
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json)
Hash identifier: 0tgfMc1nd9EGkFxJnpKKMBuI76cL2W3VLzq79V3Il6s=
Subject key identifier: 94:94:D8:17:6E:14:DC:88:53:D3:25:A5:64:9E:9F:F2:7F:60:1A:01
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 019D9A74D86C74809318AE0C3389C4C624FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
Manifest number: 056A
Signing time: Fri 17 Apr 2026 08:00:41 +0000
Manifest this update: Fri 17 Apr 2026 08:00:41 +0000
Manifest next update: Sat 18 Apr 2026 08:00:41 +0000
Files and hashes: 1: 1-BlSXqYyBKUdfU94NGff_PAPul4.roa (hash: 5sWUhwz5Gcq5/MhNhTcOvD2uhQ0tuUa+W9GIH9V8OaQ=)
2: 1fRolkRjd-APCzNnG-5bwuoOqNg.roa (hash: uECN6gUKiv+lFioLhpnkI4G1xAlKUZVG1VCjkCRQOjI=)
3: 2F897qCWvfh11SUzKWZ5JUV2vMs.roa (hash: BDm7sSnQsdMShImHFreyfB5QnyPZWja62eMfrLC52Z0=)
4: 2ecqjdvwwVeADzgAXi31Tj-9uMY.roa (hash: PYkuLmF1i/LptCyvK8hoFYIwFZUAA+w8WWm3Jdteb0o=)
5: 3DigKmaWxP-qw4TMo5nSEFFHNlw.roa (hash: SFQibSW8pDXFPKPG5MbvdKYY13AwQ4A4xl349zx1iCA=)
6: 91LDPauwCWQ9godr-xheoc62kZY.roa (hash: pLiJYVDF484K9mWtl+JKcTe0VgA4TfPZgkN8+ZrNjMs=)
7: 9XRLK1OdgukwixTDk2AKzFzTzbs.roa (hash: GCjLjdeI8luwyn1PGNY8s6Ygk/m/2VfxU7ui9AQ53ww=)
8: 9ohNILRN251EJCEOaFSvlOoDNJg.roa (hash: 2WRd0d2oEyTbSuOnacVQb9zr84nnPee4Alvgcj+3gVU=)
9: GrLjV0K1rg-_e4Na2PiEv2R8YXk.roa (hash: 9wH2XPtuxgQ1BMZZEBYsg16k1bgpNYguMty8atBuYf4=)
10: H9OemdXyC7tAgnmNPQ8cKr4kXek.roa (hash: Y6oksDUVORVjfAcT/DowbWJFqVZVzW3cfm1/KNkAcoU=)
11: Jt1l3PmmzdbcYP2rfmhzsDtcPhI.roa (hash: zt/605nd1EgOMLhSVE8EHytRNsfa1q/ziCZNE0ebjzg=)
12: PTZMdAT0hDazMuAsVI3CEFaCfvE.roa (hash: Z9gyi8MZGuuvG1z3xCSCxfacu9FwpO6Pum1TmCZXgaA=)
13: RH_HIlkMBo61W-LSnPnGJ5s3Jos.roa (hash: 7jSM+R7ontglcAC1koxA8s1vIKZN1w9IqBWxZkjEi38=)
14: UCw29YjY3cKmFjpAxHmvqF-bUCI.roa (hash: K5I6bkFEX1PYMGH5TucPKknBQXRBL1MadI7utz2hd/A=)
15: Y8GAhpOcUIyfO0CyQe49bNXAI8k.roa (hash: 49fIprccRJUVDzFPqcsAmiCiqNfTbqtbpr/g64iaVzQ=)
16: avrcnfB12N6L1uAItV4pxr4ZeBk.roa (hash: UCrkK/t7tVltSG/GoHf/iVcJnaXfqtG/1ac64yo7m4E=)
17: hMoYvytTC8MSE72GcaOmUQp55TM.roa (hash: QNj9222JszfBwsXWHLHqGbqHpk9emhsVOXPVoX1Flpc=)
18: ipercfJU5O8E0XasUBHV6tWGchQ.roa (hash: HApdigE0Ka0edSDTXKLYJ8nXJSrgF6YaO6XyN4xCAg0=)
19: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: yjP+KSqJkRlW1s1RyiDwgIMN04waSWSa7hGhro0gQ00=)
20: jC80DyZfd08kqUPQfGLYtFSpqeA.roa (hash: QkkRAI+hrNUAThXm4mIodhuWyIPzbk15zdb1sYevpvs=)
21: pU_XrlPF8BXSflHv1k6RicQ4hQQ.roa (hash: Zwjahs4SIZZ7mXWd1Naf3bCGTp7nVeEdZf7T1NQzjwE=)
22: r6qKV9nEirBUwP3KmuLyUTNtefg.roa (hash: iWqKDpTKfBVdyUC9r9QWpqk9OSg69kGIRh/unEHarFg=)
