
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
File: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json)
Hash identifier: 7MHVUWEnc9O0tWaMlTqTh7f1ioHckJYxtBGATsl3Aus=
Subject key identifier: D7:F2:E6:63:E0:31:73:F7:FD:11:44:C1:EC:1D:8F:72:BF:66:BF:46
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 019CAC1002E563CF90565D44DD829C5713EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
Manifest number: 1141
Signing time: Mon 02 Mar 2026 01:00:56 +0000
Manifest this update: Mon 02 Mar 2026 01:00:56 +0000
Manifest next update: Tue 03 Mar 2026 01:00:56 +0000
Files and hashes: 1: 6cANbFm-EJrK8-PMA7NyEk83u6k.roa (hash: jYdd/eqOCPnLV/a9ltPhyg+PE8hVFdwnP1KBbgFBkI8=)
2: AHDv73qMQL9wbDKFTRsjL6r00oQ.roa (hash: AVkBVXP0K0ecnq2H74GPC3d5N3jhZ95iI/h0cjx0eMI=)
3: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: OYPrWeDxaXNBAqW1ZemDRsMaIzuRN3yalXtarhTmXzs=)
4: EuqppgZcuvBd77APj6BJDc66El0.roa (hash: Pou/5mkV9ShqmcqFaVCa6/FpNsjCyEKxq/5LPM8oRyE=)
5: F5f-3aC06oFfat6kysD7KzPEy7s.roa (hash: uf9RFkZjIVlqZ17DS35sOy7dY67XFR7qpT1cpxsxJnM=)
6: GkG94oLLyaWn0LlA7PecrXl0W9M.roa (hash: Vz1DhIY+rwizM8CF8BSBpl44BncSNC0p93dQaqvmHIk=)
7: HAJo40Wzweef0-HmgppS7_KBVno.roa (hash: Md/aD3NC3DChGRJq6Yp2XnMr5nwvrS2wV2tIMtwOW50=)
8: KTMyv7vLJL4RhzKJMxYv2Q04XU0.roa (hash: qlz3neHso26dPUfoq0gD9odJX4heiGA404bEQ8650r4=)
9: MDkr1mPINhLWlbE7zVQDBRRtERo.roa (hash: rKzUC6Ga9NHbbH+PBR/UbbD9eWJNxuXrWwtzpzRiJgk=)
10: MKJ3r_4TKeocUaOcCqRhoBecjmM.roa (hash: E+tQHI9Z8HzAp+AQr7VOtuEt3TaI3sVfC37jnLib12o=)
11: NpomuMBzJVKQYcl-LphdVCYzfR0.roa (hash: ItHWcgevCY69vj6UIFo76di+HZvWbt6e/RbdJHhjvCE=)
12: OX8T0Loeee2SJyDfY3tEnifOFiY.roa (hash: WUtUuVCFbswJZDfkLKymBevKbkG13uZEO19XKdd+n8M=)
13: YGyJEvwnW0WQ_NWAEj7vFCxCxWA.roa (hash: 2C2bEc32YpX5NyOiU/D+IWaEQi+cpjyPUf9gHuyinOg=)
14: ej_ULItssuJKfpG-aO3TpOCfAcM.roa (hash: MuVT+NmseLKCBtNzkD2hqoLRxqqBtVBwn/7W4rZMBJE=)
15: h6iTojqaXm32u7BLTwm0z2ziaCY.roa (hash: LjbU3TQQa1ApTEOwMzVmaLwPfpE+NGA0goG5pwMkhxw=)
16: ivG7FB0OuHZtaPx3ueruCQJm-VI.roa (hash: 5+fSISaJZ6MVlJNLKKnuDnQodZYydtzTRLt+3siDb90=)
17: kEEHiJ2_DoC2VfYdw5LhFhqepV0.roa (hash: wMCNRdrXjQmrhxah3XAz6wjU2Gf/YcDDzzpq9SAnAXc=)
18: k_yt6Ew5vZOiqYJGMvVI2kUV5V0.roa (hash: CUNe6MGDt6axlDbgIXUKB8iPiYMZNW/hw7m/AwCnfis=)
19: ladaJsKVTuv3YGDi38_Qd9THC0w.roa (hash: ElU3llDhKBNskVBOfdbOzFuE0cAaPwlyq6retebHVjQ=)
20: mHQ5lGsBLY58ZqsoI4KyEoGAaCY.roa (hash: qjy47Jf6cTEpCMuTgzO1n5sViPKiS4UbTibv345I4as=)
21: qABofJud5u1thFUHFuMgR1s31kI.roa (hash: piC9Su6MbkEuGjwZYHRT2b414PhCD/em2J4HZaBllmw=)
