
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json)
Hash identifier: 7OU0xj2SC26ZEud9Wcd9mbeE3CzNuWc/34HUdsJBkso=
Subject key identifier: 8C:33:04:37:6E:E8:6B:E8:36:CE:85:45:4A:DF:66:F2:7D:E0:78:C0
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019DCFE39A962238FF36ECDD543980657F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
Manifest number: 18F1
Signing time: Mon 27 Apr 2026 17:01:33 +0000
Manifest this update: Mon 27 Apr 2026 17:01:33 +0000
Manifest next update: Tue 28 Apr 2026 17:01:33 +0000
Files and hashes: 1: 1-Av5slqVQGl13SrEfsDMUE9C8xw.roa (hash: fHxcC/pLnuuTMmJ/MEePK0x7KhULD48H+HBYLlLnLM0=)
2: 2rAGmumAatpMz3kw0VsK7nvOOnQ.roa (hash: QkO7bxWZSDvJ15l2k1OHawSRFNSNmwY3Ip4idTP8XgU=)
3: 4b5IG88yGY57oOV8rMMD65D9450.roa (hash: L2WJBC1WPudMtSgpBc/n3eAovKHJ7Y5NfWrM/nSEbtE=)
4: 4kfyvx6IcqlCxed7fdvb4m5sTD4.roa (hash: KVGLl3eS3kXmc+q2aJ0R4MjOlnAmyZYkvCj/Q8Juapc=)
5: E0o_FE2T3DZ1D-UezcaaMgIR4Cc.roa (hash: 5MnQxHTjDi2NDKJrwnJ1AAzWp+hIpNaMlweOYJUqXj8=)
6: HfpMqcQpb_Oyo8q91Gxgrjfcnfs.roa (hash: 3z+4GXfqGZOD8OYrsC4T9FL0WEjQRqb08RZme3k48Lw=)
7: JsVZuQIKNIHzo3qKU_aGaN9TGy0.roa (hash: W7p0gBk862eedQpONG4wyoOk08n0osQClMT4stp+hJs=)
8: PyPswdGk1ZVrHOm_LMSZBjhQB1A.roa (hash: +8V8Dt++uOTSXhRHoCWJ+fxEyoBe8YcJTvD0shhiPWM=)
9: V0ZbvO-Kau_hina_xax1FtPv3HU.roa (hash: 5pDhKp4j1D9CHXJw1ml9s4a1yEyDrOVGDOf0oK5BSVI=)
10: WrWwHOItDmU_S3g0-w_cgsaPRFA.roa (hash: jNNtsFSn9AMYEFYuH0fqqD4hwORadbXk3pHoHndZnnc=)
11: ZJD3Q6iJx8-f2YHw1Hw_i2VwDds.roa (hash: 4ehtslOSeTUspbDXf2ztNXuLiv7hRwHykkGiKzcBHMY=)
12: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: xw/wC0jsu2R8k8zmcKyNlJjSRDQPKyBlK3xPi9PifzU=)
13: oU210CVFzLuiQyHcf_YEp8pxk6M.roa (hash: HDzrvRtHa5TwJys+/lsPvAJ6xNgxTrYnp7lOvSNjpgo=)
14: oYXyy77jFFZFt2039BhjAw8G3L0.roa (hash: Cn7bnwSGye9UBPsmnOsVK1mE3z5k0eAVuqmgNwd2Ik4=)
15: pOcafHbNpE6IufWUjCXZs2WWYP4.roa (hash: lDDN8g4MAtlbqtSRtBrtfZVHqI5iUxRV0FsUbPWXCHU=)
16: s1pXuGWW8y0eMDg2PLAPlJOS44g.roa (hash: 65AbhQkFbG41XkwAPCWwnfEfJS7XNkEvl4ocnYbT4oA=)
17: tKQOFu4gDtiR9E_Fs5E_WSdxqYs.roa (hash: WdBgiiX6jEX+9nf9y/4sf97cV0r9Y0+TqLFDE6JwVjA=)
18: tZjmsStp0VcKPFFLWR9K3de-3PQ.roa (hash: OEQhtHW2/RhfDyyYWpUnjsi1Rb0UQYxvnkk2lrldW2w=)
19: yt4sMwydKd-q7CRhhaUoMNZQcYE.roa (hash: HAZLAfvTvsad0Yf/uypEMiAh8+oiLiVNNSNJqAQE/M4=)
