
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
File: zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json)
Hash identifier: 1JrCl1ysK/iCeem8bNIwflEFiEIBa6ATJp9HJdfrmP0=
Subject key identifier: 96:15:F1:6F:8C:7B:7D:2D:45:F6:44:59:6B:77:8F:30:33:D4:D3:7A
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019DCF081A470D172A1E1184C74E9A44CEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
Manifest number: 1A59
Signing time: Mon 27 Apr 2026 13:01:47 +0000
Manifest this update: Mon 27 Apr 2026 13:01:47 +0000
Manifest next update: Tue 28 Apr 2026 13:01:47 +0000
Files and hashes: 1: 2p6X0AtouCzVNKAMw7m3iePnGWs.roa (hash: JTFFGaqq0yiZYLYTUwYMgBzV4FH4zB+/tPL4IXev7Po=)
2: 5deMRBbWVqmht1sOWTPO9NesZX8.roa (hash: C1Nush/54sAAZxYCTt1+o50yyXszTnYgfSJMssdqdQs=)
3: AD2IgnaDcxP-iUrYmaC-dtbyvTQ.roa (hash: YirutIpsNuM7OfsWdL6cUp/DubORpuhrcBem96Hz7EU=)
4: Bq_Yq2JHrAaJJHF9yLAqL5rB7lc.roa (hash: fdB1s5gHlSMOCNBP6f1YeXF7RQ1z3eDBgEt/mLV5PmY=)
5: FtjOuaGj6XuKQSprHYyjG7mq5BY.roa (hash: wmFztbGgVo+esEAQ1u/hISwsJhzp/aC8gT6aH5GO5u4=)
6: Fv-ztF2UG5zf6h5b12hXUB2uIfM.roa (hash: vWzxaASZZO87hMUAoCYoH4niRZRjFfP7/pwFauJSL4Q=)
7: IKMD8ag6jfyANNW_ZHHAmtoE8QU.roa (hash: 8g8dm3d3mbXQPnC1GQKn4g6IkfIUVku9Os+wN+fxyKI=)
8: Kj0sX5EXk_lnEe1oG9enI-9Uxz8.roa (hash: QsEGqqedvvJfyYegitKnBcVHLqm6NXGbqrN63e4Vj6c=)
9: LrcbVo71YyrQCC8jxOvbkP8UOjk.roa (hash: F+TSYhcW05rJokBrE9N3pQGL1hIp19xpgRk/atbwlDo=)
10: PisELHxCj9Tij4-2sem6RSDPu4M.roa (hash: oGOd3HB+uRNlF70fF+XYGkQK02LLgQH4jFhzBp8FfFE=)
11: QkQat_PSicCGu8KQr65qaIs6Bek.roa (hash: q5fpggcrO0H1q8A29ksIPQ1SBgvNbMv81BZ6RhZHHN4=)
12: XVuJp7ALAXytVwSk0zaqxxzUAno.roa (hash: NqxrsMUQO+pc1G0DVIfP8opMJHuo3MUxN1e9ARpPw3E=)
13: _dg99Pgu9sXy9n61V1SOyIAsz68.roa (hash: ljG6pKAy2VwHE3QsWNyoPRAh/FEzLDZlVIYW5TWBjuw=)
14: fcMKvvIc-uKMyXaXItl6BhOvYAI.roa (hash: bWIhwQ/lkTMKHU5pAtIRLA+s+dpO6uWcSZa145VsykM=)
15: p18QyzNAN5RUJPiJZuSELMEw3Ak.asa (hash: 9RZhItiZOf789G2xrmC/EQ9K4w2RGZGUazP0P1LuwbI=)
16: rClGIIO13EpmdapGJJLWbhKvgxk.roa (hash: RZrN3iBPqEfE4qlggDEYCJgP0mBpmcurRx75k/eSElw=)
17: sRHhG15nhmjGAmN201AM5oA4or4.roa (hash: Cg0IUfP+mJRTy0DnjYoXaQjh2GURTkGHjWJOToNgaGE=)
18: sfIFa_zvIWFeaikhlC8p9lzyiak.roa (hash: JmdJqAk29N9Jb2v4hQ9hbp/VRCQfMA8RIGy2N4vYuEA=)
19: tP-ezWKWhAkf4p1w49tg891CKc0.roa (hash: qn7gDz9gLjNXw/+mpQ3scMnhqsd9j8XgUWH/XG1i/XQ=)
20: vjp69wI-uf-qQ3lAEHlJYb3cyoI.roa (hash: 2takcfm8SJ1IG9E6kF9K6s3hfjJSIwGI+MPRQecw4xM=)
21: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: Rtg6h12FILbQg9+PLVGTfRYiKO90rwzOUqnX9hjkXA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:08:1a:47:0d:17:2a:1e:11:84:c7:4e:9a:44:ce:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Apr 27 13:01:47 2026 GMT
Not After : Apr 28 13:01:47 2026 GMT
Subject: CN=9615f16f8c7b7d2d45f644596b778f3033d4d37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:10:b0:12:13:b7:1b:c3:62:b0:51:21:30:
c5:47:dc:fd:8e:7e:10:20:14:a6:c8:e7:88:fd:bc:
