
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json)
Hash identifier: L9lGABh3dHbBuBgROhDYg6X8S3Bbuj3Hq/H0PqP08mo=
Subject key identifier: 12:68:31:05:14:69:BA:49:C6:E5:FB:7A:3F:01:6A:A8:6A:07:B8:34
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 019CAC10511185532D1ADB257E5A34C938DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
Manifest number: 1864
Signing time: Mon 02 Mar 2026 01:01:16 +0000
Manifest this update: Mon 02 Mar 2026 01:01:16 +0000
Manifest next update: Tue 03 Mar 2026 01:01:16 +0000
Files and hashes: 1: 4TKo4hpIgeOaUC4msoLXj79brZw.roa (hash: nEKkT5nayoB6X5C9mnM1stExdpwEue5SpN4elNaZnJg=)
2: 5xaOtvdRRcRbWJ7RO2zXZTBbzHo.roa (hash: jVjnXKJCmaM69ihXNF4Fvp6wlNMh49T6+g/No1R59Xw=)
3: HIrm6sRoTksRGtSnmk5VERHaRBI.roa (hash: 5kYVCcz0PvuIcAwPfpXwqKs3H5+iF2EWwV43kAN9Zh8=)
4: Lc1GuVjjApGSdMl5cDRvuL9C63E.roa (hash: j2ZLFcBgyK8+6PD7sIFfqmq1q2LME6wfEuotMkEwgLw=)
5: TBbb52loGUfoyqY4IjSCSNt13F8.roa (hash: 7gXhXE88Dz/LUX1AsHHfFQZ/lUsqoBgQIbupC+dBqCA=)
6: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: +ge2sWfvBxJ2G07mJSw8gdc7LS6MRBbbOVc5sBFtvFk=)
7: bwp5bXEghgHr7EYl0KNAFE7mc20.roa (hash: 7u7Zj5oFaGyCqot4J3MzTBt5vDDbem5Ae4vFNHbppfk=)
8: giCv_eoabdDGNQ76ze62UyFFjv8.roa (hash: CGWpYFajJaXhrm0XFaoEyMaeJXprNddmqt1FMrWwQoA=)
9: jKcEmRIDilRbegMXDvNfe4imvAk.roa (hash: Z/j4k2QApdwbYRv/hX0sWoy2nITxJs8LZ19RK808A/E=)
10: kAV42zy5ItGrvvbv1krId_7HV5A.roa (hash: yhIVNCh19TC+CSc7taPbV70ViFKCn6sP5Y0H3vfQEDc=)
11: nntHTPnh88EzY_e3kkkRQsK5w7M.roa (hash: aZV+AItfqgNQSbmNx8IbkbUfKGk65poULNn0lqPwxbM=)
12: sZoONX-atX44GreUxrMqc6C9sFQ.roa (hash: OXwYQmgqP66zyYHOv7k9Apd3i8xq7uri5BBqPLyj09A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:51:11:85:53:2d:1a:db:25:7e:5a:34:c9:38:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Mar 2 01:01:16 2026 GMT
Not After : Mar 3 01:01:16 2026 GMT
Subject: CN=126831051469ba49c6e5fb7a3f016aa86a07b834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:77:10:5b:8b:cb:a0:f1:4d:4a:0e:1e:60:
d7:48:d3:cf:40:af:88:04:12:62:29:9a:73:fa:4c:
2e:fd:81:5c:ee:40:c8:d8:e2:95:39:1c:1d:c1:ea:
51:3d:04:a0:c8:f9:49:16:e2:f4:b2:f2:04:c9:72:
16:65:4e:9f:c5:05:ef:aa:8a:37:48:44:82:77:6e:
53:7b:0a:a8:6d:bd:13:21:7f:b2:bd:70:0f:9b:5c:
f1:fd:cb:36:32:88:3e:c8:d8:f2:3a:9a:fa:a1:05:
7d:9b:27:4e:5b:93:d2:47:06:a4:76:35:4c:ac:e0:
24:fc:fa:a5:d8:2d:75:bc:ea:bf:eb:29:6a:a7:ca:
45:2c:38:05:91:f1:fe:c7:a1:cd:1b:de:17:72:e3:
4e:b8:4c:1d:54:77:9a:ad:4b:ca:59:14:26:6a:62:
3f:f4:14:bf:7a:66:77:06:aa:98:75:dd:7f:5a:d2:
ce:13:c0:8d:19:2e:cc:b5:ed:f6:68:06:2b:d5:69:
7e:a1:73:3c:78:ab:93:48:3f:e8:47:d3:bb:81:70:
fe:34:48:f2:62:6e:72:61:a1:79:89:d3:e5:af:a2:
35:b6:0c:c1:83:dd:c5:c7:61:89:7a:59:b0:e0:60:
d8:91:a2:24:ed:cc:df:d2:92:49:75:82:0f:78:89:
b6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:68:31:05:14:69:BA:49:C6:E5:FB:7A:3F:01:6A:A8:6A:07:B8:34
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a7:a8:4c:06:89:ff:cd:cc:83:8d:b6:40:9e:29:30:16:92:
6e:8d:76:20:e5:3a:8b:6b:70:27:90:0d:8e:ab:39:fe:63:0f:
5e:6b:d0:55:f5:e2:9e:28:24:cd:41:72:41:30:3a:62:e2:30:
11:d3:35:fd:f5:48:27:a8:3c:61:05:44:4a:7f:6f:9a:99:e7:
29:dd:67:40:81:ab:0e:a6:bf:26:9e:51:97:ab:99:b7:2c:da:
dd:e6:29:f8:c4:5a:a3:28:c8:bf:72:93:38:6f:d1:ae:89:f0:
ca:8d:39:0c:11:da:63:ce:42:1e:04:0c:95:04:d9:4f:40:f6:
bc:99:19:84:4f:5c:56:b5:05:05:2c:dd:a3:ed:2a:31:b0:20:
f6:85:d4:a7:b4:ce:6f:86:e7:a0:9c:27:6e:68:28:85:e4:0d:
3e:60:8b:d3:03:51:fc:e4:ec:30:63:18:af:fd:1b:74:c6:ec:
17:35:ec:1d:1f:9e:23:43:e5:41:c2:4c:ad:80:16:99:41:40:
ab:6b:a6:e7:74:7f:43:b7:61:b4:ca:b8:de:5e:ed:e5:f7:86:
6d:17:20:71:ef:b4:4f:e0:3a:81:7c:ef:93:45:4f:ea:69:7c:
bd:3b:18:45:45:5b:60:66:12:d4:59:c8:78:71:66:f3:c0:4b:
85:96:dd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:24 2026 by rpki-client