
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
File: mh5pNoq9NFOP533aq83INa9ZXro.mft (raw, json)
Hash identifier: tzgm+8YMd3WqcW51G90dZV8xDGza5ejM1mE5scApSIc=
Subject key identifier: E6:56:EF:DE:CE:03:3F:7F:8A:49:E9:2A:78:2B:D2:CB:37:CD:B1:7A
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 019CE3DA972EA555BC3DAE52027405BB4259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
Manifest number: 1892
Signing time: Thu 12 Mar 2026 21:01:19 +0000
Manifest this update: Thu 12 Mar 2026 21:01:19 +0000
Manifest next update: Fri 13 Mar 2026 21:01:19 +0000
Files and hashes: 1: 2Hc4YFcU8ovqMtT3nDy_-Mmmpuk.roa (hash: By6JZckFdiOutj8o+6oMyXRB9HR4gdxFVnXhuj/iQm0=)
2: 2yaXAAUSdtsPMaSBJFquEdDTT6k.roa (hash: judwS/WZsJiXUyPGTQqvtLBMK0N9HxSeMb7YxOm0ElY=)
3: 3gGcFRvr1pwpGKp8J_owuE8piH4.roa (hash: NIgKE2RVbifnf8DXxCkQaZgBSHqic6iJrtoPDVmLBd4=)
4: 6d_ENWzH-VQ6PZSxBVnrr_FPch4.roa (hash: nLEVzgKnOcDJKPh426JAlzQMVVXnAa8GP6UiExx+ycU=)
5: Bfe7L2rRCwRxeEADyBmboJ0sWyw.roa (hash: jn4v7UaJGuF63x4KwRuVVxNuQK5XDXqr9trOmgkxfWU=)
6: CO3NGBtj6lvSDwNx7qgisnxcpZE.roa (hash: Ta+b1EmbPlRx8CBP3A/a0A01hRd22nzH/W3OVEU0ya4=)
7: DehND8NWso8fnWINtOcuecHBpxM.roa (hash: Gz26lK/lJI78kkVOCpMyQ4aBO2ZM1W96onuysw9+iUg=)
8: F40rkkhDW3ybCB_12cIOKOyXk08.roa (hash: h+hLlHz7DDayf/In7Q6RDRACl8fHTXkiC3/X/Kl3h7E=)
9: Jtp72CS2jEm3lTCDgWP7039dKYg.roa (hash: Q1Hpm3kD459iodRBV3umbkyn+j4+wiimsCk0/+2lO84=)
10: Ke0VSjrkP1jgta_WS5ntQtfKR38.roa (hash: yxWTZVrICzskJJpD6AIg7gNqPSzszPgc+Bf6OnBQWQw=)
11: Kqrj1I1nhBciDkKkCGbNHZhNTMY.roa (hash: a7/AaQlYcrFAkZVVuXf4+IUOGpcRC0INBiFnmBVtSx4=)
12: LnDxIxD-hluuct808CIO9EDyMIU.roa (hash: BcxRwhFwjkIGGKDrrvqL77SCEYThrU0rRvnjjzU14s8=)
13: MAhbKgRlvoF4_D9KUePJuDoAmS4.roa (hash: ZxoAbFForFx0WnVahVEJoAAhiXTlHQB8gaScqzkZ4UU=)
14: MOd1w7flMfCwv3SyFF--8p3elzE.roa (hash: EYwivvrV/eFyx237VqFEYH6spoOnfr8g4cHpOeBFaeU=)
15: McPz5S5PBhTWxGifH8fs1_NS2jU.roa (hash: KEIARx1I4vqfMuZP+WJZ2f9AE00BEAWPF5jqTraiMB4=)
16: RY84_ZI7xoALeQIscSY6f9kpXlA.roa (hash: z6waEn1aCDURcxsyuA7fD4JPp6J8E7kzdN0orgB/LDk=)
17: Rlj4VlWfwkfz6GkH-OueIIaSCuc.roa (hash: ii4MZTYhkg0ytZp/Vdsah05JAy4dduK8Ytc1ySn7mXs=)
18: SoVFcNc1lU_1SEfGUkw_ciUcpAQ.roa (hash: I90mbwCIchHVNf7BLD+pAvrY/vzh+76mAoOiyMR3xRk=)
19: Wu5XKk4A36HO6OHJ1FPfD_SFW8Q.roa (hash: BzMn4OoTVBTxxNmlLvxwZaB3pPDI9UpM0YGpy6OvehA=)
20: Zkjg3hn61JFL00ei8OTWJjwR5z4.roa (hash: 588yrYLogN7emBldqJ08eH+eoXXQ8TYe9+BBfSEy2Vs=)
21: _uRGOQez4F9IJ4Gje99KnY5dr8A.roa (hash: pCEJUwH1c1/puNRCPg+jE/RCxUnjqEhyrOo9cHXdY5Y=)
22: bXvBo_CQO1mQ2Jmfwik38TsSdgs.roa (hash: v3xzvBX/k+ZUQX7D1tuVRaHRVvVvUQdIj7NXDvVhP5I=)
23: i8o1wvAhrbjSp3BYIhISOUXvW1I.roa (hash: 4Iwgm5dU08CJdYBhUPj/wfHJLQ3KLg/J2wrS95smlME=)
24: icBjslH5ERqmqpU1USzkMdhkEjI.roa (hash: wMYjLB/rE9ycsdnG1IDtuH3D8/HkxmDfxjH3cnkuOvM=)
25: jb9SdOC3s-L1tQx9YD9dSwx4lm4.roa (hash: C4fwq2ctCqLfFVuzRmoqBvwlEei99AA0lShohKylmsU=)
26: kZx2IxBD5HOKLTGnyUCslhrff3s.roa (hash: Vt6Cc39kOpNIWweAmZd5zbwANosQpiB4xiB1jbdvahg=)
