
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
File: 52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json)
Hash identifier: UnCu7ehOo6VKPL0U4wTsNY1Y0Wmw6/8VG13m8SHmo/E=
Subject key identifier: 73:D9:D0:22:8A:51:15:0A:6F:D2:C5:73:7B:F1:3D:71:CD:96:F9:44
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 019D0E568739FAECC3FB8E2DF4EF36BACB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
Manifest number: 18C6
Signing time: Sat 21 Mar 2026 03:00:44 +0000
Manifest this update: Sat 21 Mar 2026 03:00:44 +0000
Manifest next update: Sun 22 Mar 2026 03:00:44 +0000
Files and hashes: 1: 0AHImsbMetIR9BMrmd3qpDL6OSc.roa (hash: DTeCz+/e8dz3wJQ9sOWTPFZL93bF/N1lUR+tm2DzoBc=)
2: 13WTNIS6A0dihpmd1UZATvnV9K4.roa (hash: KHlhyO/RASQzL4I4VsavXB94t3yBZq5r1Q6M/Qi/yyE=)
3: 2UdLvPX3YAq1cbjvbaFDJ94Q47o.roa (hash: CfFJBlNu8bngGenYW74kMkvKFLTo885Zt17Qhidzd/I=)
4: 4NasKMzTYIVVFp-ICFK_D4b8RHc.roa (hash: QS3B9ES6p11t5I186zFeNR/WrVazilsqPckCmSgVmek=)
5: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: Yjb9+3avUyHFc4cTa9gL31jip7uYR3R3HjG26cXCED4=)
6: 53LrOjzoo4E_JjsRePn1B73fFtc.roa (hash: NrghBBUU3a/THjQg3AhmUAWYpxF5cPsuE6iPec4zb/o=)
7: 6VTW_McNM2gKUiEd9Bc3Gfwm0AE.roa (hash: K0b0iJpVzmEPNcexIYjgjDjmiNKN28rNQZIz8nCu1GU=)
8: BAXXlSV06uuaY8KhG2sNC8heH1s.roa (hash: ajZgoDJ8e9hLXYtp4Hn5DX0X8/kHLIPyvG3eppF2AQs=)
9: E6Wekcit-EQ3TZTNVUcjRu1lw6U.roa (hash: 2zO8BVKL4MFsWKURY5zzeGF0sEV2VJqOByilAEcD1Z0=)
10: G_gkubCq_7tYxAJOgwxm9_sjOcc.roa (hash: HTO/NujLkueszrKTl1jypitd1221vQx4YiPnzs/pQes=)
11: ODKfzqsOm3GYnHVgYihmwo3Lqyg.roa (hash: 3rOjqBfIhvTmF0AbgtiUHguUfUPEBFg5H4WMtyl2b1I=)
12: PG5gaW6QKtR5JzL6q5eBke0iYq0.roa (hash: CI7oeUgCJQOVE+/gNMHsZoUM76jLEBj4sJYAooPBpw4=)
13: X1Gmpx7ELtfrrjtvBfMJbDc_PDU.roa (hash: 3UVhYg8pgXN07FqWkvVyaQiJdCXbQoNnU+1Ji0Fdl18=)
14: YGUZmB5y9Pszxg9mTfxKcyU3wP0.roa (hash: 6EGPa2utleZno/C5hAqexr1JPSm93VrZZ+jL9Q+c4xU=)
15: lC16rIMMnqHHfbg9MNxvqn7mqxk.roa (hash: Mdn1l4dZ+NSM4dG4u4z56RyJO1WeprirQF3/FTo90cM=)
16: rOn4sIWHt6rCUNuLxoNvj-X5Ebc.roa (hash: YE/iZ6y3DFs2Aj9gfYd2A/ANh76BH41kT6FkdNGSzDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0e:56:87:39:fa:ec:c3:fb:8e:2d:f4:ef:36:ba:cb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Mar 21 03:00:44 2026 GMT
Not After : Mar 22 03:00:44 2026 GMT
Subject: CN=73d9d0228a51150a6fd2c5737bf13d71cd96f944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fb:5d:5e:d6:16:cf:3d:a4:4d:25:e6:b4:70:
85:d0:f9:f9:41:4e:56:17:d1:70:e0:a4:8e:1c:4b:
9a:69:77:a0:89:b0:19:7e:4b:b9:9d:ba:f9:8e:95:
6d:f2:ce:ee:1c:05:51:1d:0d:7e:ba:c6:ce:2a:13:
23:e9:45:18:37:69:bb:f4:07:72:3e:4e:0d:c9:61:
6d:12:c6:6f:9f:37:d9:21:59:c0:c3:33:c6:26:24:
