
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
File: C047O4QkIliGMULtOhl5LZfLvHQ.mft (raw, json)
Hash identifier: jl7W6gET8lCP8awI3lLxG83tmdcgRMmg1KpFChxnBZg=
Subject key identifier: 40:F6:DC:DD:F1:35:3A:11:64:DE:20:30:9E:75:E3:F0:0D:BB:D2:C6
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019CA8D7C24B7EBCE2F78CADF317A238C540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
Manifest number: 0559
Signing time: Sun 01 Mar 2026 10:00:37 +0000
Manifest this update: Sun 01 Mar 2026 10:00:37 +0000
Manifest next update: Mon 02 Mar 2026 10:00:37 +0000
Files and hashes: 1: 0rhF20B9J0l57DDXD5PI3Mlgck4.roa (hash: IsJTlAtlEK1wuKb/L+IEKig4AE4TBarY7Xe4bFwDMpI=)
2: 1TvvbLktHy0nhJ1DijP154aSqI8.roa (hash: SrszYjZF86XnvrrBmqiB7eRR+n9LSUu/WqhEbIv6aBs=)
3: 3VzQjANxDb46ITb2aabngNBm6gE.roa (hash: JwFT/MHJt9foHacB/cVDAhosMU7fAl8ZePW5sejP5+o=)
4: 6TpoatGKSPSrwq794kzIl2Er6NE.roa (hash: 10DNCuCmmf7tQjJWk0XlymUIhyygXD24DUUyEcOANN0=)
5: 7M34N_8c18kwYN5DXzfuwEhrmZA.roa (hash: ldXuTTIrM9/cmADJD+iI7DaLo5yereXOVCE9PkpSmcA=)
6: 93wurF5FK4RYHLZhxXvLpMtm-uE.roa (hash: 0dsGiKFe/X8WiHJUSF1yOsNrDgUrPIUtcVPZMgFJnGQ=)
7: 9iCGXGMlG9blrWg1oCgEyBnOWDE.roa (hash: jitXayUeLYoVIziGdLkVAJnm4bC+Qige+N+C29Ex3+E=)
8: C047O4QkIliGMULtOhl5LZfLvHQ.crl (hash: qvhYBJW9JAFOiydT31WwlkdX9+fddc+guKGKXaDM6C0=)
9: CX2-XqJbgxFtfbz1ZXOm-VfI4xk.roa (hash: zBpyaivrS8dLO7I1EYJl3tAX+exEI6hLkdP3m9an98o=)
10: EqprGk5kowrimby1Je14qsse7Lo.roa (hash: LFHwUVenT9McibVbW2ZQmoL89oEmwzTC9qG4B4kc9jc=)
11: Eu0yeBNKe9kvX2Q7OroqWApsXAg.roa (hash: DycZzKRjASdGPWCvEe7wIXygt7lohrHYcbmcoZSbRMw=)
12: G3HN66IsyUqcyb4IdBzNqnOqqc0.roa (hash: sDJ2LPZQc8/0xG/uRBZ6QNwDRUd4YGJewkn7EWmexdg=)
13: GQ8G8-7vI6X_9ipMuVEkqHZe5E4.roa (hash: Q4GuX3aVEvIlMgK5veVPusvhLwaRKg/Xs093or8mHOo=)
14: H-VLcLjySEvCPdXFtIamTTKKAmY.roa (hash: Pu4WAc0AHR3VQp7EwlL95Ks6Sl9Ot8C0yUhL/DK+kcs=)
15: IuHRS-lBd_Cfdef-d8xI5lrAWgE.roa (hash: sPvYwBM1GXpOKAqaT4Pf1zse9CyIwkrb9aMQGJa8ysg=)
16: JZWlbgGs77-K_lBvMrRD_aczpko.roa (hash: 7WDxDeue9uY3onqd6ZcYQ+v+RK9TTwQALQaKXD0UqfQ=)
17: KScxqHqB-FUcEf5EMaehr6H24s4.roa (hash: veg/H48mghnpee9Q7H0VJaTPxGQVaIu/cftmq4ahFJU=)
18: L37d5XpVwOihITHnXxLI5vAySz0.roa (hash: Meq3YteYq93BIA+pzMA3bx3hn2eN+fGD8F0EUsr+moo=)
