
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
File: tVfM1Dr-gW5JUyKL8Up13CkBS40.mft (raw, json)
Hash identifier: YuluBbyxOFGmI94f/DBAuQRo71rGvN8z7q1gVsmpnqE=
Subject key identifier: BA:F6:83:E5:A9:55:74:41:D6:97:4A:B4:BF:B1:4B:B5:CE:BB:F7:D5
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019D9B511F83822946B2FA5C1BA249B70217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
Manifest number: 19B3
Signing time: Fri 17 Apr 2026 12:01:18 +0000
Manifest this update: Fri 17 Apr 2026 12:01:18 +0000
Manifest next update: Sat 18 Apr 2026 12:01:18 +0000
Files and hashes: 1: 1-9eUDWcxbt2aqbNSlZi8gTl5DCU.roa (hash: p8wctqzFNtkBy6RhhhlaT7VtYKQMWW5FKZWtYRgVcII=)
2: 1-Aqw_jlnEh5mzI_JFRmOyaEiPjY.roa (hash: tXfoCwpHJbuZxjYEzHdSS4wRnSV0yN9so5GmJzrVHLc=)
3: 2HdAV3PGBEUlasUNtW_jCYoPD3Y.roa (hash: ync7Bqe2ZS8Us4KTHfLVYTl8WbPdgW2Owp+mtCPVyr4=)
4: 2_UvfbsFxKUUaVcrdfYacSKl2L4.roa (hash: L+O8j8f4gfZj97qEmoJdpXmH/Ua6ICqOYh06yVj5Qkw=)
5: 5qZtdGGQPYCB4GQr1wjcWz32C6A.roa (hash: aKQ60+nGzkXNMGNGLDuML0KK2apTuxjrP6T8ue86sWs=)
6: 6rUWxtK9hflh7SiPi0L1itfKjH0.roa (hash: DcndbDem6DcVRyOX/MWxW3qzvVsFc82BfTKKDpuSwns=)
7: 8P_M0aIDtey6z1-uBYdoER49gbI.roa (hash: FSnmoR8GJtfy3UCUFj4zRO9IpsS4G6PEH7oMczL8wlA=)
8: A3LobdPOZ7HejpQ_FMCpYizUx_w.roa (hash: ufpnhQSUHaLon4166f4aCj0fe7h4Tal7d8HPyF5uiJg=)
9: BBMCp3XI6fUPNGiFtfO0986n1Ko.roa (hash: qMZxyeEgLDpsgSqlkuooSlzn2+QDVRPYCvdIlrpHAto=)
10: E4_LCYAyoNw5Z6N1qrZL4gqRIUY.roa (hash: rwJ5587Bc7BJP4v6xl5VcHy6DfSAotRzBjDqDy0qIfU=)
11: FGLrLKZULm0mhSDMTuKG_6HhyEA.roa (hash: gghYFbteB4VfP78hKwnuTRHlZR7ah9jq0XQbq7TGOa4=)
12: M-v28PFLiT56tATmxh_dxjXIz48.roa (hash: wk4xU/TxE3WuvzAmyr1klkvnIlWP+ZayRu5Ot8is1ek=)
13: OI8QWVv_chgdmwAWrY8TiiEHfx4.roa (hash: I5/vA6U+NqqViBqDeDmORphsSlyAGX+Zx8sUraJzHAA=)
14: OXURxrNe03171n8bX9Y6CdBFZZA.roa (hash: cfxWumMR7w5M2kaXm/XjKT3g/gie/zgJWrUDlK4masI=)
15: PddS_JuRiBoo8-dVCXym0acDd9k.roa (hash: vVLJG0UTNRcx2S32EykgHEAids5Zl1wtiFOsx/4Ez4Q=)
16: RU1OY7v2nhWXT21hWMhOgsqhF9M.roa (hash: HO8CFdI2T/vSNVqtiw2GDyzzGYeXGauouVL1zqhgbhU=)
17: SIiK7KO9qRsYGFDrQF29ZYeRN28.roa (hash: V80trQbO4tDLVeGxGEbPS8GIdLCj2usc5m9tpR0hd4U=)
18: TQAaFv5ALTHh63epl7LLu1DH9nc.roa (hash: hUGYLBMhX2Ty5hzrbfSfblaqdRUKpDToGmssIdKl46w=)
19: ThU2mBbAHrnyESzRe6tfkZlbjUI.roa (hash: ULNfH10N674XhO/1prWJKP2j9z5MH6CUdMdCXtR/9Gk=)
20: V68VgvWFXK8SNckccpiLmpleGX4.roa (hash: yrkbL90m9V1JdVtjSlyfTTPXiIJR9Gk9nvsichDj+6I=)