27: lnpel8l0zvHfaReJqv_lxZ_B7Z0.roa (hash: kesVe4OXCvVFnF3zB6nMGPK6v8LEXAUi0VV82fdI66M=)
28: mW7TNNKOcx8Asff3LA5hFbwolus.roa (hash: C0qSa3VXz/TpxHHnVA5yQuQAXKAh2TZvyE/riAp87yc=)
29: mh5pNoq9NFOP533aq83INa9ZXro.crl (hash: NGcV6eoVr2hHsVxZ0mXY+hi6NKFcBPKhYX4pK5NcZ1Y=)
30: n50HYNvX301s5gEUcCw5M0DpFnA.roa (hash: jEK7Am032lzW1juS2l3eGVIV9V+ymC/9POxHIJyEPwU=)
31: nDe-qNhnM7uiI6FvKA4tpUFbkwY.roa (hash: sTzHHKSFfupRttU47uock1mVJaqqApZAZwwhHCKIkSw=)
32: nWWjV-FqWRviIQq1sbPjpszS4J8.roa (hash: s/947r8f3drp/IQDPbvU6DHKccsz6mcfNtNyGVLNQ+I=)
33: sH-rx8tmxtUlkAPsANTQF0wHaOY.roa (hash: YlV5vFTDmgtf0eEsrUs5mGeaHd46OeYW58DJe4ZgWg4=)
34: utcMZoZ-bKrrR12tmJyNO0cBhnU.roa (hash: 6+DnoOfl4lL5gwEZUZds9jlaGi0yZaNkuduSpVBj2X8=)
35: xNY2gUvtLtxYfY6gU7_3js38DyA.roa (hash: 3CcNNA7q88gUr/9Ae4mjWpxXE8KozaNGoTSekGYA77Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:da:97:2e:a5:55:bc:3d:ae:52:02:74:05:bb:42:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Mar 12 21:01:19 2026 GMT
Not After : Mar 13 21:01:19 2026 GMT
Subject: CN=e656efdece033f7f8a49e92a782bd2cb37cdb17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:07:82:49:a8:c6:9d:7d:fd:97:63:46:cc:
7e:69:5a:67:a3:ba:88:ce:bc:23:88:46:5d:da:ad:
08:7d:1a:a8:bc:82:09:80:29:25:20:a2:08:ec:3f:
e5:26:98:c0:3f:8e:56:4c:bd:33:7b:2c:9c:e3:59:
da:ca:95:41:df:92:f4:0a:85:32:42:19:06:04:d1:
c3:fe:25:43:65:0b:1f:19:97:7f:77:c0:7e:5d:3f:
0e:58:ee:8d:e8:4c:1a:12:39:66:e6:a5:ac:38:bb:
f2:9e:2a:0f:2c:fa:5b:5c:88:11:6c:4a:62:b6:7b:
23:dd:49:93:00:d4:31:82:30:74:70:b5:6a:40:7e:
26:1f:c0:2d:a2:31:8d:c8:3b:a4:a1:bd:ef:a3:8c:
4c:82:04:1b:c7:fb:91:ea:fb:cd:c0:c7:2a:40:10:
68:af:58:a2:d5:e5:eb:05:f9:a0:1c:fe:2f:31:22:
f1:85:39:6e:4e:eb:74:4a:1d:77:35:bc:32:7f:93:
96:9a:f0:bb:d5:25:b2:e9:6e:1e:5f:24:e9:22:dd:
f5:ae:59:e0:6e:c0:21:a7:8d:b0:2c:43:07:f2:75:
cd:35:a6:f3:da:6d:9d:ac:26:53:e9:a5:a0:66:d3:
96:f8:56:8a:0d:d5:04:e7:46:08:4f:bb:17:62:65:
50:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:56:EF:DE:CE:03:3F:7F:8A:49:E9:2A:78:2B:D2:CB:37:CD:B1:7A
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8f:1d:67:ed:ba:10:17:de:3b:e9:29:04:60:27:a5:d8:4e:
ed:4e:12:12:70:49:77:fc:f1:d2:1f:c1:e2:9c:52:dc:ef:90:
7e:2f:5b:e7:40:fa:80:54:e4:c4:11:40:1e:2f:99:8d:41:76:
b4:14:53:8d:da:4f:24:c3:6a:9d:53:2b:fe:4d:52:47:bb:3d:
49:88:76:72:9c:18:c4:f0:f4:78:3e:1f:23:4a:0e:77:84:dd:
b7:41:dc:65:9b:6f:96:47:b2:16:65:00:3d:e4:08:70:be:ec:
d1:07:73:33:c2:d7:47:59:f9:0c:b2:c7:d2:2b:d4:de:08:27:
0d:93:08:53:d0:01:cf:f4:ae:08:b8:64:69:6f:0a:16:99:e9:
aa:c4:51:c2:17:20:b6:62:31:4b:1c:a8:e7:6f:6c:b0:e1:c9:
ab:b9:32:58:c5:97:d7:39:a8:e6:47:97:2e:02:55:4e:bf:3d:
7e:3d:48:04:00:85:14:55:9d:e5:e9:6e:24:12:b9:28:5d:68:
ae:8b:91:de:b3:dc:6f:cf:9e:d3:63:36:33:c0:4a:74:b2:b0:
05:b2:a6:e8:12:94:a4:f4:bb:83:b4:81:70:fb:58:90:c3:ef:
44:32:9d:e4:68:20:f9:37:80:6a:b4:5c:5a:0c:3e:8f:92:73:
f1:a8:e5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:24:21 2026 by rpki-client