
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
File: tFmZiZ920uLkzN_IF_mHnPrAa74.mft (raw, json)
Hash identifier: tIzazVv0iDJCl+LN2YQNJMPZY09qwMs3gkfAK7k6ODw=
Subject key identifier: 11:AC:AF:45:A0:95:C0:D7:D8:57:29:3C:8B:29:3E:B4:75:F0:0F:B3
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019D9A75124C0E5610B32F60EAC7E757558F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
Manifest number: 11BA
Signing time: Fri 17 Apr 2026 08:00:56 +0000
Manifest this update: Fri 17 Apr 2026 08:00:56 +0000
Manifest next update: Sat 18 Apr 2026 08:00:56 +0000
Files and hashes: 1: 00yjAHUjPi78LWd5NKw2W62obOE.roa (hash: fy76k6hktxmrp/33ybyKcOrtr3l2uBboJQ/aOUgHGR4=)
2: 2O9349WO0t6H0E9ZK0f1QWi3t0Q.roa (hash: 2RhFKguLdx/frIsqfhlZq+St14nwRLDsFvzdspSUCHs=)
3: 3Hua7wKmQfp9JEgzSI5kFZ9qKuY.roa (hash: b4NMrJHTU6u3cjIt8gqKKQ1+s/2nFZTA+L4AbUR1Vzk=)
4: 7SmXzQd-nWaNe8t8rqOA7438J_s.roa (hash: RMY9iFIYUbgR/WmLppHu9PswGGc4qk7Roiy4Bmlgw3s=)
5: CRPgBeRXAqRmTgTtfsmiIZosBaQ.roa (hash: wDvPNmhM7GcOMSdAsmrbJDDVqrwM6YWhHFV4n7fPWuI=)
6: DHLKNILgfx16JsrlSXMeY6f762E.roa (hash: z5ydua2ZisWly8IjsMlT6pkwvFda1aV+qss6iF0vFOU=)
7: FerkNmRdMMqBAxxCWnxbdwDF0fM.roa (hash: X4J4aibstvyyZ1dw044vF6xHdgTuovNe6IxPq/bGSrQ=)
8: GWLPm0EaGoN4BtEyzXiiEIZ-GTE.roa (hash: w7giHRJ/Hm+CuvJmm/pIjg11UlpDd5+GD+ZEyWmk2uc=)
9: JoqKm8sMA3Uu8bfvQqeKdzY6joo.roa (hash: LnpktCIb6RF6zzxK4zr5D3vSGTrAo2pAVOT0PFiTHVI=)
10: K9Dqioe9b1QzXjqNmFeropCvp-0.roa (hash: sgULkqb+pMBqo5qKyD2WmWceUGLc0NbCM+ENzx9wYYo=)
11: KKcG59VmFqQ4cXd0BBLDjoayHpI.roa (hash: I8RNIw+sEHGZn2p4ZlnQNs1qXyAS/e9dFOjjqFagY3w=)
12: LvDcdbQFTKKtCL0HWtHi8ZHMICw.roa (hash: pr9dzyzuzRXVF7OipbNJiEIFE2wIqGOEkXf2LlwVcSo=)
13: PZU4IIeyEkNUYzUo959cxHqGiME.roa (hash: 4kKemKUnTaECIacGpN+OjJhGEQ9cruITFABLowf6IMg=)
14: ROXrZox9qmRyvEk1U37LkhE8O1k.roa (hash: O/Kmp71WYLzeqzuXJvcZSb52Tj33zZc/vYWStp0shFw=)
15: b1R5F1rXBZ-9jQYuesOiTfnnXjw.roa (hash: i2y4+MSKBcNxu87+qDE+/nX7xefI7C4Gq8swc9+9PNU=)
16: bsu95ghiIBpd9cfADiMIa9Yxj6Q.roa (hash: 16b5K9754SCIP/D165OSsKJafJ6ZtxK/WBHz3KMDFr0=)
17: eUlwfQNbP2vIOtwAcyEsR7HEJss.roa (hash: P1z0FJdjv4KMmXfM20mE40d3OdggWf6hJHcQuPfAi3M=)
18: i7lgm15yljxNJJIdxV0PN0NruUk.roa (hash: 2LRwTaHFptBADB4hm7Yrbr+djCqVu9Gi1I6wte0t5nk=)
19: jl1wYnhLUOSbsZUU80_UB5Kx2dE.roa (hash: uChc1aHz2hrtDcLAVGR6Xk6XuTeM5AKvLRgVGOGtFQI=)
20: lJE-9MHI0m9odS0-ez-OUf7XXOo.roa (hash: NzsXcZUGn5wcX+3FrmFWw7UtvY0O9+75hmCPmsbk3Bg=)
21: pADycQ-9xhjD7DWrrFk7pCQ_Ijo.roa (hash: K1+0R7I0/kdM14j+kEitEaAtqppeRpYjvV274U8LEQY=)
