
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
File: tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft (raw, json)
Hash identifier: 3Fk+OBTBdAOQyPE+/xpQLVGwHU9/dTMVxh4cucvl15w=
Subject key identifier: FD:3F:2C:40:42:E2:9F:70:97:93:37:01:A8:31:78:34:E7:F1:31:21
Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Certificate serial: 019CAC46F86C52D865C8AE844ABABE8510F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
Manifest number: 0242
Signing time: Mon 02 Mar 2026 02:00:58 +0000
Manifest this update: Mon 02 Mar 2026 02:00:58 +0000
Manifest next update: Tue 03 Mar 2026 02:00:58 +0000
Files and hashes: 1: 1-Fy84YC95r-bQW2cLl79V6F_YT4.roa (hash: gL15S7gQEZVfvb5bxwrY+zQzlzYDYNRTFbb19+x9mOU=)
2: 1-Nznx-18fNZ6F7fV7FWsvpQVpSk.roa (hash: ESa0OQif8LkNT9zKRORM4Qe3nNaXNgqNLhdo7JNem/0=)
3: 2fYLBv1U0Aal5HtFShitrMTODDk.roa (hash: 2/V+b6fricNVBwCToj237iqhy26fLac2r/viReW4GF4=)
4: 3UqTULNUjwAb8aM5tZWDkdsXWeo.roa (hash: LLkvKetTDyJdMXPZuYokaJPjJ58hhOZl6BKgzGKR4fE=)
5: 4eZ7bkmpJQiebKtBTXoYVZg6Ldg.roa (hash: +qSceZV6AJUPDL56rity8Lx2SMr8wkGezaj/ssbWib4=)
6: 5A-xAaitVd-Z-3EM0tcDIKZtoa0.roa (hash: rvE7dA9kE2RGdYWQzFMr+Rr8fFZi5luB0pquTynO3s8=)
7: 9tWF1GqvjRro3KCeTjhlXGOeJnk.roa (hash: teh4jlkHAaykmKjheyxnAjMWR2tE22/CA39+lQwLfBY=)
8: AAN_C8py2EA1n7GC7uysYX9C8eI.roa (hash: YTXGhX9lVZicuBLsjZQtboD3S2P+2J1oVo6LxafsTbY=)
9: Aw2zWYgv8W7CwrMsEePdbTsLvok.roa (hash: wEinvm1qao+9BCRR0fnnIbv5tbDhJ2a5pDYCtrsJwPc=)
10: HTIxoi8WyFSrHeUOWzzUiEIhzDk.roa (hash: cd0RecHzNsbQYeDphiQhrKlq2//otbl1g44Ke+zy6bw=)
11: HwCEkBXkDVGb_trROXqUO3InBZs.roa (hash: 4VqvdzlCii9J+rZ10d2Ty8zbIKLGsNMqZiNczN/lH5o=)
12: J3Irj20a5Nlbymwp_tuM6NwpZGk.roa (hash: JOo4UjGWzNEE5RC1ZV6KYebK8zPHqC8OTRdKUFsxrbc=)
13: TIVfVbHfouWC6xhaqaOe2rROKk4.roa (hash: f7pxBjbhOpubYs4a19slbS3M7w5nVBiYFx5na8V322c=)
14: W-hqX4V_eWCdg6_rVRWyKKwNsZo.roa (hash: FbBn+Y+2aBjmifhJcGgHM6wc4kqUDt9aYkj9YzgXnQo=)
15: enXU2NRbrmUSLj3aNd49w6CB9kw.roa (hash: bqlmejBH4um+OhcSoaSwzujrI/A1SFNyu4se8eX8Jy8=)
16: fMecL_p_XorOu-OBjgfyWEuIE2g.roa (hash: E6t0K2Pr40cejujMiJaL8HUBY8+SoeQqKn7sy6Ra0fA=)
17: hTbfi8iyqpyBUx58enPyCnAk8B4.roa (hash: iR4m3I4+fi5SXyKVTPF8tJekzYjESRlBnoPf8B3mZQY=)
18: hnOMcA3FLHrspCaukH2G2BOpT8A.roa (hash: lcUqSg3j84OiYjox0KKVZ3oU4xCrQOPVs8tFQBrKuF4=)
19: lI-SGy6V9gbYheStfoup00TtjDg.roa (hash: j9/ph3cCY16/8Ag7j6nb1Eljp7GEHMNtLj6G3JeZuhg=)
20: ma_hJ5Go12WDQL6E3MOLLSFUGZg.roa (hash: ri5qcBP3AFkKJ9Kz9G4biTaRxnIVuPjswlV7TfCNoUM=)
