
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json)
Hash identifier: WCNjRX8wmMDdZ2Qu+4sljVa1Deuz03ebeyGCDz08/cI=
Subject key identifier: 3B:88:A4:29:96:DC:BB:E9:6A:57:37:53:89:8D:5E:13:8B:D6:0C:D2
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019CAA58BC6035D33EA6C617028157D565A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
Manifest number: 14E5
Signing time: Sun 01 Mar 2026 17:01:07 +0000
Manifest this update: Sun 01 Mar 2026 17:01:07 +0000
Manifest next update: Mon 02 Mar 2026 17:01:07 +0000
Files and hashes: 1: 4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa (hash: 1+Dj9DjkqqJBKSFukY3ZLUFpE2kBLC6OJYlV3ZzlDHE=)
2: 51RV5bLUK5swpjii_ClMr0Z0LK4.roa (hash: eaEFcr3Fzwqgey9xkzHTc526Wfs17vHkTkKlWZDr6V4=)
3: 7Gfdl5k6T4Nt-xZrQUmYT2Wb0Q4.roa (hash: praaG5V4IjeUDRh2H9CpWs4rx+iMgs/zDPv4j89TbtU=)
4: 7meu7s1H44zdKfP25MFBcQbtGHI.roa (hash: WvFf3T5R9dDcoqBxFhAiq7tVRoIpj2LekmR2mNGzL1E=)
5: 9sk7o3-J1zppXpr20oFx7pS_U0c.roa (hash: pBXnQfzjUWzJ2ZBcFMKN6xODjJ4zYHByfhzLBkNvrdQ=)
6: BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa (hash: Q2q3HL2ikSVxapYF8tEqUbGc2dsp+tUqOuJvpkTfgSw=)
7: DpYS7lRrillfu9K51nCIniTqNmY.roa (hash: UkQwWYpXy7K/OwHNGaKai/nAfoWeLWXYqtRRe4F8mQE=)
8: EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa (hash: ZEu9nOF1kbSjWSpE4NcC/VjSw7SsIRZ4h2G/ZSkfcXA=)
9: HxGP4RyCdmbtsC_X7rEOMPaadGs.roa (hash: E1pPUcXW5mPkpSrQhelqafY4OsK2tjQxSmKWda1vbOE=)
10: IFlrGlpmIktdxpOhrR8xYveUsbg.roa (hash: n6YOE+skPlRQCEnNvMFsjoFLedlTUeiE/VC0h2vyyho=)
11: MZUJ_YtPrARksG8JiNeh9h5bxjU.roa (hash: gULv6+Niu5hf2ZuzY/CCoAvGjaEsELBZ6B3Mi+f8gPo=)
12: NNB2avyCldcIMCL0f0MRWjsmPGg.roa (hash: DEfqSuvzloP85jcJKk7ZgGBFiOXRfF0MqFeO19BqKn0=)
13: OvQCPbU7xaexN6KNG98gTxBlPZ8.roa (hash: B+7vMRgtRKWIYiyObWJnR9TPAurOqhLva4J/rVDJQSQ=)
14: QLLq3_7q5uUt7ipkpQL0iFrZcwE.roa (hash: ix8UNlXwntzVUKkNrdwMiCBgS77GVr+qjV/KIZeeGps=)
15: RSlrMSXsYQqD5_X3qdeusHBjTV8.roa (hash: rm68bm8MwPNoLfEzVKTjK5KhGKZaNdAMKVt15UbeVB8=)
16: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: mnIV1zJHpmhhIV8wxfbirJnO1EgGyT5TC/s3/o5ET94=)
17: WXitulZE6XZAWLN9EH7AUrKlJFA.roa (hash: WUGgSZ27pj+bCnK3yWkRpPdHgH/Lrga3crrfT495xGI=)
18: ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa (hash: U8GSnZZoap+4gf9xVbyRxlPJkgOVmU3uHH07WIciOyM=)
19: _XErDvpFkzUya7trCS2vLYDjQlo.roa (hash: Yns1NKHmZhWUbTECwAzkHx9Sc1oUfRWEA2tFejiuDu0=)
20: aaHpIpUNJCPLemmyB6IfQXXyPEE.roa (hash: OldkvNHI3e3Xq22g7tLXVjk3zVZxwtRnCQyVA3M2gx8=)
21: bP0DL2QAJVKBhisPOEKSCrb5P7I.roa (hash: SSq+LObEvTskeEChP41dHP/d10Dn6Nt47PhXiubra4Q=)
22: fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa (hash: JpN5XVDZY1IahuGnYijyyeq5BW4QE/s6DEijCb+GpS0=)
