
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
File: zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json)
Hash identifier: 3iqvpsxcMJ+vYX5r6qJR3jmpdT7RgwQ6jwUBdfepYIA=
Subject key identifier: F0:FF:AE:3B:B5:C2:B3:D3:F5:A1:10:F4:13:2E:33:02:9B:9B:60:43
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A17C976750C14F55831BEC8DE30742BD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
Manifest number: 1C6F
Signing time: Tue 27 Oct 2026 09:00:59 +0000
Manifest this update: Tue 27 Oct 2026 09:00:59 +0000
Manifest next update: Wed 28 Oct 2026 09:00:59 +0000
Files and hashes: 1: 0Wo7rWj4dkcU66sJeqix1HnpVtU.roa (hash: V8uATySjBBDB6nqb7uol841Vzlm6P70obntmiwdNM7w=)
2: 1YYlM4ouGP3n966YQQJD1J8Ht1c.roa (hash: S2bt8De1mjKmpnVjdK4IwIG1kVZf0VST4BMHZsJGgJk=)
3: 39hNxNp-nuCqNksdTxKZgMGVxJE.roa (hash: zujIoYkl4Zo8pHqy7FDX7Ubdipm6/EZB9d5Au9zY7xk=)
4: 47CsFOJriBbo1mq0-ajVp1jYEUI.roa (hash: aGrtYJNVgjYu/HsVE+4iU/oLDMmucqYc8rXRFsYsUHc=)
5: 4ylsIMEDIPtWwFh385Ofyk1OHBs.roa (hash: hDlNtnY/PTFExGDCBEFAqm5Ru+NAscd+2QjC4sfe/s0=)
6: 55eIFFqzRSZ0Ed0V0C_-_6jQXsg.roa (hash: ViIQrtNN0920kOEd8f18k1JuVb5CLpsQkSnuVh4z8UQ=)
7: 5deMRBbWVqmht1sOWTPO9NesZX8.roa (hash: C1Nush/54sAAZxYCTt1+o50yyXszTnYgfSJMssdqdQs=)
8: 7Xre036woZ8vcol8k5XmEu1iA1I.roa (hash: eyn3q3PLjDTVu84Akp3ffRdOxB2vaXhFGWuStQOY2t4=)
9: FtjOuaGj6XuKQSprHYyjG7mq5BY.roa (hash: wmFztbGgVo+esEAQ1u/hISwsJhzp/aC8gT6aH5GO5u4=)
10: Fv-ztF2UG5zf6h5b12hXUB2uIfM.roa (hash: vWzxaASZZO87hMUAoCYoH4niRZRjFfP7/pwFauJSL4Q=)
11: GA1XHzWcpcUGoUmLR47BUH5ZcZc.roa (hash: iAqD74qcYTcBb5sTTSkiYu2s1IkOFMHBUPbsfUe4F2c=)
12: JO2xr2SpG8k5bLsLnvYB8od4wPs.asa (hash: fRSbrwuw/d1qBK8idZqHFRm2f3lneeVglcAeRA4ZIRM=)
13: MBJ1TmxMlUADfhppw87AtlF4BAw.roa (hash: WEd1zzNA+pNvlt4cAOAWiu/zRr1ny+nFIdymaQ/OK8Y=)
14: MDnbMrcEtQO3LUvd5PYrO0KOouI.roa (hash: pJtoBFRrJd+WRsGQ11VpMD8GneaY/fB5G1JQRXHxSA8=)
15: Trxc4jeny8dNEnGxhN74ZsfhiqY.roa (hash: 3SUuxVeA46pCrInZR/RGR5OP9gwL2bojt7VpxJlK2Tk=)
16: YertTbP8ORjFZb4AB74mRsA3J1Q.roa (hash: wzF6sykfeonMiXaOHg9TmKmNaKu3g02Q5iXos2+wH78=)
17: _dg99Pgu9sXy9n61V1SOyIAsz68.roa (hash: ljG6pKAy2VwHE3QsWNyoPRAh/FEzLDZlVIYW5TWBjuw=)
18: bA4b87f91ryc3jb4SiaTzw70uLA.roa (hash: M9DMYWjQrriYvfIMkTPt89s2T8jCvpnvOvBPbxf8EDE=)
19: ezjxRfeJRjpnrRCKWbvwR5vJRKU.roa (hash: EXExMi7BOHWcVWkWrbvXgL84WwGEkcmRdKjry0zUqRk=)
20: jgUxlJkGPwcsxNxWSeiIxmkXs4k.roa (hash: T7OMDx4n354hPK728lnwxNPKv0p6Ko452S13iYgLVrw=)
21: jr-PunQRQJFZJ7OYQwdFrKrkWJ8.roa (hash: q7R0ND36zZ5sAUsSRpGvv9igpHz56injhoG5j1zS828=)
22: kjRidx0D39Ao0112FfgdK6_4QsQ.roa (hash: 1c4wEZ+8x5KA1HUnAkNWdzJa0JfekRogYEyNw7TG30w=)
