
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
File: IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json)
Hash identifier: +MG8KowRod6OAkxWDmtEEyuP6PClRyrgZh3B6lgFAAM=
Subject key identifier: 32:62:67:A6:6F:07:D0:65:05:15:BF:A9:67:D6:BD:F3:5A:2B:50:EC
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 019D9698279CDEEBD0C3380379B134A585C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
Manifest number: 18CF
Signing time: Thu 16 Apr 2026 14:00:47 +0000
Manifest this update: Thu 16 Apr 2026 14:00:47 +0000
Manifest next update: Fri 17 Apr 2026 14:00:47 +0000
Files and hashes: 1: 5OuAtNn0l8oe2em-i-_BkRqZL7g.roa (hash: vANhq4PdID8vPwTjDrBS+mXwABE8TzXjEn+JW1v5ExU=)
2: 7t8wgjK41lzapDs5jikBb5vTFhI.roa (hash: pNcEvtuu1o2hH2eMF61QKg8HYUfp8zz08CbYNkIzxoY=)
3: 9Ftjq_Eq-fyNHlW3WtWYGabPEOo.roa (hash: RROt5jRdMmps8oCVGgLhKd+7IXUEEDExlgWjv5fKF/c=)
4: CLa3JNQ78J4sBQQxh8GAqDQBO2U.roa (hash: Ptpr2OeA+6xL/czPzBtIc73Iw+siDZQ42cRR8gFjgKk=)
5: Ep3XVJ-_t23pza2fzpUEP6EDP9w.roa (hash: hoiisfSpISgCVFz1VXlgIuAWQt8MugVbvtDs45VkzlE=)
6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: U3GuAD3vG2viYBPguoB9YnxBdSaySNUr279yq9DxNNY=)
7: LCWtZ049FoEMI5HAwHzYkDXlzb0.roa (hash: fito6QodYmgMrVei2hs3ovjCGv+4YYqwwa8c3/bKpq8=)
8: LRyKKJzTBliMx34ASYig8HFEXqY.roa (hash: HoiPjv5M2f1QZDzcqH+pau0FYK61g+kOdOsd3jsE6KY=)
9: N8_jgVETZSZgMZuy7Nmx901ELco.roa (hash: +zMjL/+nyqUTVAJWqSLmseSeJa4kcd3Eto/YmX3LSA0=)
10: QZOA4Cw_wJbFqn0TYzvO7eAmllA.roa (hash: urP1bJFXb+aibHUz3y+1eQjAxhXGlX3kRZlCoVkKq8U=)
11: VPsOpQzvuZLSVdRpUbPccqsH0HI.roa (hash: LNvdod+2moYgqIRIXig9MujeQAei+hV7OeUdz/G9T2c=)
12: VcaphQh4vHAVmPQId2jsNB2aQv4.roa (hash: 8e+QqZ403DJ8rCqJdp/PBd4JgkUk23mp8hqKweh0FDA=)
13: VrIgLz2PFQgd63beVRzJrL2SQBc.roa (hash: sXPs4ggxGfscBiESz3blqF00BOn9YaRW1W7ATtbBk3s=)
14: YEIy-4popFF63uiUMaqEq6MP2-k.roa (hash: gVX7vNZdK/HpIGkA/+EuEhyy05rdK5xmjj38Yi11muE=)
15: ZwVEwgiwITzzAorGck8VXul9oFU.roa (hash: qDVShcnTFlPrk8WY/vVUFbSS/IUCjtruta++I3zUCp4=)
16: _KdTD9Hfu5k6hVTondfZQJ_OxLo.roa (hash: 4TQXprbZCs5Jf+ifvEFuTZxSKFFhMf/XaJeUj1L8wlE=)
17: b5_puVoiaaK1luof_u2L7B-PTEE.roa (hash: Uuu9Wl4sZx9v7YzIOuwEsj+WuePom5BSk93dnj/mc9Q=)
18: fLzeZ00IYj-IxnoGIbn7t2eWUGI.roa (hash: YW5jkNHqF6tBgAJfKMQglVG8Rn1wn5A7xiLfsMA393U=)
