
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
File: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json)
Hash identifier: Ytmw1++Pcs+KTbOBPjCcMgVOOBpDnlJ7OyAB0C6k+5g=
Subject key identifier: 0F:98:8B:17:B4:E5:5C:D7:18:A4:0F:49:40:95:1B:2B:43:D2:C7:79
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019CC63D8DB5F5DD4CA842E002A7BBC9CB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
Manifest number: 0AF0
Signing time: Sat 07 Mar 2026 03:00:48 +0000
Manifest this update: Sat 07 Mar 2026 03:00:48 +0000
Manifest next update: Sun 08 Mar 2026 03:00:48 +0000
Files and hashes: 1: 0HsNFbCt7xZFbqyj4qagZ4GN8Fc.roa (hash: D7nFDm9EOZl0pfPr5lH68t3xze3XAzaunrVKUeY1iY0=)
2: 0SRirIwsKE3ftAKD4a35MRr_dPA.roa (hash: veCz5+5lA2DIQJsKzs5T1knDyARu7fejsnmOMdvjZwY=)
3: 4Qw48SU09uD09gDzvKJ3ToG3nps.roa (hash: XyehKiSEMoHhyzl149H1r6nIyf0HKY1BvP6ffcAaXaA=)
4: 4Sx5ZBCD2Xo186rzplqlwJ6UC4I.roa (hash: EedOvbINinIPr1nDTQjADXAtFVJTDiOy2bXsDFfK0Ms=)
5: 50J8xvTiYpxoT6X5usI8sSXAWZ0.roa (hash: yA1b6VA0exwZuz0IlvIe7HYwnFg5lqsNlzVDXDKLzBw=)
6: 6ukLV0KulIPLZFYeMSixVEL1RhM.roa (hash: wWVKYiLRQV/kCSgMzDQKw35a/Is44S5aHAIYhJlN+Hw=)
7: 84-gr5Fvge6KrYBg8cW-K5m-lWY.roa (hash: g3nR2JZWccrgmSrxSD1ijsr/7vdXfXIIaehHLEnuPX0=)
8: 94IWAiwtIxj1_7vSB68lXR75Qz4.roa (hash: PoUv8ick/XzPCPDkQB4xirKEOxjjjPN5SVmI6BX5nNU=)
9: 9K1LCa_BZxwmFKziFmKg5k9ZSPw.roa (hash: zcfTdUdCdWCGykQ8Ef/AtFMrZXL7riKrfHYVxi7rWFQ=)
10: CIJFxac5vdItrVRYlUcRRLbMyNY.roa (hash: ZXW9qFycMvFfSZ67NEpqlrnS/V4D5ngtH/E6coUsCUc=)
11: JqdskFuFmziaPGBY-7Tw9Pq4w38.roa (hash: aCu+I3qlWKZ9XlpWlRNcOlsLioSGa9tu6gGY+pIX418=)
12: O2OJ3t6MeqBUOLrqcqvjb5iXA0o.roa (hash: juwmeIUpdvT19Vy7e7M0nGB6sx/8sNLDPiHMWAyfnds=)
13: OfqA5pqJ4fJkpwDwUYuXxU3k4C8.roa (hash: Nh/1DT2PYHL73mgdwju8HsKlz3EXBSwiw8LM7YgOmrc=)
14: Uwe--gB6ylGJNxhfuiansY5qD4M.roa (hash: 1RQqYvxgWhqs5inThD8ruAxw/Cxc0/5ka5AdJ7o+12c=)
15: Yt_dqD1__D-0SfFduIjRZ9GoAOI.roa (hash: dIfa+Z6th3TwiAEy02BL8XC3kuyu4btAilmHb+CteHU=)
16: ZAXWWxV_g0guWhxvtcTaPAClorQ.roa (hash: /1ePGts9zGO64Aq7aeLnS25SFc247LH2DdeZkd1fO/I=)
17: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: Oppmf6LUolH4NB1yR3zGOCXU3zm+7JdPlq3I6i5tb3c=)
18: _VGCfSLVW2xdJN6JGmh9iEsjqVg.roa (hash: tkrgNphI56yShQNt5RlRqqWTglZrf57Ok9IMT/BDMV8=)
19: dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa (hash: M45icBBYjNepxwAD8s0pUTrLlqvx/fyNCz11mkbuFSU=)
20: gWUoPtKu4Ygknkyrez4F7XlU7JU.roa (hash: 9nDIkHs65Wge6gpKCtTP63Y9gCXb0tsZlxUtihUCR5E=)
21: jDcM852-cAOnhmJ-3jD7XGUBeDQ.roa (hash: KRHKVKdREjQKUoYh6DwL2B3FLBC/y8sgqqKca5qYK2c=)
22: klATNb_dpL1MuOfOSHXHNV7NKYA.roa (hash: 3/mSvKnCetqv9HT/uztrqLgijhidILzVStqqGF+dS8A=)