22: qG2nNWb8MqqDopUB1tVODEkVl6w.roa (hash: cfGFab+OgFf7ubny/5LdmUqIORuyuUqS67/jyuUGkNM=)
23: t0bWLuL94obKt0o74dC0nCo7fYU.roa (hash: tfVFhgnQItxhSLrWx/IEzAzrrjR+KQ0zeBMzi4U648M=)
24: uuHljZPCvASdL1cahmx3sk-UM6k.roa (hash: YZhlBGblOcfxdLBJ41C2ivgjxSeLyB952u1KN3aoLfw=)
25: w-vsZluT0kZh5IKRYyErUh6E-YI.roa (hash: vQYBg15m1Mue8LpyOtOXWxkLMHHfT9+KR8TqZPcjtHU=)
26: zetNVI_5RmQ_9yMT7BWp_EHTd7k.roa (hash: BSZVF8mXcpYwrxryg8NDVMtvr+dxn8y1JxLoHLq3VvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:02:e5:63:cf:90:56:5d:44:dd:82:9c:57:13:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Mar 2 01:00:56 2026 GMT
Not After : Mar 3 01:00:56 2026 GMT
Subject: CN=d7f2e663e03173f7fd1144c1ec1d8f72bf66bf46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:e9:b3:f5:94:a2:4e:07:61:d9:db:d3:c0:
d0:9c:8d:1d:ec:1b:fa:db:e1:5a:e6:99:69:00:5e:
01:90:74:02:f7:ea:57:dc:72:30:17:8c:69:d1:67:
11:db:7e:0f:ee:9f:06:3b:46:bb:37:66:82:54:a8:
8f:c7:b2:8b:ad:e2:84:f6:a3:97:ce:ae:9a:56:88:
91:d8:c6:0e:6b:12:72:67:a3:51:fe:18:2e:94:82:
41:07:3a:ba:b1:8b:a7:fd:42:9b:8d:0d:e1:4d:4a:
eb:4c:e4:9a:33:e2:71:db:5f:65:ca:8c:da:f1:98:
78:79:df:ae:b7:43:be:18:4f:04:ac:c8:0f:2a:b4:
26:69:bf:2d:23:2f:8f:94:61:bf:63:f8:da:13:f3:
5c:ae:b0:1a:c6:e9:a9:96:f3:34:8f:43:83:57:39:
1b:f2:13:44:36:f5:5f:01:41:b6:66:a3:79:23:9c:
03:03:f2:10:3a:a0:eb:8e:60:59:7d:89:ca:06:67:
a8:e6:30:a5:74:c9:ea:19:5b:7b:8f:dc:4d:37:e2:
2c:c0:93:14:fb:c1:93:bf:d1:27:0f:00:eb:cd:86:
fd:b8:7b:59:b2:bf:7d:dc:85:11:a1:27:3f:32:49:
12:09:cc:5d:5b:fd:04:c1:95:5c:27:3e:71:31:14:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F2:E6:63:E0:31:73:F7:FD:11:44:C1:EC:1D:8F:72:BF:66:BF:46
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e2:30:ba:96:f0:ab:64:c9:9b:3f:05:6d:4b:7c:a6:31:5e:
e1:fe:ef:aa:5f:c5:d7:c2:43:e9:55:79:94:8b:d8:e4:5f:45:
aa:fa:4e:18:b5:77:57:ee:2d:fd:0e:2d:c1:7f:fc:c7:a7:f6:
6a:7b:b5:2d:d2:c4:bc:e5:e8:46:5d:c8:e0:05:eb:31:6c:27:
30:e0:cb:92:30:b3:ee:a8:4f:76:f3:fd:66:cb:2a:d7:3b:bf:
5c:12:0e:fa:66:34:cd:8e:58:5e:56:ac:ff:c1:00:0f:d0:d5:
3f:6f:02:1d:6b:2a:bc:d2:c2:c7:45:ea:03:64:26:86:5f:31:
20:a0:16:03:b8:27:6b:cf:6e:b5:c3:29:88:9a:c4:b3:37:57:
e7:11:21:30:d6:e3:28:8b:d8:4e:3a:1e:60:da:46:4c:02:36:
82:35:49:54:5a:8a:a5:45:41:26:40:51:13:51:77:c3:94:d6:
a7:de:50:11:50:aa:fc:46:36:b5:a5:c2:c9:2b:3f:04:81:f3:
92:bb:bf:62:9a:99:a4:49:c2:58:25:c7:a2:e3:d1:c9:71:9a:
ea:19:f5:19:0f:98:2a:91:31:35:06:68:ab:d7:8e:1e:8c:70:
03:87:fa:01:a9:a4:a6:1a:7a:02:f0:c0:91:44:6a:2b:e3:af:
95:e0:67:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:47 2026 by rpki-client