
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
File: CDfJmypMBi1cIGePnc8yB679Xng.mft (raw, json)
Hash identifier: FD9fjioD3fd+fiGC5J+gzIlD8KqD2apaPa0CCUSvWJQ=
Subject key identifier: C8:48:10:D9:D9:74:37:71:9E:0F:73:77:B1:8A:FF:A0:29:61:E5:08
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019CC4F418F760A40C81E08E816566426102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
Manifest number: 9B
Signing time: Fri 06 Mar 2026 21:00:57 +0000
Manifest this update: Fri 06 Mar 2026 21:00:57 +0000
Manifest next update: Sat 07 Mar 2026 21:00:57 +0000
Files and hashes: 1: 1-muju1NdZo7Yc8JsQEi_Y9DRF7s.roa (hash: iuLlbVe+JPEeIey84sRvj5Y7gApk0UlSqaLt4U2QnZI=)
2: 33u70MvUqnq9BWy8woIR9ReEp8g.roa (hash: V26MFc4KPnp3FOJSScLZu9CxUcJviC6lvXRwdVknnvk=)
3: 56rLaOuag9KwZkcYaOX_GJMDkPk.roa (hash: sYmw76c+cEmSCZkQgN00c26RCOGuzQ7Akuth74V/XDM=)
4: ALU4lrfxnhl5m2oPdQ-oHJb2-pA.roa (hash: UizsNWtRvtXjB0Eq8p0TWu+s5YYHjF4vhPWbATMeUCo=)
5: CDfJmypMBi1cIGePnc8yB679Xng.crl (hash: ApQrBW1MupjmqFarR14QuPlptqAlND+kUhOJkI9wuLg=)
6: CvsV-YSFG_gQ02uWtpIV06EYaIA.roa (hash: 6wW0lDnG3Fm2FSHZ7/7E7EJzl8nSZSneoN1/6dBomaQ=)
7: FmT3AytipE6RDV5cuOHkUzA5dU8.roa (hash: SfTSfiuFUVaAwv401YTCavtE9gslX9egFs5gc/0CGxw=)
8: MjH7rYvcoIBIIXOCcWnHyYzaWGU.roa (hash: A7+Nj4h3vWqBFhVvrrR+Y6W3dHM5p+6Sf560u65fizo=)
9: PMbKQ_uUlrPevpZsNx0eXksTqOY.roa (hash: SnQSjPH+aFHvy6nc0KoA3L9eJTHfO0AG19ulVcVHwqI=)
10: SbQrzw5bedEzafBuBFrQvUpgX5w.roa (hash: N6GnlqTTOzlBqifhZ0vVNFyM6GeaLcSbXxk2VxlzMlQ=)
11: USubDOC3xDx87K_ZTK3Z8oHsnzk.roa (hash: 9vyXWFhXgTXFACbWChjUbuv0OPwPRlxioKYF+gj4N1w=)
12: VmanDZNFkgEbOQupfK0om4KXePI.roa (hash: mjsJC9NQUJfwnjHZ+fWyZnDY0q9++cAuJDUVwIpX5Qo=)
13: _6ixJuOyBdDWsrg7PfndJ2TSGK0.roa (hash: F0rHZIZZ2rx/QrDQPKEtB+najpsBYGjbpBhGiX4HEZU=)
14: c7e8TMKnjbKREmIPhM2iVAwtVz4.roa (hash: DwLKG/rgMtsh13mYN9s34/1rpw6KSfL51Fc7xMsuS+M=)
15: coXqMHKib-sn22ZEmVL4c4YPBzI.roa (hash: m/f2FxxNOo0PJVGCb4IMQyNlrMZaGhuA43y2Bq1/DIo=)
16: gnMijO_h2dwSXcAM1Vk2QMu8Rvg.roa (hash: ItKHpfgvI2G2Bf7qHm92obBb65iYE/zCUTjfAlC2kIg=)
17: oEzd70GBc89wuPrghjleeGdo8sA.roa (hash: XTx9ORtlLm/ABttZFmHynm9a1AsxWcX+O0c3olAJQ7A=)
18: pXQUKLQGLhckSIvpsa2VL54Uxa4.roa (hash: pxVzwowTxbXt7CA8ylAQ8NwPwJGfKJGc5L84cDe95WA=)
19: pYqyRDZ3yKoa2ihOr54mHCL3tRc.roa (hash: ZEIRLcKve49FAAP8uRktT/jxMpkhtZPvKW4kSe/sfOo=)
