
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json)
Hash identifier: bsaGR2FmRTgZBWafkjIdFioOCUGHLJMs3MINhbPtJtk=
Subject key identifier: C8:17:CB:C8:55:3F:AC:1E:4C:39:11:C1:74:93:D6:85:60:A1:98:07
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 019CAC7E423F13444AC54A3FE1DA3C13B20E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
Manifest number: 184F
Signing time: Mon 02 Mar 2026 03:01:21 +0000
Manifest this update: Mon 02 Mar 2026 03:01:21 +0000
Manifest next update: Tue 03 Mar 2026 03:01:21 +0000
Files and hashes: 1: 1-2ntxM7Wji529DJOYLflZIRfZ3I.roa (hash: LLb5LuZm3YOIGsTuGBMZEbvgAboSLWz6Cy6RFfdyMpY=)
2: Ab10LIDLRTF0PMThWTZR2XKCPUo.roa (hash: gOUOA7HUeObMo1sz87FojtFMHZKh1H5YBLGoqzYYHas=)
3: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: u4O+54LlITdpl6fJABd4JgPprsJii9alAj5nofG5efw=)
4: WKvQQ0vKtpL43A08LcaBXTbj1kM.roa (hash: PRKu/DhDcwlsm5Jxqp2u00fHvQbqCeG7Bd2bm+dr5Ag=)
5: WYkkzBha-wTT67Gvhww1_FOg7QM.roa (hash: S1GPXGttTr/+ACoT1bs3TKRF2XPsfPAL0AORzGoCF9M=)
6: fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa (hash: W2tlzy8p7bFGP6in7P36ocCzYFzrqqDwRCFH7LaoTu4=)
7: hatB16DXDw0_Vm1ySuNMj5Y6auw.roa (hash: hVNkkdPmq+q7XousYHRGOebUzbj6zgU5nS/86C8jF9A=)
8: jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa (hash: vtEwLtfqW4qkmELJWjSf6WMsJC95aJI8yky7ZJEN78k=)
9: lWZWuIJZ3q5_hVt6znDikSoBR3M.roa (hash: y85mPvpTXgrTdx2E8ZlH0eaEQJTPz5/4CbPHnZc0y/0=)
10: lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa (hash: DrSW8pSYEFjTMNFurufTgFjckkn7K2mmqSF0WbWEz10=)
11: vJQ8eWA9gitpdTEogU6FKIxSf4M.roa (hash: c/auuaX6uZTawydsm3NxKIP9OAI41TsWcjh2cXjpviE=)
12: vuBbsDJkWmoNnQMaSnTKljEK9f4.roa (hash: v05fmL1UJXoi2B7sFB3rnj4EDXcUe8R7u6fgG/Bd6XI=)
13: zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa (hash: how96F3OMhXkq8E95kXfSQSmzCi80yeTXVsw9qWAjXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:42:3f:13:44:4a:c5:4a:3f:e1:da:3c:13:b2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Mar 2 03:01:21 2026 GMT
Not After : Mar 3 03:01:21 2026 GMT
Subject: CN=c817cbc8553fac1e4c3911c17493d68560a19807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:b7:11:95:17:1e:5e:3e:d7:78:11:9f:56:
5d:ac:4d:c9:b0:99:ca:f5:c6:04:98:60:30:3d:31:
78:60:1e:c8:57:9e:e6:cc:a1:3d:62:7a:4e:72:c3:
d6:9c:0b:29:ee:05:6b:5a:c8:3e:f4:09:d9:83:ed:
3c:23:c8:ce:0a:10:26:96:09:4f:f9:94:f2:8a:65:
4b:e1:30:e7:84:dc:20:c2:04:39:df:12:89:69:00:
a9:7d:ed:1e:b8:9e:08:2c:d7:08:24:c1:c7:40:fa:
1d:d2:54:15:f7:20:78:c7:ae:ad:67:8f:d7:d8:bd:
97:e1:0d:a0:c3:0f:30:d5:34:a8:c5:4a:00:82:61:
90:4e:8a:cb:ee:81:61:4c:74:b3:91:49:37:75:80:
74:10:2d:c4:90:53:1a:6d:3a:5e:99:bc:9a:e2:1b:
41:df:64:60:fa:24:0e:81:ef:39:42:a3:40:1c:a6:
ad:da:d2:41:0f:b5:90:8b:85:5c:5b:d0:25:32:a9:
95:42:b2:22:c6:e8:79:9e:b9:ef:78:be:42:4e:a8:
b1:3b:55:fc:64:03:b8:cf:05:fd:09:c2:15:54:82:
f8:2c:9c:e8:fc:03:80:10:60:c8:9b:50:2e:58:0a:
b0:98:5d:3b:c8:5f:dc:e3:64:58:f6:ad:14:9d:aa:
d2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:17:CB:C8:55:3F:AC:1E:4C:39:11:C1:74:93:D6:85:60:A1:98:07
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:81:24:9b:78:a3:48:28:06:9f:f0:a3:18:06:27:97:e4:10:
a0:9d:bd:57:4d:48:f1:9c:5e:58:81:fb:6b:ed:5a:b4:5c:3e:
71:5e:b6:d8:f3:74:c2:9d:b4:db:4d:d7:07:26:95:92:16:e8:
5a:e1:e0:18:2c:6b:63:4c:22:1e:af:42:60:63:33:84:2c:2a:
85:8c:f0:20:9c:6f:ca:86:67:33:4a:d2:4c:32:36:ed:0e:79:
f8:d5:46:28:eb:f0:76:fd:8b:18:16:7d:c4:96:f6:55:a2:23:
35:b4:bb:b2:ba:0b:f3:be:3f:eb:ee:a5:93:63:c4:2d:ab:91:
43:87:ee:4a:86:e6:70:d4:30:7d:dd:04:d5:fa:f5:e3:86:a0:
cf:7f:59:a9:8e:04:3f:a9:0e:6d:c3:19:c0:49:28:78:69:86:
2d:c5:74:c9:09:39:e0:7e:7c:40:0c:38:d8:2b:cc:bd:8f:a4:
8f:88:44:59:9d:26:f4:ee:c2:c5:0c:37:f4:37:de:db:bb:da:
35:26:72:d6:23:6a:b8:01:3e:cb:0c:f0:88:79:b5:ea:97:e3:
5e:b1:e3:d9:7e:96:74:fc:b7:7b:d7:40:6b:42:40:4e:b6:f7:
72:23:64:e1:fb:0d:dd:e4:54:3f:50:68:f9:d4:47:ec:48:fc:
d1:eb:2e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:56:48 2026 by rpki-client