
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json)
Hash identifier: CKYEaSIJgOi+BZ5VfXHPRuU+AwIqqCcKvsPbdhz8ZmY=
Subject key identifier: 71:27:C8:57:C5:D6:FB:B4:A3:07:6E:3A:AB:B5:40:C6:8D:38:6F:AA
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 019CAD9088221BF4E0C00069DE3B73B4A661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
Manifest number: 04EF
Signing time: Mon 02 Mar 2026 08:00:56 +0000
Manifest this update: Mon 02 Mar 2026 08:00:56 +0000
Manifest next update: Tue 03 Mar 2026 08:00:56 +0000
Files and hashes: 1: 1-9N7F2L3RwSZtMV_bPdtq-DySRU.roa (hash: Komr1d4LITk1h1UtF3KtaC+lC+V2umoREyRfPw1Ik/E=)
2: 1-BlSXqYyBKUdfU94NGff_PAPul4.roa (hash: 5sWUhwz5Gcq5/MhNhTcOvD2uhQ0tuUa+W9GIH9V8OaQ=)
3: 1fRolkRjd-APCzNnG-5bwuoOqNg.roa (hash: uECN6gUKiv+lFioLhpnkI4G1xAlKUZVG1VCjkCRQOjI=)
4: 2F897qCWvfh11SUzKWZ5JUV2vMs.roa (hash: BDm7sSnQsdMShImHFreyfB5QnyPZWja62eMfrLC52Z0=)
5: 2ecqjdvwwVeADzgAXi31Tj-9uMY.roa (hash: PYkuLmF1i/LptCyvK8hoFYIwFZUAA+w8WWm3Jdteb0o=)
6: 3DigKmaWxP-qw4TMo5nSEFFHNlw.roa (hash: SFQibSW8pDXFPKPG5MbvdKYY13AwQ4A4xl349zx1iCA=)
7: 91LDPauwCWQ9godr-xheoc62kZY.roa (hash: pLiJYVDF484K9mWtl+JKcTe0VgA4TfPZgkN8+ZrNjMs=)
8: 9XRLK1OdgukwixTDk2AKzFzTzbs.roa (hash: GCjLjdeI8luwyn1PGNY8s6Ygk/m/2VfxU7ui9AQ53ww=)
9: 9ohNILRN251EJCEOaFSvlOoDNJg.roa (hash: 2WRd0d2oEyTbSuOnacVQb9zr84nnPee4Alvgcj+3gVU=)
10: GrLjV0K1rg-_e4Na2PiEv2R8YXk.roa (hash: 9wH2XPtuxgQ1BMZZEBYsg16k1bgpNYguMty8atBuYf4=)
11: H9OemdXyC7tAgnmNPQ8cKr4kXek.roa (hash: Y6oksDUVORVjfAcT/DowbWJFqVZVzW3cfm1/KNkAcoU=)
12: Jt1l3PmmzdbcYP2rfmhzsDtcPhI.roa (hash: zt/605nd1EgOMLhSVE8EHytRNsfa1q/ziCZNE0ebjzg=)
13: PTZMdAT0hDazMuAsVI3CEFaCfvE.roa (hash: Z9gyi8MZGuuvG1z3xCSCxfacu9FwpO6Pum1TmCZXgaA=)
14: RH_HIlkMBo61W-LSnPnGJ5s3Jos.roa (hash: 7jSM+R7ontglcAC1koxA8s1vIKZN1w9IqBWxZkjEi38=)
15: Y8GAhpOcUIyfO0CyQe49bNXAI8k.roa (hash: 49fIprccRJUVDzFPqcsAmiCiqNfTbqtbpr/g64iaVzQ=)
16: avrcnfB12N6L1uAItV4pxr4ZeBk.roa (hash: UCrkK/t7tVltSG/GoHf/iVcJnaXfqtG/1ac64yo7m4E=)
17: dB24arzswMhE5aMklbuiHLZ-TiI.roa (hash: eC+51qakYDD1QrieIIxwdnOs/PF7+iVr9j/YubM+elg=)
18: hMoYvytTC8MSE72GcaOmUQp55TM.roa (hash: QNj9222JszfBwsXWHLHqGbqHpk9emhsVOXPVoX1Flpc=)
19: ipercfJU5O8E0XasUBHV6tWGchQ.roa (hash: HApdigE0Ka0edSDTXKLYJ8nXJSrgF6YaO6XyN4xCAg0=)
20: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: I5YnEW5FcUvomdJUGENxAe7RFyak3UtvjEv/HycofMY=)
21: jC80DyZfd08kqUPQfGLYtFSpqeA.roa (hash: QkkRAI+hrNUAThXm4mIodhuWyIPzbk15zdb1sYevpvs=)
22: n8ve06NetjX3cW6GgX_HV5n6oks.roa (hash: pimoPjnCHYZaHLokF/bqF6SVdAYfg1FaqRTM5gnZ2sY=)
23: pU_XrlPF8BXSflHv1k6RicQ4hQQ.roa (hash: Zwjahs4SIZZ7mXWd1Naf3bCGTp7nVeEdZf7T1NQzjwE=)
