
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
File: X-U8C_w8j7VrgRkTFxREQ-DinSU.mft (raw, json)
Hash identifier: YLEh7xUBrxXen6xu+a3WtyPNB3tPouPf/lIIypYlh3k=
Subject key identifier: FB:7F:59:02:7B:12:F1:53:84:12:5A:E1:FF:3A:66:30:EC:1D:CA:2B
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019D9AE27A7893C649D71216B9C22C038BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
Manifest number: 011A
Signing time: Fri 17 Apr 2026 10:00:26 +0000
Manifest this update: Fri 17 Apr 2026 10:00:26 +0000
Manifest next update: Sat 18 Apr 2026 10:00:26 +0000
Files and hashes: 1: 0fI4wmdGOQ1kLuvv1qHiK0C--L8.roa (hash: Z+X5uR9flAhy3leFkC+AcvzMmGH3LvnP56qA4XdH7UM=)
2: 3VIMZ8DX4eUWXSvminbUlyeNEUw.roa (hash: SSpv+TbecMgtO944rstKTobME07WfytXg2M37HTXj78=)
3: 7-fcecCADE3U-sFzG8ILpOZcTNA.roa (hash: He4j1Bc4iblTKh3pfPYeLA7Sa/2BR/CrS+vFG8xsRmQ=)
4: F48haJ2H_k3DeYlChLBOz7cW17E.roa (hash: biY7BtRxv+gbBOGOV7n8I87u8jvEs3wti0HPY5wJoaU=)
5: HlmZWhQKKZe7LbyNd19F5rOhw9c.roa (hash: Jouu85rdzqcnP2F6Q7QfLS0eE3v/NY3xgKHeYPAUq20=)
6: HqnftrYyJ1yAgfQwEdd5tsHdCfE.roa (hash: jbicct1WtkpH6m3I8jzSkrKJ8f1H+aOQwTwlTyII9Ss=)
7: KdCMLhhg2r8eMBKwq8Ds2bmqX7Y.roa (hash: efAG/Ph6arJLhBGmrTyKEVKSnEt8hq/UMiJWsX3vnIE=)
8: QPDNMv8lX7bUt4nPdwHeA5HfnUQ.roa (hash: k6bNCAHfEq3x6Q2sathuq/6NaJan2lkjLan8SrtjCpQ=)
9: SC9MOMjrqmbOVAWcGnRcQF-RFqE.roa (hash: eQcJ+zf8+aHLfgfb+8QPSi/V+ow88wMOF3ndX9/Y9o8=)
10: UvPg35Yq3xMNtEBqghSE5VE5mj8.roa (hash: 9QZpYhxGtro9euVy7VMeIu9Apq5BDEIjw+5OY/rh3BA=)
11: VIRIBaeDi9FKsAL_fCNMmt1vRzA.roa (hash: mQNuFv6DL/tK4Jv3VTTp7dDCH9ph+EVHTIMDEF2GhrU=)
12: X-U8C_w8j7VrgRkTFxREQ-DinSU.crl (hash: xXL4rjc4TMHN/YLmvAgnKh3KI2dAuQIlIbvAedR5HMk=)
13: XNxe3vKUfc2mnoWqox5hdUzD4Yo.roa (hash: HP4Xiz8TLDUV4ayqkQKwJotOB1HZtnv9lMiJdjw+vlA=)
14: ZfXj0Cs-w3tqd3nR2H1CQe4DSjk.roa (hash: R+MPHlzGGciK9ag+NGwWU+mFvTI8dUefoBQsCIk0KTk=)
15: _k8DEzrDGMjX2okhJZaU2LT2oz8.roa (hash: iuLXJjc5QDiQTjCx5usBxr4B2lgrFRO7LDfUsbNnhrk=)
16: bgaW-821yLoSyNN-uIV8dLZ09Fk.roa (hash: cVScBzeCdeTPlvYnxP+yGRvQaD/vw3vWP67W4LQOLvo=)
17: ea1PNMjRMSZJp8pxkX6qg7pBE14.roa (hash: xPfJVkhfWlrwWR9LWQpxFCZAhIrsduco0ivqj+s8DIs=)
18: g87odO6LKbYtUQhiItIdJuDDOv0.roa (hash: ablxnUHmYfcNIwf2Jd68koMELTWUoB6TggOKa1sqdjM=)
19: iMbX4smKa8xJf9yLd65uHTTnGv4.roa (hash: Nms8ODr2zFhV2NVPgp1SUssbIbV4l1sf+VhlDMzk80A=)
20: j0uoN5YBgi_2OLXJRM1IqthbMEQ.roa (hash: QPkEQUvlMIbZJ7e0t7t/pBbggGpASfcrKRBQTf261vE=)
