
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
File: tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json)
Hash identifier: Hlxw5k1CkNEUdGffDQhvK0w4qI+YXLFOlPEoFPZNaOE=
Subject key identifier: 35:1F:7F:C3:9C:4B:6F:27:A6:5A:D9:D9:E0:02:3D:E3:D6:37:21:0D
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 019CACB4CE3A2B11796C7085640EE0DD10E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
Manifest number: 103F
Signing time: Mon 02 Mar 2026 04:00:56 +0000
Manifest this update: Mon 02 Mar 2026 04:00:56 +0000
Manifest next update: Tue 03 Mar 2026 04:00:56 +0000
Files and hashes: 1: 1-qgyilt4mW5S7R3DpKdq7Oz7i3g.roa (hash: p4IRMRrJZgnKi2WdlcOaJkOpKGoVzi49HMW6WN0NrJ8=)
2: 8lzOqg36QfNkeg8Q6Az_2mhb-pY.roa (hash: W0oPaRSAv7Mlqt/bxzWLXb0GBYOFj3ar/XeEXfhCbx8=)
3: QViCpxHL7TeWgNCiZk4rKUO-8KU.roa (hash: lHQxRnJhPCjs1WHfqXj6jxi3Fa+6Jf53oEHyU2j2aik=)
4: iy1Tvz9vWB_OyKw6kX0SPKuwaMg.roa (hash: f91SOkfNEhx8xn/tAVUdyzoJrhGRQTUbnnTsdxKuQ64=)
5: qI_-6h3iudeXwj_KCEW7jVNBeSs.roa (hash: VCf8NA7/YCd9pNMoP3NeZ5lHDYrKSJzJ143pwqaxHAQ=)
6: t636B7CqAadftoFod7ybUNJhQPo.roa (hash: 181NFYC4u/sBirqlh2IrjbcRctznL7BS4orIUETkT5g=)
7: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: a53xQZIo8aztrTvB72USWvIuOpuD2IGyfOd+gMWEN48=)
8: ws_lvviOWiUn6-n1_mvWXNHp31I.roa (hash: 3Nbd+pvEno+PaE0bZIzANyUWQU5DEYEW5i11jMtE2XI=)
9: x8JpwXfRjntSd4pmuLKwDDhw_i4.roa (hash: OFNInH/Vi9/sinG5vzHXVvidAVrgK9tFLxn9nt+UYfE=)
10: z-6izIL2te2yW3BZT-W-LC6HIiI.roa (hash: g0guTuEhCvQ3u37wIf97G7PMhPvKG3UAOrfC4DGjbl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:ce:3a:2b:11:79:6c:70:85:64:0e:e0:dd:10:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: Mar 2 04:00:56 2026 GMT
Not After : Mar 3 04:00:56 2026 GMT
Subject: CN=351f7fc39c4b6f27a65ad9d9e0023de3d637210d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:d5:62:9a:3a:68:ff:40:4e:5b:a9:ea:7f:
07:2b:19:70:b4:a9:9c:3b:6a:c9:4f:17:fe:51:6c:
ec:e8:48:de:2b:3c:4d:b2:a3:83:6d:11:86:d5:6c:
3f:a7:76:86:9d:f1:c4:6f:21:5c:6d:9e:6d:d1:45:
83:fc:1c:ff:a9:34:f6:78:40:ea:0e:c3:2c:32:08:
9f:4f:18:73:a7:3e:c1:a4:e3:98:60:12:98:56:84:
5b:ab:b8:40:0f:e0:25:41:63:d0:b9:ea:36:c5:87:
8d:f7:24:81:09:4d:df:96:d5:22:c7:25:bc:2a:6e:
10:43:db:bb:9d:a5:ae:01:3a:4c:c7:3f:41:f0:4c:
bd:96:2a:6e:a1:ec:da:ac:56:09:33:25:44:94:53:
27:ab:6c:59:6b:20:03:77:ea:03:e9:5c:7e:5e:97:
ed:54:10:70:7a:7e:a6:ed:a5:36:ce:82:eb:d5:88:
6e:76:93:69:46:be:d3:f7:46:32:bc:e1:d0:bf:69:
92:7c:7d:a9:d9:20:16:64:39:06:62:23:19:ef:78:
4b:72:cc:9c:3c:21:b3:c3:ac:de:41:b8:e5:71:b3:
0b:51:7e:6e:c1:12:c0:3c:4c:33:76:53:70:7e:1b:
80:42:b1:e9:da:88:18:e2:86:6b:a1:a4:fe:19:cd:
27:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1F:7F:C3:9C:4B:6F:27:A6:5A:D9:D9:E0:02:3D:E3:D6:37:21:0D
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c3:72:27:03:e2:3d:06:c4:1b:26:4c:b0:4c:fd:33:f1:3c:
37:b1:14:17:33:d4:ad:19:a4:66:5d:44:7e:2a:5a:44:ff:3d:
96:1e:04:62:21:5c:88:1a:cf:ba:d5:f2:cf:f8:e4:22:92:5c:
9e:00:22:2e:f1:50:40:ef:6a:f0:96:f9:77:f1:5a:0d:55:bb:
46:30:ff:a2:1d:0d:31:54:52:80:f9:4f:c8:dc:2c:67:40:0f:
e8:39:2b:36:fe:4a:26:36:db:b1:0c:cc:0a:e8:4c:fe:d9:a9:
bb:2e:dd:a8:64:33:e6:14:0a:b5:67:df:89:b0:6d:d1:f1:6e:
03:6c:79:be:2f:ae:3d:db:26:b9:64:e5:ea:b8:78:ae:3b:a1:
42:71:f7:e0:f4:7c:ce:64:4a:47:3f:d1:3d:e8:0c:e5:a8:80:
60:94:3a:04:30:b3:3b:cb:ef:63:6e:b8:ba:6b:7f:51:96:fe:
14:5d:6e:9f:80:39:42:8d:99:2c:98:fb:d8:c1:ad:7f:7f:33:
50:49:70:67:69:5c:39:ad:4c:13:6c:2a:ce:09:10:84:de:26:
ce:26:50:86:ad:dd:f6:9c:ed:bc:83:02:ca:eb:b2:51:0c:1c:
10:bc:52:4e:9f:e3:75:fb:17:1c:35:39:13:d2:83:40:76:ca:
22:c6:30:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:17 2026 by rpki-client