
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
File: advh59nofWhwGkA1p2xRv-zYjYE.mft (raw, json)
Hash identifier: kv1AhgyYW5kCEtRKaQrpzFKMq4LOw26YFrqS0S/Yqy4=
Subject key identifier: 5D:F2:8E:98:5B:60:13:B6:60:73:EE:05:EE:15:88:06:3F:99:8E:CD
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 019D9A3E1C4ECC2AA7A9C4FFE966E22B6395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
Manifest number: 065B
Signing time: Fri 17 Apr 2026 07:00:54 +0000
Manifest this update: Fri 17 Apr 2026 07:00:54 +0000
Manifest next update: Sat 18 Apr 2026 07:00:54 +0000
Files and hashes: 1: 144YKZFeHUoWAh6egSqndWusFOM.roa (hash: JebAk5xxUlwF25bt/7wgP5P3eQrs43nqDPNiHs8sVDE=)
2: 2_5Pizr_dey_wsN1BXCTRJH3EG0.roa (hash: j9IlFbOau5bJeR6L12OLqIg9qpTzlR19TGig6zEhDF4=)
3: 5zy2Ulr79dbtTaE3OZs_6qr3UqE.roa (hash: EEAEVHUAhDuMxhb53Mdri68EpJGkXtEYX2cNgsYZpzc=)
4: 9pPf8N-xbMT9o8UBJiPr7d92dmo.roa (hash: QOYbkI9+2diJOwe6krK7d78idH2agB/NPLIUaIdszRQ=)
5: ErelCPr-1FaefL1NK7Lj8pKbIho.roa (hash: xUsIxQbdEJ6uFNSP7A014nQDetlJXfYHV5e1fTWwqjo=)
6: GzR_Gn9aMAHUr1ePa2ecaxR0bwU.roa (hash: 7i6X+85SPVw3sqcP1208MXkTesdemK8+2JulDhTtOgk=)
7: H-qQrCrAktzV-DbBsgXII5ecG6E.roa (hash: erbHrqWEc0I2T4g+aCnNjuIZqyQhXGo0pcfKHlJM7/M=)
8: KQt0bGNTmAqkKMpA808bq5qAorg.roa (hash: HfmKhmXTk452cgTDlSlUC3REiJ7+v52ou6kKwFAi23k=)
9: L5wbMaW6iLNCTWg3v6DA5hlTUEw.roa (hash: FzuvIo201WVt27BM5X7jwcOguZldBZloRPmtC7hcI1M=)
10: PLMbYZg-ZJoMJXEwD_dNPsS7CC8.roa (hash: KUJkUeg6zm3w35+L+38+PiwvNkQMV/2nX08/uGAy2lM=)
11: PPbDqXTI2oLfXrOdBjzamnjf-Is.roa (hash: exsR5Q3c8hhnVYhW0MoOSEpqsmdyDC5TxI3F+Ib3Uig=)
12: Rk3iX8TpkaQgD3TF-fnI9o7W7O8.roa (hash: bofsGduriRhR/R/BQsCSeddnTYoQ+RMoW3f7cBT+4OE=)
13: TnLBmBgQSFjNyZk9wLYLseWxWy8.roa (hash: L8Wqf5zUSRS3tMpgIljce/Plv8K5QgHIKFrd9mENn5A=)
14: UPYPtFt9hA7Fshl044W18IsW6iI.roa (hash: +/X5gYeSTMRTy1HrrsqCpkKxEcusQnKC9lCBav6Kbf8=)
15: XOJiaLeJCz3ytdO00WBq937piI0.roa (hash: v2vqT1L2zCbVq2R1hKoPt/8mcKtO7ZRpN5eQuLPaByE=)
16: advh59nofWhwGkA1p2xRv-zYjYE.crl (hash: MZKCQCmSKSulWLpUd1Bdb4x/aIm7o0nyQ47NOup2SKk=)
17: n4DxEm2C9DgfRdTFUEly40c3ySQ.roa (hash: EEKVIWMbLgevLDeloMM06tT9vww9YdjYKwtKyRl3ARE=)
18: paj8DkvX3JY5yJbmewavbftSsEU.roa (hash: oxEzRffKUATaKxFAdchv3n3r/z8Z9CRcjER0mcVzjBs=)