21: tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl (hash: 9cbl8zFoqW+6N8S8mcY1kVvxuNsBE+kXOk2ggnRxDNE=)
22: xAs-bndcqPd0AUG3p2gqYtNCwKs.roa (hash: RlwLGxg+e7W2Q6yDLdFrjAGx+ZccxU5PdajeFC3InjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:f8:6c:52:d8:65:c8:ae:84:4a:ba:be:85:10:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Validity
Not Before: Mar 2 02:00:58 2026 GMT
Not After : Mar 3 02:00:58 2026 GMT
Subject: CN=fd3f2c4042e29f7097933701a8317834e7f13121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1c:a0:97:d0:63:35:60:af:7a:55:f7:b4:a3:
80:2b:af:78:8f:08:ae:48:13:87:03:69:c3:ad:be:
4b:e6:8a:9c:04:f0:55:18:94:b3:3b:3e:a7:0d:42:
da:ab:cc:86:5b:f8:ca:79:a8:0c:c4:f1:c6:36:15:
62:9b:81:3e:65:fd:f9:71:9f:49:6e:42:e1:76:00:
04:29:bf:36:d4:b2:82:d6:cf:77:56:3f:47:3a:d2:
98:25:a5:de:b2:9d:bf:17:5a:8c:b3:f6:f6:df:8f:
73:b6:f8:05:56:5e:25:8e:ec:eb:be:ec:cb:ae:78:
56:62:ee:56:2d:78:f9:d6:8d:d3:65:80:2b:3d:24:
e9:aa:62:58:d9:c9:40:16:f6:84:22:8d:90:94:d6:
50:0e:85:21:7f:90:4e:e6:b7:c3:29:94:9f:89:c3:
77:ac:6e:0d:90:ff:34:38:63:a1:2d:06:93:7e:49:
6e:77:2a:19:59:1e:ae:d0:a8:a4:92:ce:b1:8f:fe:
6e:5d:44:42:b6:79:4b:01:f4:7d:a9:a7:d1:1b:f4:
93:a0:47:35:9a:99:8a:a2:87:79:b0:f5:ba:25:39:
d5:48:41:83:5f:48:38:98:61:30:83:93:05:01:52:
51:dd:83:bb:dc:72:c5:0b:62:b2:7f:6d:d3:f5:69:
29:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3F:2C:40:42:E2:9F:70:97:93:37:01:A8:31:78:34:E7:F1:31:21
X509v3 Authority Key Identifier:
keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f5:61:5f:d7:63:6f:b3:08:87:3f:72:9c:3a:94:1a:5e:d0:
b4:54:f7:5b:16:4c:fb:43:57:78:86:10:c1:f4:00:a8:76:73:
27:15:7f:8c:34:b8:14:fd:e4:aa:af:3b:c9:47:91:45:27:58:
3f:49:92:75:01:e7:f9:6e:41:1e:3d:f3:81:e2:91:22:2b:ff:
34:39:0e:6b:76:f2:aa:d8:60:9d:2b:cb:6e:05:9b:84:a7:d0:
64:ee:ae:25:68:44:c6:82:5d:aa:e2:42:7d:da:8b:fc:75:90:
c9:50:dd:12:da:33:bd:bb:1b:4d:96:f9:b8:cd:3c:27:55:49:
90:d7:44:4d:e0:f8:2c:5f:5f:4b:71:5d:8b:e8:a6:7b:36:62:
cd:24:1b:f2:d0:a0:0f:1e:3b:15:b1:c0:39:4a:11:e9:0e:c4:
c8:ee:07:b2:e1:6f:1c:f7:ea:c1:ba:23:59:39:f8:39:44:eb:
26:0d:17:73:80:a2:c2:46:a3:27:83:89:e0:a3:ea:c6:35:db:
8d:04:2f:01:6f:df:a2:f7:61:a6:d9:50:01:11:bc:70:26:e7:
80:45:6f:c5:ad:19:46:46:5f:5c:66:58:72:bc:c1:96:d6:ed:
b5:7f:a3:f6:1a:54:0e:1f:87:c1:08:ce:98:e5:7d:00:34:8a:
28:02:f9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:40 2026 by rpki-client