
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
File: UFkuaIlccGi0ZVUIkXrVu929Cl8.mft (raw, json)
Hash identifier: q1saybhdb2w2z4m8XBYgQI0FJWRIi5D7OXZGpCCdm+U=
Subject key identifier: 3F:11:4E:16:14:EF:A4:20:47:E6:33:28:0B:3F:8B:CB:B4:99:C2:77
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 019CE6DAB1F8F9CCDA860F08E15C2ED41F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
Manifest number: 18A3
Signing time: Fri 13 Mar 2026 11:00:17 +0000
Manifest this update: Fri 13 Mar 2026 11:00:17 +0000
Manifest next update: Sat 14 Mar 2026 11:00:17 +0000
Files and hashes: 1: 6cPzePL8SbPhYxlEre30SLCYl-Y.roa (hash: bpE4jQ6I0nBPjXRqOCXt82xgQ0N1iRPYG2gk58BlGfE=)
2: 7qKC_f93I4x5vZAkFd7YPrFcC7k.roa (hash: Fej8whp10bdKNIubAsMMxHxf8nDoH0W086yoYql/4Y0=)
3: AglMX7mwwb3rspJEIopyVPwTx-E.roa (hash: S+AWhAQbQR4GQpkHiPCQOCsaczJj/pHTNHnGM4CmrlA=)
4: H02yV6HgXbkB7Sblo8iq_zMpEUA.roa (hash: wdaj1AYOG7ohn8sLP/a8ErBCpxjqgUG9MpQNoEmcpoE=)
5: MNvipI6k91242S53W3jqVcArQhc.roa (hash: 7sDpPYB99HElo2KA5xuF+lvuTcscLhsFKunpulQrN5o=)
6: MiUKM4-anjUIiLLo25o4aW1endE.roa (hash: 8GJk2lpNvqF8G6oHGKOgI8d2pjeWdDUhOm/xZPhFJK8=)
7: NFAuHU7LF_HyqchSKTj8EafONIY.roa (hash: 6n1a8gPcx7eZe6weWqKlrMFgR6RhTx10TMdXBJFAWF4=)
8: UFkuaIlccGi0ZVUIkXrVu929Cl8.crl (hash: Bar4ZZwud9195Jrvi4w2xzkRGuo9Az81c3m01MTVL7o=)
9: WFdUi3XXatfTABnfBpngGAHzARo.roa (hash: kKjPRwwZCBaY9u1h1EFLYB9g9DPTFuUTOwPzWAxE6M4=)
10: Zpq31QxZEBIlYUReZR_zQ9fqz_s.roa (hash: kvahSoEODcR6XaCVi1n2GMeJPQJl3cEsFyNEhPCk3BY=)
11: bHuZc9mUYBcqpEDyA_8H3U2OWFM.roa (hash: LIqVQ9mxztvdOqUbAJcArQV2MAsX+TwnaJ0MIMH4BK4=)
12: dvCXrpuIgKHCZtQqB3diL4N4JNk.roa (hash: fvscbXWy0N/msqi2rtIwXgUHt2kq1AX6g+9LTX7Mfrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:da:b1:f8:f9:cc:da:86:0f:08:e1:5c:2e:d4:1f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Mar 13 11:00:17 2026 GMT
Not After : Mar 14 11:00:17 2026 GMT
Subject: CN=3f114e1614efa42047e633280b3f8bcbb499c277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:66:a6:29:15:18:d2:e7:a1:67:e9:91:cd:
85:b9:6a:2e:98:a2:08:14:b0:29:84:31:fe:de:c9:
03:eb:f6:2f:20:8e:12:68:a9:50:ff:f6:bc:0d:a4:
bd:e0:54:16:cd:b4:0e:e8:50:8e:d8:21:5a:e5:10:
4d:86:f2:d4:3a:a0:92:78:ed:d7:5a:25:4a:82:5c:
1d:14:50:ad:ed:58:84:4c:1e:23:d6:4f:05:0b:a0:
2a:1f:40:0c:6a:60:b9:7a:d0:a3:b1:dc:64:81:21:
7b:f4:ea:bf:13:64:6d:b9:8d:b0:70:73:4a:ba:78:
9e:1a:e0:97:c1:32:ef:1d:77:b2:ea:9d:64:5d:bb:
4b:c2:ab:8f:99:fc:63:a9:3f:63:aa:69:73:b6:e9:
7a:97:87:f4:eb:ae:9b:d9:72:8b:2b:1b:92:9b:d8:
c4:2f:a6:bc:16:61:e5:c5:1a:89:3d:be:55:5c:90:
d6:62:cd:97:43:ee:17:bf:1d:5d:ed:72:3e:54:ac:
fc:cc:35:32:0a:4c:fd:64:7a:89:74:72:61:16:fc:
57:c1:03:73:7f:27:09:61:cf:5c:e1:4e:ed:77:fb:
dd:38:07:e5:34:72:0c:f1:05:43:5a:58:de:95:c6:
e2:62:b7:80:cf:97:a6:6e:d1:4c:fe:07:fc:99:84:
28:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:11:4E:16:14:EF:A4:20:47:E6:33:28:0B:3F:8B:CB:B4:99:C2:77
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b6:09:2a:e2:0b:02:08:14:3c:1c:38:18:04:24:80:ab:15:
d7:c0:dc:29:41:35:57:5f:8a:63:a8:cb:47:33:a2:21:a2:ba:
da:fe:9e:2f:07:3f:21:65:6a:4c:34:e3:36:7b:60:ea:fd:09:
bb:d7:8e:7f:a3:b3:b3:d2:26:5e:2c:4f:e0:f9:8c:09:77:7d:
3f:ae:09:3f:78:fe:2b:43:d3:72:35:25:e0:2c:01:8d:7f:b8:
c2:8a:60:d4:c2:9c:5e:f1:b6:32:94:61:23:ce:cd:b9:d3:5e:
b0:8c:5a:b8:c9:af:23:12:21:a2:59:0d:0c:91:3e:24:66:1c:
a4:e4:1e:a9:3d:4f:07:58:5a:c2:e4:10:2b:68:86:9c:5d:d8:
ba:0b:f9:30:3d:74:05:e6:5c:80:de:c9:74:b8:8a:f8:6c:e2:
5d:7d:89:17:c9:ba:a3:13:9f:48:de:4d:ae:fb:b2:d9:b0:0f:
ae:5a:51:9e:f4:4b:3b:99:0b:9c:a1:3c:aa:71:8c:34:dc:99:
e7:40:30:b2:2e:eb:83:5c:14:43:5f:44:69:aa:97:31:62:c7:
bb:18:4d:4d:ec:38:79:0b:47:f6:50:85:7f:aa:30:b1:9e:e0:
23:e8:93:a2:47:58:16:10:1b:07:a0:50:16:3d:78:b1:8c:dd:
8b:9a:d7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:30:27 2026 by rpki-client