21: WFq7FEpO1Iycb1yqpZPnE4hFJjg.roa (hash: MevGR9qgcVcvlRayBhJVUo3kjeWsQbcikC4WmtwTEw4=)
22: Z-YCzchVF5bQH2HicwMC7TiNiIo.roa (hash: S79GiezgHAF6LzHXyznfu+6Fnlx8lKM8RhqxjBgw0Qo=)
23: ZNKvFPEQOxElP83PEas3vxV_rd8.roa (hash: Yw7PJJLrozmu0y73W6WqhOH+ocmNk1/zb5Wm1iOru30=)
24: Zcxa-wcmGJQEbWCPWNRy_S9kAeA.roa (hash: cR+01K9zK2mMvRiOd2NbvFpy3P7pPHXeI9e4ZoZCoSE=)
25: _1qYl_E9z61RVGmZyGtCwxyB0-4.roa (hash: 18SyY5CRP2Y5oEKH9NlPWn4JmOCzEhI4FF2wBT008ig=)
26: _Zm8MTF_L7EyQ_6YveeS2IaebTE.roa (hash: VQ+xE18B7YQkYF3RoWjSVJ+ofw9TAXhOCMfHnM466LQ=)
27: a-bdMU0PKpZcHud_zlSMCqMPwfc.roa (hash: FjKrhZi7OcCNDSXEQfdLc/TNzOD//gv/lZ5dmyUEaYU=)
28: aUWRzQkmamgBj5uYCZs7Snjb2w0.roa (hash: D2dS6ceN+toMKXqgsq9ovyx12/VkAZ6hcbpyGxWkCbw=)
29: bMTS2A87aEejzK3eKCQU8zS4Tsc.roa (hash: NSTOiMnZOnB16p7UkLVVaCLUT9cLixKW/555b9iQG/0=)
30: hXwiXKPzjzALLb2-aV0H6o80chE.roa (hash: KsKknnspRreD+LtOldSofmy5lxz3mxIMssf2KBvH1MI=)
31: htGXjVomK79OKrmcY2KJgs4ezPg.roa (hash: Ecl/Jiy52V1qsICQs2cHZIKGG76jH9NDSw0LPqpC/rA=)
32: jkioZ7sMtN29opHHMof3tv_YZR0.roa (hash: z+ea8bYxi98v1D0ZT+9JXvz7vJ4jYL4VA16/BZkZvwM=)
33: k6R2EMc1jHcegHcYvsEaV2UvlZA.roa (hash: byoNW/ZgL2eaul6bek1NQxuUanhUUajegKqr92UrXrU=)
34: ltLsBfGQArgFTwEJnxowuwYINmQ.roa (hash: L78GTriIbxxRLspWQQO5fmxXcJp+UgccdnRCJHJ1oFM=)
35: m57YsWq8w_ZAQgkm8smpZ3EN5N0.roa (hash: DOPMeZOfGq+jzc64BcbcPLyOPAp+75vksjgsOjXMlhQ=)
36: mB5IiCH_newq6qbP2kCzfpUSUUw.roa (hash: YhW5V+4PKfLERoAKrC4EG5FsVV0PNU0jPh/XSltcZh8=)
37: nSiUjHGJg1_NG7MGG7mbfkbl_ms.roa (hash: nLy78X+XVrYs4fJKoVbx5CKz3kGaFoiDi0xYmsQEn8I=)
38: oHTKl1BDUVQv5BZ9d1o41D8SmFg.roa (hash: OZrzmSaMIO4XTjvZmhAaJ6ipcXJYLxmtmBRfg4r1PS4=)
39: oSVvPOy3DcS_J21hCHOPnBixIsY.roa (hash: DFtHinQdzCM+BlKU8F5bIFjAI/DQwKU4K4hplb7qoKM=)
40: oXr-OXMQDlIYBwTEuUb02K5FEWs.roa (hash: v4KuKroQQAeom7scztrCxWsUL7/efzNpf/MjG5frSpY=)
41: q6-gOR3ChVa7BFfzbvZhI88N0Hw.roa (hash: W+o+neEd5lLOipfuBZ07SXEXSqZC2MoxbUXZ+XALuTI=)
42: sos9OQo7SQuATzDAO-88fckXZrM.roa (hash: BvLpnURp1OXbUtdg+BiPw0Dsxp8uR19uuIXSDPU3W0k=)
43: ssTPwx3Ir2xDAbb7MdMwi5Ugm2k.roa (hash: kI6+F1DWAcc+3XLZk055UBjOatQ51Syy2IyT4uzsHTY=)
44: tVfM1Dr-gW5JUyKL8Up13CkBS40.crl (hash: Ry0Yvhy48EQSvNvR/IcYpq9j8PyZFMI9OdMXVJBhLp4=)
45: v0EgzvwenfUuFzJ1WPOCjKPv3xA.roa (hash: HBF5KdghmC5VF+0k49VIpdG77syNkClmpAWbA/Bfosc=)
46: v8SeWykxnCkXQyOZscP2MgpOyZg.roa (hash: O93SDzFlSIJjhC2CFme+MFhBi83g9A1lij8xh+MsV5Q=)
