
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json)
Hash identifier: dh6AnAjKuyd9KwNkkZhsXmmQzE6xT4C7xc8oYdB/bxI=
Subject key identifier: 3C:19:9C:E7:DF:25:17:8F:DB:7D:60:F2:48:FE:10:C5:F7:E5:61:04
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 019CAAC69BE01087F6339BBBC25E7A70CC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
Manifest number: 185B
Signing time: Sun 01 Mar 2026 19:01:08 +0000
Manifest this update: Sun 01 Mar 2026 19:01:08 +0000
Manifest next update: Mon 02 Mar 2026 19:01:08 +0000
Files and hashes: 1: 9Z9moOZMdjY1r0zisn1yG40T_Cs.roa (hash: 4qv97AavysG7gQ9zDpXhKGyy5MypOYdpddszCCL6JGA=)
2: Ax8-r-En_jV12HWCMP3xAmC-QDo.roa (hash: DTlvOtpcsab+lqdAbmVznR+Ar32K7k6eVkxqJFUVOG0=)
3: ChgBgVFuABIzwh66-TkKdZEX1iA.roa (hash: SVqR9Q8a5Hcp/asmqFGw5DEUG2TomIZWg2fteQrE3uY=)
4: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: RZHJ9vAWZyQnQc676qRerS0I1dsaEB0VyQIYoxex8Co=)
5: M4VIxAsjnWUbH6wj5hZONC0aLhc.roa (hash: gupzBjiIjp4MhIgh1kYK1O3xRS4nwuhoT78Vii8+xOk=)
6: M4YwzZnQpTpEIjJJQTa20n-PbwA.roa (hash: X4daXjz6hYdjbJNKtkZTJmDcLRTv0QGjJCHi4DW4ijk=)
7: NaxJ_NtLLDPENMvIhnNYLJraogc.roa (hash: 9owN2kSmqV6nvpiOXXWT2m/HU07KMLcW8IIUJ10ZKd0=)
8: YPx2c3RYrM8Uay8p-Jhbf6qFkfY.roa (hash: jPgFrnzK9XdaahAH17/G4k3SsWjfA1hQSptv2wqHEDM=)
9: f6D9aJ7BAJHcZz_OdJPNz7AwmHg.roa (hash: EgTfusTv2nkLjwq0TfPSW/EGFdZmepXuwghsp1RK2Ig=)
10: fF_JColRqe6k3b-dBUqfmSs3itY.roa (hash: QBb4ezm0BlO8dOz2Yfe88q5rYV5TSLEjJ01d5h6AZcw=)
11: hJODD-xae4GPfgCvm7u_1biBHW8.roa (hash: bwel4sYC9ovxgVCjU95RSPer2KsFebCbfOZutFD0aHE=)
12: ls2jvaZs7k_InUrbbNoPbvZ36vk.roa (hash: fIXofnEy1iYP/NYn3TCqqqwLir6u1PH+g1WJfBcU9ns=)
13: qPCjKFrGlCNUHjx_vor1JA3jHb8.roa (hash: l+K/oYAVSbzs8nUlzmSSgb/G/fJy3yi4irQ8IvElAgY=)
14: s7oo8h_lGdHA5B183SrGieJU08Y.roa (hash: jWktarjEvs1eZ/T6K2gwxO8ZGGgdn9UvYfnH2e8sE8Q=)
15: uJw0ADc8Jn_tUrRAslqVcsOv5r4.roa (hash: tvo4GlgyFEqW+8NWX03vTaovLhf5PDKLye47pitknWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:9b:e0:10:87:f6:33:9b:bb:c2:5e:7a:70:cc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Mar 1 19:01:08 2026 GMT
Not After : Mar 2 19:01:08 2026 GMT
Subject: CN=3c199ce7df25178fdb7d60f248fe10c5f7e56104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:99:ad:2f:8a:ed:86:17:c0:10:29:a5:42:
6e:b2:07:17:74:46:26:26:97:83:59:30:02:e8:01:
7b:4e:6b:a1:d5:59:7d:9b:c9:0f:6d:0b:4d:5b:04:
a8:1f:c1:93:53:0d:84:de:be:bf:c2:9c:82:3d:b2:
e3:12:6d:61:f6:1c:1a:53:37:df:81:25:b6:59:ff:
09:52:20:98:4c:1b:32:bc:89:ac:bc:d5:61:37:a2:
a5:21:e3:98:5c:da:1c:3d:81:c4:ab:8c:dd:5c:42:
15:bc:5d:1d:40:25:45:51:f3:fc:4d:52:29:f6:8a:
86:da:91:a0:64:0d:d6:ea:5e:8d:47:df:da:c1:55:
