
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json)
Hash identifier: HP55UHKOYbpvMmbQKwywfU1LeTFzVBliNjo538GJbaQ=
Subject key identifier: E2:64:7C:D2:81:0D:7F:80:9A:BF:A7:D2:A5:C5:1B:10:A7:E5:7B:74
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019CE448A6A60D1D52469C5D7137A6A3C859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
Manifest number: 1877
Signing time: Thu 12 Mar 2026 23:01:32 +0000
Manifest this update: Thu 12 Mar 2026 23:01:32 +0000
Manifest next update: Fri 13 Mar 2026 23:01:32 +0000
Files and hashes: 1: 1-Av5slqVQGl13SrEfsDMUE9C8xw.roa (hash: fHxcC/pLnuuTMmJ/MEePK0x7KhULD48H+HBYLlLnLM0=)
2: 2rAGmumAatpMz3kw0VsK7nvOOnQ.roa (hash: QkO7bxWZSDvJ15l2k1OHawSRFNSNmwY3Ip4idTP8XgU=)
3: 4b5IG88yGY57oOV8rMMD65D9450.roa (hash: L2WJBC1WPudMtSgpBc/n3eAovKHJ7Y5NfWrM/nSEbtE=)
4: 4kfyvx6IcqlCxed7fdvb4m5sTD4.roa (hash: KVGLl3eS3kXmc+q2aJ0R4MjOlnAmyZYkvCj/Q8Juapc=)
5: E0o_FE2T3DZ1D-UezcaaMgIR4Cc.roa (hash: 5MnQxHTjDi2NDKJrwnJ1AAzWp+hIpNaMlweOYJUqXj8=)
6: HfpMqcQpb_Oyo8q91Gxgrjfcnfs.roa (hash: 3z+4GXfqGZOD8OYrsC4T9FL0WEjQRqb08RZme3k48Lw=)
7: JsVZuQIKNIHzo3qKU_aGaN9TGy0.roa (hash: W7p0gBk862eedQpONG4wyoOk08n0osQClMT4stp+hJs=)
8: PyPswdGk1ZVrHOm_LMSZBjhQB1A.roa (hash: +8V8Dt++uOTSXhRHoCWJ+fxEyoBe8YcJTvD0shhiPWM=)
9: V0ZbvO-Kau_hina_xax1FtPv3HU.roa (hash: 5pDhKp4j1D9CHXJw1ml9s4a1yEyDrOVGDOf0oK5BSVI=)
10: WrWwHOItDmU_S3g0-w_cgsaPRFA.roa (hash: jNNtsFSn9AMYEFYuH0fqqD4hwORadbXk3pHoHndZnnc=)
11: ZJD3Q6iJx8-f2YHw1Hw_i2VwDds.roa (hash: 4ehtslOSeTUspbDXf2ztNXuLiv7hRwHykkGiKzcBHMY=)
12: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: 6cEDdn/uIwURRDqsCSf3KcZQg3ZYWI89uV99IEwiUnM=)
13: oU210CVFzLuiQyHcf_YEp8pxk6M.roa (hash: HDzrvRtHa5TwJys+/lsPvAJ6xNgxTrYnp7lOvSNjpgo=)
14: oYXyy77jFFZFt2039BhjAw8G3L0.roa (hash: Cn7bnwSGye9UBPsmnOsVK1mE3z5k0eAVuqmgNwd2Ik4=)
15: pOcafHbNpE6IufWUjCXZs2WWYP4.roa (hash: lDDN8g4MAtlbqtSRtBrtfZVHqI5iUxRV0FsUbPWXCHU=)
16: s1pXuGWW8y0eMDg2PLAPlJOS44g.roa (hash: 65AbhQkFbG41XkwAPCWwnfEfJS7XNkEvl4ocnYbT4oA=)
17: tKQOFu4gDtiR9E_Fs5E_WSdxqYs.roa (hash: WdBgiiX6jEX+9nf9y/4sf97cV0r9Y0+TqLFDE6JwVjA=)
18: tZjmsStp0VcKPFFLWR9K3de-3PQ.roa (hash: OEQhtHW2/RhfDyyYWpUnjsi1Rb0UQYxvnkk2lrldW2w=)
19: yt4sMwydKd-q7CRhhaUoMNZQcYE.roa (hash: HAZLAfvTvsad0Yf/uypEMiAh8+oiLiVNNSNJqAQE/M4=)
20: zMHnxNkGZBmoNQowVHKQvmrR1So.roa (hash: 5IVAfxXNsWU6GCJqjsRbswDzTaG988IprK4skA5INuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:48:a6:a6:0d:1d:52:46:9c:5d:71:37:a6:a3:c8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Mar 12 23:01:32 2026 GMT
Not After : Mar 13 23:01:32 2026 GMT
Subject: CN=e2647cd2810d7f809abfa7d2a5c51b10a7e57b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bf:c9:67:b2:28:e7:34:b6:0b:5d:36:d9:7c:
dc:69:27:ca:ce:e7:79:2c:3b:0e:ca:2f:06:f8:f1:
19:47:39:9a:c5:d2:62:38:a2:49:98:2b:f6:8d:10:
cf:3f:c2:7b:2b:18:86:eb:3f:11:1c:e0:5b:c2:10:
eb:3b:8b:3a:4b:43:cd:9d:81:2d:4d:b6:11:75:d6:
