
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
File: dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json)
Hash identifier: zA7oTDq8xcLkjs8Pe9Kvpi07Vam8YAeUnSzgbwzutaU=
Subject key identifier: 70:1E:6E:45:45:CA:DC:F7:AA:1E:77:92:67:37:7A:54:AF:03:1C:2E
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019CA9B38F63281E8C714DC8BB3EFFAEA4B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
Manifest number: 18BB
Signing time: Sun 01 Mar 2026 14:00:42 +0000
Manifest this update: Sun 01 Mar 2026 14:00:42 +0000
Manifest next update: Mon 02 Mar 2026 14:00:42 +0000
Files and hashes: 1: 0i_tJFCQkW4BL4d6bXm4WAypJS8.roa (hash: 61MZ18IZL5EgLoB9w4TH7mfQX+7U0VC5x9A0388yn8A=)
2: 0mDShmyQKUp4YdL7Ak2fOwf_ln4.roa (hash: cmEc3xEggewJFYU5aqtKVs0Q4v5k0w3JZFkx4qlV9Wc=)
3: 1-JP0PPtCDIK_UNysSaQZClIqsZk.roa (hash: sfCZXINYiH/YUUcCfwXIvxbn90PofsIEnjQBdiFjFFQ=)
4: 37FmBErOCRsxKQZqtKw_TpsXPeg.roa (hash: dk2f7f5Kg/P6nbGtUsTcUoKtykQN93quUzHoHrPlbUA=)
5: 4rdTxE4U8SWi3axBDMycJ1e2dVc.roa (hash: Xdko31FAcZqa8CKzUmvaPLbn8FzZeXlJr3Mz2L3FEGY=)
6: 59Sth-R3BuV9Hjri6g95SVuIU_8.roa (hash: rE2f8KGpsTiN9qUjtXDjk/27rrXTQHhiM7ABCMeYpTI=)
7: 6G_CPthqnbLtnYzdhZufaHjo5F4.roa (hash: G1mM29p2kekMY/O2aJXOBqbSptdec4HtSgzeXjTvuJ8=)
8: 7Ayvp-uW9lsYoBe5C_qqBYeOBrw.roa (hash: UXGDJSJK/leXOeQ1B1NAMR6HAmddT8uVGYrWzmhj2oE=)
9: 9ONi4c-7XF6Vn2zgdYwKAE0upGE.roa (hash: GdwVnVj0Er6zQr8pOtzRgza7jVJzxa5V5nFDEZ8imc8=)
10: CA3XMZSRf-G3ODjblICPF-EIxj8.roa (hash: VyF40sc+pRDppM7qNwDKdKVxboVcpPNc0TqHKAIYGnE=)
11: DlbWkC5JlObpaQbh5pYrcOuhUDo.roa (hash: 5ZY0b/IjheGn0WGAGieSGsGNwfBNcd9Ekci2Iu3Ck4M=)
12: KN-R0XliIfCVMngaX1YE5bkgN1A.roa (hash: ky+YkxQHE7U4ohxIu8eVgOVZ4Wgf9rUGkWr48EhI1d4=)
13: LKaOQokfTIgkWBs2UdoqCTA22vc.roa (hash: cUUhEOlVftW9+j+XpaAsAph0Rp9J2xVMMProgn5lBRE=)
14: LNX9e0qM1FUUPu7JPg66r69yK3k.roa (hash: 4hdxVQWJPFAuhVTEnkZxRAKzt32xutYmv7LRrS+WM4M=)
15: P4odDKYu1lCKx-0-6xh-2d3gFVU.roa (hash: pJx8PCnMcEoTQpCvLj2jXwglNIUY3fH2OwKcEuhWXsg=)
16: T0yNiTnMr7rQj6L4yFcQz5luZuc.roa (hash: qkIXR7MhpFqaBJh+vVhJ5yECXOO2wVNGqePTqIktFFM=)
17: WtbHisRdncnw4HB-C-Q2nOatpCk.roa (hash: 3wmWRlMXTcqOjL6bnR/KTtOAF4ruJh0llk95iowxjzE=)
18: Yu_uuzMGePwC0icaYNERVoH0Cfk.roa (hash: PATzSiQXd51zhFdnNpl0DeghvMrZihxoQe+PXsEdhqA=)
19: Z5QikMa7UwGfn8uO2JzMrRFXYnY.roa (hash: U7DHGYIkh2PVaJpwB3Rs6rnlNqHm+IBWFv5Y36W7frQ=)
20: _Z4F7M-QmFI0Z18UQdlG6FBfQ7o.roa (hash: qJW2rDHAQqCfDrhYBEnMSMAxF6KCHBOPVWkKVY8Nuv8=)
21: _rQLo7b5AAZ8-dmcHMRq-rCCrLk.roa (hash: 1hYcv3/dhwJMOaf9nRoX8LQ3n5Kqv3nXvcIGzslqapk=)
22: b9yPzny7g7NzZoMSg-I0-4xYJRQ.roa (hash: oex26xfzNOy0QvV3r0CTF5Po3sMUSsRDc+0RGORVsd4=)
23: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: Jrl9OC2IFMRkXrNN7DyNVytG4WZK/orFTo43VBo2Ul0=)
24: f8cXMfB8GmIppgsZFcI-OCvQxNk.roa (hash: C/qkMAbaZbD1CDux6NhG+NBRCWcc4xbDi8mJQpA9u78=)
25: hQi_2v4PVaU2DxK_ubm6-NXJZ54.roa (hash: /DoibVc0zt1dXzmqKhW2/HUrHirpTFgRWlWufv4zCoY=)
26: iTv_taBhSWWSwucljCvdm_j4RW8.roa (hash: GE2aWALIL/q/9QPvVk6yJa+XbND+dNPP+iVv+vbA798=)
