
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
File: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json)
Hash identifier: PENeHadYUU1SqsZpfz0c1bHoTBX1d62RmZgI1FuY9GE=
Subject key identifier: 3D:B8:32:43:FE:D5:F4:54:A8:F3:2D:CA:BC:39:6B:60:19:59:6C:61
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 019D9AAC396FC1B9EE82FE186AA7D2893E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
Manifest number: 18CF
Signing time: Fri 17 Apr 2026 09:01:11 +0000
Manifest this update: Fri 17 Apr 2026 09:01:11 +0000
Manifest next update: Sat 18 Apr 2026 09:01:11 +0000
Files and hashes: 1: 0cWx-DBEWXofQGq4uONjR9-bH4Y.roa (hash: pTkOoFQAT359monWmVl8M1BT8bJvgYKuEr63L6+DXH0=)
2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: kOYLTdN7Kbr9ouodMYxcqKT7q2BYNu0H1iRALKnmKCQ=)
3: AoOT9bGlJWd-TIRNHpKTWvzqPSY.roa (hash: Zi71VPuABO0kIOBrih/loFOATBl1klL+p6nG7AFF/d0=)
4: Bcd1BhwhrloaAtNtyP-2iXTXB5A.roa (hash: dwpLC5kz/iKWj1XEBoyZJZ2yN/0XmLy1ykd/NJpK0sU=)
5: EUgnWUs3CsfaZnj_hnNyvxreJoQ.roa (hash: pJY6CLyIZmy66AbMBmwM31A1sACoy25h4xx0+iPYYKE=)
6: MP5IdtDl7YEwuRNByyv8kDyAVco.roa (hash: vqDoHpH/1+pER1chx+gV6UvPLCxswhMzI5LmhtQHsu4=)
7: TJn7hrwQDusGI6b-JvzCy0ryuuI.roa (hash: jB76SwGUuXPBEx6T4Yw/Gggaft9shy0ZMidb4G0i9nM=)
8: UNIm3YXiMDOMkRxhMMlo6vVHArk.roa (hash: Tj2pYqF/A8kH66w2NIt64SQxibERr8EqlG3Fz5Bjgag=)
9: UX6g7KL9WRWy9Rrda_z2jmHwIg0.roa (hash: NgIQIWjEkGD0w0vEE9BTQb05Jn1iZvBqKIdoPQLt1R0=)
10: XUiE35ZJ3I6RBM2rDx0ESiNgluI.roa (hash: k03+qzTCxQ7lrjUzBfLF9RxlBcgnBj56L5MGzoB6xFA=)
11: _6SUA7PKYEVFBTaDAhE_A7MmF48.roa (hash: uJO3tMs1LSBIuJd7osQRiXv584cj5QanzKyRrYPze+w=)
12: cOTwaK6RSeeGqDttEyYUstwdoCE.roa (hash: alEZzagowBG75tk1HZniA5+5QPNp5iyxbE6HUR50PHQ=)
13: fJWzhiz6ayYsqM8kzsREYtIJBgI.roa (hash: N8Chz/wqQxJEwp3lnnRBhU8gdawDyJefdia645ECTwg=)
14: gfMRF0Nj1ChxrdQTcKCsvqZqzRA.roa (hash: VFwJmY7TYTF5JsUpp282lqGtLaHhhYMOSpBJGNGXiME=)
15: q7ctECBBEGOXl7uVauozGHraScs.roa (hash: gH9pmibDk4Ofnm2E38XD3fGrNK+1ocC6xSl5pld1ojw=)
16: qyuH8NgRhRZdTsIxcPjney8uG5Y.roa (hash: n0uUMyMPIGkKTSZ3n9g1M0rkf82uD6ttedakSVtd8tQ=)
17: vhCKx6YE6UZfYQ_y2if0T0sJx9A.roa (hash: 4GxEPZps/hQabeBQl+bTu8j92zD3sd9eABLT3Mr/M3g=)
18: x0r6XLUbiGOM5wv_gPZskGbu2oc.roa (hash: cdp8ZKRLyyEX1Hh8O5VsarJhdWV3a3wqBRxkXALsMf0=)
