
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
File: zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft (raw, json)
Hash identifier: LwSqwA/Pikqvw7jphq3diDea+YmydiqTTnZdqD7WrWg=
Subject key identifier: FB:92:29:54:BD:71:D7:0D:71:FD:DF:F5:B5:7F:6D:37:62:F5:AB:67
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 019CE2FDE7EB4AD603DA6E89ED436D288B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
Manifest number: 1059
Signing time: Thu 12 Mar 2026 17:00:16 +0000
Manifest this update: Thu 12 Mar 2026 17:00:16 +0000
Manifest next update: Fri 13 Mar 2026 17:00:16 +0000
Files and hashes: 1: 1-cJPzLFnEqH5HBa7LXTLzTN8Sig.roa (hash: y2pMWhMaLZyGP/h+eP0yeYXn0/ZQODr617glRelxkng=)
2: 1-w_96dZZvAhqknsLDQxMYnFiHlY.roa (hash: Yvy1v6JVhNfglPJmSg7JFYYeASs2BwwOCl6D0ULH7XE=)
3: 5qt9lNybqUHZohfxSPz95g9mX7E.roa (hash: mVHv2PLsBDsXEMy4ovgXLDyhiJ+2KGTM6nPmA9c85LE=)
4: 70_l1y6U6sQdwIpOb6iklVy3oao.roa (hash: VpEU3IVoWQIPh97gn+id38/VbaiStJZ66MLtFsKLfsU=)
5: AEZof4s4jSU43Cjeiy5C6caRCeg.roa (hash: u3Tu4bTb99jlY+qChU7xb5zLmf+nryw4qR+okn3NkQU=)
6: BGMxTE0_-Ky6TibuPNRzmTxUL6k.roa (hash: a0OwK3rrYXMHfxjEnabs1KjSXWbcFZrLT7UxZW9tjc0=)
7: BKPl0VR7xYdXYKg2sB5jhzIUpPM.roa (hash: WLYjBTaaoRkUg9cIZWEhhWlOX7Jh/HdxdA+DXCeO3yM=)
8: CVjpP5fbG6FZ2VuiKyMRFNqdUK8.roa (hash: pUvsaqMuCpZ883OSrkl0sgOmVBTesmRkdym3KHIgbJc=)
9: GGfTyBNbI489PdjBnrpK0_0Pbtw.roa (hash: H+6wl5gGeH6iVyXOVvQsj95iEngE2FRVQ1f4kfsJ1Sc=)
10: HrOHL7N5WVrxCxYAttZq-03pfHc.roa (hash: qifv399whUGIsH7h7aGdUtF3vmpZ1o8CfKVRy9gkfLQ=)
11: JGn2GKoXJ8jNO9rMaZb5j6MBYt8.roa (hash: YJCYbO1tbshnVmgvPqt65xZEpQvUa9LqSd0IYWT7qsg=)
12: KiGFzL7XSLHCsk5kOv5EU6GDjHs.roa (hash: E2MSykUDl/Q4sWoRqwyjpDX7oQ+5JC9Qa55nDLPQgKc=)
13: NAErYGyu2OxGuf_6AEnvFZF3m00.roa (hash: Efn4X5npgxeYg3CAnRT/UiNScy4w0Cb8p/IjBRVN00E=)
14: Q6jWWNwFSQEE3tRsGBlCg_ZVl20.roa (hash: FyqK9jZ27cGkvbDyCDe1OUlIh4FvaJyJ1LPI/ZyMQ0g=)
15: Rh1E5qxMlmiIy0iHzMFcbx-ILCY.roa (hash: l7nvXUR6ZjHVsyeZWx0Ki3Tb8P2diCAcOJlZGejmDxA=)
16: TPflC2tWkm5_6P9IemHAg3jDH38.roa (hash: 7haADyJs1k9uwE2EhKfl4+X3oqT2rg7BL60uh8bbzNo=)
17: XVq3IYAj2pjJVKsPJGpvrfgzYxs.roa (hash: 1m83ro/W3gU5CbeKTbsHPZcXEc5WYBDNa/RLiDPwPnI=)
18: Y7DNK9hcBBTE7Th1kYyVw3RPwWY.roa (hash: HI8YgFsMuVg4hk5qijfjNGh2VIu0QcRdphqK5LhPNyc=)
19: _JDLOHBdrBVnKNE-CkwafjX4Upw.roa (hash: 7xZENWzKb48fOsZF0FWLYlI8o3hnSoZOH464Nb3NFoo=)
20: aq4mHriPC_Od7XgUBZpEqq5gcHk.roa (hash: yiecnEtPgQHrRACDcmP4fFBJvqjTl0FnO0eslGPKhWc=)
21: cRhh2a8DyS-BnqcPTrEQH0ZbDoA.roa (hash: IqlFBWiZvX+DZXZZbfb7qN9FDJR9IKeDzLOuL+Y7oLQ=)
22: kopgSW14D0aMxVGgeQmEGmsYFAQ.roa (hash: emFzXwVeUl6yg/bnrgocFfxZY+cFQwEF3lD8I6fBmX0=)
23: ksVJIBjGvwL4s1PtRRQoRC2eUSM.roa (hash: Ga4kbKkw40NTNAmZazaZ3aVIVvGOSEfaNiqjZ2JqONY=)
24: m8rYr_2iytyxaBvpY5bmVT_GPA4.roa (hash: JdvL9p4h+mSTLc+2jMP4AS3ujI2r7wbx0jXR1EyHp+g=)
