
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier: /XuEyGGLJu/5+qMIGXw4IeMzxLqnkTeDLLfuuJR9ezs=
Subject key identifier: 07:E6:C6:D2:AC:EC:96:33:43:A2:C2:E3:B4:23:2A:5A:64:00:76:2A
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 019CAA582267C53EE10E24303B43271712D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number: 0E73
Signing time: Sun 01 Mar 2026 17:00:28 +0000
Manifest this update: Sun 01 Mar 2026 17:00:28 +0000
Manifest next update: Mon 02 Mar 2026 17:00:28 +0000
Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: YisKAG+KBo/0FoSkSu2mk6jVecqe+NrmHnkkCybDxqg=)
2: H5QErsI5RrGZOHFY6_FrSzEPwsg.roa (hash: BTdVxM8rbJfdiUp2j6fzsOE0ajTe0wntltZ6HVxnZpM=)
3: R0pEkuvaVLGxnylHvK6koPi4Qtk.asa (hash: yVimJbcLLcabqOeuTEnFLIbJZ1qdF0H9oXoiq2g92yI=)
4: TKRUQhbuG6vK-9YhYrYM4Xtl7Rk.roa (hash: DmxeQKQyfsvJvWQ6namIeD8pDbFVK71C7OVUciGGrUY=)
5: UtbWjP8TosULXxgOwSpGBsXAj1E.asa (hash: e7BKC4GZaIVKdGVBnnQIPsiQuksngCu2TeIqsWJLAi4=)
6: b7KDZwK5R28lE5M6tD1UYAgLTs0.roa (hash: chq9h/QyXrEES2o8hWXwMO8b44fg7JP3nOh0+1DILZ0=)
7: iTAqvs2G1UdUfx5Fmn2Z7H7-Wuo.roa (hash: L18Wb/sBRdrTPyOX3b7ZSqqO81GWE2YfQWPbOKytco8=)
8: n8wKAbeQwoniSlzobzWQkZPFQ90.roa (hash: gAASzqy3Nb3k3RF3IE7AiqoPFAF8THLrgzOMP+9Awr8=)
9: rxo-kMSJfYbIjml0McyLHchnJKw.roa (hash: 6yBdVD63LgbBLLvhVAYIbiNVvZCYYH7FdQZFXoIkCTo=)
10: x0-6NtH4vUkjT1y3qIl47BzSOGw.roa (hash: PnA5gMRP8NULFbWunx+4LpVvQH7waVlGce2Q/pkpzYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:22:67:c5:3e:e1:0e:24:30:3b:43:27:17:12:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Mar 1 17:00:28 2026 GMT
Not After : Mar 2 17:00:28 2026 GMT
Subject: CN=07e6c6d2acec963343a2c2e3b4232a5a6400762a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:81:eb:bc:46:55:09:8b:5a:c9:f5:cd:60:58:
36:71:26:18:24:ca:2a:9c:44:fd:88:f7:8f:42:e5:
26:ac:e4:74:22:19:56:9c:6e:f7:c7:35:5f:51:d1:
9b:ee:a7:23:f3:03:6a:c5:9c:90:67:ad:61:1a:32:
9c:fb:ee:b1:f8:eb:dd:cf:c9:c9:43:64:77:20:83:
ce:55:9a:cb:6a:74:cf:19:59:8e:9c:06:3b:f3:ff:
52:60:38:f3:d5:b5:c9:7e:c3:4b:02:6a:18:29:c4:
7b:4b:a5:82:1b:cf:d4:3b:a4:0d:66:b3:ca:d9:07:
97:9e:04:72:a1:df:26:16:9c:a7:e5:86:ed:bc:41:
34:17:49:2a:2a:95:fa:3b:52:d5:f2:fb:8c:bc:ce:
e4:2d:09:2f:23:4e:49:4e:f7:dc:9e:94:ef:e4:05:
86:e4:c4:41:95:14:c3:51:8b:67:d0:9e:bc:7e:b2:
61:06:0e:31:74:f0:6d:87:6e:49:73:15:87:02:99:
7e:aa:8e:18:ce:09:a0:70:81:ba:be:5a:18:0e:20:
47:37:71:b0:80:d9:b8:e7:15:30:21:61:a1:04:9c:
9f:8f:59:20:7b:ed:e3:06:e5:62:71:39:6d:0b:6d:
