
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
File: BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json)
Hash identifier: X/rlzkC/BJyVKlLsWcS5GQN7Lb2zbpbOAoFRVy6UDIw=
Subject key identifier: 0F:44:EA:52:B4:26:02:CD:B8:0C:2C:63:A8:0D:8F:DB:94:16:A6:6D
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 019CA945D2006FCB4B853B33291B1D7D4A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
Manifest number: 1695
Signing time: Sun 01 Mar 2026 12:00:51 +0000
Manifest this update: Sun 01 Mar 2026 12:00:51 +0000
Manifest next update: Mon 02 Mar 2026 12:00:51 +0000
Files and hashes: 1: 3H_vt-3sz3UYPfVr2BQwr8WiZlM.roa (hash: mbq8Pr8PdKSRq7yIi7vQcXKq7HeKQhJfSwx0LhWnGCo=)
2: 5DciNWvtD44nvmowaEInWwk8YZA.roa (hash: 4oBae1cQkYxE+N4xYsBQQveSBxypTMY0DWM/AkkENtk=)
3: 5JKLYCytnUKhdyTa14LHQIEKdFE.roa (hash: eArX0/lwmj4LvmBl8JgKR0ALNuxr1zRBSWvGWN5uFfI=)
4: 5i-KLJS79COzLV51bb0tfcQ1uQQ.roa (hash: PnQ0h19PE6J2No2E8613gpettIVTQSAHkgDKgMMgppQ=)
5: 6JyU7nFUK0tk4VQCPlYI_ZKhXmo.roa (hash: UtIfPnWUVyz8gRBCn75+ObAHW0bhWki1PUUgeHyQ8CM=)
6: 6XFljtVK2V0PF6GXRVQaEjH3Eoo.roa (hash: JvGvYE3ny1jx3z80vidwb1suh41eSZYf4UKZ7JMDcio=)
7: 8Gf4ilOOHDPy8ShRA6DADyswUBw.roa (hash: Gg3fjKtbtCo3yrbVLuhlxWrBwdUSi5rHbyxOcOG2L30=)
8: 8HWIcI9N3AE2x8zYy673Vd_4kfo.roa (hash: LN2KpWeg+Ys04Rwx9lWA0rODgISnXB2tF8WbAfHw9WY=)
9: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: Hoe5CUm1Mc+DzRjloU03t+sQa5TTFFsiZKf/JOsRQZc=)
10: CdcIcZHeB0GsHSds771hQUpQ7D8.roa (hash: YpLVoBlHUKYqmx9AhANgdWKDLZYZ8nUhqGpu7awPbPs=)
11: DMF7_LfD1ucYhDO0ohFJTTXvNDA.roa (hash: Cy/e5SaBm31dnw0xEGtIe3MOgTmE56seaObi9TTZpSI=)
12: D_yFeSNCNOPeNuhYpJ8Sj6yMqrw.roa (hash: dRua2mdx0T28GkQVz9QSWEzbAac9dJJsdOTGdnj90kk=)
13: FPBrUaHiw1Xoqa349mDqQP88He8.roa (hash: 2Mp4pgNFrHCxPuX5oPFoUH8wMArYm0pR6I+49C7XFsM=)
14: IYvPR6-UnbcPyQYUJJWwmHE7NK8.roa (hash: P03T/DLhEWvqxS/8YYp/V2MwoFNKYQGAgYeLfjxTL/Q=)
15: Kky_RCiVZdJF5qQzgzjDIFWXHRo.roa (hash: qaufeqdeipVE1r+9GyOAZSAG0hMF1qh7wENk1s7zB2A=)
16: OjeVFAg212uWEJPR4j0wAB5XdcE.roa (hash: NgMhCybIfen0bwNj/HLLxxGGd68yCqKlN9cakd8bl48=)
17: Ppvy7LfSl_8veNKT3PCYySGa_xM.roa (hash: KAldC7Ag1Jpktoi15FEM8qa7XkOMpiKNKU124uNCHgU=)
18: YB_nGWcNw9qUX8wpVOK6TBj3DtU.roa (hash: 8Vy5h9LCNlGMuWAukt3eAgST/HOlYo6a2vD/jiISkbs=)
19: Z8_XBqnrMqCaFMrYj-tVqo5CEZM.roa (hash: 0jePTymgcOwFGwH77BGx0LOAQcAPk0ITZHaXgc+bQTU=)
20: drYQ3de9ij_y2_dBNv1FHhh_HXw.roa (hash: hDTaJgq7sdjjtHa2UuNNZjMX0IkytWJOW4WpnjNRq3k=)
21: e4ScI9UDTbjinOVrH-HzMhxxYaQ.roa (hash: z4aixSBMgxj9VOGw7h6LRSs/oKtO4+/kMkfuz35WEDU=)
22: eBOwN9hT4zejM0AoU4iSaIEjz9s.roa (hash: fKITe0XHXVAprxbNBR9M8OQ9t4GQsguRxsVQ9HUhdnE=)
23: hG3KpN-cvfJ9mSWPhtQPeu1ItUs.roa (hash: /bY2rtzWMB1/BM4P1MtY/wIJQHWSb2VyMeLJaYe4zIY=)
24: iVkiAHYOg3HtM_uWUc76kLqrONs.roa (hash: XlSThvg6yDDSVBDMohDGUs845WGTZEUqqZulw7z2Ytg=)