96:3d:89:9f:d4:fe:c3:3e:e9:e4:cf:69:45:1e:9c:
17:0a:17:33:c1:3d:96:7b:28:bc:58:ed:44:86:48:
91:d8:89:c5:53:12:35:f8:f2:7b:b0:f3:67:a9:67:
c1:21:0b:f0:ff:b0:9a:3d:52:8c:1c:e1:78:bc:aa:
89:78:70:04:04:01:bc:36:93:f1:f3:d7:ec:25:e9:
15:05:89:82:8f:cb:f5:dd:08:58:65:f2:a3:36:8a:
af:77:e7:d3:13:b5:56:b6:8f:b7:c7:de:d3:ca:d1:
9b:76:aa:63:07:e4:7b:b1:1b:a9:2a:25:f3:ac:bb:
00:8f:68:88:c9:33:a5:63:99:b2:52:21:a7:92:c2:
db:c8:30:36:93:a9:47:2a:3d:89:f9:3d:59:01:cc:
5b:ed:c7:ea:e4:79:c5:44:14:98:d0:7f:f8:0c:6c:
a7:12:3c:50:42:ce:ce:91:00:5d:02:87:ff:a1:a2:
ef:a1:fa:1b:c8:0b:0a:16:9c:36:b9:af:90:2a:6b:
61:ae:06:e4:04:9a:f7:44:39:cd:dd:a7:92:c8:dd:
1d:1f:ba:41:a7:b9:12:d0:1d:fb:0a:98:76:e4:80:
ee:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:15:F1:6F:8C:7B:7D:2D:45:F6:44:59:6B:77:8F:30:33:D4:D3:7A
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f1:c1:f7:a4:30:c3:ad:65:46:7c:74:85:84:13:81:6d:aa:
ce:62:38:d9:2b:54:a7:31:20:38:13:ea:4d:65:85:fc:eb:f4:
1c:4e:09:9a:b6:d0:93:b9:b3:7c:00:53:a9:3d:40:3c:61:23:
25:1e:fc:85:e6:f0:a7:4c:34:d2:ab:a2:37:5e:53:45:06:6b:
9f:02:43:60:99:90:e4:b7:b7:59:d6:e5:67:73:43:d6:94:9d:
e5:23:b2:b2:be:e5:98:eb:ce:41:91:96:59:c8:cc:46:de:80:
a1:ea:70:b1:36:4c:b4:0c:31:66:02:39:ed:d8:ff:c3:d7:44:
ff:d2:95:6a:ce:63:91:84:48:70:ef:dc:f8:94:72:3e:b6:de:
2d:a4:0c:15:d0:6c:be:20:91:75:30:d6:3c:35:a5:7c:9c:43:
a0:9f:ce:41:3a:0d:c2:0a:7b:bb:d1:04:7c:7a:aa:3c:f0:78:
16:85:8a:ae:2a:70:76:07:b4:c2:f6:8b:86:2e:2e:c7:40:59:
ca:d4:d8:5e:55:4e:55:0f:4b:52:84:2a:65:19:fb:f3:2b:79:
2a:38:78:09:a5:61:f5:fc:f2:d5:85:ee:56:e4:a4:2a:8d:a0:
3a:5f:5d:34:07:28:05:74:e7:05:1b:d6:2c:a2:a2:97:8a:b5:
aa:73:33:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PCBpHDRcqHhGEx06aRM6oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjYwNDI3MTMwMTQ3WhcNMjYwNDI4MTMwMTQ3WjAzMTEwLwYDVQQD
Eyg5NjE1ZjE2ZjhjN2I3ZDJkNDVmNjQ0NTk2Yjc3OGYzMDMzZDRkMzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNYQsBITtxvDYrBRITDFR9z9jn4Q
IBSmyOeI/byWPYmf1P7DPunkz2lFHpwXChczwT2Weyi8WO1EhkiR2InFUxI1+PJ7
sPNnqWfBIQvw/7CaPVKMHOF4vKqJeHAEBAG8NpPx89fsJekVBYmCj8v13QhYZfKj
Noqvd+fTE7VWto+3x97TytGbdqpjB+R7sRupKiXzrLsAj2iIyTOlY5myUiGnksLb
yDA2k6lHKj2J+T1ZAcxb7cfq5HnFRBSY0H/4DGynEjxQQs7OkQBdAof/oaLvofob
yAsKFpw2ua+QKmthrgbkBJr3RDnN3aeSyN0dH7pBp7kS0B37Cph25IDuuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYV8W+Me30tRfZEWWt3jzAz1NN6MB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfHB96Qw
w61lRnx0hYQTgW2qzmI42StUpzEgOBPqTWWF/Ov0HE4JmrbQk7mzfABTqT1APGEj
JR78hebwp0w00quiN15TRQZrnwJDYJmQ5Le3WdblZ3ND1pSd5SOysr7lmOvOQZGW
WcjMRt6AoepwsTZMtAwxZgI57dj/w9dE/9KVas5jkYRIcO/c+JRyPrbeLaQMFdBs
viCRdTDWPDWlfJxDoJ/OQToNwgp7u9EEfHqqPPB4FoWKripwdge0wvaLhi4ux0BZ
ytTYXlVOVQ9LUoQqZRn78yt5Kjh4CaVh9fzy1YXuVuSkKo2gOl9dNAcoBXTnBRvW
LKKil4q1qnMzPQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 18:42:51 2026 by rpki-client