
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
File: TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft (raw, json)
Hash identifier: JeQ9M6Mw4pz1DytgUIIHiIGKMG7JxD56+CQ/frK6NJs=
Subject key identifier: FF:87:4C:ED:13:7A:C5:7B:51:A9:52:09:7A:97:EA:FF:9B:2C:DF:68
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 019CA9EB1BC44BFD157D6482BF32DE77CFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
Manifest number: 186F
Signing time: Sun 01 Mar 2026 15:01:23 +0000
Manifest this update: Sun 01 Mar 2026 15:01:23 +0000
Manifest next update: Mon 02 Mar 2026 15:01:23 +0000
Files and hashes: 1: 0lpbV27AN-RWXlo8EoDNHkn_WFo.roa (hash: 6Kk8nKuXT+iDhxODfuxvlj4oC1k4gGbREeQuyIoqN44=)
2: 3a7na1VrOyD4j9eANMYFxWbuuXA.roa (hash: zi3twxBdnTcqBHYcetTlSiGtn2VDXgmL6wD/jF3qYjQ=)
3: 3hJuJj3FhmNTTAdNdHYKFv4Qbhc.roa (hash: AfMPl1I4FCjIX3coVGZnaX03RsdIkobHgk2ozUg0CRU=)
4: KrEjWh12m9Ky0XdHMs-AV4DW__Q.roa (hash: htLgSYFv0aza897YRzqYZzsiSWGM3XLxPit9x6cKCoM=)
5: QFNxEKmMB0w9c_fcbUm6kZIgIiU.roa (hash: yRObraxWQ+KSiz/NMpv1EAHhy6xFZ3g/Tjjo6DSAkhE=)
6: SNq1qsP_v5HGgFCmwxtgF5oBbtM.roa (hash: KVtsT0fMQgVAG+EfM+vPhmS8z1w+vo6LbjbuGgZDfvk=)
7: TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl (hash: GErsZ4IPxkBFIx6xKRU5e2UiJn9cetOQ72XoYmEDpc8=)
8: UYXgcCIK5zcKT9TlB3oRxLcPw4c.roa (hash: ZKu5onIAs6YBld/h2tSRXhaOsFitxQIlAPhxGco8hos=)
9: UvcJIP9GU_V2Mt4tyf-MC05D4z4.roa (hash: Irba1/9xm6DmXZQD7UmL9JlVgVcOaYu4q1AwZlIIIho=)
10: _K246O-pbv3LImR_NbGl0Uuk0ms.roa (hash: 4aM+aELc7GT7SUF0gs3npOnDB0xgu8gqvceBuJ4g3W0=)
11: aDqWfD8qVv5mTmy_YKlw0knE910.roa (hash: Nt6HJPyyJEcO8XZlWiN2Qky5erL1hvtr6Hh2B65imCI=)
12: cRwj08O3uwfvrDOHpp6Z7hcZGo0.roa (hash: oSg1p4d3f/Ek/TgEvq1Kl3nuuVmFt2QEXW8+ntmYEbw=)
13: dX-rNWvNzQQp4mkv-p-E7vQ4jvE.roa (hash: tzroMUcOp9V01Z5SuKmv3L+kiGKSKimIDzFfo75M/VM=)
14: e2-M3_roN4thnHrSRcYhd3A5tEE.roa (hash: HtHoJrcFJ7Tr7k+ozWHjO7whHbckIcy4WmHKQ/7ZFj4=)
15: hJ_DSrWaO3ObBm5-hhe295ZUGZU.roa (hash: sBGo0ebfgaJ7zl4GXpc60jYy9/bgceVEOmE1IuNRiO8=)
16: hjOcsPBVdAJXSAwKdiUTWAmGopQ.roa (hash: X6Ep2QeB8bOGHavV+XJT5rALDucLiATYg1DR3vQrIUc=)
17: iI_SDTDKoORMx-kq45a1qjOTuZk.roa (hash: J2K/cush+bx+VMhqbDSKLYwVdG3Sbi2stgQnJe6Lx8g=)
18: kwWZWud0oDxj9bqRYQSnO1fTRms.roa (hash: pxOltO+Vbwb+oDFmvBF+y18EOaW3vQK3U1vDji5y33Q=)
19: m-uMu0uWUHMAd3RnwZiaiy6-u0I.roa (hash: n8StrjuRMyFGihImcOgaJXRS+zodWuJUHk2aQxkkkuU=)
20: niKMcxvkNHwtFE1swRnZRa7V130.roa (hash: 5BhfKtNxHPXceWh2gh+NnT77omNb+6j7lXfyG61q2BY=)
