
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier: 70yq433n3n38/iX2ycmugqOFBSSUcG1lejT5M7IVXTQ=
Subject key identifier: 46:E1:90:73:22:E4:A8:0B:DD:DE:99:AA:96:4F:B8:4F:66:10:16:D6
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019CED82BC1BB0AF44F04E8B3EE5D5F1FF6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number: 077D
Signing time: Sat 14 Mar 2026 18:01:33 +0000
Manifest this update: Sat 14 Mar 2026 18:01:33 +0000
Manifest next update: Sun 15 Mar 2026 18:01:33 +0000
Files and hashes: 1: 0JjZ6nBL6aeXv09AdHrm0lx-nAQ.roa (hash: nAX22x5LZPcFuwmumoiB6l6vDoqVxTHeyYCue4WKY+Y=)
2: 1-fHKEGdQzHKJnoO-QxMVY_4pRE8.roa (hash: zDRe41xbopOMDmDagY2NOiL9+JF7qRmR3ODp2uFdORY=)
3: 16Np4JNZv6v2ZaABJcy2sCql7pI.roa (hash: qAvGjbOzsR63qF3tqsjKZEDozeFVN2kLIVrjTI8/doM=)
4: 7UOO4k4Zq2DJBIH7tWwLjr2nB-w.roa (hash: nTcrUbr5u/berqohC4ga7k6wljP1uQR96ROF4KN6bMQ=)
5: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
6: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
7: BS5IPpy602b0P9LZT_8NLf8j87k.roa (hash: rFpHzyrk3W9kwB0GwSUlANwsnD6QKAwk516vFwL56UI=)
8: Dp9nfao-Lu-2nBFo3SQ17XgKE_s.roa (hash: ftH8WXmCe7E5NBIPoJRYR7JenBvr3AQxF7w5t5Bh+jA=)
9: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
10: FsWz95bjpsQz09qkc-hQos-M0m8.roa (hash: 3XsppK5S7iL8gQ3L3NeC1DD01cY/1dPaUa81kDoWAKE=)
11: GLCGPLD2hC5F_Pc0a6BQBHqcuQ4.roa (hash: mZ//Pt6zUTFrir/wUF/TZOQPoUNgkHjZamNtXvnZye8=)
12: IsBBsngSbH8D8ll-zq-eILoo78k.roa (hash: IhxGipNDNaViG3gc042e0dM0fgWzrITGBsZ2jJSSTNs=)
13: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
14: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
15: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
16: SqsOc_l_Byw8A63bMs7bGr5Csfk.roa (hash: yDuYEQpT9u0kVYnoDL0S45vkKwdy3kU/Xh9r8KwY0Mg=)
17: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
18: WuFVi91PLw1PUGyRssd2Q6yHyks.roa (hash: w4KZzG/sU1/9RMrXZYTWNuUrYY4VCLIF4AOLDV1SBW0=)
19: ZjezsyQwp__S_-4bnAPJityXs-A.roa (hash: KtcE3154yrRhHpULPsbebKDxYlMS75i4aRoAd7gorN8=)
20: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
21: d3URZqZU61DXU8Pxx8p7KdaQhTk.roa (hash: 0sFhnZDT3nptAp7FfkP3V+TkjPROY/IHl0rud0LuY7A=)
22: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
23: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: RB5lz3x0enmxMy7peDaXdk+re+byIj+igiEEo4hJuDs=)
24: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
25: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=)
26: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:82:bc:1b:b0:af:44:f0:4e:8b:3e:e5:d5:f1:ff:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Mar 14 18:01:33 2026 GMT
Not After : Mar 15 18:01:33 2026 GMT
Subject: CN=46e1907322e4a80bddde99aa964fb84f661016d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:35:7f:b0:93:87:12:b9:8f:18:ca:66:a0:a9:
d3:4a:fd:bd:cd:29:0c:a9:fe:85:df:7d:6d:2d:e5:
c4:ee:56:23:a0:a5:7c:d6:9b:2c:7c:c8:39:6f:ec:
0c:e8:c3:86:2e:d8:ed:09:a6:44:78:1a:78:fc:4a:
93:b6:6f:58:23:5b:ad:48:f3:a4:3d:de:2b:e5:ee:
79:e6:a8:f9:83:9c:23:6f:c7:3a:23:76:49:61:d7:
85:e8:d3:91:21:10:7d:8b:bc:3e:c7:c4:05:1d:b7:
84:bf:8a:64:52:82:da:73:a2:40:7f:22:0c:38:f1:
95:7f:e7:9e:15:c1:33:c7:09:15:ff:89:8d:84:4a:
9c:8f:df:a7:a8:6e:d6:77:0d:0d:3f:17:90:f5:f8:
e4:e9:a8:7d:07:27:5f:83:88:35:7d:d4:42:5c:b3:
2a:6f:41:87:76:79:98:9a:2f:93:0d:7a:68:11:0f:
2c:72:61:f6:b5:d0:e4:7b:07:42:1c:26:ea:d4:73:
7e:c3:14:a3:e4:f3:74:ba:59:41:73:84:91:f6:f9:
95:de:16:b2:60:90:7e:1b:25:17:2d:24:29:c0:9f:
86:36:df:1f:e6:6b:fb:bf:a1:fc:a7:e8:fe:53:1f:
69:3b:7b:1f:32:c9:f6:85:26:70:72:76:9c:4f:10:
62:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E1:90:73:22:E4:A8:0B:DD:DE:99:AA:96:4F:B8:4F:66:10:16:D6
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:85:c7:30:ac:6a:a6:aa:e9:b1:66:c2:44:da:8e:48:c1:0f:
24:7c:96:b9:b6:b3:92:c4:5f:7a:14:6f:49:15:1e:1a:ed:13:
d9:fb:32:45:e7:e0:f3:b7:78:d3:1d:88:b5:e8:6a:1c:aa:45:
a6:8a:89:dc:85:fb:6f:7f:63:de:74:c1:90:45:18:55:b6:5e:
bf:62:9a:df:67:97:04:73:8c:94:bf:fa:dd:6b:ec:09:58:cb:
4c:a9:24:4a:1b:92:91:a9:a8:f3:5c:88:8a:5e:7c:c7:8a:4a:
f3:4e:fb:9a:92:03:a7:50:ad:12:99:da:b4:67:8b:7f:dd:84:
ef:8a:33:0a:6e:75:4a:85:e0:29:92:a2:7e:5d:66:7d:ac:da:
3a:a2:8c:e6:95:04:3e:ad:7f:43:7d:2f:9f:6a:84:dd:c4:eb:
c5:bd:9b:fd:59:5a:ca:f5:01:e6:fc:0a:87:71:f1:5e:c5:58:
97:dd:7e:bb:4f:e0:2d:c2:8e:80:92:4b:ca:f2:48:c3:ca:f3:
31:38:6e:6b:07:b4:1f:63:c2:d0:39:ea:90:fa:85:df:79:59:
a3:90:4e:65:d4:fd:03:34:1f:82:f9:b4:53:aa:51:7c:09:36:
4f:71:de:3f:6e:e3:ab:f5:c2:bb:a0:c8:cb:b5:e4:2e:41:37:
69:4b:41:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 22:58:27 2026 by rpki-client