22: tFmZiZ920uLkzN_IF_mHnPrAa74.crl (hash: s0v4+MLowHmVAssv0HjX+tliFCSMhcgvrJZx/gnMYL4=)
23: trir8qL64aNBmuq7kCE6q-vw1qE.roa (hash: e1sr1CETTzxHpRTFfDyLkJVAK4EzBhmgBByIF0XK3ZI=)
24: wHn4Idt9pbw0xNqo1xXnrZAME_c.roa (hash: 1V81c+Xq4YaFlhjRvvqZvgJ/aOSF31vxmGkYy8VJT/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:12:4c:0e:56:10:b3:2f:60:ea:c7:e7:57:55:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Apr 17 08:00:56 2026 GMT
Not After : Apr 18 08:00:56 2026 GMT
Subject: CN=11acaf45a095c0d7d857293c8b293eb475f00fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ab:88:eb:1b:6d:a4:52:25:ab:83:18:3a:52:
4d:10:72:78:10:1c:27:ba:b4:ad:85:b9:fa:55:57:
d0:ad:75:83:97:11:8c:69:67:56:fa:77:8d:8f:8a:
65:da:2d:f7:26:6b:02:64:68:e8:f1:c2:0a:75:df:
71:ff:ae:57:26:ac:8a:ca:81:fb:ea:50:48:8b:a7:
2d:35:87:c1:43:02:ee:d7:e4:e7:4a:62:e3:c8:d3:
d3:bb:f8:df:cd:f8:b9:7a:63:b0:a5:96:5e:eb:c9:
c3:b4:69:ef:83:ac:8e:6b:38:a5:0f:d4:23:2d:84:
29:a5:4b:eb:61:eb:79:f4:05:bb:f1:91:fd:b3:f9:
25:36:6b:04:de:00:b3:50:f4:65:4b:13:a8:76:01:
1a:60:79:f5:53:17:c5:9e:59:ec:20:68:48:5e:7c:
8b:60:d6:5b:95:bb:61:1d:f7:8a:fe:67:99:08:82:
d6:3c:09:04:20:70:60:e2:87:c3:d7:7f:3e:ec:7b:
a9:5a:99:8f:30:71:0d:39:4a:05:16:4f:3c:fb:c5:
09:0b:99:a1:e4:fe:60:ee:c4:b4:58:75:71:62:ce:
89:b4:a0:ca:dc:ea:00:94:36:1e:34:8c:74:39:ec:
6f:e0:ef:88:5c:89:42:0d:4f:7d:8c:f7:92:ad:d8:
9c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AC:AF:45:A0:95:C0:D7:D8:57:29:3C:8B:29:3E:B4:75:F0:0F:B3
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6c:0c:3a:fc:bb:4b:af:fc:f6:59:92:b3:23:3d:bb:5a:0a:
91:3a:04:ca:85:f0:a2:78:72:d6:6a:08:d1:82:b4:5f:87:4c:
62:c2:71:8b:51:43:83:e2:ce:b7:64:cf:d6:0b:5c:d5:8f:f8:
a0:1f:e0:48:df:90:24:96:7a:7b:f7:ef:03:3e:86:f5:c8:75:
d3:32:97:ca:2d:75:51:bb:96:a0:13:5d:db:b7:3a:5f:1c:f8:
0b:00:1d:8d:a2:0d:31:ec:13:06:6a:61:2f:42:1b:e2:93:3c:
c0:3d:b3:a2:59:00:35:af:5b:f2:2f:8f:86:56:f4:5d:13:50:
5a:d3:f4:7a:8b:f6:e4:e4:78:79:bc:11:ac:be:00:28:d0:6a:
c8:fc:1d:d9:58:cc:6b:55:0a:d3:f1:84:8f:6c:08:2c:71:f7:
38:58:12:88:f7:93:fd:97:78:16:c1:d6:78:54:f8:6f:1a:e4:
a8:24:c5:35:07:11:7b:00:82:29:c3:9d:82:60:d0:aa:40:ee:
a5:d2:22:a2:bd:77:6a:f2:98:00:15:97:2d:31:2f:8a:a1:bc:
2d:a6:8c:38:c3:23:73:37:54:ff:fb:9d:5f:9e:ad:87:30:b9:
72:ec:be:d5:df:7a:01:38:84:04:79:0a:b6:0a:26:81:79:8a:
df:9d:e3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:12:25 2026 by rpki-client