
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json)
Hash identifier: ctDIP9BbwUJsBuL+YEegMeplOr/pA+gDlFoqdpa87tQ=
Subject key identifier: 0E:77:5A:E2:56:EA:92:4A:38:28:F1:89:44:9E:A3:FF:AE:5F:2D:6D
Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a
Certificate serial: 019CA9B38FE1B9C9D41AC956740FEDCCC649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
Manifest number: 184C
Signing time: Sun 01 Mar 2026 14:00:43 +0000
Manifest this update: Sun 01 Mar 2026 14:00:43 +0000
Manifest next update: Mon 02 Mar 2026 14:00:43 +0000
Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: /69gXo46lkf3VWusOalYlw1pWQkleZfjPwSYe8zOHn4=)
2: 2pZ-2FjfKp_AUPJehyyyCmO33Hc.roa (hash: KSo6Uo4KGXQ+gy+hLjBUZoC/tbnGR8dO325Q6LPyilM=)
3: 4vyc44IoKKHchhCxJ7O1jQ8abqA.roa (hash: UQ4dJ25AUyuNJbd4tfu6FjtMtU5Pbfq3SkU6dc+KnyM=)
4: CvuWIkRHjp5wftfGLU8vOGYCRbc.roa (hash: gj4Tk/zdN+anVbu8mIUIWBYC8RgYdvQOlOOsAUK8Sdk=)
5: IRAfjWAlERnsxDrkVza8YXCUxl4.roa (hash: Ubtt3PSH8NxJ1HHW0Bmr9YJAFmecuPEr+JdwoJmMyLs=)
6: JJfaJkgSEBalqFcc3d6GPKEq5c0.roa (hash: FuHxoLmlLp5uuetTQ7lUzLqCBx0iP3lbv/wcUM9OYTE=)
7: Q_rrlmseqjc9c8mfs_9rzyd3284.roa (hash: GSzKRbWz/hHkNfc9qit79if8AoJkjbgwLaFILxum/nA=)
8: nkzcn1sgGDpbfyqNM00anSE1XXM.roa (hash: /+3MitTOfIJS1gt2shgI9n07vci+NIdPgsMA89TtpO0=)
9: qgc2BHITW3F3Fb1Nu0nXShoQLoM.roa (hash: CQpVzp5lW1S/T6Fu+MruSBubNMRYvg+fyjfJdrmJ720=)
10: uFIM9ORi0Ow0-T4N33qTox0ZbXc.roa (hash: xCkv3YPUvKqN5W2m/5NSb93BBA0dlEC1kEuar7tM8jo=)
11: vJzboGw4HmYyQSuIhf_kLLJ5mF0.roa (hash: LnBImqH9fDlrcbItpIt0qbjCXavrpNmtk6RTIorgw8g=)
12: wYZK_Wy3MKznm7YhZ7I4uynw0us.roa (hash: WAKcd6xIHnq5uvyKJ3Z0qcpHOOGNGSZAHs44HwFAzKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:8f:e1:b9:c9:d4:1a:c9:56:74:0f:ed:cc:c6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a
Validity
Not Before: Mar 1 14:00:43 2026 GMT
Not After : Mar 2 14:00:43 2026 GMT
Subject: CN=0e775ae256ea924a3828f189449ea3ffae5f2d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:e7:d7:1b:83:7d:59:9b:82:7a:ab:cc:5b:
c0:96:4a:c0:4a:7a:ef:dd:84:a4:79:0f:44:5d:90:
57:ec:f8:a6:5a:58:be:eb:e1:c2:c0:54:d1:7a:2a:
f9:d0:29:dc:1a:29:f8:cf:29:8d:51:91:b0:7d:56:
e6:e9:1f:1f:bd:dd:d9:64:87:82:d7:ab:4d:ab:28:
54:76:00:87:3f:bb:08:bc:a3:9d:a9:75:67:03:0e:
63:a2:22:92:b6:8d:e5:70:4d:00:d0:28:5c:ba:60:
22:98:5e:b9:43:ca:80:b1:06:cf:06:6a:a0:ce:97:
7e:15:97:1c:0d:9c:00:0d:d6:d1:f4:d5:07:af:4d:
00:04:5b:c4:a7:5e:42:84:1a:55:da:b8:08:82:d7:
6d:df:b5:16:a5:56:7e:93:73:ba:cb:a4:b5:a4:1b:
c6:65:7e:a6:3d:36:17:57:62:66:f9:f7:93:1d:ac:
26:d8:c3:4e:73:b2:06:dd:a3:bc:23:be:d6:97:6e:
98:d5:88:50:ca:85:ae:d1:c6:b9:b2:7d:a9:66:15:
4e:5d:61:a2:08:80:5f:5a:6b:46:c5:2b:43:04:88:
86:25:40:b7:31:cd:06:00:7f:00:9a:95:00:4f:10:
16:da:33:2e:83:24:d6:45:c2:42:e1:5f:0a:9e:78:
c0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:77:5A:E2:56:EA:92:4A:38:28:F1:89:44:9E:A3:FF:AE:5F:2D:6D
X509v3 Authority Key Identifier:
keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2d:47:50:16:fc:8c:e0:8c:48:76:ce:d8:d3:3c:f2:55:2a:
f2:7c:e7:7b:e3:14:e3:9f:34:9e:b4:3f:f2:c0:29:fc:7a:97:
e0:0a:28:99:f6:6c:95:a1:23:29:4b:3d:8a:e7:28:e7:90:24:
dd:b7:35:cf:3c:b7:9b:e7:43:97:18:6c:96:a5:94:ec:81:45:
73:98:58:40:f9:9a:da:32:8c:24:bf:ef:f5:41:35:00:92:96:
97:08:e2:1f:98:d9:64:4f:c0:b6:28:26:b3:d8:7c:b7:22:e3:
70:de:67:49:3a:dd:80:89:ac:d9:50:cb:f2:53:90:a2:82:dc:
ae:af:3e:76:5e:44:00:9c:59:dd:a3:f8:cc:fc:f0:10:f6:5e:
41:e5:dc:42:23:e5:a2:75:e6:11:88:a2:c9:4a:22:f9:d5:aa:
a3:a5:be:0c:1a:d9:9c:21:c9:67:51:e1:f7:10:4e:2d:bb:57:
ed:62:f4:8f:b9:18:d4:16:c3:b6:b1:6d:23:5d:35:8a:c9:e5:
46:b0:09:4f:b7:6c:5b:a3:23:80:f3:f1:d2:3d:f6:84:75:4d:
0f:05:ab:f4:e0:6b:c5:8c:1a:c1:f3:a8:ed:8d:d6:6a:ae:f7:
5f:f3:40:26:8f:c0:61:6e:be:e1:9b:55:5f:4d:17:94:cd:f0:
5d:78:25:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:26:48 2026 by rpki-client