
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json)
Hash identifier: yjEkpKcolNreJZnKPdWYGLZdyZYuCVe55iKqtsKZHUE=
Subject key identifier: 32:C9:AC:7F:13:38:49:8C:F3:AB:F4:A6:4B:4F:36:A4:FB:45:34:80
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 019CAD223C51B5BF2147FDB05AF82AB15EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
Manifest number: 1865
Signing time: Mon 02 Mar 2026 06:00:27 +0000
Manifest this update: Mon 02 Mar 2026 06:00:27 +0000
Manifest next update: Tue 03 Mar 2026 06:00:27 +0000
Files and hashes: 1: 2SgtXArHa91zHSP62V3VxCstPjQ.roa (hash: V4cGQtg2SBaCI8DVoJaqr+ulcrK5fl4LGupKdqP0XPQ=)
2: 2pWoRlgTXbKVX-Pjg4QmOZkMdQc.roa (hash: JZbkKUO0JB2SSX19jfhYYhBc4c8q+WYE6k6SKK4z740=)
3: Ae57O12AoGSXg6OjRfpvqk40IWY.roa (hash: jqB4zbEQVsVqha6FZMRqBv2gE+Oo/oekXl882sDWeVU=)
4: B-5LpHxABUdZLyscoHErjkqyIKk.roa (hash: O/ISaaNiYJWY/Osy259CyKWIm66WcENOZJ8/yUUM18U=)
5: E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa (hash: AM4W95wMVxmufbKvADXIfhnh/oxXBRJzCA12EQepcN0=)
6: G6LlelllmoaLjy6pGMovpp7eiKE.roa (hash: i0/dkXUXtTkS5bDtqW3KTO/a6C0FHwJWrOLBcdXePK8=)
7: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: auCz9v9JDkldloNEMwvlr/+yTacFDR4QKVzIwV4TlAs=)
8: Ooo27uikwPKyN38Vc6E5PiPp16o.roa (hash: ysIkELBvjUmxilhHd/e1/CduTTEPJwJqPubCz95v0Yk=)
9: Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa (hash: PTOGD+XV9y0QkR0kx84XCCF1nWNGNBQ/AqHfSIRK6JI=)
10: R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa (hash: 926NNVMN0dOUlotEee8GGLB2yhZRvKk278w8BXpKBWc=)
11: SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa (hash: R2Ulh0OWrTfBVFa/oSxJhAwaFvEKQ4zUakZOAQnMxc8=)
12: SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa (hash: IKCVvcTAPNdNWxaMhV5j9dp59UVvAETJogxmpd5B1IE=)
13: UgQXPpoAPzzEY23clmnNXDMzKII.roa (hash: wVgI0/jKoNmP2W8lcpq9i62znX0LDf4x7s4+L/CLD44=)
14: VYgE8-UEudg3YNUfBmaafWIWqbY.roa (hash: JxhGY6dK9SUdetgzpCLPv5EvQwiRqHi3C+Rjc1w+Nx4=)
15: VulRC4nGRSWh634vxQHiExAKf1w.roa (hash: pU+A0lUoH6DQvksFwyWjaM1SkQ2OEMmZ30T/nm+6dqA=)
16: WyhDt_oaTKQN4eZu64NsYbZl4yg.roa (hash: 6ciQpQA0xk5YF/RtEahhFIWkqj1pqFVjXnDAnpgxo9s=)
17: YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa (hash: yFLoxqOVICN4QBajonvWQfdIkbyqD9W6GTNUrK2yjZo=)
18: ap_KBBwMetCUgf_yqig9NPG5GpY.roa (hash: 9v8lmt7h/soP3D+lntkITlcRnDn6phDZu9Zze6nhdUM=)
19: ayw9hP-juqBVUYhL4659BWRbagM.roa (hash: GLutlgyBzkV4tGAVG5CwDMmdYLkbefgbgEpP3APu1Jo=)
20: crm5NGlj9UBvhtdc7rwx7uYgEK4.roa (hash: /WaelaooGSkLECOrVgVomhzyK4ipvEXkWosApEiQHPA=)
21: fCPsVmQYESXsIrFzghBdJCH1miI.roa (hash: w0YUnPbD+SIAOv8xIs4vR52GvWAb785T1PJzGOLTe/A=)
22: ge_qG75CaLMKt1s8rP1tYixjlSM.roa (hash: KgSOhN8VDoDw2ctu7y0Z8Aqh13VkWXvib2gbxMkFp90=)
23: if7HhXNRoDw1TnbTu8jR1pBkTZc.roa (hash: 8a3JrsC30tF9jpJNG+DBi1BkDJl3zSelO4aQKYLFjnI=)
24: kB1VAe7IiWttP305SpTIQdMVrgs.roa (hash: 317W73vQ+ktqI7vunTSNBr39CAMFJ4AGWozNVMt/2j4=)
25: lT10uf8B-zB2W7pPHONV8j5w1EU.roa (hash: YP+nZP9+eePypNGYgLu6JQ6qv1UZQzTSxNte2fmvVXA=)
