
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json)
Hash identifier: BCQAjSBnHsNa3sws6WhCLRDB/sM/w3ZaPDN6FHDnxYg=
Subject key identifier: C3:DC:33:D5:04:9F:8D:07:58:8F:23:EF:83:A3:D1:8E:3B:8B:96:74
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 019CAD22DED260DB55A2872415D28D421F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
Manifest number: 1856
Signing time: Mon 02 Mar 2026 06:01:09 +0000
Manifest this update: Mon 02 Mar 2026 06:01:09 +0000
Manifest next update: Tue 03 Mar 2026 06:01:09 +0000
Files and hashes: 1: 0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa (hash: VbJf/zpJU+nEIQciqPz/B0PK4md21WWEaGREZ1xeby8=)
2: 1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa (hash: EoOuCir1JdYOzVmD9C+0aCRnn0E0kdYzw6esRGPxmMQ=)
3: 53-Empt8fqhopJ7cOY61y1UNXLc.roa (hash: YjL+5qe2020D+DOQyVjhX1FTLXsdUT9QvCPVPeb6WkY=)
4: 6fl2PyZRjLFdwSBx3r61hkXya8k.roa (hash: D61QyHJ6S5T1IxCuN2yRBjSfJTg/+aLEQXnYgmdlUDs=)
5: ANtitpMQT-uK7LHD0X0IbBsKjWM.roa (hash: 5c2CNK7pBthzGV4Sg561qpwP1GJzRFFkA4PDWmW+aSg=)
6: Df8h7qloFeTHYGavNQ4pJHpP5CU.roa (hash: 3kk9LrOCm1NH+leIgX8QEU4SIoLjtl1E1AbkJm7CLGc=)
7: IDuIILf-M7RgIDs4AJSYtPxrGic.roa (hash: Nv2s82WUeiBOVGtaFJF3rHfW4CDw9k2CQ7WS0TmM93s=)
8: ITKErq6hul380zQefCl7nGu5iiw.roa (hash: ThIKSMsSMV9/7c4Wu+9DRro9qpNPtMCBXl8IA6+T3z0=)
9: R-8E5zauBsFTDGfod6Tef2eLm4M.roa (hash: ClvLXgh4oJn2dvcbOHZrF6o7ap5IhqsfDX14XxeUfO0=)
10: a149HuY71oYMfosTA9HCL8g-pdI.roa (hash: FHyu/0R9GDUP3gmfU9JfTLPTviTJTT8eGmQ8uq/ZlfA=)
11: bTookxgPSxSd_gnM8XNiIJ3mpr8.roa (hash: qaTVa3H72kXabxQBE9N2TN7e2tyXH6RWDJSNci8VjEs=)
12: blYq_pKFV_IJYUCGIJ3ZWpeEWIs.roa (hash: aV35UJJhFzqPJKc16YBKA5F2EyafDubx6D6p0nLFPAk=)
13: ehRbssTu-uCbiOQmcMxAxNH82GI.roa (hash: aYjSWmwkop/Ic11eCu/RIPvn387xQFE72I0LsyWzzf0=)
14: fD0zMeFpTdbjlyII0WXNlsdWjwg.roa (hash: 1nJ8LKFZY40ZGZ9fyCE9tTFmLCEjP6khJLvEfhwNXts=)
15: hYygt2D_2n1pYi_NTrG2nkmeaiI.roa (hash: dQrBwFPxwSf58rNos8WFJkrSXg3GQyoC4p0wWkx0CkU=)
16: khIatClzzDAzsXKofHk3CzFjNwQ.roa (hash: VqTvtGjsJjhyzOsm3Z+fa0f8w1YFBA58VD7S9gC+DFg=)
17: ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa (hash: O3k8tfSgOWL0eFoLFOr80zr8e1hwzB6oN6psmB5jVbw=)
18: l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa (hash: 0ZLcxVq4SbMJb/Tzs+R0ez5dGHPb27PKXrdMSol7/iI=)
19: o2CtVQw5GkFX89PhUjlW0skEA5w.roa (hash: m4/K5u0ohrJNEPA+u5iCk/BUETlDCODb4D0JMGKGkg4=)
20: oy53UV29ZxGHyA7mlLseXZBnge8.roa (hash: zmREFQtkqLZ8wJLGEuvGnLyo+ZygeKXKKyJIbyBcMM4=)
21: qSnbVpCUTBo3CbEFeEaAeBg12KU.roa (hash: lUFBwmvXAt5o1tXZm7PlCC3E71TOjkaQgtMQg6Erswc=)
