
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json)
Hash identifier: HQDiFfvodcud51xBqAgxe7wATcpQbQ7XJKm8RjUCIZc=
Subject key identifier: D3:6F:60:F0:36:78:93:61:50:87:18:3C:B7:64:E9:71:57:4F:60:A8
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019CAAFD7E44876F366EEE3FFD6A9AE459AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
Manifest number: 15EB
Signing time: Sun 01 Mar 2026 20:01:05 +0000
Manifest this update: Sun 01 Mar 2026 20:01:05 +0000
Manifest next update: Mon 02 Mar 2026 20:01:05 +0000
Files and hashes: 1: 1-bwPNRa4hIuOmCXigFym4QuSvEg.roa (hash: T8k2dmI9vUTRjZrs4X4YE5xctVuURXzRhcAJw5O14+A=)
2: 590jpJtvHm4aq9pkOcasjjPKR5w.roa (hash: wNrNH6FKCaxwz0q75agrzuG0OijfKBZxBY6JT4ecZe4=)
3: 5C9_ixUcHdAFSFNXrsPXYEsthX8.roa (hash: EJq268SpN9myvhA37sM5KIFt2t6hL5j65NEljkhYCyk=)
4: 7BHrkta5DcfmRJ9QGXt7SrTu2Xs.roa (hash: WflkvzVUJUW28OrasYS+BvErnK7oO9Zw/lOlmQjDvko=)
5: AEHvPX3VoVo4sodyxxf_DiRnFFY.roa (hash: KS6uW53GHyfiX0chDSvonFb0kqW/+nyuaNMKCFyPh9o=)
6: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: pPQUHNtVPdKP08rKByrHUvvGyLQ6Hs5b+6eU1HsDRC8=)
7: J3IUrppUQEJ9AlNcJD-MFxypKxI.roa (hash: uezq13xnHYoK43g5cZL4HFTwsYHZzWtKo0PDmpYGYzc=)
8: OYlH95cJwavdZvWPD2OKDHAiTLc.roa (hash: BWL9nE74GQlUmW8EmNYK3RjJ9VZYHqxaunAVG9GH6bg=)
9: REV3W8PYUxFJpyQqeipP60uquIM.roa (hash: R/O4LVj/Nn1LD5Jt4pXt5pWCeAyMFWEfHCC2WmVvLdo=)
10: SSwmkO4bAa3Cf5CCG9FUvkP7lr0.roa (hash: Ha81Wfoc35Apd2MzoqOASambEnENvmJSJQLlpgCS2Bc=)
11: Tv21UJ7ytJOyOPKpUbJcsfcz7lg.roa (hash: R5S9kl+hHU1Moq3UfwZ59OY1nQwhi4UuliZUdnWHawA=)
12: V7t9HoQFq6tA2kgolQRcRfuRldU.roa (hash: hielByb8U0KHIxejo6mEN1esKRKu+XesjxBKkhAqRLc=)
13: YDHAFS5NL3nYDPhy4OA73C3z01M.roa (hash: G6APuYyI4RlimuK+4VqWE8moDRuBp8AeV+DrddKsYsY=)
14: YvO8XpjqdR123-pki8Y2K83Kr8I.roa (hash: VnHtYU8K0lWWvKwLKXL5UAluzd841pXdLH1T2y3y24I=)
15: awEaR3mu_nadZa6gupzUMmxDjJc.roa (hash: /ZCqGj+NSGdaXR4Sc3N2f3ysSnVFG7540bZGMgnvEn4=)
16: bE94TCIYTfIl9kzaHRXzNiQoftE.roa (hash: 4j0TvOQTsGRxrK5ktDw/14Kxmma5Wvzi7ywS8WE8N44=)
17: c_cWOPcEQMft8Aer9o0bFFTuzpw.roa (hash: 3Xhi5i/L7JVUSZVPSdHXaHOfLiEna+V7BTZ9aCjfTKo=)
18: ccnMCuhn6ybYxRsGTA2e1jMu_As.roa (hash: /BPcjY1JXLBg9JebhD/t+8MY/IcUITQ9QS8ydvPweo8=)
19: h96UmOpvP2IiuRa1zdcgkZqRdgo.roa (hash: RVWvN7ouN/57gofsCcbTG1pWvWa8tMFeSDqaezJgkLg=)
20: i_CapsG6EXIlo7hs2M2bjbUXRbE.roa (hash: +sXOWob0idLEKLvec5gYyEKYRnesgUnVyZvyzvC+SkU=)
21: l6HrdleVhy2ogO9R43FSLGOYE-0.roa (hash: I66ExL815Wc0ZDz47aWr6Q06u4QEOdOCM1yWi8w7a+g=)
22: libApNypfBDQd2xwXgzAI8hwEYs.roa (hash: 85uC1OhXAH8nIsIB5OKlWaHMqc+2tP9WlO+RfiiV8sU=)
23: lsMaKp3sC1c5czFXsxQDmNP9xmk.roa (hash: Dsgi94SjJOM3Yr7EX5Jzgm7yi1UrHtc8raZxtMY1V+E=)
24: m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa (hash: BDic+DDp9D84u0MlugmEZf/EDqOwVo1Ck4FCtwm/eIw=)