84:b9:88:c4:f5:ae:f2:63:01:23:eb:85:81:a5:f2:
75:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E6:C6:D2:AC:EC:96:33:43:A2:C2:E3:B4:23:2A:5A:64:00:76:2A
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:6c:7b:8a:7e:0a:4c:78:9b:77:92:16:6a:ca:d9:60:bf:87:
98:0b:b3:46:5d:f6:59:18:ca:96:0e:52:5a:6b:fd:fc:61:ac:
b8:44:19:fd:9f:06:93:d3:f9:21:4e:80:5c:74:3e:fc:33:08:
42:b6:b3:fe:ae:86:72:4b:ec:4f:f5:f4:8c:73:a6:c8:71:ea:
82:c2:9c:3a:bd:17:5f:90:d8:d4:b5:58:97:ba:ca:a8:a8:54:
a0:53:64:bd:93:79:e1:77:f9:bd:7d:75:b1:e0:40:3f:9c:72:
33:a0:28:48:66:5c:85:bc:fc:fb:ad:98:0e:19:54:3f:e7:d8:
d9:52:b4:54:7e:e4:67:f6:03:90:e6:71:61:85:25:94:d7:e0:
b0:de:aa:f3:0d:9c:cf:8a:40:14:5e:d2:de:fb:3c:4a:1d:98:
08:46:7d:a0:48:fd:d5:4d:59:65:cb:9b:b1:80:f0:5a:bc:c7:
16:18:0c:14:9c:70:1c:01:bb:66:da:1d:20:d6:92:ff:a2:f6:
60:1a:06:f5:45:e4:8f:15:97:b1:c2:4b:65:b1:07:f0:54:de:
a5:2a:6b:30:f5:cf:d3:d3:9f:d7:a7:b1:0d:84:14:53:4d:ef:
3e:57:e1:1d:2c:34:85:93:1a:d5:eb:da:4d:c2:d0:97:21:49:
ac:ec:e2:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWCJnxT7hDiQwO0MnFxLTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNGRjYjU2Zjc5ZjRhMWRlZDhkOTU0ODIzMzM5NjFkMDI2
NGZhYTUwHhcNMjYwMzAxMTcwMDI4WhcNMjYwMzAyMTcwMDI4WjAzMTEwLwYDVQQD
EygwN2U2YzZkMmFjZWM5NjMzNDNhMmMyZTNiNDIzMmE1YTY0MDA3NjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYHrvEZVCYtayfXNYFg2cSYYJMoq
nET9iPePQuUmrOR0IhlWnG73xzVfUdGb7qcj8wNqxZyQZ61hGjKc++6x+Ovdz8nJ
Q2R3IIPOVZrLanTPGVmOnAY78/9SYDjz1bXJfsNLAmoYKcR7S6WCG8/UO6QNZrPK
2QeXngRyod8mFpyn5YbtvEE0F0kqKpX6O1LV8vuMvM7kLQkvI05JTvfcnpTv5AWG
5MRBlRTDUYtn0J68frJhBg4xdPBth25JcxWHApl+qo4YzgmgcIG6vloYDiBHN3Gw
gNm45xUwIWGhBJyfj1kge+3jBuVicTltC22EuYjE9a7yYwEj64WBpfJ1TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfmxtKs7JYzQ6LC47QjKlpkAHYqMB8GA1UdIwQY
MBaAFN1Ny1b3n0od7Y2VSCMzlh0CZPqlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2Yt
MTc3YjViYTMyMzI3LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2YtMTc3YjViYTMyMzI3
LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzGx7in4K
THibd5IWasrZYL+HmAuzRl32WRjKlg5SWmv9/GGsuEQZ/Z8Gk9P5IU6AXHQ+/DMI
Qraz/q6GckvsT/X0jHOmyHHqgsKcOr0XX5DY1LVYl7rKqKhUoFNkvZN54Xf5vX11
seBAP5xyM6AoSGZchbz8+62YDhlUP+fY2VK0VH7kZ/YDkOZxYYUllNfgsN6q8w2c
z4pAFF7S3vs8Sh2YCEZ9oEj91U1ZZcubsYDwWrzHFhgMFJxwHAG7ZtodINaS/6L2
YBoG9UXkjxWXscJLZbEH8FTepSprMPXP09Of16exDYQUU03vPlfhHSw0hZMa1eva
TcLQlyFJrOzi9g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:54 2026 by rpki-client