25: mJ0j47UwFivW9zAPZ7Wpb6242sQ.roa (hash: ovh6+isWS+HgWIGH47x4leRVJSZT91OgjJW9sbvcdqA=)
26: pJ62jL1_CaC6LVWNYtByFrcLuDM.roa (hash: ouNLsKMv0CYovkFAKO8v3kQl+SqC8Bd31AIWBDyAwC4=)
27: pfHQoQuY3aQ1KMskVy6elrET6o0.roa (hash: 2B0UR9R1NQKR59jfjcXzQuYHh64T7KqpxoLNPjc77ks=)
28: t9G_1LZtK2mabZqjl3XjkAvpMkQ.roa (hash: dvgQDwtsUk39Ao+BrG34yvxtiJYryUNCUxCkBcW8cSE=)
29: w1p9YqCZmBafcgTm9UvFxf_0dG0.roa (hash: FOuH5kfe8qsQZTv/hD7teSHzc0NJLVkSv0+KWq6KBBo=)
30: zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl (hash: 1vnw1u+YuZBchua/vIFgW0CcxsRJKrqlVh871OgystU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:fd:e7:eb:4a:d6:03:da:6e:89:ed:43:6d:28:8b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Mar 12 17:00:16 2026 GMT
Not After : Mar 13 17:00:16 2026 GMT
Subject: CN=fb922954bd71d70d71fddff5b57f6d3762f5ab67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fe:4d:cf:06:0f:70:f3:a8:f9:3c:fb:21:a5:
a3:46:89:71:3d:7b:36:7e:44:55:9a:59:9d:43:54:
6c:94:61:d0:f7:b2:9f:ec:c2:85:b6:85:0b:08:20:
55:fc:35:e9:cc:b5:ec:3e:f1:0f:b9:71:9e:97:c3:
1b:92:21:c6:e8:a3:59:70:a8:e3:c4:05:3b:aa:01:
21:2b:b2:51:16:85:96:fa:df:4e:2a:4d:f5:ee:c7:
86:4b:89:d7:a7:ca:75:18:3e:02:cd:15:12:9a:5c:
61:be:20:75:b4:e0:1d:95:b2:d8:20:47:b9:cc:bd:
85:63:86:18:e3:4f:5b:71:07:95:7e:cf:6a:8a:d4:
8a:54:e9:bd:d5:2a:1d:12:54:f5:f4:93:0f:7e:8d:
c1:dc:a0:f0:3c:84:ba:b7:19:19:ab:da:97:d6:f7:
d5:41:c0:75:44:e0:93:52:b0:3e:01:3b:2d:5f:98:
e5:3d:38:4d:14:a6:b1:4b:2b:d2:4d:66:9c:92:50:
c6:6f:5c:bb:ac:96:ce:21:d1:2c:74:ae:89:2f:7e:
47:8b:33:75:a6:0a:94:5f:58:fd:6d:f2:01:70:6c:
8e:fa:64:af:d3:c2:8a:2e:02:ea:f1:7a:ae:a1:7a:
13:5b:2a:0e:d0:b9:84:e0:80:cd:3f:ed:57:6b:ce:
c8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:92:29:54:BD:71:D7:0D:71:FD:DF:F5:B5:7F:6D:37:62:F5:AB:67
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:93:76:71:e9:77:5e:90:a7:04:65:25:f0:1c:ab:b6:4f:89:
f2:57:76:93:e1:54:30:45:97:78:e2:30:e3:bc:f2:96:77:9f:
ef:40:29:d7:c2:a4:05:93:82:1f:9b:9c:c9:69:fa:94:01:9c:
c2:a8:8d:97:2b:8c:ec:aa:13:ea:f5:0f:39:dd:e5:a0:ac:ef:
da:45:57:c4:26:41:8c:a9:b8:15:0d:fc:b1:84:3a:0b:a3:75:
46:df:4f:92:77:3d:9c:f6:de:e9:90:7a:34:76:b1:b0:25:a0:
10:dc:e5:52:15:ff:f1:7d:99:0c:6b:33:c5:7e:bc:32:ec:08:
1c:bb:c9:40:74:3d:96:ac:73:a3:69:c9:8a:62:90:eb:ea:68:
7f:fe:73:67:ed:28:4c:5a:27:c1:9e:58:d6:6e:4f:5d:82:08:
09:a0:ff:1a:06:24:34:65:ad:3b:d4:da:c3:c2:ef:76:21:82:
0a:af:34:13:c5:14:92:ab:9f:48:1a:ff:36:df:97:a5:81:21:
cc:1e:ca:d9:7a:a3:5b:9d:68:48:15:6f:a7:5f:44:77:86:a9:
d2:e6:06:5e:34:46:95:15:a2:38:34:66:a9:36:b1:ea:7c:18:
65:3d:31:f8:bb:cf:9a:b8:a7:90:1c:c1:53:d7:96:e5:a5:49:
00:29:ad:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 20:55:56 2026 by rpki-client