
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json)
Hash identifier: fv30R96y0AIj4zikaTu5WmvLVltwVkhnVLNBF3aeKiA=
Subject key identifier: 20:97:FB:69:34:9D:DF:C0:1A:88:9A:7B:CB:83:B4:6B:C8:7B:4E:F6
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 019D9998FF03017181CF12EEDE2C958882FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
Manifest number: 10DD
Signing time: Fri 17 Apr 2026 04:00:33 +0000
Manifest this update: Fri 17 Apr 2026 04:00:33 +0000
Manifest next update: Sat 18 Apr 2026 04:00:33 +0000
Files and hashes: 1: 6JluXjhm_3nHCCaPoS3TfBvKy-U.roa (hash: o1cOjM+O0qiescaG0asYe3SHOLXy9bPb72S0RHPk1N0=)
2: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: iHfmuAgD948x1I11V7tfgLjg0QfpjB0bQG26teu272A=)
3: EXPtgF3pZHjNUJl2LJCVZFox4fI.roa (hash: eBmFuREOuZdP3B6dGKEKnHjrjSuhSyhM471vSjq0eBQ=)
4: EtFx9f4oiCywxFykUSR2QjU7eFQ.roa (hash: b2AfdRFwbg0njOLl9hGqSCvFbx4kUQActP2xft37G50=)
5: GDHsmxtHVdYa1bZaIWOH1_OImP0.roa (hash: 7pk8LdfcytaksybidRQnrYPauwLqusCRjPdg0+T84EQ=)
6: M_AsK8xtgHW--enKh1Fv-0yD_GQ.roa (hash: kvJW1SXagKB0pbzliKf7XR3LeE5GTsMSJYvmlREXthM=)
7: QojlrQ9a8Sf-3OscCFSF9lKZeL0.roa (hash: 5zZB8tcLmgJvpKxRcJyw89w0k3VioDwJSjfpHcGceEg=)
8: _DBibvy1y9JoyoGE-bKCjSoDWyc.roa (hash: tHTDVPFwK8Ocp3huDTizupo9HBbejkSKeT8H3qb/iR8=)
9: aI7K851ffCc0tWN8S0U8Ns8VJxg.asa (hash: 822VH5CA3fhDgHZR6uAc8SFbxTllR+Bitc8kZBqFSyY=)
10: jFHWQVied9oZQfm4vhIvSC4eiV0.roa (hash: dr0KfgCKcAC1kV4SsWObX5dDQnEh0pKNGg0bXRatP4I=)
11: u21fpxmmOR9mlnHoRxP6iE7HrmQ.roa (hash: UB+VK364X+iu32GdfVjBn8r1mi4BDsfoTepchYMyQUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:ff:03:01:71:81:cf:12:ee:de:2c:95:88:82:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Apr 17 04:00:33 2026 GMT
Not After : Apr 18 04:00:33 2026 GMT
Subject: CN=2097fb69349ddfc01a889a7bcb83b46bc87b4ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:f9:93:a2:35:46:3a:e7:9b:89:ac:46:6e:
75:d0:13:4d:d2:fb:51:55:5c:74:b2:84:f0:76:61:
34:45:82:98:cf:77:36:58:3a:f2:96:dd:1a:3c:8e:
5e:e1:46:b9:5c:c9:08:ed:0b:5a:48:dc:54:67:72:
ca:7a:e9:b3:9a:31:a8:80:0a:5a:e9:fa:41:89:b4:
12:e5:af:f3:96:9c:1e:ae:8a:cd:82:9b:bd:4b:10:
13:d1:72:67:a1:05:b8:7b:77:47:13:64:29:47:0e:
34:6d:47:f5:bd:78:86:d7:07:48:3f:c4:2b:a0:b2:
9a:79:d4:29:8b:a2:95:2f:0a:e3:49:9d:0d:34:87:
5b:cc:b0:41:3d:97:9a:5e:b4:13:d6:7c:64:6a:88:
32:60:62:3c:c7:4d:72:13:8f:8f:7a:f1:c0:b1:f9:
25:a9:74:51:62:25:8a:b5:ec:b8:56:0e:71:7f:a1:
88:a8:08:2c:00:bf:e9:44:d6:1d:b4:3d:6a:da:55:
76:f3:5e:04:fe:39:95:a3:1e:0a:4e:85:12:a7:9d:
6a:fe:01:d8:15:a3:37:2e:d5:b6:1e:a8:a5:66:b5:
2c:ea:8e:3a:32:cc:7e:47:0e:d7:5f:d3:89:13:03:
c2:5d:25:df:0f:2c:76:80:37:dd:94:66:7e:b2:b7:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:97:FB:69:34:9D:DF:C0:1A:88:9A:7B:CB:83:B4:6B:C8:7B:4E:F6
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ef:1b:3f:4c:76:a7:36:8b:da:31:ef:1e:54:a0:65:bb:2e:
75:03:4b:c5:20:78:0d:7f:cf:67:a0:d0:ba:38:89:6d:9d:8a:
ff:0f:04:5e:d4:ea:ee:7f:f6:a2:36:3e:11:51:94:be:3d:80:
86:6d:7a:ad:6a:51:fb:f6:bd:42:2a:88:38:7c:e6:58:65:9e:
30:27:68:9e:36:ba:55:4e:97:ab:18:b2:a7:70:68:19:0a:64:
b8:3a:73:ab:a0:a0:1f:35:12:65:32:f2:cc:f3:a2:90:2a:10:
ca:46:79:7c:23:16:2f:78:a1:90:ff:8f:b0:83:fd:69:81:63:
1d:c8:88:36:12:95:cc:00:99:18:1a:cc:67:4e:30:0b:57:e8:
17:d4:b9:3c:43:cc:46:6f:9d:76:ad:dc:3f:12:f1:21:4c:cc:
7b:61:8d:1e:10:60:61:8e:a8:34:0d:38:ca:26:2d:03:9c:0f:
95:dc:78:e9:94:63:05:d3:a6:5f:60:12:7e:a0:16:a8:6a:de:
09:d6:12:08:aa:65:83:c7:43:3a:b0:7c:17:4b:d1:c7:e6:7e:
78:48:c8:c8:b5:e2:74:65:24:61:0b:b0:a6:a5:9c:52:fd:af:
8c:78:d9:c9:3c:32:b6:a7:e6:23:4a:43:ea:d1:8f:3a:c0:53:
f6:be:6d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:20 2026 by rpki-client