24: r6qKV9nEirBUwP3KmuLyUTNtefg.roa (hash: iWqKDpTKfBVdyUC9r9QWpqk9OSg69kGIRh/unEHarFg=)
25: xJkF66cCvGxEcbXW72kYSvCe9pc.roa (hash: 8ukNpwANOCXSCFQousC6/SlMGWqDu4dvIjSPXAjmXlo=)
26: xQPVpv6oDfVejRnWElQGbmYJcaY.roa (hash: y3RHPAzs8tten2VXnVg+llQRjecqqHar32AXcJuIcWg=)
27: xg0VuiXqoXiww-GJ9D2_ljEA2vs.roa (hash: uA7hO9E7hUzauisNryngMo6HASraVHp6A2BgzZx4YIE=)
28: y78xNtcYu21c47h3KufgEPgZVnE.roa (hash: MwiDwZITS/z04aTqMBZZx2J7qe1RkzKld+egFNWQZro=)
29: ycFTntx4cs4onGaGpj0o47JW98Y.roa (hash: Ttb49ZN4wbdVcFXW70bm/uwe/p5I14QSBI+L4GbrQys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:88:22:1b:f4:e0:c0:00:69:de:3b:73:b4:a6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Mar 2 08:00:56 2026 GMT
Not After : Mar 3 08:00:56 2026 GMT
Subject: CN=7127c857c5d6fbb4a3076e3aabb540c68d386faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:2e:c1:23:12:c6:84:71:40:a8:fb:93:e0:
74:b0:f3:ba:3c:ee:27:82:46:40:74:ea:34:1f:ba:
fc:9b:26:74:51:7d:7b:a7:a9:85:c5:b9:85:5c:30:
d4:a2:c6:a8:ab:09:e5:23:a6:2d:53:73:1a:e1:e6:
5d:9b:90:e8:f1:10:6d:49:c0:e2:63:ac:ac:d8:fa:
db:98:fb:05:ca:cc:62:9b:56:b3:42:29:72:db:e6:
d8:35:53:b5:29:91:54:8d:6d:c4:05:46:1c:80:f0:
d6:86:35:c6:41:af:09:b4:0a:79:d8:1b:03:8c:e2:
d2:9b:8c:de:0e:d9:40:52:4d:91:ef:bc:6d:d3:3f:
54:25:8e:11:45:1b:f2:81:32:68:56:19:fe:13:63:
3a:c3:03:99:4b:67:fd:59:8a:39:d4:d7:24:9e:d7:
b4:91:1e:f9:21:e6:b5:0b:ec:8f:d3:aa:7c:71:9d:
2d:6e:8b:a4:5d:25:0b:19:3c:e7:6e:d9:68:eb:2d:
eb:aa:e7:da:fc:e2:8e:56:b8:bb:ed:f9:af:f0:43:
6e:1a:af:28:95:20:fd:06:5f:0e:44:72:22:97:56:
7f:50:b8:aa:82:9a:50:7c:5b:1b:62:16:8d:4b:ba:
61:66:9d:c6:58:a3:cc:21:28:18:64:06:36:d5:7c:
44:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:27:C8:57:C5:D6:FB:B4:A3:07:6E:3A:AB:B5:40:C6:8D:38:6F:AA
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f6:91:68:11:1f:35:2d:7e:f1:f2:bc:cf:2b:41:ba:b1:f3:
bd:f1:4e:18:63:35:61:8d:72:3a:1c:38:3b:ab:45:72:dd:c4:
63:1d:fa:8f:fd:a3:c7:fb:55:7f:04:4a:e3:f1:eb:aa:a1:f1:
c2:fb:79:0a:99:93:40:b9:b9:ae:3f:c0:c3:fa:1e:cf:98:68:
bf:a4:7e:09:83:83:f5:29:aa:28:6d:84:0a:87:bd:09:81:51:
10:01:49:4c:75:0a:f8:a7:1e:3d:32:5f:f4:ed:cd:5e:0f:b7:
39:27:1d:ad:17:c0:7f:d3:00:6c:24:eb:25:72:96:4a:1d:fe:
5d:68:e5:96:6a:bc:d0:fd:9b:06:03:47:94:ed:2c:84:44:ee:
34:dc:61:86:12:45:6d:84:ea:39:15:9a:1e:96:30:df:ff:c9:
2e:b8:77:5d:b1:ed:e6:2f:f8:5c:00:0a:b4:f2:bc:41:36:e8:
23:ac:59:ab:e2:6c:59:60:30:c4:db:36:f8:a4:69:4f:26:15:
70:fa:f8:fc:bd:ad:cf:60:e6:7e:ae:f7:55:4f:26:32:4e:9e:
6d:9c:6e:ac:05:47:fe:a9:97:46:7c:0f:c3:8e:60:1c:3d:f5:
d8:51:bc:5b:a0:d2:42:9b:e0:84:3d:5b:ad:3d:79:48:5d:95:
63:38:50:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:53 2026 by rpki-client