25: mWZu0c3ccvwxHHlT9SVTQ6oiDK0.roa (hash: brqoqJsgc5iiFOBbdYvb+I1IyHssIw8FjziyxDUxro8=)
26: sTcAiGDjiKHna6lur2pzE779bNc.roa (hash: cLA9XssP3qm7fcTPgbm83hwGnuynxSU1F6mH7xNIu+Y=)
27: trnZsePT4aG-KTCZxjcSxSR1ufY.roa (hash: /5+dzAAN+A0ooVs+3qzdB6EtpFGea8R5ILZY8ARUEc8=)
28: uEdKtSEqLX5Iz_4fkxgMbr53LUE.roa (hash: dz0TqFesDk6dPWKdMZqZb11QZzW0a5NzIkgvjFU9Kbs=)
29: wyKENznEjqoTOu0kPDQ-ja6IOA0.roa (hash: XADEeG1QubSOLS5X6zAA6TQkPOdRj7Y6STFASKP2PIo=)
30: zT9J5b2waWVY1frWgok6rDhDEkA.roa (hash: kG62AdWQmKbNQrIhDYZwVRIR364hCu8diTI8HvtbVqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:7e:44:87:6f:36:6e:ee:3f:fd:6a:9a:e4:59:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Mar 1 20:01:05 2026 GMT
Not After : Mar 2 20:01:05 2026 GMT
Subject: CN=d36f60f0367893615087183cb764e971574f60a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:c6:dd:7d:2e:3d:1e:f1:22:0d:74:63:81:
41:eb:f3:f2:1f:53:19:da:6b:53:60:62:43:84:fe:
08:a0:09:23:53:af:91:7f:58:62:04:f9:69:f1:d1:
da:3f:44:28:96:6c:dc:31:d0:c8:99:ca:4e:a0:35:
f9:70:69:dc:35:75:d6:6e:a1:9c:57:64:17:2f:a7:
84:7e:b0:65:1f:86:e8:01:0e:b3:06:8f:36:e3:91:
b8:da:c7:2f:18:2e:d8:b0:3e:1f:89:10:82:07:f2:
fc:64:57:75:98:b5:dc:94:98:da:c6:c8:e7:1c:97:
e2:7d:68:05:33:fb:e1:b9:38:ea:39:0f:b6:80:91:
ee:ff:a7:ca:84:e2:7b:e3:0a:11:ee:8d:3a:8a:30:
98:02:5a:0d:8a:cc:c1:64:0a:4d:55:63:58:da:68:
b7:9c:94:1f:45:be:40:bf:76:f1:19:77:05:33:7a:
00:6f:ab:9e:34:fb:ad:7b:82:ea:00:c7:72:c4:79:
ed:a3:18:6e:3e:53:bd:57:b9:0e:7f:bd:95:fc:44:
5a:3d:17:3d:09:1d:03:d5:c8:58:55:d2:bb:9a:8b:
19:48:a3:ca:5a:95:f6:41:de:01:6d:c7:a4:56:de:
3b:9e:7b:5c:01:2e:37:1d:8d:52:87:bf:46:e6:39:
0b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6F:60:F0:36:78:93:61:50:87:18:3C:B7:64:E9:71:57:4F:60:A8
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:bf:fb:e7:99:c1:2f:42:29:38:e3:46:c2:7d:65:24:44:58:
e3:18:47:75:06:93:10:0d:02:b1:75:fa:4c:d9:f6:0e:1f:d4:
69:06:af:2e:17:e1:47:02:e9:21:44:80:bb:32:26:f4:8d:3a:
08:b6:a8:67:22:83:db:eb:6f:41:2f:ec:46:9c:de:46:12:2e:
ab:86:c3:b9:c9:15:95:5e:ce:44:53:db:59:b9:a5:c4:ed:a5:
4d:22:ba:21:8e:b3:2b:9b:53:d6:8e:ae:46:e7:06:ac:e0:ef:
91:68:98:b6:28:12:a9:84:da:90:b3:91:d4:8a:c5:35:c5:37:
6b:69:b7:91:d4:67:32:4d:62:58:dd:fd:ed:ce:1d:47:77:d8:
a5:49:ec:4a:c1:b9:d9:99:76:6c:0e:78:d9:54:f4:09:d9:f2:
0b:a8:d1:d2:91:5e:bd:fb:88:62:43:02:15:91:1e:42:7f:dc:
b8:53:ab:a4:6d:98:20:00:6d:f4:5b:94:b6:02:83:cf:51:16:
3c:e2:be:b8:91:2a:c5:ef:05:6a:af:59:19:a8:73:bd:6b:d3:
e3:25:1f:3d:6c:f9:c6:84:07:46:4c:8a:ab:99:8f:25:8a:0e:
f5:11:38:f8:e7:78:cb:9b:ba:f2:dc:0f:9a:fb:42:43:fc:7a:
bd:85:86:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:33:28 2026 by rpki-client