
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
File: MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json)
Hash identifier: d5BROZv2WSVothQy2RpeAab5iTMDiJGyuXfbzJjZZFU=
Subject key identifier: A9:57:B9:D7:C9:86:45:34:AD:6A:DF:64:17:67:7B:5C:C7:3D:1F:54
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial: 019EC148AC56584D9395EE7454D2BDAB2951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
Manifest number: 1969
Signing time: Sat 13 Jun 2026 14:00:25 +0000
Manifest this update: Sat 13 Jun 2026 14:00:25 +0000
Manifest next update: Sun 14 Jun 2026 14:00:25 +0000
Files and hashes: 1: 0MTEIApza-zMErqUQKyZ3kgNJ9E.asa (hash: qpLhmjd5x1a/DwAKZgvcj6+FKTceZgxXZNAd83zxp78=)
2: 0UXZLxmo0wM791OjAQvNwfm2flg.asa (hash: fckAHmyvVNaeQqmLb5z5kUo++7GABr5luLIf2iVlPj8=)
3: 44CA1k5d4Zw23GcP4lb4i4-vDPc.roa (hash: 6c/pnyjlYlDcfbUXGOzr645pKHpIFoe+rR3oaf4Be6g=)
4: 5xi8bSy9c83Bg6qClBnmgJJbFA4.asa (hash: RSBuuu1KOgBq7xwPJfJizf07iznlWzC9UjX015Je8yk=)
5: CvTWeK7xp9gyjdFy-y9UwtpH8uE.roa (hash: 733OwKswiweiXSLuyQj7UGTmZLfaZ6qRpmED62r0qvA=)
6: E5qoLCD2a5YNiPmf7QaJhx9vlLk.asa (hash: WmircQfu0AatgeQJG+MuE2N4aLGTi/R4QPCFFvU71qo=)
7: EutctDjYApRtXZCCgXc1_FMXFMI.roa (hash: +qc+pkUgzkZJUvQ7/ijItcJlPfU6GdEPJtEIGHeSZ+w=)
8: H5cJU-sxt-hZI6FMau1LEtyh614.asa (hash: NYeq2kG2iVJonZO0Jwu2qtybJFReQWpFb9Vj1/WLpQg=)
9: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: qievpN6/leXXRsv+UDlp8r10yWO/Bm8GaOQHIMDKebg=)
10: N6KyBv5Xx5MGRmWO1SOVIpA2W_I.asa (hash: cD3zCeI88xWZ6CMz6J0M2Axze+U4XS2co5BuDwABalI=)
11: TImZ7DpGWw5tGP2Ohe8RdAHQspE.asa (hash: e9qExWlAmx5vz0q1YZDmh+ciU3YnYVxiZifW/Xth3Zc=)
12: fScugB5JXQAioLuHQ_l8vSs_TBk.asa (hash: gOi3z3VxhGRetLAWgtZKWsOK7pO5qIAmzhI/+alUIvY=)
13: vVF3pTqa2KJdx2p8PlUWcXPESX4.roa (hash: 8smQRNWHO8FZtO5kA7zQSvtufSO4Sm4HtWZBhh9ooug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:ac:56:58:4d:93:95:ee:74:54:d2:bd:ab:29:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Validity
Not Before: Jun 13 14:00:25 2026 GMT
Not After : Jun 14 14:00:25 2026 GMT
Subject: CN=a957b9d7c9864534ad6adf6417677b5cc73d1f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:da:d5:ab:41:0a:e0:57:e2:7f:8e:d1:7b:
eb:2e:14:de:df:40:6a:5c:84:e8:03:d5:12:fe:21:
09:e0:e4:5d:c3:3c:c9:96:11:c5:75:7c:dd:a0:d4:
87:30:10:62:7f:11:da:e8:c7:06:7c:66:f9:46:9f:
fd:f2:a1:d1:29:a1:07:97:19:de:52:66:21:de:a9:
56:89:2b:18:8a:77:0c:a8:cb:da:a6:c4:48:35:11:
09:fd:95:d1:cf:ff:f7:b8:08:1e:9d:39:02:65:da:
f7:84:d2:35:87:b6:f6:fe:38:0e:09:fe:65:a8:3c:
a9:b4:52:8c:69:64:52:e3:40:77:ad:3d:c1:09:53:
d9:f5:3a:35:af:6e:3c:0c:40:4f:9b:3e:e9:2e:5a:
06:79:2b:ea:58:1e:fb:ed:29:76:43:82:c5:4a:a5:
c4:e5:f2:49:17:d1:c0:3a:e4:08:ed:bf:59:8c:83:
9a:e3:7f:1d:8b:e8:27:56:11:40:d6:1d:ab:37:40:
cc:4b:4d:71:9d:75:35:c7:f0:3e:16:5b:89:4f:7f:
4a:71:03:08:29:d0:85:bc:29:e6:8b:31:db:30:c3:
d7:bc:da:66:63:65:e3:41:f1:f9:f7:43:25:fb:95:
00:b0:ba:17:e4:12:d3:b0:5b:97:06:94:e4:a3:29:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:57:B9:D7:C9:86:45:34:AD:6A:DF:64:17:67:7B:5C:C7:3D:1F:54
X509v3 Authority Key Identifier:
keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:09:49:4e:f5:cf:f8:07:bc:fd:cc:b2:79:b9:4b:5e:f0:e0:
18:ce:e1:16:8b:af:29:5a:92:07:ba:95:80:75:83:9a:9d:fe:
e8:d8:d2:89:21:79:2f:d4:10:4d:aa:22:0d:78:c9:4d:f3:f6:
5f:15:4a:7d:d7:d0:78:15:25:c3:cd:25:19:12:46:a0:2e:e5:
20:e1:85:5d:3f:8a:65:a5:f2:58:4d:48:b4:04:fb:1a:a3:bd:
ca:f3:bd:d3:f7:8f:54:84:58:05:45:b6:81:58:04:aa:f1:d1:
23:9e:38:56:6b:7c:cd:6e:40:b9:02:3e:5b:d9:50:3d:90:e1:
d4:8a:2b:56:2e:ec:ed:42:a3:25:ca:75:97:5e:86:60:fb:43:
0e:33:80:bf:ee:02:89:9c:0b:bf:cb:94:1b:3a:9d:ed:ff:a9:
f2:f3:07:7e:dd:78:2a:f1:f2:0b:cd:5d:41:c3:b0:b8:27:da:
97:8c:c3:52:60:55:2f:7b:a7:8a:57:27:d1:13:1a:7c:5d:79:
e8:06:3a:52:66:de:7d:53:ec:d0:29:ae:69:31:ad:9d:4d:f5:
f5:16:8c:16:5e:14:ee:1d:f5:e5:db:ed:23:dc:65:86:27:bc:
50:3e:78:e3:e2:36:14:c6:5f:6e:56:04:a7:87:06:75:e0:81:
d1:ba:36:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:22:25 2026 by rpki-client