19: z1vIHaPgOEf1CFFXxVhQ7UIS68w.roa (hash: rFdz4/+higPiFTrvJsOTs2dDOqXP1ja44+BB/HAKISI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:39:6f:c1:b9:ee:82:fe:18:6a:a7:d2:89:3e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Apr 17 09:01:11 2026 GMT
Not After : Apr 18 09:01:11 2026 GMT
Subject: CN=3db83243fed5f454a8f32dcabc396b6019596c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:18:1a:15:35:d8:92:8f:49:f4:b6:5c:cd:5d:
9c:4d:72:1c:8e:f0:4a:00:f3:88:e5:4b:89:7d:fa:
57:59:2d:a3:58:50:fa:42:7a:65:61:58:37:da:fd:
f3:1c:ce:ee:a0:78:7a:52:91:46:51:1c:1b:c9:63:
a0:73:15:d4:18:ce:bc:6b:45:48:9b:e8:22:4e:2f:
a3:3b:e1:06:6a:b6:e9:c4:64:6a:15:c5:60:87:a9:
2c:b6:96:0d:ab:66:2a:38:77:fe:f0:19:1a:17:45:
7e:b8:01:70:8b:7d:a9:b6:43:45:14:4a:c2:65:73:
51:9b:7a:27:e9:df:3d:a3:7d:01:d4:74:20:16:2f:
0a:1f:c0:aa:b3:e0:f0:04:28:a1:18:d6:fa:94:c7:
b8:67:f3:d7:7d:d7:cc:54:43:54:c4:86:c5:31:db:
17:02:2b:74:5a:f6:89:b7:36:bc:5c:0e:9e:36:c3:
71:48:f9:69:16:72:8f:0c:cf:68:27:77:5f:04:21:
90:a9:84:b8:e5:77:25:d3:be:80:cc:c4:4c:7a:cf:
49:ee:bf:b9:2c:93:49:c8:15:e8:75:aa:50:d3:8a:
62:15:74:f1:ae:5d:7f:d6:e6:55:a0:8a:bb:e1:e0:
f7:b1:3e:41:74:d2:81:36:33:9e:ef:bd:4c:be:2c:
dc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B8:32:43:FE:D5:F4:54:A8:F3:2D:CA:BC:39:6B:60:19:59:6C:61
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3e:48:e2:7e:bc:0a:03:58:7e:ec:df:0d:4f:97:d5:2a:58:
f3:98:85:37:f6:18:cc:f1:59:bd:94:b2:5f:c4:48:ee:14:96:
d4:f3:1e:ae:84:2f:55:f3:46:e5:cb:e1:60:18:28:6a:cb:b4:
ea:21:49:e4:72:22:b7:8b:7d:26:8f:00:fa:88:4b:8b:15:af:
34:16:92:3b:d0:1c:c4:6a:b0:99:1d:9d:44:98:f5:16:db:69:
76:f9:1d:95:21:d8:ea:3a:1e:35:51:c1:c5:17:95:be:fb:dc:
3b:01:73:a6:3d:1e:ce:aa:52:8e:28:bf:34:8c:32:e6:a0:4d:
6e:84:5b:16:62:9a:9c:b0:d8:01:30:6f:35:ed:89:24:ae:d6:
4f:22:55:bf:f9:7a:11:01:ef:fc:8c:d5:3a:21:54:bb:a6:d5:
0e:fb:4e:f3:94:62:3b:4e:47:df:bb:c1:ee:e9:58:b5:13:ca:
7d:7f:db:9f:26:2c:fa:51:f1:aa:fb:15:7a:08:23:5f:12:d0:
db:19:9a:0d:97:b5:86:98:83:95:e8:31:ce:59:0d:1a:7d:18:
a6:0e:77:df:b4:2c:f9:80:f8:17:dd:c9:84:c5:a6:7b:af:26:
e4:47:d8:bc:4c:32:16:a1:55:c2:d0:11:f4:b5:f6:59:f9:5e:
21:21:b6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:39:09 2026 by rpki-client