
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
File: k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft (raw, json)
Hash identifier: htX9d0I3HbZ6F1g/AVzW/9I/iMd7PG161XLegZgeMVc=
Subject key identifier: 09:AD:32:B3:FC:85:7D:33:7E:F1:1B:27:AD:F9:D7:1B:8F:46:E9:EE
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019CAE352925B791D8E3CB7400B574F2575B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
Manifest number: 18C7
Signing time: Mon 02 Mar 2026 11:00:45 +0000
Manifest this update: Mon 02 Mar 2026 11:00:45 +0000
Manifest next update: Tue 03 Mar 2026 11:00:45 +0000
Files and hashes: 1: 0lYWQjZY8G9gFCxPPA6Z1e6Et7A.roa (hash: IL/oVqJCJvBcuhRa0udWrMl8b5MZPj/cIIzXYQVtlu8=)
2: 5FIVNBbRzzZxl83qrCNwL_6Bnpg.roa (hash: LbvZNY0tC6zYRbPYoa4ozGzRAQOXt4ZTnNFn0xhSnzY=)
3: 7Jo1AXxL9dWxSmwTRBFhks9Q4Vs.roa (hash: XSSzViCtmw8J0g2pF/zT6knPpk1iDv9kdN1eQqLpiqI=)
4: 7YkwqMeQNo1ZCW5cXDDtW6tJPIM.roa (hash: QYaRajMdHdtvejmwMr8bX6WzRjepO0NpayhGfPPYZjs=)
5: 8HkdlRIsSGuo1I-drFwJKzYJsLc.roa (hash: C8ZP2jpxrKvVL9+836kgNK24TF2yaO/bf4nIX98Lufg=)
6: 8anU_kSsbOGe6ZU0HS4gzWovLqg.roa (hash: wkDzJZRCUWlfEfFwPoPfznzkQ9x//geG8nDMwyMxFek=)
7: 9ZAIwXRFWAT6bwVjGxJA58LT0C8.roa (hash: cVjpGVfGUmxebxPLOp3neQi9YEZ7CKPSGNOdweHchC4=)
8: DYFGQ9jLmPveTVYvqmPdMOiB2II.roa (hash: 5FCw7oW9hIoLUdGZsC5C/kAqM/V+0AThqlTk43JtS4M=)
9: FoavqWF8jeAMSQlW10lOBirX1-Q.roa (hash: p8z3kmN7e3hhfZrzVOMRMMtYhzpF+J1m/L2uzSJKAM8=)
10: I7LwPdW90If5Iq8va8VVky8QjJM.roa (hash: wvgGGkRoiQOQWK8pYp5pi5jggBd+DiReaExIPv/a0Qs=)
11: LhzEJgeIglAa5qZWdGZklevtUTg.roa (hash: a5QqVzS7PfvbVZgoeMWUOcBUG3/k7vat/Mzm4iVPmnk=)
12: N70XxhXahOWN-bJRkQuA6R5YciE.roa (hash: 1GAH9fBjTX1tIK3p8QgIIyWRcnIPBnAOKx1/G/At2X4=)
13: NvPHM9DbtscigEStbedrS4ZnrcE.roa (hash: YiK5qvrI0X5QgkIf9YEzw+6MmxBJxVAFj9mlF+7Uj4U=)
14: OIjLxs6VmAGUTEzh8PSJtLBopGY.roa (hash: 8AceMO5tWwuUpBtpE1+qoQkFOUmeBKGly65yw/hi+sk=)
15: QowR94jtBUnFvn7mSw9HdelmuL4.roa (hash: E0Dh7cd14TaT6XnP2VIr9PfSAEJbNifsjZXKmz2LVxY=)
16: UsXARVO0ku9iIm3C-vStGeFRLlc.roa (hash: Za1raUPPBFhNuB0MNODIseZi3+2ddIMhH5cJ3c+pEH0=)
17: XYMRMU_3O-JK-JIGAvAXg1QrnRM.roa (hash: llYUO5jnzTZpvaJuLkhYws9O4QD9RoKbEnpetMF/cpY=)
18: _hpXRDy0EUFzfhN_aHdFdymXiIA.roa (hash: HAN6zvmeqHdwoZfGyxOd38E87FHJX9YZiFoBibK2IOk=)
19: eMLMK1qGxvtHAnruO9820drOkF8.roa (hash: Qpd2e+jq6odk6pRnDczmMMXkJCSUq5XQLSBI5aFLqnU=)
20: eyQJc6-SgirOqpkjy7BayhaUNTM.roa (hash: +9zbqq0DJW8y8iPCW5wtYdUDsTSuNxnLZXq28/HomsQ=)
21: g-5OExobBPKpwq86-mokeUHrM5s.roa (hash: esJBdIejJQA3R77ejO+4/6JoDvhxDi/exjc+GoZuVe8=)
22: hk1oju7a85YLrK-xOi3Dwyc514s.roa (hash: 47y67aqLovE6XQVviNUqEv8Eh2I5vqgHfxxqdx3QVxs=)
23: k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl (hash: 27Qi7DF549TpUPOz1mvx2Bbjp/KebhU4/ACyXYSz5Uo=)