26: m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa (hash: QoWaAUlMFh1lhiMZuHSFJG4B7Vf6yI8ZyqsNOBMC67Q=)
27: n8NL6vGQtAkm4gMaIcDuJBP2IEE.roa (hash: jjvwqzXmoxW8cyo92Sd5PIndz67V2dJl+O50LnTVHRU=)
28: nzTl8UF3p7e9FvS0wb6zPjc4FHQ.roa (hash: gedwjVpwIHP4TjyyTazQknsPogKpR2m/8Qa6aAsv0F4=)
29: oMXKRKWkDw3BU5VHnmmfZczo3WU.roa (hash: 0w07L0habLvL3NwvX3KWEEL46dhGeHcv8F5gRgN4UD8=)
30: pqPIqfuErD5mbtSplqtkA0QY6aE.roa (hash: 6vvDbqxKmpWsHd5Wn/2ZoKbmAa7IUMY34ZPHLrIESc8=)
31: r__WaOcKmtAx8gXbwxmkYZg93vo.roa (hash: dQVWPRytzEKBIkeOfxLsINoVWiI0jdX6igSClXXnN6o=)
32: sfOxzLZiwEG7r5SeUCMuTrf1tvI.roa (hash: ZUuD5UEFtBeOCS9rptJ0iK7dObQgDw9xm9i0pDpXHUA=)
33: uixetmUNITGIE12MemXK43h0QKQ.roa (hash: LX2K4eqH4TnMxGBuhGigtPQYwuhHnTXNUjj69t8yapQ=)
34: v-ikOphb6e29hpwrNQIcQpcHAak.roa (hash: Pq9zDPP4BdGhk0vZiCEnuLu/9tRKgBub5R+cAWgzevE=)
35: w_A8FIo2-eV1ikzinAoy11bKCzM.roa (hash: LSQro8lyduG8gw0AhNa9mNG1JTNi93nM2iVzU2UVVdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:3c:51:b5:bf:21:47:fd:b0:5a:f8:2a:b1:5e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Mar 2 06:00:27 2026 GMT
Not After : Mar 3 06:00:27 2026 GMT
Subject: CN=32c9ac7f1338498cf3abf4a64b4f36a4fb453480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:bf:5b:87:c4:55:b0:09:76:52:94:d8:43:
da:9b:78:f8:0c:9b:93:36:ca:c5:50:e3:e9:93:13:
be:77:7e:fb:1a:65:2a:54:d8:93:59:03:37:05:f0:
21:96:56:57:a0:af:f2:10:c8:2f:c4:c9:46:a7:f7:
d4:b7:33:a4:e6:8f:4a:6e:08:48:be:c2:c0:f1:c5:
7b:47:94:7a:c8:7c:e1:c5:f6:af:3c:f3:8f:da:31:
0f:ed:a0:e5:fd:ef:3a:48:90:2b:ad:0f:16:49:43:
87:e8:23:62:82:4a:74:d4:cc:3e:1c:62:ab:a5:6c:
ee:dd:36:d2:d6:1c:e8:61:0e:75:19:50:a2:b4:e6:
7b:28:88:e9:5d:c3:1f:47:1c:8f:2f:53:8d:6a:04:
6c:81:a1:d8:3a:c1:1c:58:26:65:8a:d1:93:a0:7f:
30:a9:29:35:56:1d:a1:4e:81:a8:b6:e2:b2:9f:5c:
c0:48:db:65:47:07:22:3d:ab:bb:ca:1b:58:d6:76:
b7:74:f7:ed:59:98:5e:45:d2:7f:f5:40:cd:ed:2a:
42:89:58:d6:0b:25:5c:c8:75:36:2c:51:69:9c:3f:
79:49:19:a3:b5:9a:c8:30:dc:42:55:d1:6b:58:79:
27:fa:cd:85:a3:dc:3b:97:f3:19:ee:71:42:9b:3c:
e9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C9:AC:7F:13:38:49:8C:F3:AB:F4:A6:4B:4F:36:A4:FB:45:34:80
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a1:21:02:ec:db:37:ca:c2:c1:c2:8f:b0:96:fe:51:af:cd:
bb:eb:4b:eb:cb:6a:bd:c4:e0:4b:79:5e:b6:34:5f:06:89:8c:
36:60:f7:5a:79:3e:bf:eb:fd:b9:15:fc:dd:0a:13:16:fb:22:
95:22:b1:ea:83:1a:5c:1e:0f:44:15:14:34:ea:73:98:95:d0:
e1:39:41:93:30:a0:36:51:e1:b0:0e:cd:90:88:b7:ce:da:0a:
1e:0e:8f:2a:a8:ff:bf:3a:9b:8e:6e:20:a7:e6:b8:60:9c:b8:
a0:a8:5d:3d:36:f6:18:16:f8:19:33:3a:16:17:59:37:4b:5b:
41:19:8f:fa:e9:05:1a:7a:24:ec:dc:b7:63:dd:45:d3:0f:a1:
c4:63:d7:39:7c:10:76:c3:bd:da:5c:32:7c:6b:7e:02:fc:0e:
75:57:bc:9c:a9:8c:95:23:cf:f3:1b:34:f6:af:2c:7c:db:ef:
67:14:2c:3f:c4:b0:ba:9c:eb:94:6e:3f:40:80:8f:ca:74:d8:
7e:9a:07:58:19:7f:d0:2e:00:be:02:ca:cb:fe:26:4a:fe:22:
b7:39:f6:18:6f:e2:35:3d:ec:b1:7a:5e:a9:de:75:d5:02:60:
4e:c1:d8:f9:ee:60:cf:bd:b9:57:b7:c2:43:1f:5c:cb:0e:cd:
a7:7a:ca:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:37:50 2026 by rpki-client