
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
File: v4QRNUXZAAdg9mBipCIZM6LpWdg.mft (raw, json)
Hash identifier: VCN67JVSX871tTnzpAkZEd05moLdKu1Y+4y9zie9yCs=
Subject key identifier: 06:56:E5:62:37:0A:AD:32:8F:A9:A8:9B:F1:18:7E:8A:0F:01:69:28
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019CAAFD586BFEF662F02F282179667A1353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
Manifest number: 1511
Signing time: Sun 01 Mar 2026 20:00:55 +0000
Manifest this update: Sun 01 Mar 2026 20:00:55 +0000
Manifest next update: Mon 02 Mar 2026 20:00:55 +0000
Files and hashes: 1: 0kXS2WjCCmGHS0asFcjHjq0ESdA.roa (hash: NcRJslp6Cst9ywqKbBrXM4eKGnOe3QAwekOYiXZ066c=)
2: 2j9VUbHTcDA1b90rifQ58Inn2f8.roa (hash: Lgs88tbxXG61dcN+ofeHaAXMJYWju9945L7ezP0hATg=)
3: 35-RC4YDZpErq0qZEtlrtSl4SMw.roa (hash: FOYizqXKHMLapyQGMwFyEz9qVvs69XW13Uh469YQNIU=)
4: 5ydN7m0EV0XPPM7hhtoPeHHLVX8.roa (hash: gqBf1pgqFhh7rC/j0y4ZMSZVouaA/LSU94XZbddNY9U=)
5: 81eHHbv2rPJYI93isZ476W6B7zM.roa (hash: rilqDOE3ousOR3KDCOC0oQFrfowQVUhBVFfyKLTOWP8=)
6: EfB0MxJFEM8P-mBHWzWP2g-vuRg.roa (hash: 5I3dde4Z0pGqorT+Es4EH70Wh9X5Be4WVxahJvSkgLw=)
7: JFQGAOGdlBoIozV3Kg-vDWtfVao.roa (hash: Z1+P9csIB0WjKmg8chhTuD4xrRsrTBYnir8esGAQC6M=)
8: K2kXXUMGcaKa7rD6RGsaKEmV9Wg.roa (hash: 4AJJT3KGPCqJR4OBHfMLmZzKwbu+xSqi/JOf68BFrzw=)
9: Lnwh91F-Y3oGbzapesKSQKh5khY.roa (hash: fViq177JlHqZD4IZxEVipAykPN+uot8OXNoz0m9fnZk=)
10: MdUIZIJ4fMdMmnWpGakpfnXUhu8.roa (hash: 0v7DpVyOb9ZenfEj+uZlG8WAK7SkWOmPeuDGZI04ctc=)
11: MorRi-vslYP9hnHqziII34LBIfw.roa (hash: CIMjlR7v2eM4nTZ1oFVRk9hQ2LQU98LPD9awiwz9zSM=)
12: Nq8PoFO8FLqJKOQgUZV2jF5UqZI.roa (hash: oUSIvk6c2wK0Ghd3NBd+GqAzgT8NlNIUgVJ3tPrMvmw=)
13: PY9DCNlwLD7ejVBXpUKsZjzW_qs.roa (hash: WsUPkIgFvWT/RRRySu92Di42VU11w6gI/VSIsfWKIOw=)
14: PhoOeARfKz43CH2Oxv0MjSWRe_A.roa (hash: Y13i/Rsbc8Mu3++DPIgSQIrWVJySh+6kie5zdNCvv1s=)
15: WZWGYo1-x5iiMmTQB8f7pscBQ5Q.roa (hash: IhIWhgnItgwnoOUYHAHgKAbDJ1m2IH1w4DFw6ZTXRMU=)
16: YFKE_2_y1TuWr9IZX6ehzMIJwQw.roa (hash: frhzV5oZPaW+5HEAEtK0fcMNCl6GJAvLM0KbJvhre70=)
17: _eLosOoEd8yDU_N8Qvcrlr44u1s.roa (hash: 7dNJprnXNblqOmi4KvjwoY4AaJL/D5R6qT8hf0u15fk=)
18: belvSv2ymqgkOlS6HkEN5vfj5ho.roa (hash: LU13OrHjOljdUA6S9iD5fD+7aTf2fhMhNqxEtC2pbhY=)