21: o5XpHbYzECM8PxBWg33FKmpPLyo.roa (hash: /s+OXvlcKVVirwj5hJhUGVZIhqNKlLQOjzuXK++kB0A=)
22: ptwWAfUIQhVLhqDQn5RDQ5c7CTA.roa (hash: Nd7kZjPWVNNkDzbbN1dtVJihtNFnEpHnC+VpDFqPs8A=)
23: xvJ1JSPTIpMQJ_Z_PhJXPC59D34.roa (hash: 944aX9Q9tSThrEugzQqJaCWIZrVcCyB9vKNFlU0FXPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:1b:c4:4b:fd:15:7d:64:82:bf:32:de:77:cf:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Mar 1 15:01:23 2026 GMT
Not After : Mar 2 15:01:23 2026 GMT
Subject: CN=ff874ced137ac57b51a952097a97eaff9b2cdf68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8e:bc:34:c3:1d:fb:ec:0f:e5:6c:d5:f8:f5:
95:10:d8:cc:d1:6f:fc:bb:2a:97:e8:33:e9:99:8a:
fc:1e:6b:91:dd:1d:38:2f:aa:79:83:a7:be:6a:4f:
69:35:06:58:a2:97:c6:0c:f5:a9:ef:eb:71:fd:fc:
d5:eb:4f:61:14:7f:cc:9e:9e:54:db:88:7e:18:7a:
28:92:98:fc:7d:52:bc:79:92:aa:e9:8e:3b:37:2c:
73:ee:54:b3:d7:e0:8d:42:e1:30:b0:c5:31:7c:e5:
ad:17:19:1e:4e:c9:97:05:b5:d9:c8:ea:02:db:4f:
87:46:39:cf:69:b0:3c:dd:63:7e:91:99:ef:85:70:
2e:b5:19:c1:32:fe:08:cb:b3:c9:20:b3:3c:81:37:
36:70:32:1e:af:f3:d9:1f:a9:f4:4a:6b:64:3e:31:
de:23:73:af:ac:9b:8e:e4:3b:73:ce:e5:95:dd:eb:
3f:56:aa:07:4f:d6:52:1f:05:16:d2:e2:a4:00:23:
a5:ce:0f:b5:89:93:12:c4:3f:72:b5:f0:23:63:ca:
72:67:04:57:a9:33:2a:34:86:5a:38:07:16:a7:e7:
d1:dc:56:82:9b:d8:dc:04:2c:88:05:1d:dd:42:58:
84:81:62:67:7c:7d:29:9f:8f:d3:59:df:49:62:85:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:87:4C:ED:13:7A:C5:7B:51:A9:52:09:7A:97:EA:FF:9B:2C:DF:68
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:56:73:05:12:46:fa:f4:70:94:64:19:50:a1:a9:a5:62:af:
fd:e8:87:88:5d:8f:12:4f:f6:6c:5a:81:95:30:13:ea:a9:08:
22:d3:19:7e:d8:55:cb:8b:80:a1:2f:e3:ff:73:3f:61:54:a6:
9f:32:a9:8a:07:f1:18:e9:54:34:8b:8c:03:ab:e4:ef:d8:ba:
f6:f5:f3:a4:e0:57:58:06:47:d1:66:4b:14:58:a3:9c:9b:31:
85:ac:50:de:0c:7d:1f:8c:6f:0c:35:33:b4:4a:41:87:87:c0:
d7:3f:ab:70:d9:7f:42:df:d2:e6:9a:e4:ee:ed:dc:f5:03:78:
9d:fc:f5:b8:c5:9a:ab:50:20:56:80:32:18:8c:61:7d:51:89:
6a:61:72:63:fc:80:db:e8:d0:fe:10:c8:fe:b5:79:23:c5:e8:
c6:0e:67:ca:2a:53:c4:69:bc:2b:ad:3a:92:41:b7:f0:ff:03:
42:fb:b3:f7:01:7c:af:53:3b:9d:70:14:2e:22:2c:0f:b6:b2:
28:93:b0:28:4a:5b:02:1c:83:42:ad:87:1b:20:d3:55:36:d5:
b4:1e:06:51:8c:b8:26:9f:dc:88:bf:55:3e:5b:d7:9c:25:9a:
d7:c7:a5:c8:bd:ee:ab:3e:84:5e:3e:26:e5:73:4a:20:ca:d1:
56:97:9c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:05 2026 by rpki-client