cb:27:24:f4:6e:85:4e:29:0b:22:c1:73:1b:1e:26:
68:c5:ec:00:1a:e4:09:2b:67:69:c6:1c:a8:93:08:
b8:23:06:11:07:70:4f:50:56:77:ac:1a:69:7b:1c:
fe:1a:81:2c:27:9a:0a:c9:9b:19:2c:c5:7d:53:42:
19:56:a5:e4:d5:bb:9d:29:65:9f:fc:b5:ce:f8:ac:
5d:10:31:36:d1:83:11:76:8b:f2:96:77:69:4f:4b:
7b:65:66:d3:67:4e:36:56:f1:6d:a5:52:f7:ca:e2:
e2:eb:bd:8e:a2:74:87:df:2a:17:65:77:2b:d0:ec:
71:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:19:9C:E7:DF:25:17:8F:DB:7D:60:F2:48:FE:10:C5:F7:E5:61:04
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2c:85:c1:ca:92:4e:84:6f:72:da:1c:07:0c:28:da:ab:b2:
48:8a:83:15:bf:70:72:8a:7e:35:d0:44:42:78:d5:c7:f7:d8:
38:f7:61:d0:7d:bc:54:78:0f:34:3b:ec:1b:e0:df:e3:4d:4c:
9c:c6:1b:30:a2:8e:52:19:18:1d:09:63:dd:5d:42:55:7d:22:
a0:4d:a8:cb:96:7a:06:20:7a:63:44:20:f1:01:90:68:6b:12:
ec:35:d5:d5:06:a6:a4:ea:b1:c5:df:b8:7a:96:2b:c4:86:24:
cd:1a:6e:5c:90:b1:f2:fc:98:19:7d:a5:6b:e5:52:20:e0:0e:
22:4f:e0:07:ee:bb:5c:e8:c5:2e:3e:a8:15:27:87:d0:a9:95:
2d:6b:24:d8:28:7d:b1:59:1b:61:11:77:a2:24:a5:2a:8f:a2:
1c:27:74:71:f8:fc:13:fb:6e:e0:08:c8:e6:68:97:00:7f:9e:
83:b9:47:fc:47:10:e7:49:81:6b:1f:db:18:89:fc:c4:d3:9c:
c9:c3:5c:1b:4e:c8:a6:a8:27:02:0a:2c:d5:71:ff:1e:f7:e9:
12:db:e5:26:3e:fa:2a:3c:62:b1:11:ec:9f:16:01:89:3b:c0:
d5:dc:0d:32:11:8f:c1:75:28:53:96:0c:30:f0:4a:6d:fd:a3:
69:3b:60:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxpvgEIf2M5u7wl56cMxmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk
MTRjYzYwHhcNMjYwMzAxMTkwMTA4WhcNMjYwMzAyMTkwMTA4WjAzMTEwLwYDVQQD
EygzYzE5OWNlN2RmMjUxNzhmZGI3ZDYwZjI0OGZlMTBjNWY3ZTU2MTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsCZrS+K7YYXwBAppUJusgcXdEYm
JpeDWTAC6AF7Tmuh1Vl9m8kPbQtNWwSoH8GTUw2E3r6/wpyCPbLjEm1h9hwaUzff
gSW2Wf8JUiCYTBsyvImsvNVhN6KlIeOYXNocPYHEq4zdXEIVvF0dQCVFUfP8TVIp
9oqG2pGgZA3W6l6NR9/awVXLJyT0boVOKQsiwXMbHiZoxewAGuQJK2dpxhyokwi4
IwYRB3BPUFZ3rBppexz+GoEsJ5oKyZsZLMV9U0IZVqXk1budKWWf/LXO+KxdEDE2
0YMRdovylndpT0t7ZWbTZ042VvFtpVL3yuLi672OonSH3yoXZXcr0OxxNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwZnOffJReP231g8kj+EMX35WEEMB8GA1UdIwQY
MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt
ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx
LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCyFwcqS
ToRvctocBwwo2quySIqDFb9wcop+NdBEQnjVx/fYOPdh0H28VHgPNDvsG+Df401M
nMYbMKKOUhkYHQlj3V1CVX0ioE2oy5Z6BiB6Y0Qg8QGQaGsS7DXV1QampOqxxd+4
epYrxIYkzRpuXJCx8vyYGX2la+VSIOAOIk/gB+67XOjFLj6oFSeH0KmVLWsk2Ch9
sVkbYRF3oiSlKo+iHCd0cfj8E/tu4AjI5miXAH+eg7lH/EcQ50mBax/bGIn8xNOc
ycNcG07IpqgnAgos1XH/HvfpEtvlJj76KjxisRHsnxYBiTvA1dwNMhGPwXUoU5YM
MPBKbf2jaTtgPw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:42 2026 by rpki-client