bc:9d:56:33:45:8d:98:3b:7c:3f:4e:3d:fd:43:7e:
65:0f:5f:62:60:14:08:01:f4:83:3f:37:95:68:d4:
12:28:aa:ff:0c:a2:d9:05:2e:ec:05:59:26:60:4e:
a8:2a:19:13:dd:c8:5d:cb:25:f8:24:50:cd:aa:bc:
2f:1f:9e:46:8e:10:64:d6:cd:41:69:00:c5:88:95:
af:17:5d:8d:f1:4f:05:64:5b:d7:f1:3d:12:3b:59:
ec:d4:0a:9e:c0:18:1e:f2:6b:a7:be:35:9d:12:11:
a8:28:f2:9a:8a:30:fe:bb:df:b9:b9:57:26:b6:e8:
b9:f4:f1:b0:2b:0a:56:ff:1b:df:47:e6:bc:2a:1e:
d8:65:e8:28:19:5e:34:a2:90:43:37:bd:9a:08:14:
54:43:a5:f0:72:f6:dc:a0:99:25:8f:d7:0c:aa:17:
b1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D9:D0:22:8A:51:15:0A:6F:D2:C5:73:7B:F1:3D:71:CD:96:F9:44
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b6:47:4b:03:eb:9f:b6:68:67:1a:cc:a9:c4:6e:94:e0:fb:
2a:d3:04:bd:57:03:bc:6e:a0:8b:6e:c0:3e:c5:d6:83:2a:d8:
56:59:4c:a0:ce:10:26:ac:85:31:93:af:52:a9:db:70:d4:f7:
a8:45:f7:f7:f3:62:46:3b:19:38:96:15:fa:22:c1:50:f8:98:
6b:03:5c:54:6a:c5:37:bc:f8:5a:54:76:54:0d:86:08:61:26:
6e:99:d6:b7:9f:99:da:08:d3:42:8d:f9:09:4b:5d:65:b3:fd:
c6:9a:9b:02:03:43:94:db:e8:89:85:80:c9:cf:5e:61:12:d9:
67:67:97:f4:64:57:70:d5:48:73:1f:09:1a:be:5a:17:a3:65:
df:69:64:d0:43:b4:d3:d2:75:49:9d:4b:fb:d7:55:c8:6d:4a:
ee:09:26:83:23:dd:ee:c5:1f:7d:9d:9e:31:30:b5:9b:e3:d0:
57:58:d0:92:04:01:81:ff:44:0d:e9:8f:84:e5:d1:2d:46:5e:
98:f7:90:6e:33:29:7e:51:07:8b:a6:d1:a7:56:6d:f4:df:fb:
44:96:98:84:63:87:04:57:62:3b:04:c5:c0:d8:58:4c:f4:f6:
a7:57:d1:37:da:47:9a:21:6d:13:ab:22:63:2a:17:7f:8d:7e:
4a:12:9d:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0OVoc5+uzD+44t9O82ustVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjYwMzIxMDMwMDQ0WhcNMjYwMzIyMDMwMDQ0WjAzMTEwLwYDVQQD
Eyg3M2Q5ZDAyMjhhNTExNTBhNmZkMmM1NzM3YmYxM2Q3MWNkOTZmOTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoftdXtYWzz2kTSXmtHCF0Pn5QU5W
F9Fw4KSOHEuaaXegibAZfku5nbr5jpVt8s7uHAVRHQ1+usbOKhMj6UUYN2m79Ady
Pk4NyWFtEsZvnzfZIVnAwzPGJiS8nVYzRY2YO3w/Tj39Q35lD19iYBQIAfSDPzeV
aNQSKKr/DKLZBS7sBVkmYE6oKhkT3chdyyX4JFDNqrwvH55GjhBk1s1BaQDFiJWv
F12N8U8FZFvX8T0SO1ns1AqewBge8munvjWdEhGoKPKaijD+u9+5uVcmtui59PGw
KwpW/xvfR+a8Kh7YZegoGV40opBDN72aCBRUQ6XwcvbcoJklj9cMqhex5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPZ0CKKURUKb9LFc3vxPXHNlvlEMB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7ZHSwPr
n7ZoZxrMqcRulOD7KtMEvVcDvG6gi27APsXWgyrYVllMoM4QJqyFMZOvUqnbcNT3
qEX39/NiRjsZOJYV+iLBUPiYawNcVGrFN7z4WlR2VA2GCGEmbpnWt5+Z2gjTQo35
CUtdZbP9xpqbAgNDlNvoiYWAyc9eYRLZZ2eX9GRXcNVIcx8JGr5aF6Nl32lk0EO0
09J1SZ1L+9dVyG1K7gkmgyPd7sUffZ2eMTC1m+PQV1jQkgQBgf9EDemPhOXRLUZe
mPeQbjMpflEHi6bRp1Zt9N/7RJaYhGOHBFdiOwTFwNhYTPT2p1fRN9pHmiFtE6si
YyoXf41+ShKd8g==
-----END CERTIFICATE-----
Generated at Sat Mar 21 08:04:48 2026 by rpki-client