27: iqkz-oFIpTUAukJ-q0KYzZGnhbY.roa (hash: 4JwiIgby6A2ltqK6a4PhfhVkPMKWfaYDYeB6aMX/De4=)
28: jxE-bqQIw7U79IbBizQW2pIQJjM.roa (hash: s23hU/sL0N2hE6GCP2WlFxNdJxuwnkbuT42NWpGSIOw=)
29: mz3LKflSaCjzbLbt50UYZRI14QU.roa (hash: R+3MLAMskLr07qEIftdxyai6y/lFHGIWJS1jtU8VQFw=)
30: q4er2ti9h_W7MKRTNBtj0R5wg8I.roa (hash: Y7raLSBcr0F4VthCcXXBIhwj7MwB/MaClEuc9miqnEI=)
31: qE31zdIVp9J-FLCps24kK9kxUgA.roa (hash: bX05ZFL2m4xW//38qWlKYq02mubPli53Ec+q/sr4FNo=)
32: rTAcqrsLjdQzWLiPeTE0J8tFjHs.roa (hash: kpmFc9kxITW5Y/O6sK7eQ8xr12ovnarFA8jerArDTmw=)
33: sLY3G1xdCHy9saTyO6qv4H647-I.roa (hash: /DGNJIVWB/YvwBgoQBpym5udAedp+k63mdUlTFq/BSw=)
34: sa0irmG5fTuP-s-e7ehVBplCJx4.roa (hash: 7SZESPqbjMHr+1YpDP1XwHSl42AkB6k/wkqvHyEDf5U=)
35: sryIYdL-pTyxEJIgq_xCXNzWm2c.roa (hash: 34vrRywy/Wld/U9QqoCRiFH68pktsAUgx5Yq/UQR7xg=)
36: wA9ChWaX9aTjQjNN5mYeaC542Nc.roa (hash: uwS9DbntInTGgRyBcScvO12ZNTWYbWh0ii3LNRApI90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:8f:63:28:1e:8c:71:4d:c8:bb:3e:ff:ae:a4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Mar 1 14:00:42 2026 GMT
Not After : Mar 2 14:00:42 2026 GMT
Subject: CN=701e6e4545cadcf7aa1e779267377a54af031c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:20:5f:a2:d8:29:a2:b9:6e:57:89:c6:0a:
cd:c7:eb:e9:49:40:ab:82:74:a4:ef:9d:7b:49:04:
54:80:d6:1d:78:fa:0f:b0:50:49:1e:a8:ca:22:61:
1f:6b:16:a0:60:fb:0b:69:79:ba:a5:f7:d2:61:dd:
05:34:e7:3a:dc:27:31:87:39:02:a5:8c:0e:8f:ab:
cd:ad:43:b6:06:8b:42:67:46:18:c1:1d:0d:4b:20:
02:b2:42:c5:2f:04:2c:3d:9a:2b:eb:11:ca:15:86:
8f:a8:a3:40:22:c5:df:3e:68:b9:c3:40:88:98:ce:
4f:f0:c9:4b:c1:73:64:d2:16:75:ea:5e:7e:bb:11:
53:3f:71:a6:88:08:58:e9:90:0d:96:47:da:34:2c:
44:6b:40:45:a6:a1:b8:3b:d6:3b:bf:1a:01:9c:40:
ff:9f:e8:02:29:2e:8b:b6:62:a0:42:5c:fd:33:65:
b1:60:11:e9:6b:23:79:7f:5d:4e:78:2f:16:20:04:
72:7c:6c:ab:1b:8d:4e:ea:90:e7:17:f8:c5:19:16:
cf:fd:4f:08:8f:75:d1:11:c3:16:cc:c8:f2:9a:a6:
ce:1f:98:b4:a8:cd:a9:af:dc:0a:50:fd:dc:84:8b:
9d:25:08:47:53:f8:f5:48:d8:58:9f:3d:36:01:0b:
c7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1E:6E:45:45:CA:DC:F7:AA:1E:77:92:67:37:7A:54:AF:03:1C:2E
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fb:80:d9:83:0a:74:a3:10:e6:03:2a:10:f4:7d:3e:db:7d:
ae:9b:77:fd:f4:67:8a:c8:97:4c:2a:d4:71:27:59:80:b9:4a:
ff:0e:7b:f1:71:19:7c:51:6c:f3:37:0c:a3:39:04:ea:e0:8d:
5d:7a:79:d4:4a:96:ef:95:db:89:bc:d8:9d:7e:2c:28:d3:3d:
9d:ed:85:30:4b:91:b6:2d:fc:ab:1b:3a:4a:5a:69:b6:1c:13:
4f:82:0e:dc:f8:fe:7c:9d:14:c6:3e:11:44:59:da:c1:fc:6b:
ca:08:20:a3:ce:02:59:94:ab:b7:e6:0d:bb:82:a9:3b:84:06:
8e:32:c5:78:72:df:75:c8:50:54:09:7f:a9:4c:34:54:6f:f6:
bf:88:c8:e5:fc:4c:a0:02:6c:bc:34:7f:4e:7b:76:04:32:f7:
89:64:b8:a3:a9:8e:00:40:49:07:43:9d:10:17:e9:fc:b9:19:
72:5c:20:30:87:f4:f0:bf:51:73:90:f6:eb:57:37:81:9e:16:
ba:dd:b5:af:6f:ab:46:14:42:1d:8b:ea:49:5d:2d:a9:40:c6:
00:b3:7b:bf:59:aa:9b:00:58:0c:ea:c3:fa:e8:38:7c:a6:36:
12:93:4b:b1:4f:31:5b:2c:6c:d7:e5:5b:75:6d:22:0c:0b:9c:
3b:f8:30:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:52 2026 by rpki-client