19: cxZr5WeEEoSi7bJFnkDYNQkLsRI.roa (hash: ohg/2w/+ciG+gSkKwemx/D24YI9eJ3bhnC/JUnNespU=)
20: dS2Ew5TyZLKBb0t_vYeqxiQO914.roa (hash: 18YsiLmffOrQgrZYM/cJ3pecwTIq4UqOgR0InUb+7Dg=)
21: e-D3VZHxEnpb_XDj-m8FygPLC-s.roa (hash: WK2WT9RvaBwGkJpwbeKYdSX5XZW7KaarQn4kK4Tt/3Q=)
22: e4QufroyVWdWI18YSP-xE5y8nsQ.roa (hash: D8HQMrEwK3oNuQ0az3Yjngy1UMsE6uMPy+4eRKXzeeY=)
23: f3fqu4tTHl2vcBZdGXPsMyAjKYU.roa (hash: YnhL3R6TQw9jOlB6ezNd4A83xIKsm64Z7pwt9aESzIw=)
24: fRtALlJ0nNQI9-pQ_-VUmgfvyPA.roa (hash: YMK7JCMFleT3cdvAbWrw7szd/wGp+4EJrd0iiHOFdYE=)
25: gWgAGHArAQssrrGXIRyn4VHTFXU.roa (hash: B6SPcVHep6hBRDtoMqsctR3R17FHDgKNs8lCIVE2720=)
26: hY0aJNRR_6F6hcj2HU6oTmY_Pcw.roa (hash: 57iH2xrm7fGDAmF/kYd4rhaoKj2e48MM0T5HY2yEuRU=)
27: lnIWKuH9_Xj6iXnCaTEv-E3_2PA.roa (hash: O9/yt4Tff0A42sm3r+4IQVcRNeLSXvNozIpYDFnhUhI=)
28: qzMo16nmO71L2QshypR-MMDDoCo.roa (hash: l9OxB1GKfb3RigjCep1J7ekawkvlh+mNfXTsSVv2Rdo=)
29: r7ByOLP3MeukbZSE4fAZ0_Bq3eo.roa (hash: iX2pbv1iuv/av89qGOeBay93zJ5dvcN9GC/EDL+toP4=)
30: v4QRNUXZAAdg9mBipCIZM6LpWdg.crl (hash: MIXRsP58ANxVn03NZuwOaG4wY38pWNgdmpLF4h7JrC4=)
31: vdgqBKwQkfA76s0H0FyOtcJZzV8.roa (hash: D7lmF99Lrcwh6wlVfBPPTqd81NKZPrrGaKS7PuCJof4=)
32: zSbJ_zmLsvnYD4Tj3NdHFOYhGs0.roa (hash: DJQ4yfm4mN/el8pVTO9ZIBKqMkmNeH54/xwSWHyykMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:58:6b:fe:f6:62:f0:2f:28:21:79:66:7a:13:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Mar 1 20:00:55 2026 GMT
Not After : Mar 2 20:00:55 2026 GMT
Subject: CN=0656e562370aad328fa9a89bf1187e8a0f016928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:c9:ad:5f:0a:37:3d:b3:16:d0:c2:b1:00:
65:0a:66:0e:c8:bb:3a:03:10:d2:e4:59:99:e8:6b:
ae:d7:3d:c2:33:b5:a6:df:b7:9a:bb:5a:52:db:4c:
5d:8e:84:a3:a5:a4:7a:5d:b1:e7:a9:fa:9e:e3:18:
23:91:94:a0:3c:99:91:1f:93:ad:dc:56:4c:4f:72:
eb:18:09:f6:be:1e:df:8b:65:63:6a:7e:10:19:24:
a6:bc:c6:26:61:37:99:c5:3e:50:61:16:92:e1:c3:
2f:e9:57:ab:ff:b1:2e:b4:de:88:0e:61:a2:c5:45:
45:fa:77:11:3c:da:5a:f1:4c:41:4f:fb:e5:69:9e:
43:21:4d:4f:b3:16:4b:60:a1:ae:8c:2b:a4:b6:cf:
70:fd:13:7b:69:7c:2f:c2:94:cd:2a:cb:93:84:5d:
a5:b6:90:f2:0f:c8:dd:47:c7:95:3b:e6:69:85:9e:
23:4f:95:14:13:fb:8c:f5:34:c3:0e:0f:95:76:91:
6c:33:c2:45:1e:48:76:cb:a2:76:e2:ed:c7:03:c8:
36:0a:98:65:3b:be:4f:a0:41:1c:1c:4b:e0:e7:c4:
30:1a:ae:71:4b:eb:09:b2:58:4f:69:cd:36:16:2d:
5d:a5:66:ab:85:87:16:88:09:97:be:1f:da:41:1d:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:56:E5:62:37:0A:AD:32:8F:A9:A8:9B:F1:18:7E:8A:0F:01:69:28
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c7:92:29:b1:02:3f:39:9a:9a:ec:1a:0f:26:07:e8:a1:df:
60:a3:41:1d:1c:ac:b7:f4:e4:6b:49:0a:9a:5c:f5:ea:77:79:
ac:83:d2:cd:91:03:e8:57:ce:09:49:d0:aa:fb:21:96:ea:ff:
57:46:64:a9:29:30:1d:7c:40:38:2d:f0:bd:c5:84:97:c0:5c:
50:b3:a4:66:61:2b:10:4e:ea:e7:46:45:3e:60:c1:6c:fd:d8:
7c:5b:6d:31:aa:37:18:43:cf:99:5b:68:bd:ba:d4:96:35:7f:
5b:e7:80:34:14:33:63:75:21:80:da:56:4a:9a:bb:37:db:ed:
6a:e5:c7:01:ea:97:d1:3f:cb:59:5b:26:69:ab:b6:cc:d7:5d:
ca:88:a6:b5:7b:07:1c:ee:48:af:d9:00:0e:00:e1:89:c9:ee:
99:8a:55:3e:a7:94:cc:19:aa:ac:09:f3:6a:70:1e:3d:fb:1e:
e6:57:2d:42:9a:19:bf:f7:cc:15:7e:ec:fc:60:76:00:e4:e6:
5f:c7:82:fa:36:7d:0a:a2:5d:2e:fc:c5:65:e9:bd:86:c1:ae:
f5:f2:04:80:e4:71:0e:43:68:82:7c:2d:45:a4:b1:14:dc:07:
a2:30:b6:92:50:97:7e:d4:01:dd:f7:1d:e3:15:6d:48:9f:48:
b3:19:63:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Vhr/vZi8C8oIXlmehNTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjYwMzAxMjAwMDU1WhcNMjYwMzAyMjAwMDU1WjAzMTEwLwYDVQQD
EygwNjU2ZTU2MjM3MGFhZDMyOGZhOWE4OWJmMTE4N2U4YTBmMDE2OTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlDJrV8KNz2zFtDCsQBlCmYOyLs6
AxDS5FmZ6Guu1z3CM7Wm37eau1pS20xdjoSjpaR6XbHnqfqe4xgjkZSgPJmRH5Ot
3FZMT3LrGAn2vh7fi2Vjan4QGSSmvMYmYTeZxT5QYRaS4cMv6Ver/7EutN6IDmGi
xUVF+ncRPNpa8UxBT/vlaZ5DIU1PsxZLYKGujCukts9w/RN7aXwvwpTNKsuThF2l
tpDyD8jdR8eVO+ZphZ4jT5UUE/uM9TTDDg+VdpFsM8JFHkh2y6J24u3HA8g2Cphl
O75PoEEcHEvg58QwGq5xS+sJslhPac02Fi1dpWarhYcWiAmXvh/aQR2DAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZW5WI3Cq0yj6mom/EYfooPAWkoMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMeSKbEC
PzmamuwaDyYH6KHfYKNBHRyst/Tka0kKmlz16nd5rIPSzZED6FfOCUnQqvshlur/
V0ZkqSkwHXxAOC3wvcWEl8BcULOkZmErEE7q50ZFPmDBbP3YfFttMao3GEPPmVto
vbrUljV/W+eANBQzY3UhgNpWSpq7N9vtauXHAeqX0T/LWVsmaau2zNddyoimtXsH
HO5Ir9kADgDhicnumYpVPqeUzBmqrAnzanAePfse5lctQpoZv/fMFX7s/GB2AOTm
X8eC+jZ9CqJdLvzFZem9hsGu9fIEgORxDkNognwtRaSxFNwHojC2klCXftQB3fcd
4xVtSJ9IsxljNg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:35:22 2026 by rpki-client