23: xJkF66cCvGxEcbXW72kYSvCe9pc.roa (hash: 8ukNpwANOCXSCFQousC6/SlMGWqDu4dvIjSPXAjmXlo=)
24: xQPVpv6oDfVejRnWElQGbmYJcaY.roa (hash: y3RHPAzs8tten2VXnVg+llQRjecqqHar32AXcJuIcWg=)
25: xg0VuiXqoXiww-GJ9D2_ljEA2vs.roa (hash: uA7hO9E7hUzauisNryngMo6HASraVHp6A2BgzZx4YIE=)
26: y78xNtcYu21c47h3KufgEPgZVnE.roa (hash: MwiDwZITS/z04aTqMBZZx2J7qe1RkzKld+egFNWQZro=)
27: ycFTntx4cs4onGaGpj0o47JW98Y.roa (hash: Ttb49ZN4wbdVcFXW70bm/uwe/p5I14QSBI+L4GbrQys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:d8:6c:74:80:93:18:ae:0c:33:89:c4:c6:24:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Apr 17 08:00:41 2026 GMT
Not After : Apr 18 08:00:41 2026 GMT
Subject: CN=9494d8176e14dc8853d325a5649e9ff27f601a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b7:c7:21:99:c6:51:2f:d2:2d:32:53:f6:00:
00:70:a7:7b:cc:13:32:6a:1b:e6:a6:fd:71:93:b6:
a5:18:94:43:bb:71:98:4f:d7:c0:52:68:b2:06:6b:
8d:57:8a:ac:99:00:f5:68:df:a1:ca:5c:4e:59:89:
a8:5a:30:76:07:09:06:e7:57:08:17:81:ee:29:2e:
56:fe:7f:2d:c4:77:7b:ec:30:d7:4f:ae:34:6b:60:
50:65:77:d8:60:fb:b9:ea:b9:f9:51:9a:d1:10:df:
19:04:17:ae:5e:e8:c0:49:ec:bc:95:b1:ad:42:cf:
f7:6b:c7:50:7c:89:c6:2f:75:6c:d9:58:37:cb:8c:
0b:ae:4f:6a:60:0a:b0:36:67:3c:ac:59:65:15:2f:
a4:51:71:84:b9:65:c1:ce:0e:66:5a:d3:f0:86:b8:
62:bf:47:8b:9b:32:d0:1c:72:8a:6e:52:bb:32:86:
7f:d2:04:80:93:cc:99:b2:b1:e5:ab:c9:06:77:c2:
86:e8:00:3d:cf:52:12:33:8c:51:3c:a0:60:04:0f:
2e:41:ce:1a:b1:c4:09:be:46:27:cb:6c:fc:69:c2:
cb:a8:a3:b0:22:db:f8:3f:3e:32:c3:ea:56:e8:2e:
df:4c:39:da:c9:9f:51:39:f7:df:f0:70:15:c3:46:
b5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:94:D8:17:6E:14:DC:88:53:D3:25:A5:64:9E:9F:F2:7F:60:1A:01
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ed:f3:f2:bd:c0:7b:4b:04:3b:77:41:dd:d5:dd:03:eb:d3:
1e:52:b0:1f:0a:4f:8e:c5:69:52:af:ce:bb:69:a6:7a:72:8f:
1b:73:f2:5b:4b:7b:df:11:c9:30:95:90:3e:47:89:39:9b:2d:
a8:86:ef:4d:71:0a:4e:a6:24:22:49:8f:fb:52:26:ba:c3:ca:
d4:f0:c4:18:cb:31:8a:78:6b:94:00:76:6f:c7:f9:e4:52:79:
6e:9f:07:37:71:30:3b:71:68:7b:6d:7b:b2:fe:5b:b3:67:8d:
56:7f:1b:48:80:44:f8:8a:0f:ed:5f:33:f8:b1:b8:8c:cb:76:
44:98:c5:cc:86:c5:37:59:93:91:d0:8e:02:30:18:b4:59:c7:
fd:d6:b9:2d:28:3c:05:d3:99:e2:1c:cf:89:2c:b0:4d:79:e4:
81:4f:1c:0a:c4:ff:f0:87:03:99:2a:23:a6:1b:70:f4:bc:a9:
af:4f:9d:30:db:6c:76:01:3c:0e:48:5e:6c:cf:65:f0:fa:03:
95:66:1a:9f:88:0c:23:0c:d2:5b:52:b5:ec:73:d2:1d:f0:8c:
bf:a1:08:af:ce:82:a7:07:7c:17:a2:54:9b:5e:85:62:25:b7:
53:57:db:d1:99:53:ef:f7:11:53:62:b9:e9:54:be:1e:ef:e1:
4e:53:0d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:07:38 2026 by rpki-client