19: j0nf_y6uB0VgXHQDlN6OhEbU5jU.roa (hash: SKADJBgkOhviqwy7f7gDKRZV4Zt1/yBSufcp/4OhY7k=)
20: pMzwR3DaYSVoHUR1RGTsgZ23wm0.roa (hash: 6sMrJ/AtbSyiDYLE+mzWMFlpOxx6wBjmiT963p9LhmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:98:27:9c:de:eb:d0:c3:38:03:79:b1:34:a5:85:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Apr 16 14:00:47 2026 GMT
Not After : Apr 17 14:00:47 2026 GMT
Subject: CN=326267a66f07d0650515bfa967d6bdf35a2b50ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:c6:1d:c4:f1:5d:13:d5:4a:34:b9:93:bd:
59:25:e9:de:57:c4:58:c6:b5:19:c6:1b:25:50:7e:
2f:1d:27:57:0c:56:fd:55:c7:cc:78:c9:87:e7:7c:
12:70:8f:c7:cf:70:ef:77:c1:1d:30:1b:4b:ef:c3:
80:63:d7:3d:b1:d3:e0:0f:20:d2:ea:47:a0:2e:cf:
65:32:60:f1:05:40:4c:8b:40:4f:93:7f:ff:e8:81:
63:24:65:e4:70:b6:1c:a7:d7:cb:7c:a8:fa:04:73:
a0:65:75:92:f5:59:6b:f0:62:0a:08:50:33:33:74:
96:8a:ae:d9:d1:23:1e:e8:7f:39:37:94:e5:18:5e:
db:91:9a:89:e0:b7:9e:3c:5a:b5:3f:5e:40:00:9b:
72:88:ef:54:ce:79:8d:1d:a3:2b:44:66:1e:ce:1f:
94:14:48:10:5c:83:78:2b:e2:d9:e3:9f:ec:f0:d2:
77:a2:f3:64:d3:16:9b:fa:8c:0f:38:e0:b3:d6:9a:
c5:3a:dd:29:ff:65:ab:61:f1:98:1e:0a:dc:eb:e4:
30:fc:e5:81:ac:1b:9d:61:31:21:74:74:8b:03:3e:
97:78:8d:2e:b5:9d:bf:cf:15:e6:ce:a1:2a:cc:b4:
d0:c0:90:f8:e2:76:d7:7d:dc:11:ad:8f:93:e6:30:
51:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:62:67:A6:6F:07:D0:65:05:15:BF:A9:67:D6:BD:F3:5A:2B:50:EC
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c2:62:04:82:2b:c5:0e:c4:b8:3f:6c:c4:bc:f7:ff:bb:f0:
96:87:c9:4e:76:d5:00:5e:cb:c5:b7:80:94:d9:a2:c2:2a:f1:
60:83:6f:f9:56:3b:99:87:1d:01:f1:0e:7a:03:46:36:a5:d1:
8f:cd:30:15:59:66:de:ad:ec:77:eb:a5:2d:41:f7:08:3d:08:
d1:90:86:76:3d:98:86:09:83:1b:4c:49:50:89:25:1e:12:cc:
a4:5d:57:2c:12:9e:e7:99:b4:9a:e8:8e:7e:9f:3b:09:1f:79:
98:e0:80:d5:05:a6:2b:e2:64:d1:6d:ab:4e:e5:72:43:c5:2c:
91:ea:df:07:84:4d:ba:23:b6:9d:21:a3:2c:35:bc:85:e4:06:
9a:32:be:65:65:a4:8c:62:45:c0:d7:62:2f:4b:85:bd:47:93:
d8:57:9d:86:bc:6e:13:d6:d5:bb:6f:9e:19:f4:8f:e1:87:64:
92:bb:3c:e6:56:a0:11:fb:7a:b4:5d:28:3b:77:3b:76:d6:27:
31:c1:3b:7a:01:6b:8c:41:5f:80:c9:99:35:6a:65:33:14:77:
65:8d:8e:79:12:64:3d:6d:75:d5:20:c5:55:ae:70:77:5a:ce:
fb:d1:81:72:05:8b:a7:3d:b0:94:5a:0c:4e:50:f5:84:96:59:
01:41:03:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:04:55 2026 by rpki-client