20: zMHnxNkGZBmoNQowVHKQvmrR1So.roa (hash: 5IVAfxXNsWU6GCJqjsRbswDzTaG988IprK4skA5INuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:9a:96:22:38:ff:36:ec:dd:54:39:80:65:7f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Apr 27 17:01:33 2026 GMT
Not After : Apr 28 17:01:33 2026 GMT
Subject: CN=8c3304376ee86be836ce85454adf66f27de078c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:74:e1:01:48:4f:95:4b:a0:68:85:fd:a3:65:
6c:0e:7d:88:3d:44:a1:b5:20:8a:1f:87:4e:97:ea:
69:7d:1a:83:20:71:5f:07:ea:28:90:b7:8b:f9:99:
76:87:e0:11:12:d5:a8:b2:c8:27:9f:fc:7b:b9:48:
49:14:ea:88:fb:ed:55:e6:8c:2b:0f:d0:be:cf:e6:
1f:15:0c:f4:9d:2f:41:b0:66:c2:a8:f0:8a:19:07:
05:27:01:62:b3:d8:40:d4:1b:81:7a:90:33:c1:d6:
c5:4d:50:b1:85:5a:55:f2:4b:5a:69:37:f5:dc:1e:
6a:cc:6b:74:11:29:4c:c9:bf:f9:c2:e6:50:99:31:
b2:e7:b6:5c:3f:43:c8:cf:66:9c:bb:3a:e0:01:0b:
c5:5e:10:1a:6c:d8:26:7b:ad:60:8a:17:93:1d:e1:
26:e3:e8:c2:c4:dc:32:76:9d:b2:d3:ea:09:0b:45:
50:e3:dd:4e:fd:d8:d0:6b:86:13:d9:07:59:e2:0b:
32:3e:e2:ce:e9:74:0e:fd:e7:d3:91:79:95:cb:6a:
c4:0d:28:1e:99:07:25:3c:ad:cc:70:fb:91:65:ff:
9f:db:7a:01:e4:64:cd:62:2e:d3:ef:75:21:32:61:
5e:2a:52:0f:58:bb:8a:14:6f:bb:44:d4:80:ab:2e:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:33:04:37:6E:E8:6B:E8:36:CE:85:45:4A:DF:66:F2:7D:E0:78:C0
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:23:40:cb:27:f7:fa:f9:3f:9a:92:52:72:11:97:6c:8c:33:
16:3e:4b:e0:14:4f:3d:b5:ae:07:ff:5e:ee:7b:bc:5a:db:eb:
7f:9c:9c:7b:05:30:af:98:58:fb:46:86:9a:2b:e1:7a:0c:40:
87:c9:59:f3:34:2c:5f:7e:8a:60:eb:68:07:11:27:db:d4:bc:
35:ce:2c:63:1f:0c:a9:57:38:47:65:3a:f8:e6:53:40:b4:0d:
5e:f6:9d:8e:50:6f:d0:72:34:76:07:95:18:fa:e3:6a:e1:49:
b6:6b:5b:cf:59:63:c9:81:c4:34:91:c6:9a:90:b3:99:db:56:
6b:b9:c5:bc:2b:ee:b9:6b:41:48:50:6a:75:7b:fb:83:d9:22:
84:26:f6:ce:41:5c:f3:32:60:fc:bc:ea:c2:26:88:07:0f:ff:
e1:bc:6b:71:48:51:8d:a7:96:89:3d:ab:81:12:88:84:21:7d:
48:a8:65:99:d7:b4:61:5c:27:50:24:16:7d:92:14:63:ec:af:
16:3f:4c:80:c4:45:fb:9b:11:c0:ff:81:4a:5d:7f:69:c7:cd:
28:27:52:b1:f8:a2:39:b4:66:5d:8d:81:28:f5:28:ec:6b:32:
eb:24:c2:a5:ae:57:fb:05:cb:91:0f:cb:c2:17:b5:4c:05:08:
91:52:cb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:47:34 2026 by rpki-client