20: ttKRpoiVWrMwuSA7NN9prqENEvU.roa (hash: u8u7w3czL6pxqV5BhS7+ojkyQ5W209E8gaNM6IitK7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c4:f4:18:f7:60:a4:0c:81:e0:8e:81:65:66:42:61:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Mar 6 21:00:57 2026 GMT
Not After : Mar 7 21:00:57 2026 GMT
Subject: CN=c84810d9d97437719e0f7377b18affa02961e508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:11:ad:0f:ba:04:5d:c1:27:30:d1:e1:e9:
07:1f:47:ee:1e:85:03:72:b3:eb:4f:ba:4e:08:4e:
5f:8f:14:61:3d:a1:c3:e8:19:0a:fc:32:54:ee:6b:
4d:8f:09:32:44:6b:c2:35:37:3f:60:51:20:8c:a4:
e0:e0:28:2a:12:c8:76:af:37:33:3d:4c:52:85:be:
ae:28:58:56:7a:59:d4:a5:e9:d9:bc:23:ec:c5:c8:
ab:ec:22:41:45:74:1f:ca:3c:f3:c3:a2:30:32:34:
b3:44:b7:05:5c:0b:de:e6:69:59:ec:ff:4d:99:a2:
05:4a:98:b7:06:dc:6d:01:64:31:96:da:ce:c1:6c:
15:83:0a:8a:30:f6:39:aa:a7:48:55:bf:84:de:1e:
11:76:35:80:36:46:68:65:8c:a8:60:87:73:36:be:
5d:99:c3:52:05:6f:64:ba:bb:5a:91:47:33:90:83:
b2:ff:b1:c4:6c:16:9a:69:65:40:bf:9c:d3:e4:c4:
37:e1:00:c8:d6:0f:23:30:e3:5b:a1:5d:eb:08:6c:
1d:31:34:1c:ac:e7:9f:f9:9c:a2:ff:97:96:03:3c:
db:1d:12:67:80:1f:df:91:61:2c:45:8f:5e:7f:47:
20:9f:8f:59:10:c3:4d:f1:08:22:ae:d5:28:ad:b9:
1f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:48:10:D9:D9:74:37:71:9E:0F:73:77:B1:8A:FF:A0:29:61:E5:08
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:09:50:ba:75:b6:84:40:a1:c0:46:79:d2:35:56:fa:67:f2:
d3:79:dd:48:3e:1a:dc:e1:53:41:09:f2:0d:a2:35:20:6b:0a:
a8:e2:e9:cb:60:bb:b4:d1:ba:62:2f:55:7d:f1:3d:a3:70:0b:
ec:46:aa:bb:df:7b:c8:99:6d:29:c6:29:67:c4:f4:95:c1:52:
65:75:2e:d2:6a:b4:81:0a:49:ac:61:3a:f3:b4:49:40:1e:14:
ea:31:c7:17:db:8e:07:dd:25:05:91:ab:ed:6e:1e:2c:90:56:
6c:a9:c2:11:bd:a8:d7:a6:41:c1:32:40:27:d8:ab:95:43:64:
64:ef:f6:90:e6:0f:c2:0b:18:78:a4:29:e7:24:4c:e9:3f:03:
13:93:50:fe:7d:bb:fa:22:65:17:bd:55:96:2d:70:9e:a3:4c:
f0:44:99:6b:50:34:26:12:9d:79:fe:d2:b7:22:db:e3:8f:a5:
8b:d3:df:81:a0:65:0b:cf:c1:a4:59:ae:09:e9:a0:9f:ca:2e:
3b:ff:b3:7e:8a:e3:9d:78:8f:63:af:f9:c4:0a:14:d6:89:de:
01:81:98:22:45:47:47:58:56:be:69:87:2b:0d:18:91:e1:f3:
96:3b:ee:9e:33:49:23:66:01:76:7b:8f:6f:82:9c:5d:7c:7e:
12:c6:8a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 06:27:10 2026 by rpki-client