
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
File: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft (raw, json)
Hash identifier: yo8/KdV/SPtXfsP/+fbF0gDMAsxqgpI5Iw9ad8QBXH8=
Subject key identifier: C9:51:52:0F:E9:C6:F3:D4:F4:B3:D7:0D:3A:BE:85:DE:D3:AE:7B:91
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 019CAD90197230695768C6C378DDFF3999E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
Manifest number: 155C
Signing time: Mon 02 Mar 2026 08:00:27 +0000
Manifest this update: Mon 02 Mar 2026 08:00:27 +0000
Manifest next update: Tue 03 Mar 2026 08:00:27 +0000
Files and hashes: 1: 4cLeBIUzolxvixomGkjZcKiBte8.roa (hash: N/jmOnjqMHqyGA9wdQXttd0JDYddztlZ/3k1FyNVxQU=)
2: 746QFPJyT0Rq24L0EZYCq84Zm3c.roa (hash: AeIcxvfsKv+u4oYl0aaRx7pmRMFAkAPk+AYZdKgn4Uk=)
3: 8Gbdi7IUMhZxUxQuZhGJDiVa0LQ.roa (hash: /DvGyvGrOeXCAY+suzbyYJaZlIPzhL5zJA/RiuGPNH0=)
4: CjPEg_1_YC8pnKYDbVJlTX6LL9M.roa (hash: zyX+uPItpF4LWUTzRFEpi3sBDAJ/wqUUHQFbPwYtfPk=)
5: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl (hash: GUP+rpqGn4tgATYpMCtQin6AcOQWqiHzkp55p4Yzt+U=)
6: RMb8Tr40WGqktnRvQ9k7HNh5paw.roa (hash: QKnRrBqaLeAjI9PH/jR6hgz76ZPuClSBgTtF3GK+KSI=)
7: VOEqbHkGWWPCfYghmq_qCzJyCks.roa (hash: DW2E3Bv+Uu/QtgNYK+Kni5CDezUiIfsMXJ3wb8ndf9s=)
8: _SvrltKT2d95s4aJXfwotwRjxTs.roa (hash: x78Dq5GqOFiqHEpOdeEmGfWK4U05pqaKZhv6jrrmznc=)
9: f9jkPBByxWpkqaavwL8qGLxgr5Q.roa (hash: SPZe+PWRSrXFLEuZHJmbPAOdsKTcAWkqgps/fPGP+cE=)
10: pxPPJn_U4Vz4mZrrRcMDpeAkFOU.roa (hash: eCE3WajmYZ6Pqwt3eSv6POPsJiPisCy+Hx33j9Wd8VQ=)
11: r29J5i1S1Gu8Uj_A_Wz6NKuvkEs.roa (hash: 8e0tYCtiI0iNQahlyYDb4Q4Izluuf3hdqVeE3n5XNmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:19:72:30:69:57:68:c6:c3:78:dd:ff:39:99:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: Mar 2 08:00:27 2026 GMT
Not After : Mar 3 08:00:27 2026 GMT
Subject: CN=c951520fe9c6f3d4f4b3d70d3abe85ded3ae7b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:b7:2b:f9:3a:f3:52:c4:af:53:9d:70:ab:
8b:e3:fb:ba:c2:b9:aa:16:ec:13:3b:95:2f:a0:78:
62:69:4b:5d:c4:60:b4:4a:89:7c:89:1f:71:5f:5f:
f5:03:79:f6:35:02:e5:79:0e:80:aa:da:c0:40:34:
a8:2f:74:cb:89:0e:15:5a:07:07:5a:bc:df:e0:29:
f5:56:1a:db:ab:e1:8a:11:55:cf:60:69:62:92:fe:
3f:2c:e3:13:6f:28:b9:6f:da:89:8d:5e:97:63:ea:
d8:06:4f:0b:c3:27:05:4d:c6:db:34:2f:01:53:29:
1d:f3:c6:42:2d:92:65:a6:cd:75:49:11:91:bb:eb:
2b:7f:64:fe:5e:96:70:9f:04:ad:cd:98:82:77:8e:
34:8d:b8:1f:e8:6a:0a:bd:88:ea:40:1b:93:58:7b:
6b:18:84:3e:95:5a:8d:76:c3:7f:38:00:39:fd:72:
f5:93:c6:f9:57:7c:2c:3b:d0:a4:a8:24:4c:d2:08:
83:b6:a9:11:00:be:35:3f:8a:c9:dd:70:cb:6b:37:
51:17:5a:cb:3d:41:45:a0:6e:da:55:47:db:fe:6d:
ab:fe:66:d8:ee:7f:50:77:a9:2e:44:9c:2c:36:fc:
64:2a:ac:5f:17:38:75:79:00:a9:80:6a:c0:02:d3:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:51:52:0F:E9:C6:F3:D4:F4:B3:D7:0D:3A:BE:85:DE:D3:AE:7B:91
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:aa:aa:f3:56:15:32:86:5c:8f:d2:9d:d0:97:cb:c3:cf:94:
0d:53:be:2c:d8:f6:2f:0e:63:f3:ff:58:65:32:66:c3:7b:d5:
ae:fb:69:50:62:47:ec:a5:55:a1:38:58:f6:a7:be:47:4e:67:
6f:16:1d:55:0d:50:b8:c8:db:1b:8d:04:4f:f8:39:13:7b:1a:
43:60:a6:c3:e2:2d:9a:a2:12:0a:1f:5a:72:50:4a:c9:9f:15:
0a:48:65:f2:a6:85:bd:91:20:9c:bf:9d:f3:5c:4c:e1:14:7d:
8f:c7:b4:12:55:7a:9b:1f:42:59:92:44:53:cf:21:4f:a1:f7:
d0:03:35:64:a1:99:88:ff:21:3d:83:97:c0:74:5e:ca:d4:26:
50:2d:a9:76:8a:c8:ad:fe:a1:f0:41:5a:c9:f9:86:5e:a3:a5:
84:75:47:42:98:3a:60:a5:b1:9c:ce:f8:58:0b:b8:7a:51:7b:
84:d2:87:b3:d3:94:b9:b9:8d:1b:4b:3a:df:20:35:55:93:f2:
9b:80:4f:85:21:dd:ca:dc:76:e9:d8:5b:5b:ca:85:ba:1c:a4:
cd:ee:a6:28:93:22:b2:fa:ae:91:c2:34:eb:5b:f9:3b:e6:07:
3a:25:d4:7f:59:1b:c1:ce:1d:ed:e3:71:12:a8:a8:5b:bd:ab:
94:fc:f2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:44 2026 by rpki-client