
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
File: MdJCQSPtB3JTML-BeUT9J2t8o2s.mft (raw, json)
Hash identifier: d4FejiXL4wkZL+J4s8j4gfX2g8n2c5Rwqfb4dNKeNqk=
Subject key identifier: 5B:D4:A6:E7:5D:1A:C7:7C:36:63:CA:60:4E:30:81:FA:77:CC:E9:92
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019CA97D6C826B407FF0C4C1BDE57E7F0DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
Manifest number: 66
Signing time: Sun 01 Mar 2026 13:01:35 +0000
Manifest this update: Sun 01 Mar 2026 13:01:35 +0000
Manifest next update: Mon 02 Mar 2026 13:01:35 +0000
Files and hashes: 1: 0YRt7gehqHaPWyS7k2Oxn7d-UzE.roa (hash: iqVLGmDXvBUaR4yOb7/MYUXH4aYenFIvmfTfEy8Y0Aw=)
2: 0d-1i6twk1qz0gkL5guvmnlDtlM.roa (hash: WGpHUAy8T75DxlZ/Q5gVkhJZ2C75TB8Lbo9xdq+2ESk=)
3: 1-Ce6mUoSNG040NyDY7hKPb3y2g4.roa (hash: eEDo4C7WprkWReQppF4WJkysxxZG/iBE88n9lrYpMXs=)
4: 1-ShJbsfkPLfryW4d3Bcvb5BY4Oc.roa (hash: 3jFCcEnaNavx0+ADjWr03+91AqE+yWTktRxwao2e8N8=)
5: 1-ky5ICu8QcUMP4jXzBouQKvzAY8.roa (hash: SSoxUjGa1R03vucvuCCj5I919DT3SCQAUYBG+/1Hv2U=)
6: 1DUcKkQLZvVV5D_fVevUvZD7T14.roa (hash: 8vcN7UTYo1H6Z6hqaZ8sCLWk+eKQH1iinZYN6spWx24=)
7: 1Dbabq2T_pfZJBQlvQstDRkrm6U.roa (hash: YipjHa0fT0muj32Nj26mRRvkY0GnQ6zeXCjUhuymHcw=)
8: 65WRish4COLtI0vNfHrVIiab9SM.roa (hash: oTPsxFAW4axbISSnQ7SVOQ1KnlFI7iQpC9Z+2M1VHdc=)
9: 65vxxSffb4ragGxK22dRBLc1wwQ.roa (hash: tlSpDjkPuwmjG3LknRl17FBGhyzFIU4ic6fMLLXUlhI=)
10: 85ygelHoe93EjxIHR7CAs1kFj3E.roa (hash: 4AEHh4JYm6TE6R2Mi6uw2MPqpLWQVkYear/TQS+RVPo=)
11: Bg5ToPW3nAtNMcZA65KFxb1nGpc.roa (hash: 8aaM+LHP3FmGiDNirsZdkkIueLBqtZZ2KrdBCMXrWaQ=)
12: HHy_ms5suGBD9YzUQvIifX47Y8A.roa (hash: wBY2ES7mtCPIixP9qPggCBIvzAxt9l4VccDxsNJnCqk=)
13: HybXN-G-KoQ8KtOAksEIUKs1GU4.roa (hash: QiZY4fsu/4K9aunyOeMV9Nmj2TKdUPeLsfCr5TiOOs4=)
14: Iv19JXi6-nJtxtagKB6qg5uqfHI.roa (hash: ngf0HfbeRdsM7u4ClIfCn6u1pZGysfP1EruYcCbeqnY=)
15: IwgScS-4S8YPtD-bfmwdqiUp3Ek.roa (hash: oEKIqloLq9eyd6YQhClj+1rynTYewTolXpO7l27C9dg=)
16: KZNZ0vhVzAt8xRDz11jJQSbmReo.roa (hash: XRQ/DFNpFkq7IaVQcfwZibCPLVVCCmcslB39faqv0sg=)
17: LsdrWWn9khRgdA8v64dpOQeSptE.roa (hash: fE5hA6QIEdY5b3XGDqflu8YAU+aBTUQG/USrdBlxIg8=)
18: MdJCQSPtB3JTML-BeUT9J2t8o2s.crl (hash: PI8zNbOSNz1u+vxOXXPPhIbUOC1//vdGirNOLQyR+V8=)
19: Nmx46o6ozJODoZuE6SgRDIXQ5SU.roa (hash: jeUv33v1tn0ArEbutv1DbFNEJoAIxO7RDCw2LShLIno=)
20: P0NC92fPZRpKBRi719omuqTIvmw.roa (hash: XeiQ1M/iOY6f3B+1dmihKorpvgAdfG9pAwEVvV+YqF8=)