24: phGDcnbsUAWKUDua2zfBGnxvvHA.roa (hash: PmqHP8zrCvf2Ikf1cbZi674FwG6W6lFWBsYqFkhhcnA=)
25: qZN1iGc-Xf3cp5urtHVXBZqoF5M.roa (hash: zbowHekheKN7KuV9DnFXvdpM7KjV51/aW8mu77VaWX4=)
26: xVkKNJRba2SGRn985sBZidqpu8Y.roa (hash: V0oEel9d63PmLfURQhNtv6FLYVRm7Iz09fE77eJwwQM=)
27: z4qebrlxoCTWKQYs_5DhTFQmnbQ.roa (hash: vmqtsShBDwyvuz3COzl63zKiNkUIbp3VBuhBqO6QmVQ=)
28: zM7bb3oEHINoYMOeQRk-XYW9EkU.roa (hash: RdFq0JyIVgelxWsJ1/n+o94CMLBqw3yV+IpTMdt32Uo=)
29: zhpGkkiHWYW4818HnEbqExeUBls.roa (hash: qWe+oDx2YTDIQSZZ2y2+AEfhQT4OZcU2Yuk2CoLSDWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:29:25:b7:91:d8:e3:cb:74:00:b5:74:f2:57:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Mar 2 11:00:45 2026 GMT
Not After : Mar 3 11:00:45 2026 GMT
Subject: CN=09ad32b3fc857d337ef11b27adf9d71b8f46e9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d3:41:89:87:b5:8a:7a:d6:83:18:a6:1a:84:
34:07:32:c1:9b:af:39:68:5d:f9:ba:d4:6d:a6:46:
25:bb:87:a6:f5:fe:eb:5f:f7:ee:2a:02:46:33:0c:
dd:19:43:e5:80:4b:cf:ab:d1:9f:0e:23:15:ae:1e:
a5:f7:6c:59:8f:53:99:fd:83:5d:dc:d2:ca:1c:b4:
95:ea:11:41:74:03:cf:ab:11:86:52:59:0e:34:35:
4b:fe:b9:ac:ba:96:c1:7f:e7:86:97:46:ab:6f:46:
c8:5a:3f:7e:1d:10:d6:6c:ef:fa:85:2a:8c:f7:c3:
f5:1b:83:59:5e:45:77:8e:ad:77:1f:59:16:dc:99:
f5:d6:5a:00:e8:58:4c:c6:65:f9:61:0c:51:1d:4b:
3b:f7:99:fa:71:a3:e1:dd:27:fb:73:4e:55:88:3c:
5c:3c:48:fc:fb:88:9a:2d:eb:c1:d6:f4:ed:c1:51:
b3:33:43:eb:37:53:12:b1:d6:cf:61:25:88:bd:f1:
0d:8a:f4:1d:65:48:d6:e5:e9:9f:df:50:02:55:44:
2e:7f:39:fb:b1:ad:f0:6f:3d:93:c7:a9:1a:0b:e2:
56:f5:20:d1:5b:90:42:e8:b8:3e:bb:85:18:52:d0:
8d:55:f8:cf:e9:7d:66:c8:30:92:c6:02:ed:72:50:
92:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AD:32:B3:FC:85:7D:33:7E:F1:1B:27:AD:F9:D7:1B:8F:46:E9:EE
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fb:44:df:c0:f7:2e:79:08:26:f0:59:e3:92:78:36:47:52:
b8:14:42:47:d8:a6:b0:71:7a:57:5e:76:f8:37:f5:07:4f:20:
a4:f1:c6:f8:81:f2:9d:62:17:23:bc:16:a7:02:81:04:1e:55:
42:fd:8a:85:0b:a8:b6:bb:67:e1:dd:f0:ff:c5:3e:b8:f2:5f:
72:df:3c:e3:7d:ea:c8:a7:d8:20:6c:67:da:ec:57:2c:9b:12:
38:a6:d8:38:4e:03:b0:82:d1:20:78:b8:17:22:fc:5d:3d:a2:
e7:00:d5:d2:99:33:46:60:35:c9:f7:1b:52:2a:2a:ca:de:34:
45:85:18:66:6d:b3:ee:03:ea:8e:51:ad:37:4b:4c:11:eb:51:
f6:09:49:8b:e6:71:d9:e5:c5:8d:71:53:22:26:29:9d:d1:89:
9b:8a:93:dd:f7:88:e5:b9:64:70:5a:46:08:cf:06:54:99:fb:
2c:ae:3f:48:1b:8d:11:98:f7:3d:e7:89:d2:eb:89:ae:d6:04:
b3:b7:fb:a3:92:71:a3:09:02:31:1e:9c:fd:f1:a3:52:06:87:
29:02:d2:ee:16:b7:d9:64:16:2a:f8:8e:d4:83:9f:1d:2c:e2:
54:9b:1b:28:9f:f6:4d:96:44:b6:f4:8f:2c:4f:5c:a6:6b:3a:
81:26:e3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:53:38 2026 by rpki-client