23: fbSoKsXWu3vMu37siMiY-wAiEWk.roa (hash: o2jpBV54JiENtAI5H5hS+86ge/vbtsQ6m03B1UpGa2w=)
24: j4qiTlmyE2UTELOd_dWPpgYgT7g.roa (hash: tL7gSkajUFv82zTjqwfcJA15HYbXtYeZkwl/AW0YDBU=)
25: nrPLRJPmPFUNnRKVYlt5xynJqbQ.roa (hash: I11fElTQunbRvyiT3+4v3tCdsssjfQCu5kwVzj1TuOs=)
26: waLcrNH7uHQklmGVHpfmCMZcL3o.roa (hash: G6P6bFBr2kZHKhtwrt4aC293o8D2o+Zw99eQaBr2bOo=)
27: wsRgR45KaT49poTA_W1Ls5MLbfs.roa (hash: ViM4U6kU9YALqeWbdS/cNkJpeVULZz246+oAFPxJ4Yc=)
28: zRZZ6UwPjjxw58VaB1rpkI5mlKo.roa (hash: n+9o/e8utiREiQm1EccaQwJdw3Xtg72tou+ySQuFAbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:bc:60:35:d3:3e:a6:c6:17:02:81:57:d5:65:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Mar 1 17:01:07 2026 GMT
Not After : Mar 2 17:01:07 2026 GMT
Subject: CN=3b88a42996dcbbe96a573753898d5e138bd60cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:2f:4b:10:19:d7:76:f6:e7:37:2f:3d:3f:
a7:9a:e1:e7:76:52:7b:52:22:19:f5:2f:bc:ed:51:
dd:e7:33:b7:68:de:f7:fd:9f:0d:91:eb:74:90:23:
bf:e1:6a:1d:fb:90:42:18:ed:4d:74:fd:dc:82:91:
c5:3f:e0:62:57:29:21:4f:e4:10:42:ff:85:63:4a:
47:a8:32:5c:57:1b:02:9d:cd:e5:4c:58:e7:cb:bc:
14:45:d1:6c:df:f3:ee:cb:c6:81:aa:21:8e:70:8f:
cd:9e:d0:2b:d6:d0:dc:7f:7b:53:01:97:df:e4:09:
7f:d6:a2:eb:3c:f0:71:9c:58:4b:45:ae:f4:e9:e7:
7a:05:a1:30:e6:cc:74:5f:9e:4f:c6:bf:20:b9:1e:
b6:8d:fd:5a:01:b8:b2:cb:94:a6:27:c9:1d:f2:fb:
36:d7:da:9b:ba:fb:a8:75:ac:d0:96:94:4f:4b:8b:
0d:4c:4a:29:22:94:d1:ab:18:d3:3f:ed:28:35:67:
c0:98:e1:3b:21:4c:cf:0c:70:5a:03:9e:96:61:0e:
24:33:cb:81:0e:8d:bc:8c:11:bc:5f:70:7c:ef:19:
47:1e:44:8e:ed:b4:94:eb:8f:3f:07:28:63:09:18:
43:58:d9:0b:3d:bf:2b:0d:35:82:c1:cf:f6:62:15:
a4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:88:A4:29:96:DC:BB:E9:6A:57:37:53:89:8D:5E:13:8B:D6:0C:D2
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:97:4d:41:20:e8:ee:a6:b1:a0:59:81:e1:d0:a1:7b:bf:7f:
82:80:f5:2b:23:8c:3b:78:7b:75:e6:c8:85:cc:d9:38:b1:19:
33:79:94:f3:d6:60:f1:8a:f7:f9:39:76:e0:b7:4a:09:3f:23:
ec:10:79:0a:93:22:44:b5:d4:df:b4:10:f3:c2:a1:cd:82:7e:
21:ca:d2:0d:30:07:77:5c:98:99:10:c6:10:72:dc:2e:70:86:
4b:d5:d0:02:d0:38:24:83:fb:a2:1d:04:16:b6:29:28:be:42:
48:3d:3a:7a:31:fa:0a:17:d2:ff:3c:99:d3:57:36:de:83:16:
54:cf:dd:71:43:4f:b5:72:51:e6:95:3e:49:3d:cb:6e:38:06:
fd:b1:9e:ed:62:9b:13:6a:66:14:9a:42:d0:c9:50:42:eb:1f:
e6:ad:f6:a9:7b:9a:35:66:cf:9a:50:f7:c4:a5:d6:84:a2:50:
90:79:3d:d9:a5:0b:d2:c5:1c:2b:0c:a8:9e:56:85:6c:52:06:
38:6f:e6:dc:90:82:21:2c:1d:06:e5:d5:ed:00:cf:db:20:3b:
7c:c3:b2:b1:82:62:b2:c5:16:fb:bc:ac:90:24:fb:d8:5e:e7:
da:32:97:01:0f:d4:28:49:3b:53:1a:cb:cd:f7:1a:71:74:03:
ee:90:2b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:38 2026 by rpki-client