgYn7qa4CYEJlWKlh7uFIJGQ6a6Vvspg=)
21: u4PnfQwbctib9UTp0Hw6JFAFmdE.roa (hash: yGfK2ekpYvk3JD4bO1Q/D68AgiBMT6ISuB31ixaUwhQ=)
22: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:ba:f0:7c:a0:5a:ce:3f:92:15:5d:b8:85:2e:4e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: May 5 20:01:11 2026 GMT
Not After : May 6 20:01:11 2026 GMT
Subject: CN=2f37b0f4d9ff7f99688a26d20dc72bc32a2c8eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:bb:41:58:a2:ab:2e:5c:72:ae:00:9d:49:
f5:38:12:40:22:17:41:93:c7:95:6e:e7:26:e4:e9:
00:5e:45:7d:a6:cd:b3:98:7c:85:00:a0:66:36:9a:
b1:31:e2:62:46:2c:38:4c:e5:dc:bb:22:36:d9:ad:
d0:fe:3c:95:da:fb:e7:7c:0c:3c:79:42:08:1b:e9:
3d:7e:01:9a:96:b7:80:67:ee:73:f2:21:eb:dd:bb:
c8:81:84:39:b2:e7:02:89:47:68:3b:50:7d:4e:98:
37:3a:4f:81:80:85:72:50:30:91:0b:21:35:ce:b8:
9f:ef:5e:29:35:3f:84:b2:75:c3:96:3f:dc:8c:e3:
ce:d2:fe:3d:37:0d:56:9a:5c:50:63:7d:af:b4:03:
ab:31:59:e4:ba:ef:48:b9:67:cc:fc:52:27:03:77:
66:58:7c:92:c0:79:cc:f3:e2:1e:19:33:f4:35:95:
e7:94:0f:ed:ed:f8:cc:0f:03:d4:0e:8b:93:1d:a7:
a1:61:bf:94:de:5e:08:f0:22:2c:89:16:dd:1f:1c:
fa:b2:86:35:c6:1f:d1:39:89:d3:b9:7d:25:34:8b:
1e:57:b4:0c:59:16:87:0d:6b:06:2d:52:03:f2:0a:
9e:d5:d8:ce:ce:3b:1c:73:00:11:0d:09:d5:4d:d9:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:37:B0:F4:D9:FF:7F:99:68:8A:26:D2:0D:C7:2B:C3:2A:2C:8E:B5
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:10:2a:1f:b6:35:72:3e:ad:e1:e5:e4:fb:1f:36:c2:94:a4:
b2:84:91:16:c2:f7:24:cd:65:88:cd:23:da:38:67:9d:0c:b9:
1d:f0:27:7f:6b:af:52:24:68:84:96:4d:95:77:97:56:b6:dc:
72:39:90:25:c5:30:b6:6b:e3:af:b0:20:40:eb:0b:2d:00:11:
e4:80:cb:fb:9c:98:54:25:a6:83:09:19:3e:78:33:16:15:0b:
7a:c0:3a:8a:62:97:04:67:f3:cb:aa:b3:2c:81:a3:8b:96:bc:
ed:38:59:a3:60:a4:3c:6b:fa:0a:bb:ac:c7:7e:35:c7:bb:48:
65:93:90:f6:fb:82:f4:5b:ab:6a:e7:1e:3a:49:7f:72:18:77:
b7:ef:7c:a6:04:f9:c0:f4:6f:17:79:46:6d:b1:23:7f:18:b1:
0c:a6:c6:b0:6f:48:11:8c:49:23:5d:d9:b1:7f:90:06:df:ef:
ff:da:5a:be:26:90:18:21:d8:0b:b5:d1:8f:0a:cd:09:84:fd:
64:1c:a7:73:c4:1f:60:02:8b:2b:44:a4:af:e3:01:96:2d:b9:
31:87:a2:cb:82:67:a9:5d:e2:e8:b2:91:71:15:7c:ea:21:bd:
18:04:c1:00:74:ee:ba:93:f0:77:d0:e6:02:30:0c:c2:cc:65:
a9:02:48:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:00:14 2026 by rpki-client