
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json)
Hash identifier: /HCNM+DhKOkj6404Ld5vJT1sfgo5tJlzf+A9nNiaUy8=
Subject key identifier: D0:31:DA:06:7F:52:4B:43:3D:8C:1B:97:D1:FA:6D:93:B3:E4:64:E4
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 019CA7FD061D5F0CABBD20B1DFE29AC70AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
Manifest number: 1853
Signing time: Sun 01 Mar 2026 06:01:43 +0000
Manifest this update: Sun 01 Mar 2026 06:01:43 +0000
Manifest next update: Mon 02 Mar 2026 06:01:43 +0000
Files and hashes: 1: 1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa (hash: YEqko0/rX2ob+3AZDq3uooNVJSO5Y7pQBV9N/OfoJ0U=)
2: 8A3g6hd04la3Px2TyuTjfHWXmdY.roa (hash: iwl9hWmxy1BIkyJmP1xReY7WIyqXtDNFiAQ47HDp3qA=)
3: CutVr_X7gS8lDaDuNw9F7uzem1c.roa (hash: A1mIXRTWd/wu1bWANlXDqimnRKUXOgou4evCbpodPm0=)
4: E3TSZxhxz52fsgneQ6hYKE9lnR0.roa (hash: Jo3p0YGshAOZXbJIFqjcNfVnpH22iKmlH4Gttc0OVQE=)
5: NAZAaNdWKeXHuv43xyaeXGZkj24.roa (hash: 7OpOUts+KUACTRn/Jnhi/5hlzxiHmq7rQOZw5wD3ZMs=)
6: VHaZ9xAWUz6t5_O77Zl57zRscxg.roa (hash: 2yv7yBBLi6h8Nduk7IpZ8p6TZNV35NVDX377GsAgTP4=)
7: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: cMxEezxl7aRR7ayQL3SqUE88CQQF+bueJOws9yH/0dA=)
8: cYY9JWownI4dxUC113BsmeB-bPg.asa (hash: mzYcpAgDjivMiDigXGlTibFV5zqA/T/HUHr0MSI0Bk4=)
9: fxCBjLdqX_evkWfiqAm6qjLArlI.roa (hash: tk7gywwYFiYzZLlhE1m73NGnM9inNgbBSNjaCbvZCNY=)
10: hRI7RDa7PGK-ctecQ63wDq0HUqI.roa (hash: tUVamYyn9duDeEqDyKxRIvl+qRN9U3COd67wexVVyLs=)
11: iaTyWoYRTwRbH-8Asj0TijaPuO4.asa (hash: Z8zpBbBj2fntekitrlPrQF77k8Fhh9yLKV2dUy8NxuU=)
12: lPRgjXUJLzaOBHI1Ar3B6SKFErU.asa (hash: fjbHrRsPWcRvcVzpQntP9+B1NmK4Bi2Amk0MUakU4gE=)
13: z8lBi3aAEOzIA4rjFoQW2NBYnGI.roa (hash: WkLdmUjUmDG0OM0nogJaG3cgrVGCp28qMqMnj28ytDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fd:06:1d:5f:0c:ab:bd:20:b1:df:e2:9a:c7:0a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Mar 1 06:01:43 2026 GMT
Not After : Mar 2 06:01:43 2026 GMT
Subject: CN=d031da067f524b433d8c1b97d1fa6d93b3e464e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:ec:f4:09:72:5e:dc:cb:38:c1:a5:86:77:
b6:be:01:b0:ea:83:db:d9:fc:a0:ae:40:ad:de:fc:
8e:be:c6:c1:69:62:f1:0f:a5:e7:58:19:5e:a9:e3:
21:8f:3a:11:e4:bb:28:d8:84:96:a2:b1:b7:c7:4f:
74:79:e5:fa:f6:a6:1e:14:de:de:7d:73:6c:94:ff:
c4:2e:a0:b8:3d:f8:c8:ae:0b:47:a0:d4:5e:90:a7:
1c:9e:0a:49:08:ff:33:79:ef:9d:14:70:e1:d9:35:
e4:14:75:28:57:c8:dd:d1:a6:00:b3:1a:0e:f5:6a:
a0:f1:71:83:0b:30:8e:68:54:37:ca:cb:c7:4f:57:
bc:84:a5:05:66:cd:58:42:34:28:ab:a7:16:82:0b:
15:1f:7a:3a:c6:64:2c:ba:cf:85:95:0e:76:f9:72:
09:aa:8b:98:b5:3e:13:61:95:0e:72:d0:37:f0:94:
be:02:6f:75:bd:07:57:08:e1:3b:f6:2d:bb:1f:3d:
47:a4:8d:9b:4b:bf:5e:4e:91:d1:48:10:6a:3c:ed:
e5:11:7b:73:34:e9:48:db:9f:eb:1c:a5:8b:77:6f:
1c:0a:7c:2d:02:b2:c2:b9:7e:78:a1:7d:c2:c2:95:
85:e7:d9:d2:5e:67:54:a4:e0:cd:76:0c:68:d0:9a:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:31:DA:06:7F:52:4B:43:3D:8C:1B:97:D1:FA:6D:93:B3:E4:64:E4
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:95:fc:82:ce:e2:8f:6d:ce:0c:16:64:3e:6c:95:0d:fe:fe:
25:31:0b:f7:ad:11:b8:f4:f8:e2:17:19:d0:23:ad:b4:8d:79:
aa:bb:4e:a3:d0:48:46:f0:6c:db:b5:b7:c5:42:00:86:21:20:
0a:35:b7:7a:4e:9d:c2:f5:a1:d6:e2:e1:20:4f:2a:5b:fe:53:
36:7f:ae:ce:e8:09:1f:29:ce:f9:74:d6:20:42:18:b2:68:4a:
16:2f:b5:fe:b5:d2:21:4f:44:08:fb:7d:a9:4b:d5:37:c6:a9:
2b:89:71:45:71:d4:12:e8:99:e0:0b:d6:6d:e4:74:5f:07:d6:
02:e6:85:d0:31:53:49:df:cd:05:41:9e:a3:39:d5:3a:01:74:
5b:d2:d9:7f:a6:f3:b7:8b:00:66:ed:e0:a8:a9:81:1e:2c:94:
99:a5:de:c9:a3:bb:a2:61:fb:1d:ba:1e:54:a0:f9:d8:a0:96:
44:88:8f:ac:56:b1:cf:24:cb:da:e6:93:74:e1:6d:0d:ce:fc:
a6:25:8f:a3:63:47:fe:df:2f:fd:35:bc:4a:70:fe:14:3e:da:
72:dc:b7:81:fc:29:dd:40:12:f9:10:1d:4d:ed:7d:cf:33:1b:
c9:2b:3f:74:ea:11:2b:5e:ae:60:62:9d:33:eb:b0:0a:eb:2f:
55:03:d8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:45 2026 by rpki-client