19: LVNDdtLYnujMWbq0swLbShC0Y-g.roa (hash: 8HctQXfZBPB92/kv8TD0DdrdmIMzx8hg2wfACFjK79k=)
20: M-2rME5iw6DM-f47-QFFb7VzGFU.roa (hash: vtu0N2tgrIN8s3d7nrEfJQ8SnAhHAVxXwjju8rnYHgE=)
21: MWV90LWxUa-WUsz9LX9npKKVr3c.roa (hash: VJ3UQ6OcyZGRtcoJAmyUvcMKs1qQ6scCd0up5rRWI+s=)
22: NUC_LFMe2cNtzU5aCrIgV-H-cMA.roa (hash: NpATbiFrt9IYp6v1R73idi7OcNugJKN3KPoGaMp8IYk=)
23: NfntwoXD_O0scdxf60MFJ4QAEsM.roa (hash: fJxzALYVA6cDE1yHGT4WjIHIwKWY+JaHack97oaMMaY=)
24: PZOfXkMDADVBf7NT6Rj7RN56siM.roa (hash: SMDC4UDcpAMIXDcIa/4V8NacOsggpeu0mE3jv/ToZ+w=)
25: QrZBpVrINYvtt8eQ3BUierAVaEo.roa (hash: otF3M+RO1u8J3AFXZCe+jAflY8Wg53WcaWXyGwSEsJ4=)
26: T9HYPrCqI1Lwx1ICx4gg3y9EaPs.roa (hash: 8WBx6rryQFW8qB2gn0UcoHoZSKFuIQe/bNKvBOdNkz0=)
27: TskIBboLcFBuqPn_MOgE03hfzQA.roa (hash: mdOwXyGLiZ3kiLeepuX9bG0ElkLvweofxQqMwNHkNZM=)
28: TxA7LZAEQ_1O1wo4B0jrXnmrDhw.roa (hash: 5o3TCb2lIaRZg6xjEwTN8/Pb07E53fm4tlVwapwpcIc=)
29: WLSifeKe76im-tvDk8PcRAHDzJI.roa (hash: 3MxuLgBif1bsCBwTCgWRVZ5TrOdI2BQf8JiToB8vne4=)
30: ZrBNPjEycZrANxNyVIzzzbkmbro.roa (hash: xRKEM4Adn5RZtYpllrg5Vg4AZHQgUo0g7tJdnV0uOgQ=)
31: _ryzMmjmSU7ZGAZCZXgl3zhi790.roa (hash: bcxS6uMI7fATL0M6h1j5zg3SrS8sl6NPvR5jNoM7/MA=)
32: adYPWxXEK-EyO-cYHcJ3jz8xmTk.roa (hash: 1Kwboaf94lcPqOMax8VtYSaq7bYuJ9QQ+t9XDkOoZZ8=)
33: bXvQDzztgR20YUmWOPJv3-d7kbs.roa (hash: Yu03wDPl98lP1gZjiDY9V7dBNvUsvmd/sPZMcHPqSFo=)
34: c--NfYyQ6E-hR59TJgivWxwrXVM.roa (hash: tL2NGDcvc+5rAS2b+OMbEZsDoupyJSLpPH625LDD0s8=)
35: dAQ6Yalce-mSw3JzJGnHTG3anHQ.roa (hash: 2mIrdQ1ciiXVimVbz20GsghWRPI8l/oYrrPopxaFDQg=)
36: dmFM-DRk9tl8ImtpgaPJLAX25dA.roa (hash: Y5nslR68OgW8QnrN5r1bUmRmrJiirrKj0Uq5h/YRRC0=)
37: ggAlU2FvvMVt8QnyY4zRaT2PLhk.roa (hash: SC4t7+i4rHmGw8cE2pQbNtpAxChfBbrVKnQs9mBdyuU=)
38: knNwFqOSUSmwnzIGTZTBkXny7vM.roa (hash: Xuq/XGETEu+nAPlO71gTOdaRVSzyfoQNkrNuyE5V+lc=)
39: lgzi4YsrXvoBW8RlYxslYJTfpHs.roa (hash: eSi9kncqAL4WVQ1k1BW+/Zwu2o42SgRuUSoCCd+nq9I=)
40: n1rxwfyEu4ovtxs-PIPRbHD7WkE.roa (hash: I78sxSB0+1+LczQU4FM6Dhvmm31U8fYmSaTLfz+uB/Q=)
41: o2l8xzkmVJWqm4ShtsEWZOgOYfs.roa (hash: LJ04zYKzGbwKYdxO34r5QetPcNFFzW69WM6bxmWsEAg=)
42: xTZJJpGpeUxMY5LeQXBMUN19dnA.roa (hash: HbnsCO3ZsmJagmIfOuDUR7M7F04yDmonV5hrdy2TpFM=)
43: yv8FhbcnTRrN9TOc-2PsqWje6m8.roa (hash: P9uulFa6QaPUohj+iTguvv0i6CS/+WyKM74MIfRJ4RY=)