23: lmDQ0YmBVfaXNR4aAq4_by6MxfA.roa (hash: FEBipsDe2kiHOpdSQ5fsMMhtl58TALl4PTqt07iBWG0=)
24: nIm8PpBVGgztWV3R6eaqer3EUVM.roa (hash: LcWU5HridOIZz2AMiVEN1+lulIcQD0wPOniiN2X22fs=)
25: wrXPrBkvVYEiubXH_1rHl5x6rRY.roa (hash: ErXBvOflUDPT4rNXBY8cKsHB/p7pBztp4XIa2fvVsWs=)
26: xfA0_z8nF9jogJTt8JvDJWiwKd0.roa (hash: 4UoytCa8mc6+13s7j6+TJjXwUJP2qWBxDCO/3czDtbE=)
27: z13Fw4Baa0Cf6jqQgcmcdGaY9lY.roa (hash: N61RklKzFSZ71nW5Q0awQlylDE3NsNVur5bGxsKSODA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c6:3d:8d:b5:f5:dd:4c:a8:42:e0:02:a7:bb:c9:cb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Mar 7 03:00:48 2026 GMT
Not After : Mar 8 03:00:48 2026 GMT
Subject: CN=0f988b17b4e55cd718a40f4940951b2b43d2c779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b8:43:02:22:28:7e:12:ab:2f:e9:01:4a:50:
8d:bc:db:be:46:b1:ef:31:0a:f5:b7:a2:f8:e6:70:
f4:15:aa:fd:ff:76:ad:b2:4b:c4:8f:af:be:ef:a6:
da:44:9b:8e:33:59:2b:14:18:11:b8:94:e8:f1:ea:
c0:2d:63:d3:74:60:39:01:b6:4b:6e:81:9d:16:e1:
35:7b:6d:dd:97:94:99:51:e0:16:73:ef:5f:a3:09:
0f:f8:e1:bf:86:e1:9d:f6:6c:63:01:2e:f0:ad:b9:
7d:21:15:a8:73:a2:df:12:e3:45:e3:05:9e:77:81:
62:ca:3b:2a:6b:b2:cb:a8:9b:9d:8c:a9:d2:2a:20:
3c:53:c5:1f:88:d6:50:89:8b:96:8d:a4:d7:d9:74:
ff:30:2f:dc:b4:3e:7f:6a:b5:85:a0:ef:b0:c2:34:
50:50:a2:d0:d2:b1:de:f2:3c:ce:7f:69:3e:89:9a:
09:aa:02:5a:ed:40:d6:d2:28:93:19:68:ff:ce:52:
88:42:05:4b:cd:d0:3c:f5:62:8f:fb:84:19:de:61:
65:24:8c:0d:ef:66:44:24:cc:9b:23:74:0f:ec:b7:
3a:36:0b:0c:44:0c:a3:32:e9:9e:4e:23:bd:aa:0e:
08:32:8b:7e:8e:63:da:30:c0:9f:de:6d:4d:08:d6:
17:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:98:8B:17:B4:E5:5C:D7:18:A4:0F:49:40:95:1B:2B:43:D2:C7:79
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d3:24:00:ff:52:6b:82:df:ad:c0:6e:5d:ef:22:75:f5:63:
19:e3:ea:63:53:c2:3e:37:0d:1b:30:73:ef:fc:e5:13:a1:85:
4c:80:3a:67:b7:c5:ab:74:23:85:90:68:6a:d6:07:75:c3:3a:
43:f6:46:8f:98:f1:5f:3e:d3:b0:56:06:6c:e1:7c:ac:db:e2:
5d:f5:94:84:73:21:75:b1:da:89:ee:48:77:89:b8:37:f4:0b:
2c:a0:78:2c:4b:95:84:b6:86:69:e4:ba:e4:37:1f:1d:12:e1:
20:e0:cc:3d:47:dc:99:c2:24:20:6e:72:62:81:f8:15:b1:be:
a1:c9:8c:12:79:43:40:87:b5:46:b7:ce:3b:27:16:cc:82:2a:
ec:95:22:a7:fa:37:2d:a1:9f:a8:c7:4f:c4:3e:3c:f8:14:88:
14:be:4f:9c:6f:15:e5:b8:b5:0a:ea:1c:a0:a8:26:46:f6:77:
7b:5b:4d:14:6b:cb:2b:a8:6a:c9:79:65:06:dc:ad:c8:7d:87:
b1:d8:3d:59:b3:6c:a3:32:aa:17:a4:28:09:5a:02:11:c9:19:
a6:33:38:1d:13:e0:55:51:89:27:fb:d9:5b:31:c4:fb:ed:e1:
37:68:f3:40:36:ce:3a:c5:ca:8a:08:e3:f6:2d:0f:80:7d:29:
9b:87:b9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 13:04:07 2026 by rpki-client