21: QF5kVTqfei8NqBc5MXq6FYFc1SE.roa (hash: cGFyalFTRqxABPLpzT33ObWii2dsn9tI01P6PYrTQLs=)
22: SHxB6bMvlx6JI-t5mmZ5yeF3FyQ.roa (hash: ybnh/F6NLZFLaFnJizz5HRUsYJvnBlmXNeXzZR7rbgk=)
23: SUFovk6qJ3aHBwQ1spRRB5HT97Q.roa (hash: OZ93pp09r2YFfCLiA/kPhUxrZqcuc7aGG1ruFt9SumM=)
24: SeuIwwPbW-chjT6bVLaQbYEHXIY.roa (hash: b39dBEw/f6XbSIhi2TBzn/jX1FUXlKCHMXQ/D5LlJPU=)
25: UUUSjQipgB1Dt7u0MIMnbSuyCBY.roa (hash: WQNLJMdqNlepnyTMu010tU0r2QqyZ8joTssKUf14Y+k=)
26: WFYhfcRrHwulusBopQw7bTvGQhQ.roa (hash: kayeKNDWNq7GkefFZZ4JQ+bUNziLtVBXIItgr7d5oiE=)
27: WVJLIpO3DGxQvT_FknyFHG6K5EY.roa (hash: 1Y5+3f/BGQoQ/2+V8BUpbHLQi4/ExRndnu+FNvhEWPc=)
28: XtKXCOtCNU6Lrrn0TJCwxieRvXU.roa (hash: lzSA5Mabt+O7OjYTV4EXtliSGVGvFAeT6Vl/Ct0B0qM=)
29: ZSRpEEIVDpKJe62blRh1GKaRk4Y.roa (hash: xXqd7lQZI8N9FIgWZP6MzEeQoGbuMnjC1AsmJXjnwGM=)
30: ZYQV5XDVAY1V5oIUbOxSh3VFdzU.roa (hash: 8U1eRPND410yXZRK+sAXNgFIqbhW+8jvM5q6w+Rmdz8=)
31: __EhIn9aID-0M9vCmNKVDROKEQQ.roa (hash: 0qAoSTZ3aJh9gL22nrtQ8aVMAck6LEhl9C00mXWDrGA=)
32: _l28hsFaCQvb3KYU9-IEkcRGqHk.roa (hash: UL0HDeECsWmUYCPhplv+lq5HRTW5Rx6G8eHW8bBGUiM=)
33: c29JW2yNh5HoO0EB4VlPAoQtjt0.roa (hash: FnTibZNg+iKmkCC6CIsEZNF63YtnJOb4qD2eGb/Hkkc=)
34: eXbNac4tVpk9l9MidopZhW70kHo.roa (hash: AXt2hwXWJDrq5t8ZmKJqNMYfpGr6LoOFQyn2AOL1kQQ=)
35: eYDPXUBT2lADIu74LQ5rDQpW8IY.roa (hash: z3hAwFRVvIuhL89Ke5oHGRXGj5g1/WsLR4s8M4VHikc=)
36: fMdIJEmiqWNtp94ut6rupnRwzTU.roa (hash: wYuArCVrDBLw8aFTNvd/BThBfn1RhIVj1+XDwpQL6MA=)
37: h5xMmHJIQ18MC-nZbGvk3XAxBFw.roa (hash: bd/MgklYWc//AQaeTwtIa6Qk2JhJAl+exhpYJup/MGo=)
38: lttZPKDfrZ-Kjqod1zSKvZJZIog.roa (hash: 32doyIcXRL5nbngscNrTebDCfFGyDVfWpz0Ax5iz6t4=)
39: on35JdEITK6o4n-Axles307MPsw.roa (hash: Py6Xee7RuBVcX+mpt7IUjY2QcNiq+foAlIm/sdT3vRg=)
40: p31Kq_uhjiZ0WpV7W607-85CU84.roa (hash: d5XvOU/WruPLjD221Y/iosXMBmqo+M95tSwgHjjnk6o=)
41: piE2qIm_9zXQTA6HRUeylwmADIc.roa (hash: qcS3/0EdVVQ1YVIYjORoIY2su6b9E/YH0w48u9EJs9o=)
42: s6XMkURCgmG5FSjpeQBy93fqJyw.roa (hash: 346HFXhfe5tCcwXWrjSsejWlBqRm1Vv8MxgAZcPx2Kg=)
43: tZ6sfbxwhRCrZBbOJwOtXI9dc4s.roa (hash: a8njVHA3PgmiXYz6G4XmdwuLn9Y6NsOKeLUNSaCEPZA=)
44: tcxUMOqrPC2_GbBiBbKne-UbStA.roa (hash: CZVeupriepzjKvoEa8ISeXVOrpHcd9IZ82u2AK98ry8=)
45: uW4sysV8wnph-cMvpc-PEfFz0Ag.roa (hash: Cn+NXXfi0S3RZDnrcy/VN0+8OMrVKCyMWL87X+a/LC8=)
46: v771GeyNgX8nGwdtWcu_uqIvlNQ.roa (hash: IbjhPMn2XPA4zOpsRCebepuf+zqEg/SUZ1JUHbn0vfo=)
