
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
File: MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json)
Hash identifier: +SgmUDfNTxKh7ZvfnM/2XDElNAQJUGr3JPQ+G/icvmk=
Subject key identifier: AD:68:43:AE:0D:5C:9D:41:D4:92:2C:16:FE:CE:DA:21:49:56:74:D5
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial: 019EBF5B32F86E6CCC110258FAB294891270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
Manifest number: 1968
Signing time: Sat 13 Jun 2026 05:01:25 +0000
Manifest this update: Sat 13 Jun 2026 05:01:25 +0000
Manifest next update: Sun 14 Jun 2026 05:01:25 +0000
Files and hashes: 1: 0MTEIApza-zMErqUQKyZ3kgNJ9E.asa (hash: qpLhmjd5x1a/DwAKZgvcj6+FKTceZgxXZNAd83zxp78=)
2: 0UXZLxmo0wM791OjAQvNwfm2flg.asa (hash: fckAHmyvVNaeQqmLb5z5kUo++7GABr5luLIf2iVlPj8=)
3: 44CA1k5d4Zw23GcP4lb4i4-vDPc.roa (hash: 6c/pnyjlYlDcfbUXGOzr645pKHpIFoe+rR3oaf4Be6g=)
4: 5xi8bSy9c83Bg6qClBnmgJJbFA4.asa (hash: RSBuuu1KOgBq7xwPJfJizf07iznlWzC9UjX015Je8yk=)
5: CvTWeK7xp9gyjdFy-y9UwtpH8uE.roa (hash: 733OwKswiweiXSLuyQj7UGTmZLfaZ6qRpmED62r0qvA=)
6: E5qoLCD2a5YNiPmf7QaJhx9vlLk.asa (hash: WmircQfu0AatgeQJG+MuE2N4aLGTi/R4QPCFFvU71qo=)
7: EutctDjYApRtXZCCgXc1_FMXFMI.roa (hash: +qc+pkUgzkZJUvQ7/ijItcJlPfU6GdEPJtEIGHeSZ+w=)
8: H5cJU-sxt-hZI6FMau1LEtyh614.asa (hash: NYeq2kG2iVJonZO0Jwu2qtybJFReQWpFb9Vj1/WLpQg=)
9: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: AZ+92gsS6cNd/hUAQAM3DiMlYudaMQe3YjMgrQ1QPQk=)
10: N6KyBv5Xx5MGRmWO1SOVIpA2W_I.asa (hash: cD3zCeI88xWZ6CMz6J0M2Axze+U4XS2co5BuDwABalI=)
11: TImZ7DpGWw5tGP2Ohe8RdAHQspE.asa (hash: e9qExWlAmx5vz0q1YZDmh+ciU3YnYVxiZifW/Xth3Zc=)
12: fScugB5JXQAioLuHQ_l8vSs_TBk.asa (hash: gOi3z3VxhGRetLAWgtZKWsOK7pO5qIAmzhI/+alUIvY=)
13: vVF3pTqa2KJdx2p8PlUWcXPESX4.roa (hash: 8smQRNWHO8FZtO5kA7zQSvtufSO4Sm4HtWZBhh9ooug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:32:f8:6e:6c:cc:11:02:58:fa:b2:94:89:12:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Validity
Not Before: Jun 13 05:01:25 2026 GMT
Not After : Jun 14 05:01:25 2026 GMT
Subject: CN=ad6843ae0d5c9d41d4922c16feceda21495674d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f2:7c:15:51:54:ce:62:75:ea:7c:6f:b6:35:
bb:20:89:d3:9e:cf:e6:45:75:17:20:d4:5c:6e:99:
15:06:72:47:c0:63:83:fd:b5:62:bd:41:92:3d:77:
6a:b5:42:f3:56:95:6d:2e:1d:92:32:31:f0:17:96:
65:d3:e2:63:63:95:67:c0:bb:32:7f:a0:7b:b2:3e:
59:7a:90:9a:1f:bc:47:4e:22:16:f6:6e:90:1a:66:
a1:f8:50:ab:ca:00:2b:9a:68:a9:25:21:dc:85:a2:
33:a4:ad:ea:68:76:3d:17:49:79:7a:71:ff:5b:b6:
2c:fd:82:66:2f:50:bb:f8:bb:b5:7e:81:e9:68:a0:
2f:0b:1f:d3:6f:2e:76:32:78:b0:4d:7c:c5:30:2b:
8d:0c:60:e6:88:36:cb:0f:49:a1:df:a8:19:9b:b8:
96:2c:f9:29:f7:d9:6c:da:ea:e3:bf:ea:6f:ff:6b:
2c:4c:8e:03:c7:ca:4a:60:42:be:2b:a5:0e:f1:f9:
15:0a:90:94:4a:19:30:71:ef:a6:ab:c2:45:3a:2c:
cf:36:0b:95:f5:cf:9d:70:27:16:91:87:25:e3:b7:
2e:88:53:d9:a9:2e:34:ab:31:35:85:23:a2:cb:0e:
45:b3:2f:e8:89:d2:1f:1f:28:1e:f4:79:52:b4:d5:
aa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:68:43:AE:0D:5C:9D:41:D4:92:2C:16:FE:CE:DA:21:49:56:74:D5
X509v3 Authority Key Identifier:
keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f0:e7:44:23:bb:42:6d:1d:09:e8:0a:4e:86:19:28:d4:8b:
3c:65:e4:bb:e5:7f:13:c6:ae:38:3f:5c:75:07:1e:76:62:73:
7c:93:1c:d1:e7:30:5c:7e:35:fc:76:2d:cd:72:ab:1c:6f:71:
0b:1d:a1:bf:30:57:d4:a3:41:04:62:eb:ef:f7:0f:bb:26:e2:
a6:11:98:c9:b2:c9:e4:f0:f1:bc:0e:05:34:66:c0:8a:81:f8:
7f:c4:2b:89:74:68:2e:f7:23:f5:4d:2a:15:1d:a6:33:97:ca:
c6:4a:60:27:c1:ec:be:9d:20:45:8c:76:23:3e:9d:e6:32:37:
17:6f:ca:ed:6b:dd:08:55:91:42:31:51:8c:e4:0a:79:a3:4b:
a3:e4:8e:99:11:91:87:1a:b0:16:80:6b:e3:b2:b8:06:7e:3b:
10:c8:d3:cc:f7:b1:ee:6c:78:35:5c:eb:fb:7e:f3:09:3e:1e:
b9:48:69:02:b7:50:80:72:88:b2:ef:12:61:c1:7f:e4:91:08:
d3:54:b9:e7:9d:3f:8c:3a:a5:b4:39:71:7d:3e:e8:ec:63:2c:
21:f7:c8:23:73:40:75:a8:94:06:81:71:5a:e7:63:1a:5b:3a:
21:7e:f8:aa:d2:b9:4d:4f:52:09:4c:d6:0b:29:a6:af:d7:01:
f0:75:e7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:32:45 2026 by rpki-client