47: wb6tluOUZUayN9G05LwXOnEHcWs.roa (hash: jn6hTpf5caV20SdBM51r7krZlI86ZWqMVK8AHsPyORw=)
48: wjtu5rouI6o5sivHqgZWiEyWYSQ.roa (hash: dh0LGwDXw+QvpsnUYRFis+d3wj/qLdu8NaoSILnm1ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:1f:83:82:29:46:b2:fa:5c:1b:a2:49:b7:02:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Apr 17 12:01:18 2026 GMT
Not After : Apr 18 12:01:18 2026 GMT
Subject: CN=baf683e5a9557441d6974ab4bfb14bb5cebbf7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:0b:5c:2e:9e:7c:08:90:5b:98:f1:d1:24:
32:98:51:f5:88:c5:f3:e9:b3:90:68:23:a8:c3:84:
58:e8:c1:ec:c6:b7:1d:f4:07:ee:9c:dd:f0:b4:06:
ca:28:ae:13:dc:ed:29:b0:a8:38:9a:04:a5:af:5d:
90:a8:49:0a:0c:09:5e:af:45:9b:f0:8b:bb:4f:b2:
1d:91:86:6b:a8:78:00:89:69:10:2d:40:93:e3:ce:
72:f6:d4:9e:aa:f2:29:d0:24:b0:43:5c:6f:93:bb:
12:0a:4a:5a:3b:fe:2a:93:0a:9e:92:b5:20:46:b8:
05:67:5b:ba:f3:6a:be:6b:c9:07:bc:69:d5:60:fa:
a4:be:a1:4c:3b:cd:2d:fa:5e:f5:d4:63:71:49:55:
af:e9:0a:42:3e:40:bc:10:91:71:b9:f5:b5:b9:4e:
23:28:9b:67:3a:e1:4e:e1:bc:7c:d6:79:91:86:27:
6d:67:c8:87:7e:09:9d:db:ec:8e:f6:68:3a:c4:f7:
99:3c:8f:1b:8d:8f:df:7b:40:21:de:61:93:56:fa:
67:c9:71:f5:c5:b2:68:48:6f:ce:36:cb:01:6f:16:
22:c2:cf:b9:8c:91:64:0d:36:b6:92:57:7a:3f:cf:
f7:13:4d:f0:e9:62:11:ef:97:58:86:65:24:11:a1:
60:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F6:83:E5:A9:55:74:41:D6:97:4A:B4:BF:B1:4B:B5:CE:BB:F7:D5
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3f:1e:1f:31:ea:69:d8:7f:7d:10:9f:e9:89:f9:0d:f7:29:
44:c6:8e:6a:f9:4e:9d:4d:29:cb:c0:74:aa:b5:2b:bd:57:8f:
3a:f6:42:c9:55:a2:c5:18:4a:ee:0c:5c:28:8b:2f:e3:bc:4b:
d5:bf:32:d6:11:99:80:7f:36:a7:7b:fb:69:f2:97:13:f8:9f:
96:e0:e3:e1:f2:a5:db:b7:36:bd:fc:fa:37:65:76:e2:e3:4f:
69:22:86:72:48:4f:c7:18:e2:82:a2:03:24:08:66:1c:c5:94:
e0:3b:eb:61:62:a8:0c:cd:0c:08:f3:12:3f:50:6f:d7:d6:fc:
cf:6e:c7:98:24:84:f2:86:78:4c:31:15:2c:86:4e:fb:bb:36:
f9:97:cf:61:72:06:d9:68:82:a6:4b:5d:ba:59:f5:a9:3b:1f:
41:78:8d:b8:1e:36:c4:91:77:ca:d8:a2:d8:be:ab:cf:31:ec:
39:20:55:02:e8:3f:1a:21:52:97:0c:2c:cf:54:66:d0:04:a8:
26:c4:a4:82:cd:d4:da:41:1e:2d:1e:26:fa:79:47:0f:99:20:
9c:12:bf:e3:fa:24:b7:bf:77:de:cf:26:0c:19:20:23:1b:09:
f1:bf:8b:ee:ed:88:4e:24:2d:0c:61:55:c2:50:c8:a1:14:10:
58:af:6c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:40:19 2026 by rpki-client