47: wD2e51GHWMpnL-eBr1AdTtsV3d4.roa (hash: E/mfJF/lhpjitoIHVXZNP3GGPWP/a0ENNTWXpYt/i3I=)
48: wZQ6m3eEC9hSmQ_KOF41gIwPF0k.roa (hash: 3oPxAKxnrOrp8PJK6Efk9YDF9kba8v5YOD9BPoDGLIM=)
49: y6tElv90tbI8yNDaDH25Vzstlj8.roa (hash: 576XywIdxdVQ2X2wB2BYi18eJp5uod/IMvKMukO+gaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:6c:82:6b:40:7f:f0:c4:c1:bd:e5:7e:7f:0d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Mar 1 13:01:35 2026 GMT
Not After : Mar 2 13:01:35 2026 GMT
Subject: CN=5bd4a6e75d1ac77c3663ca604e3081fa77cce992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ae:06:e0:17:fe:8a:ed:36:cb:8c:d2:f7:e9:
ac:12:7c:9a:58:23:c8:c5:c9:38:92:e4:12:38:44:
a0:d7:db:7a:32:e2:49:7f:e4:f0:0b:82:eb:0f:c4:
f9:23:9f:5c:6d:2a:3d:d9:fa:c6:b3:c6:88:dd:11:
ec:53:30:c3:20:a6:77:fe:65:7e:c1:a0:a7:a4:fa:
f6:36:15:7a:4f:a5:b6:db:25:34:f4:2d:6c:a9:35:
86:1b:99:16:91:6e:27:ff:1f:48:1f:0a:ce:6c:13:
20:80:a8:14:f8:ea:e5:7e:5b:eb:20:90:19:08:c9:
8e:cb:ac:d0:49:37:13:82:fd:42:6e:b2:ce:26:1a:
55:27:9b:ec:65:ea:17:f0:9c:16:94:23:2f:3b:d0:
52:ae:c7:b9:1a:8c:01:ba:22:b5:fe:0e:a9:a7:bf:
cc:5d:49:70:e3:e3:dc:41:33:77:4f:ec:59:76:ac:
e6:df:b1:40:6b:38:19:a1:f8:1e:6e:df:bb:51:77:
97:66:54:d3:6d:53:45:72:a1:18:d5:3a:d1:b5:12:
fb:aa:d6:b7:5a:3f:43:ee:dc:be:8e:49:00:35:ee:
61:7f:f5:7c:3f:2d:cb:a9:f1:dc:ea:87:fe:e0:b5:
2f:7b:c1:ed:e5:5d:fb:09:80:d6:24:f3:f0:5b:7f:
86:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D4:A6:E7:5D:1A:C7:7C:36:63:CA:60:4E:30:81:FA:77:CC:E9:92
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a9:a2:18:aa:cf:05:24:eb:d7:73:90:0c:81:82:ae:b3:1f:
1f:db:fe:25:f9:21:ae:e6:fe:5c:d9:a0:6d:31:ff:c1:e7:1c:
53:77:e2:56:9e:57:21:94:6c:94:ac:1e:a7:51:4f:1d:f3:87:
55:14:44:ae:b0:2d:15:a4:66:24:07:a9:a5:f9:96:43:38:78:
a4:aa:a1:fd:1c:2a:9a:25:e5:8a:9d:35:03:d4:a9:bd:67:b3:
a1:f1:04:c0:d5:09:7e:db:69:83:1d:8d:9f:b0:c5:20:c6:34:
e6:4a:ad:91:d6:9a:6f:dc:c4:ee:18:f6:95:b4:36:48:1f:26:
b2:2d:ce:48:ce:fc:d2:ea:2e:8f:58:5a:ed:fa:cd:f0:f6:ed:
d9:36:c6:9b:ae:14:77:59:6b:8e:29:42:e2:8e:dc:f4:06:d3:
05:90:b5:2e:65:ad:46:29:66:0c:be:03:d3:8e:68:91:59:56:
27:2b:d3:90:5f:db:55:59:07:a0:f4:ae:57:78:32:7d:eb:6a:
03:a7:a6:f2:c7:00:57:e5:8e:aa:74:f5:4e:7c:21:d6:14:d4:
43:8e:f2:67:f6:72:23:5a:81:c7:29:90:08:28:2b:5c:38:4f:
8a:bb:a8:e8:65:4f:e2:f6:f2:08:2b:85:00:aa:65:6c:55:77:
23:48:09:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:21:32 2026 by rpki-client