
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json)
Hash identifier: sZxeB0ywWymbjehlCve9GgSZ35JEzxrJNv8c9CHEccs=
Subject key identifier: 02:19:03:58:08:8F:3D:46:DF:4C:67:33:55:F0:8E:80:D0:13:DD:9E
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 019CABD9A7D6EDA131D66D7C9852637AEDEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
Manifest number: 185C
Signing time: Mon 02 Mar 2026 00:01:34 +0000
Manifest this update: Mon 02 Mar 2026 00:01:34 +0000
Manifest next update: Tue 03 Mar 2026 00:01:34 +0000
Files and hashes: 1: 0u0Z9G_sLm4VMeScNSe2qxkNpUw.roa (hash: ZjKrwSklc3LkDu0tAkV/6i8mo/dNcOG0GCNtibli/Q4=)
2: 3_hTG1VNNECdXWtHf_y7Mh1I0-I.roa (hash: WyvWKO62KaRIQphftD3eJM5VgxI16MZECLiFVVDTedM=)
3: AuHoEVrnl-1LwAXvi9txhNUCs-o.roa (hash: LebcNjlhptCuSycNyI8Gq5rf+emsaNgyhh5yVvxRTjk=)
4: FAEbHhLRRaDRbR_4ejpb1QHrGsk.roa (hash: EK6RNwivTo0ew9QPDVu62GQI3mFybABhS1y9MjMOYEw=)
5: Haj6URZpFS-mdAGIc4wmMOS4lM0.roa (hash: EtXPHXKoqXDb9Vz60AGE1NwlxpAVrwFBgi6KRxclp1c=)
6: Pot9sGjQ09uE0QJkmshSlnxcDEs.roa (hash: fPrzEPKp0VS5KGwAOadvcVPYu9gvZcvC3Al0vJwF1C8=)
7: R1ACp4N7msvtcVocj7URglX5xNE.roa (hash: s7Zox0ImjXt1GDu6UZLCgSH6/GocPu93iShhVHA6YQw=)
8: bniESOAwEJ3WL8_KzHYZ3-fFUKE.roa (hash: t+surPIg+2rXPUx8NHZjclxfI1SSYNmZtqZYBFqewLY=)
9: j5ZbA6yp17PHeDg2AdsUhWWZarw.roa (hash: r5QzBckgxJMlYZ0Uls+XcMt6Ok6i8cWdycqRKmI/1xk=)
10: n2c2A4aLrP9Nmm7zFRLn0TmvRwE.roa (hash: qKmltpUjZcaLW2FolvCbNT5Sz4SxQTiZwUNd7tmk66A=)
11: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: DYo1lygGbQsBFDlAhSTXJaLj1CYysuQWUkpNwwNeQ4Q=)
12: yg9CvK7YsVgoTv4cPVX2srKo0uU.roa (hash: k87y5f3qtoVggaVvKGB+/23YD6IKa8AY5DqudY2fvWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a7:d6:ed:a1:31:d6:6d:7c:98:52:63:7a:ed:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: Mar 2 00:01:34 2026 GMT
Not After : Mar 3 00:01:34 2026 GMT
Subject: CN=02190358088f3d46df4c673355f08e80d013dd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:95:e5:72:e9:33:0b:61:65:6d:ca:9d:53:
f1:ee:e1:81:d1:0f:46:52:f1:93:72:85:82:c0:00:
5f:fa:19:61:3b:b7:46:49:34:e3:b3:46:10:57:34:
6d:2e:9f:98:6c:59:4b:81:64:c0:dc:87:32:82:d0:
ea:5b:11:9b:66:2c:9e:4f:91:ce:ee:85:e3:55:eb:
59:df:16:bb:1c:f6:cc:54:e5:77:2c:0e:08:bf:4d:
34:9d:b4:dd:51:40:a2:ab:03:24:10:c5:90:9e:13:
a1:a1:b1:6d:2c:cb:c3:e3:15:21:ce:c8:3b:70:76:
55:fd:3e:e4:78:e4:88:e7:78:6f:b8:01:b8:9a:f4:
4b:e6:44:87:60:21:58:c4:95:ef:b5:c4:b3:89:85:
fe:68:10:7f:ae:f5:dc:6d:66:fa:00:fd:e8:84:0a:
a1:29:49:f2:4b:f2:88:df:6f:b2:48:a5:1f:32:fb:
7d:1d:8a:81:d9:06:f3:96:a2:44:39:d3:02:58:bc:
3f:e9:96:2a:88:35:42:21:8b:06:cb:dc:9d:ed:e2:
33:34:0b:31:30:75:2d:0e:5e:a4:8a:d8:cf:5a:e0:
a7:8f:5b:c7:39:f1:e3:f9:5e:ea:df:0f:aa:ee:74:
06:8e:c3:6c:85:6d:bf:00:e4:e5:b1:33:eb:9b:05:
d5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:19:03:58:08:8F:3D:46:DF:4C:67:33:55:F0:8E:80:D0:13:DD:9E
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ec:9f:84:ea:c0:f2:ea:cd:46:f5:f2:99:da:c2:f3:c8:7b:
a2:69:3a:b4:0c:4b:26:c3:9f:a2:1c:bd:25:ef:b2:2d:33:a1:
18:79:15:30:b6:43:3b:ec:1e:5a:56:94:25:a2:1b:c5:7f:61:
2a:2c:b7:5a:27:9f:e9:52:bb:d5:3a:50:2d:e2:1f:47:37:35:
cd:6c:f1:da:9c:0e:f6:dc:3d:27:13:08:cb:9a:c5:35:09:bc:
64:6e:cb:e9:03:c2:7c:4e:b6:48:73:e8:46:28:e1:00:59:fd:
f3:44:a5:87:aa:2e:09:e1:f9:7f:7c:12:96:96:fe:5c:9b:07:
8c:f8:c4:81:0c:3e:e8:9a:7c:cc:ae:94:1b:16:2a:96:53:a7:
d7:b6:81:44:ec:30:b3:28:5c:a6:32:13:a5:42:73:bd:40:cf:
35:8f:d6:76:07:38:2f:33:7b:ba:89:6e:d6:72:c5:07:dc:c3:
72:08:9a:2b:ff:63:77:35:da:ce:33:88:34:7a:54:7f:e0:fd:
b1:be:58:85:d5:db:99:9b:82:76:c8:a8:cc:c0:dc:92:e5:bc:
ac:ae:10:76:11:eb:5c:1a:0d:32:7f:42:e0:d5:d0:46:14:30:
73:19:27:2f:a4:9e:89:40:5b:76:0f:ba:62:04:66:28:38:4e:
49:92:06:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:30 2026 by rpki-client