73:f7:45:7f:f5:32:b8:ed:2d:c4:b8:71:8f:a3:9e:
cb:a9:49:9c:1a:27:f6:04:fa:ff:ce:c7:ae:a9:89:
fe:ee:7e:e6:eb:42:d5:2f:fa:90:a9:da:10:fb:65:
0c:24:cb:61:70:f8:6c:9a:4a:09:87:60:34:de:8d:
4c:5b:15:0b:a4:26:47:37:66:50:c9:bd:15:97:7f:
e0:21:15:e4:f7:2d:9a:2e:f9:42:3c:89:64:b5:3a:
9c:5c:a1:58:d0:de:9c:62:da:e2:c1:00:9f:4c:e7:
5b:65:0a:d4:fd:d4:81:99:88:97:40:12:66:96:7b:
80:b0:b4:01:6e:8d:92:cb:78:76:76:99:c0:43:d8:
54:81:8c:7b:4f:11:9b:c6:e5:9d:c7:20:02:53:4d:
38:06:64:93:ac:24:a2:53:6c:1e:09:c2:ac:20:6a:
91:af:62:3a:84:aa:2d:b3:d6:8f:31:c8:ea:c4:97:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:64:7C:D2:81:0D:7F:80:9A:BF:A7:D2:A5:C5:1B:10:A7:E5:7B:74
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:95:12:63:4a:59:b4:7f:6a:3a:18:4e:6e:82:f3:72:f3:85:
76:29:bc:d1:75:df:fa:89:de:45:34:85:9f:fe:73:8c:d4:75:
00:ba:fb:04:42:a5:5a:fc:a2:8e:aa:b0:ff:84:45:75:ce:dd:
a6:ce:97:7e:00:64:8e:cc:03:a3:c9:a8:fd:01:1d:ef:28:0f:
f3:b8:44:f0:93:bc:bc:3a:d6:0a:f0:13:eb:21:4e:67:0e:6d:
60:85:65:e0:35:96:01:f6:1a:8d:1a:5c:9c:07:c1:e4:13:0e:
fc:de:07:60:23:53:bb:60:f8:37:8d:fc:74:09:dd:67:ff:01:
e2:8f:8a:17:51:77:af:5e:8d:0f:62:46:ee:e9:d1:e1:59:51:
20:f6:dc:ff:14:20:20:5d:e5:56:ad:e6:c2:f7:a3:3c:80:fb:
2a:85:82:3b:55:6b:02:b5:24:07:c2:42:33:6a:ff:ed:02:2f:
2f:8f:27:20:53:d1:cb:c4:23:0d:57:1a:70:13:f2:df:e4:62:
e9:29:34:f3:6e:58:15:67:40:37:13:4f:bb:bf:32:3b:85:b5:
b0:0b:bd:a1:e6:47:96:2b:99:8c:ae:a3:74:b5:57:10:f5:f1:
6c:94:15:32:4e:3a:19:46:ef:d6:c1:e6:a1:fe:3b:68:eb:44:
1b:b3:43:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkSKamDR1SRpxdcTemo8hZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1
NTEwNTUwHhcNMjYwMzEyMjMwMTMyWhcNMjYwMzEzMjMwMTMyWjAzMTEwLwYDVQQD
EyhlMjY0N2NkMjgxMGQ3ZjgwOWFiZmE3ZDJhNWM1MWIxMGE3ZTU3Yjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr/JZ7Io5zS2C1022XzcaSfKzud5
LDsOyi8G+PEZRzmaxdJiOKJJmCv2jRDPP8J7KxiG6z8RHOBbwhDrO4s6S0PNnYEt
TbYRddZz90V/9TK47S3EuHGPo57LqUmcGif2BPr/zseuqYn+7n7m60LVL/qQqdoQ
+2UMJMthcPhsmkoJh2A03o1MWxULpCZHN2ZQyb0Vl3/gIRXk9y2aLvlCPIlktTqc
XKFY0N6cYtriwQCfTOdbZQrU/dSBmYiXQBJmlnuAsLQBbo2Sy3h2dpnAQ9hUgYx7
TxGbxuWdxyACU004BmSTrCSiU2weCcKsIGqRr2I6hKots9aPMcjqxJfnwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJkfNKBDX+Amr+n0qXFGxCn5Xt0MB8GA1UdIwQY
MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct
YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh
LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZUSY0pZ
tH9qOhhOboLzcvOFdim80XXf+oneRTSFn/5zjNR1ALr7BEKlWvyijqqw/4RFdc7d
ps6XfgBkjswDo8mo/QEd7ygP87hE8JO8vDrWCvAT6yFOZw5tYIVl4DWWAfYajRpc
nAfB5BMO/N4HYCNTu2D4N438dAndZ/8B4o+KF1F3r16ND2JG7unR4VlRIPbc/xQg
IF3lVq3mwvejPID7KoWCO1VrArUkB8JCM2r/7QIvL48nIFPRy8QjDVcacBPy3+Ri
6Sk0825YFWdANxNPu78yO4W1sAu9oeZHliuZjK6jdLVXEPXxbJQVMk46GUbv1sHm
of47aOtEG7NDmw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:24:22 2026 by rpki-client