23: rClGIIO13EpmdapGJJLWbhKvgxk.roa (hash: RZrN3iBPqEfE4qlggDEYCJgP0mBpmcurRx75k/eSElw=)
24: tP-ezWKWhAkf4p1w49tg891CKc0.roa (hash: qn7gDz9gLjNXw/+mpQ3scMnhqsd9j8XgUWH/XG1i/XQ=)
25: y_kSlexGeb7TiS61Y5__-h9JwmE.roa (hash: mNFhXW+YkUDwWvy3SkZGzRdGhMxel7XfYcdI27PkPjM=)
26: zUq98b8i___94VbqFU7J_4ODp-o.roa (hash: /9n8pSxth5HcINO3N8uYE4G/IAGbUmN6Ln6dn0v47CM=)
27: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: xwwCkmkp2osmYfD5IOP1hVAktaGK1AdzMquLMrHSkQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:67:50:c1:4f:55:83:1b:ec:8d:e3:07:42:bd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 27 09:00:59 2026 GMT
Not After : Oct 28 09:00:59 2026 GMT
Subject: CN=f0ffae3bb5c2b3d3f5a110f4132e33029b9b6043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:cf:07:56:b1:e6:9d:fe:ec:d7:52:8e:48:
1c:f2:da:a7:72:38:ba:5d:07:31:25:e7:6a:48:ed:
01:a4:89:8a:2d:ea:ba:31:3d:f8:f5:06:c4:e5:51:
5f:2c:c5:ac:8e:0a:37:46:ed:51:a9:0b:a3:29:47:
4f:ba:ef:2a:de:2f:de:d1:83:72:b3:03:ca:ab:0b:
13:7d:66:ed:30:f4:ff:fd:c5:a2:21:24:88:33:8f:
5a:87:43:a1:7f:ed:30:49:18:05:1a:82:ba:fb:6a:
65:e6:77:6e:60:00:d0:a3:63:d5:53:6d:44:e4:1d:
d2:21:59:43:b7:6e:05:3d:19:c4:2b:9d:6d:97:2c:
f4:66:06:90:0c:22:d0:ff:78:bd:65:4e:fe:85:fe:
70:40:2a:bc:f2:0a:46:d2:c8:81:50:e5:e9:8a:64:
12:90:e7:ad:17:1e:76:49:b0:99:16:43:b5:e8:50:
75:34:28:4f:17:ca:48:8a:be:ae:8b:2e:70:70:ca:
ad:54:b3:c0:8f:28:c9:ae:a3:e1:bf:48:03:86:e6:
85:da:37:87:8e:da:f4:64:69:f9:16:05:1f:4c:9f:
53:ff:e3:79:97:8b:98:6d:37:5c:fd:20:58:62:ba:
e8:fd:02:95:59:1e:d2:ff:44:9a:03:31:dc:8f:b6:
b6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FF:AE:3B:B5:C2:B3:D3:F5:A1:10:F4:13:2E:33:02:9B:9B:60:43
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d0:a0:fb:ed:6a:6d:e4:d9:1b:71:8d:1b:16:97:14:d4:02:
04:b3:22:8e:a6:51:f1:e2:82:85:68:d1:98:ac:a8:08:80:d4:
83:1b:b7:b1:7d:41:27:c6:4c:e7:80:87:f9:a5:17:17:ae:21:
77:96:45:b3:9d:1c:10:4e:96:e0:61:f0:8e:41:37:09:e2:1d:
59:b8:cc:72:b4:f4:7e:4f:31:43:e8:c3:ed:08:45:9a:a7:f3:
8d:aa:64:4a:8c:70:33:d0:d6:c9:e4:61:bc:a5:e4:1f:f6:be:
47:3e:61:97:8f:22:fd:2e:7e:5b:de:aa:90:57:3e:f6:16:f2:
a8:9a:14:e3:d0:fd:e1:20:34:5b:1a:7c:fb:85:a1:bd:2a:cb:
22:7a:40:0c:26:b2:27:4e:72:d0:94:4f:a0:7e:4c:68:a8:44:
08:42:fc:a6:49:0b:d6:ed:a5:c0:7f:29:34:cf:40:7e:c0:ee:
e7:19:80:4c:11:34:64:ee:bf:50:a9:a1:4a:ba:7d:0d:56:60:
de:54:d1:2c:db:a9:bf:2c:cc:b1:54:a4:06:6d:d9:1c:22:d9:
a0:45:79:66:0f:70:9f:5f:ac:50:c2:65:b6:80:4c:fc:12:cd:
5b:82:1f:b9:c3:c8:23:99:2e:48:cd:c4:0c:8b:71:00:a8:08:
9c:39:67:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:28:54 2026 by rpki-client