19: v97ZxeBIsc_Jyv7evUvqhpxJVas.roa (hash: 3zOyCX5+Vtc/1pLaQZ9YLJxnVOsJJtmXXOgmbp8dNZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:1c:4e:cc:2a:a7:a9:c4:ff:e9:66:e2:2b:63:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Apr 17 07:00:54 2026 GMT
Not After : Apr 18 07:00:54 2026 GMT
Subject: CN=5df28e985b6013b66073ee05ee1588063f998ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:53:f9:90:6f:f7:c2:26:4f:d2:c0:e4:a4:be:
ff:fc:8d:76:51:5f:74:df:2b:9f:04:f9:4f:5a:e1:
65:36:ee:d1:b5:23:fe:74:76:94:9c:06:8d:d1:cd:
32:73:d9:1b:ae:50:58:fd:f2:18:cb:c5:cf:c5:7a:
44:a9:6b:35:0d:79:51:60:a9:d8:24:ac:84:d2:b2:
eb:8c:65:63:6a:6d:1c:cc:27:f0:80:f7:17:fe:e3:
cf:3e:83:cc:02:b2:22:98:79:93:3a:80:dd:ad:bb:
e1:de:31:4b:38:59:7e:5b:5b:c0:a2:19:48:5e:a1:
47:20:97:32:0f:03:65:ad:01:11:8f:fc:09:90:81:
1d:6b:a9:e7:8a:d5:ef:c2:53:fd:97:16:3a:6a:49:
54:ba:b2:e7:9f:fd:bf:9e:66:ea:96:2a:78:c0:f5:
51:20:8d:84:f2:c6:f2:30:2b:01:83:05:af:81:10:
34:24:81:04:dd:75:ed:7a:18:10:47:a0:e5:c4:89:
c5:69:16:26:23:b6:23:4b:0c:3c:69:2f:8c:71:1e:
7e:95:0a:5e:0e:cd:c0:0d:be:5a:a5:7f:40:f5:f8:
09:6b:16:de:ba:6b:3d:4d:c2:34:83:5e:04:86:79:
40:e4:a5:4b:8e:ee:0e:9e:91:51:92:e1:79:5e:a6:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F2:8E:98:5B:60:13:B6:60:73:EE:05:EE:15:88:06:3F:99:8E:CD
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e9:9f:a0:93:76:15:a6:62:b3:83:ec:90:93:d4:e9:a3:13:
c2:0f:68:72:9a:51:78:36:9b:c7:f1:c6:b1:fa:a5:f7:1c:a8:
4d:0d:f6:78:73:32:ad:0e:37:0f:18:c6:c6:26:22:fe:42:e9:
a1:b3:5a:b7:3b:57:56:01:5e:b8:30:f7:32:ee:f2:12:4d:9d:
76:14:32:85:71:ba:ed:80:e1:9a:e2:b5:3e:24:6b:2b:af:68:
c5:0b:b3:23:41:eb:a4:a5:ab:ba:51:66:29:48:01:18:50:ab:
49:32:3c:e7:d1:09:ea:40:56:f8:2b:b1:da:8d:00:a8:2d:b9:
3b:43:26:03:61:7c:5b:66:4a:82:31:17:fd:79:6a:df:cd:44:
26:25:53:ce:a4:68:36:fd:4e:14:dc:79:1e:8e:af:8f:3a:ef:
6c:2e:fc:8f:04:1e:43:bb:17:91:dc:57:ed:7f:22:59:2c:09:
97:fa:5f:df:ca:6d:15:8f:de:f0:43:cb:97:ee:aa:e8:0d:20:
e0:cb:53:7d:54:38:44:45:20:0f:23:ac:62:02:9b:ae:28:55:
2f:87:ed:fd:a6:db:e5:ae:57:c9:e3:db:ba:13:73:90:a9:cf:
13:23:d7:1e:0a:49:82:20:10:9b:54:67:73:b2:33:e4:dc:63:
bb:ec:e5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:31:14 2026 by rpki-client