22: uhWP65iIcvZTsGSiBTIcefinHZQ.roa (hash: RDsU+on83wZCchaROnKt/rVWQYfzxwy4j90xxJ6pfyg=)
23: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: hJ0US7iUXSaG6+n0QQeJSVWlJdu3krBwH6EAV9Xwu6g=)
24: vuod5WTfo-bMzWgcehLtUNsV8iQ.roa (hash: S3lLxKRzTk1ObgBCNRSt9Y3FAylgCuMuERfb8CAqXtY=)
25: xSEYJ36rS-kznLQUl3DFtM3R1jM.roa (hash: 3mFKbERmZQc21I9KRtXeu1S3oH9xaIQQ0cmDzkgXhUM=)
26: z5014MFfxmYQTm_qnLF3yXwV-3I.roa (hash: 7VbwY0J0VcsEt+trFtXcwclY4yBnf//EolgJB0xn4Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:de:d2:60:db:55:a2:87:24:15:d2:8d:42:1f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Mar 2 06:01:09 2026 GMT
Not After : Mar 3 06:01:09 2026 GMT
Subject: CN=c3dc33d5049f8d07588f23ef83a3d18e3b8b9674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:62:b4:95:b4:2c:ab:ce:c6:d6:d1:4c:d5:a9:
1d:09:c6:cb:7b:52:db:d3:dc:2b:69:2b:8e:71:20:
da:f9:e2:09:73:08:ba:f4:25:f3:0a:87:f8:45:df:
d2:5a:1c:b3:84:1d:5c:7b:9d:3d:b7:80:88:e1:52:
5e:42:fd:c0:b5:82:f8:c2:7b:c0:29:2e:38:28:d3:
62:d9:52:77:4d:5e:e7:3a:a1:e8:d4:fc:f0:4f:bc:
da:93:c2:67:fb:23:88:81:b5:2a:09:af:c9:bd:84:
7b:71:cb:8e:8d:c5:21:c8:a6:51:50:b8:d2:b1:ff:
1f:47:40:8a:77:d9:7f:68:2b:76:9e:5f:67:cb:68:
38:8a:bb:75:21:39:e9:0b:be:74:7c:af:0a:41:03:
59:a9:47:e2:6e:a8:7e:d2:d2:a8:17:2a:d7:fa:da:
20:b3:67:6a:3d:62:a2:e3:b5:26:80:fa:02:84:19:
ef:a3:8f:2e:8c:2a:be:bd:be:e9:2f:de:c1:53:00:
86:83:32:4f:67:90:60:88:2f:9d:3b:19:17:a6:d7:
fb:76:74:6b:32:17:cc:35:2a:05:f4:83:2b:3a:8c:
c2:fa:c1:14:30:05:8e:44:04:d9:a6:0f:02:ec:c9:
3c:2a:75:5d:c0:82:83:41:8b:24:26:79:bd:1d:93:
94:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DC:33:D5:04:9F:8D:07:58:8F:23:EF:83:A3:D1:8E:3B:8B:96:74
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:25:88:ea:2e:55:c4:2a:b5:a5:e5:9f:65:98:6c:27:81:16:
47:cd:ad:fc:f3:ea:c6:1b:25:14:4f:9b:eb:4a:df:26:16:53:
57:3f:a1:bd:5c:b8:79:b2:34:2b:8c:73:1b:26:e4:fe:a9:11:
65:ee:9e:d1:87:11:c1:3e:5b:16:7e:c1:41:2a:9e:bd:71:43:
0c:7b:b5:65:a9:4e:ea:f0:6c:da:f3:4b:e5:0a:79:b4:65:f9:
62:5c:60:0f:e3:fd:c7:8f:ea:4e:c9:52:32:50:d9:5e:46:fe:
51:3f:de:8d:60:eb:a1:5b:5b:f8:8e:c6:07:bd:a7:f7:c6:9e:
ca:87:04:8c:dc:f7:63:1b:06:49:e6:78:19:a4:02:d6:9e:c7:
bc:61:6a:c2:27:bf:51:11:d7:fb:bf:4b:ea:50:c5:8b:e4:f2:
c1:e3:31:bc:25:3b:ad:0e:21:c4:b8:f5:c4:28:bb:ea:80:87:
a7:bc:b9:ec:60:2f:d5:b7:55:c9:68:da:ff:6d:d2:40:ac:5b:
c5:1b:d1:19:9b:28:e8:e7:c9:34:a4:6d:c7:dc:7f:26:ab:ea:
24:a1:cf:41:d5:6d:a3:13:ad:e2:c6:7d:c9:8c:84:9b:54:67:
c9:b9:19:13:f2:e9:0d:7b:a6:f9:cf:df:8a:68:ed:e2:9f:5b:
05:4f:3d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:47 2026 by rpki-client