25: iwqxgJYL8mBv3G61SG6QzZnZo_k.roa (hash: 3GX+FmWsXoIqZRfY2WtjR43yzm9CJ2GngD6fPIfSxPg=)
26: mWr8FlZO7fOBScqPdp-M7JwH1Xk.roa (hash: W9XfH8Uvi+taIP3eFXkn/Sc4OUtrs4EPnOFSG+QrLlE=)
27: n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa (hash: 12jqzpGaLihSKEn4m7KQUtKkmWE3dp9k5ig5SAQQ3hM=)
28: rc3l3yce_wnaIAhkm-MVLQ6MlQs.roa (hash: nGpl03qXwZbg5LYiikckCucykULVlnfBwTrh22E2cqw=)
29: rymhiapxDDqAtyIh4qaTKoecFoo.roa (hash: p5Zj3OLwAVlNewRpZM1jlrm2hLhqyC5XI9HeIZ/YR4M=)
30: tPWk-AfReXdc60ikE9-d-q2ml5k.roa (hash: fuXAhmrSQOQKR0hkXAvHwO1y6kpzsA61B3meXSwM1d0=)
31: vPIPys_ck72jylL-AUvqLHtAd44.roa (hash: EaJRNirRwPO81qiwnsAEnRZoQLT1oD2oeGnXmmJGVRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:d2:00:6f:cb:4b:85:3b:33:29:1b:1d:7d:4a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Mar 1 12:00:51 2026 GMT
Not After : Mar 2 12:00:51 2026 GMT
Subject: CN=0f44ea52b42602cdb80c2c63a80d8fdb9416a66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1e:f7:9f:ad:45:5b:89:fe:32:be:91:b4:13:
12:c5:cb:ba:7a:33:dd:f4:4a:3c:08:a5:36:a7:ed:
93:ee:a1:4d:a8:83:43:6a:39:1f:1e:52:42:b3:38:
bf:4c:1c:e7:88:02:70:71:28:5e:ae:d8:70:d1:75:
c4:3b:cf:d1:30:92:8d:de:39:5f:a1:16:9d:fb:7b:
c5:4e:6a:4f:5a:f2:13:b2:55:e9:c9:e1:a7:f3:f8:
4f:e4:2a:80:2e:c6:65:69:90:7d:cb:74:c6:f3:2e:
d7:4a:d6:93:41:7a:a8:6b:6c:61:b1:a1:83:6d:9e:
6f:87:cd:40:94:77:b3:68:33:9b:0a:71:58:e4:58:
59:b0:f3:78:e0:5d:e4:08:e4:d3:72:1a:95:40:a8:
61:00:bc:3f:17:02:34:71:b7:25:52:53:c6:01:80:
72:57:36:d3:66:aa:b9:c0:be:49:bc:61:e8:ae:16:
36:e2:93:48:fd:f2:03:e4:0c:ce:69:24:a6:b5:9d:
d6:a4:a6:fa:e0:36:1d:60:d4:4c:f8:13:36:5e:c5:
65:2a:c6:61:71:f4:e9:d6:b5:14:54:c6:08:c1:c8:
eb:4d:a9:d4:cc:f1:e9:e0:f3:b9:cc:9e:26:d9:12:
af:2b:3a:82:73:6d:38:6d:7a:df:f2:a8:d5:48:f8:
40:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:44:EA:52:B4:26:02:CD:B8:0C:2C:63:A8:0D:8F:DB:94:16:A6:6D
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b6:36:29:e9:73:d5:8e:7a:ef:07:7b:fd:4d:b8:26:8f:4b:
fc:65:8b:fe:99:96:f1:4d:3a:44:49:b4:2c:bd:b6:a5:2a:cd:
9e:ae:de:7b:1c:20:e8:9a:8d:a8:4c:57:7b:2e:0c:55:9b:84:
bd:a8:6c:c0:c8:05:5c:a4:d6:ec:58:9a:2f:7f:2b:1f:66:59:
41:1b:6a:39:28:58:31:07:bc:7a:2c:96:bf:c1:fa:47:6e:ef:
c5:8f:88:47:a1:e9:06:45:3a:17:03:bc:dd:1d:ca:fb:5d:e4:
fb:e6:0a:68:8c:f8:8c:5a:76:62:4b:71:31:71:5a:a8:b7:67:
79:98:fb:e9:26:ca:fb:02:f1:3f:59:3f:51:98:62:ae:e1:b6:
20:46:b9:ac:19:93:e5:77:24:d9:eb:8e:99:f6:9b:70:0a:7d:
3f:19:5a:58:db:87:b0:30:68:d6:dc:15:e5:41:22:12:ee:ea:
fc:45:29:59:34:03:b9:e6:34:72:4b:71:56:7b:8c:6f:40:ac:
25:da:eb:39:2b:a4:e5:03:56:a2:df:89:44:10:ad:0c:c1:00:
b2:88:4c:68:43:fb:66:0b:b1:d5:b9:31:b8:0e:f6:ec:52:d9:
5e:10:2b:51:97:50:9d:17:d4:d2:59:f8:66:91:57:ad:be:0c:
ea:5e:9f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:21:22 2026 by rpki-client