21: lrweZiSjlgHqgBNyk5JF5iC3jsU.roa (hash: +2TCUIQ339e21cgXf4PNZFT2eloz8XQMUvYOW8cr1IU=)
22: m7L8GdBSJuHsneaCtMC9pI2g3BE.roa (hash: 3YAZliRjuOyVqU2J+wnklyVi5UbfdetsxH5GTzeE2T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:7a:78:93:c6:49:d7:12:16:b9:c2:2c:03:8b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Apr 17 10:00:26 2026 GMT
Not After : Apr 18 10:00:26 2026 GMT
Subject: CN=fb7f59027b12f15384125ae1ff3a6630ec1dca2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:1d:fa:87:e3:1b:ed:6f:03:e0:44:ca:a6:
6e:fa:e5:29:c3:6f:82:c6:92:b4:70:36:36:2e:86:
09:0b:f6:71:b9:1f:6d:1b:27:f8:23:8b:cc:7d:5a:
de:8c:55:c1:de:85:b6:21:9c:be:48:64:31:23:01:
f0:18:35:5b:6b:99:ef:8c:f7:f2:72:eb:03:19:df:
61:c4:56:5e:7c:81:c7:c2:6d:48:e5:f1:87:da:c0:
50:8f:4e:2b:4c:fb:ce:18:21:2d:c3:29:3c:90:70:
a9:2c:03:ed:70:be:42:6a:f4:16:bf:08:c8:93:a8:
98:97:c6:84:6e:35:b7:13:25:9f:c6:94:fd:20:2b:
88:2d:28:66:d6:a3:1b:e1:d6:ba:2a:68:9c:18:30:
44:5a:3b:94:ba:aa:75:e7:ef:d1:ee:ff:46:34:2b:
f2:d9:a9:47:fc:a7:66:88:35:b4:63:3b:60:f7:1f:
a0:ff:8e:4b:ba:b9:7d:66:9b:3a:a4:f5:73:0b:0c:
ac:61:24:13:e8:58:74:dd:7d:39:f6:a3:79:18:8d:
49:4f:e4:0b:e2:90:17:af:28:e0:65:37:fc:4e:c8:
d9:db:f3:df:b7:fb:3e:24:b0:96:53:61:1e:5c:26:
7c:91:77:6f:df:16:f5:9f:18:43:63:65:45:cf:a7:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7F:59:02:7B:12:F1:53:84:12:5A:E1:FF:3A:66:30:EC:1D:CA:2B
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:68:aa:38:44:f6:7f:6e:ca:5c:0e:16:57:e3:50:05:a9:66:
c9:24:76:4f:ec:d9:e4:64:0e:53:c9:df:cf:6c:23:9e:cf:5b:
29:35:b5:12:70:0b:64:bf:9d:8d:61:7c:2c:6d:a6:f0:03:3a:
8b:62:60:29:27:8c:93:f4:f8:4e:07:97:09:7b:99:39:21:7f:
7e:ef:fb:89:87:5a:fc:20:29:bc:08:94:66:db:8a:d1:77:33:
bb:37:21:f5:69:6c:60:48:38:8f:73:66:44:be:07:2a:f5:87:
7f:b7:d3:8c:e1:a0:70:85:f6:a7:c7:e4:8a:ed:ee:58:68:9b:
7f:06:ec:cd:f4:05:4c:61:63:ae:a3:dd:2f:a5:b4:af:3c:10:
a9:ce:55:ad:76:83:8f:fb:77:19:a1:14:49:5a:71:ca:26:f9:
04:88:16:c2:fe:8c:45:be:fb:45:0b:6c:bd:c7:11:5e:a8:63:
4a:71:88:b6:37:90:54:ec:96:97:76:57:2e:43:61:d9:13:b2:
68:ad:60:89:54:54:ed:6a:c9:5c:36:b4:2c:d6:00:e4:b0:62:
16:35:7b:0e:1f:40:77:f9:6d:89:1d:3c:d1:9b:ce:d5:64:54:
d7:41:76:07:ad:d9:ab:51:6c:43:f4:54:f2:3a:35:c1:b4:7e:
16:66:02:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:15:54 2026 by rpki-client