44: zB1uc6k_qAdWt66X8InqZqHDntM.roa (hash: hWYMua5mstmbOSm8yc4WQRkHL7pc/tOGsprl+gVmDkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d7:c2:4b:7e:bc:e2:f7:8c:ad:f3:17:a2:38:c5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Mar 1 10:00:37 2026 GMT
Not After : Mar 2 10:00:37 2026 GMT
Subject: CN=40f6dcddf1353a1164de20309e75e3f00dbbd2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:92:91:6e:b8:61:68:17:9f:65:5a:4a:cc:02:
17:a4:c0:03:0c:0a:f0:f8:30:17:74:b0:bf:b0:e0:
8c:a5:42:11:20:97:51:d1:c4:47:cb:15:57:f5:40:
2d:f0:fa:62:b6:3f:e6:75:8c:54:5b:3b:64:91:fe:
e4:85:80:e5:1c:de:c9:f0:28:89:4d:5e:ac:26:93:
24:84:6f:04:0b:5e:72:89:97:37:e8:66:eb:66:5e:
ef:1f:41:74:fc:48:3f:ca:fb:88:63:86:4a:f0:c1:
bd:1e:0f:bd:38:3d:79:30:cd:2e:9e:54:d3:64:37:
9e:6d:ec:c0:56:6b:d2:f2:69:08:6d:66:fc:f1:3e:
55:23:9b:8d:8f:8f:c6:2e:b5:a4:98:17:f3:4c:9b:
bd:c8:1c:d7:64:f8:60:c9:25:6e:3f:1c:42:1b:43:
9b:73:dc:0f:ac:39:38:81:af:65:be:04:9c:46:2a:
3f:0a:44:e4:1b:5f:04:97:ff:3e:b2:66:16:e9:ea:
55:57:b4:b4:71:b1:e8:05:83:4b:5b:9c:41:df:5f:
ff:2f:26:83:e9:90:ba:7c:43:ab:53:f1:95:17:cf:
3d:5b:ca:f0:04:cb:5a:85:03:a0:57:fd:23:48:bc:
70:bc:c4:8c:97:8f:b5:d3:35:d5:ea:c4:23:6e:0a:
b9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F6:DC:DD:F1:35:3A:11:64:DE:20:30:9E:75:E3:F0:0D:BB:D2:C6
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:68:e1:6e:40:53:5d:80:20:3d:eb:d9:43:bc:bc:bd:81:b8:
be:9e:93:24:70:10:21:70:56:30:db:c4:4b:c5:c5:bb:d6:a3:
e3:dc:c4:ca:dd:34:7a:2f:42:db:23:2b:dc:04:0c:8a:3b:b4:
1c:85:c7:18:a7:44:bf:72:19:20:ef:59:16:8f:80:02:e5:d1:
49:1b:75:a3:04:f2:3d:65:f0:d2:ec:84:a2:66:73:8f:38:98:
c0:d3:c4:c5:ee:80:40:b4:cb:e8:6f:24:fe:cc:0c:0d:3c:67:
cf:96:ec:7f:55:25:f5:c4:3c:4f:54:17:e8:5b:d5:9c:3b:ca:
01:15:8d:18:07:f0:02:43:e2:9f:8d:32:cb:03:b9:c7:46:8e:
a2:86:6c:9b:f3:3b:d2:05:2e:33:14:33:51:e0:2a:87:c9:8b:
be:05:cb:89:9a:03:36:14:73:1f:33:85:70:28:2f:cc:4c:b2:
31:c2:83:06:28:ba:82:8e:d7:a2:87:9b:26:9c:56:a6:8f:38:
1a:be:f5:0c:4e:f7:73:58:19:4e:74:d7:ee:23:6c:ed:42:8a:
4b:46:53:d8:f4:bd:f3:a9:5e:19:53:28:47:30:88:bd:9b:a4:
84:b5:fb:2a:24:fb:19:30:9f:33:09:7b:bf:4c:2b:be:7a:aa:
aa:a2:8f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:35 2026 by rpki-client