
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
File: pgzudYLpdZvgFskxqzTZKF0vyLQ.mft (raw, json)
Hash identifier: rz627VkGVlkkA7+OgDIsvOjNhLcsXWruDEskCUCv0HQ=
Subject key identifier: 0A:01:50:D0:B3:35:4F:53:8D:65:9D:13:07:07:45:DB:28:EE:00:F0
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 019D98189DD80BBDC30AC875D2BB25EC4E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
Manifest number: 030A
Signing time: Thu 16 Apr 2026 21:00:43 +0000
Manifest this update: Thu 16 Apr 2026 21:00:43 +0000
Manifest next update: Fri 17 Apr 2026 21:00:43 +0000
Files and hashes: 1: 1-QpEsL_AtML3ScLvBXvkFT8qJ80.roa (hash: +pcA6aIuMEkhsfThQ01/KfIXIckOnFaz60ouEEzocyo=)
2: 3fS5dP7sG-xvFMbBP7UUi0eUUSk.roa (hash: pz2rG+hBKqBtyp01TUwFPW7c8W6AKlPJM3L7dBpBCVg=)
3: 5N096s-nFOH4_ZBqCouMJS-TbiU.roa (hash: Hh9HPS5FHpAUp4ixlEmsdD6a/vJqjzSz9yCpNR0cnOs=)
4: AEmrEvTl5nZilDd5lyZaWGwH9Rk.roa (hash: PtBxNCrF8QX0P315dOs4ZmrXEvyhJt7cb+0UMIIHYW4=)
5: CiOsTyFL2d40vTJ0m9LvEDBbyFI.roa (hash: VtrIAitong9umQO4BUpXCYiuBJOk+XfuDXmVgwoHhXU=)
6: DTFBVkNmjB6PhyrTaLTWnml2VXw.roa (hash: g4SO01LxYc8TpYd25tyes0oCoTRef/gNrpZdhyO//98=)
7: Eja0CE3ZxbDf7o-_WJU2Gi-eewc.roa (hash: fP4z0QfDdb5/q/K705XT9QrkxFFgOo2XV/DFWmhk+oA=)
8: IdcY3v8c0CZDDmi3STdilJPAqYA.roa (hash: MtpvUlKM4NkKs2dwWGucxHDKfkZ77Tg0i1COdRQImog=)
9: WIxhLEYJGDRzvi2YQPkejSnZcyY.roa (hash: IQv8lDCReAIo1vSxymiyMrbwR8Ln0jB9PXL5wzjZ1uM=)
10: WMJW8PYFLwejvXuXLZdPSAFJeBs.roa (hash: K12FYnuwBEd2xhuCex9yO/lOKeYGEYVxhKuR491paWw=)
11: YGgmrBWdNr2gr-PCb7IviufXu1s.roa (hash: XCRz3ie5NHXPDBJb939GkB0ydCGEbtQ+g5/MkaAJQ/w=)
12: _xmWsoblg-srepf2TBlEaVdiPKk.roa (hash: SBm95kG9MVfOfU1RVM03bP0Do3XJkhBWqnBtVJgoGS8=)
13: cngSEETmst842JVqCMuJdzGT1YQ.roa (hash: +hcoS9Ai/ANXECo9DMi3KQohP9rUHNrlLQnH58O1SI0=)
14: demNlliFBXRCd4_BO7uGvr9OBWs.roa (hash: 3e0uS6Ngag4AQ8UkZJyAtJ3ajUAIc6mhDPE4a8UAS9c=)
15: ipupcdvp4LbD6D-C1ZVS4_JrtVM.roa (hash: 1kO7KglXg+mOXu0757cqWUOoHLIBVcVZE3NF8cCE/Wk=)
16: mEFHR3ZO54gTaeeTWU5lmspVd_s.roa (hash: 0w2qL/ViAbe9xLVH17D2YZ/NouaV1VQroh9IMJno9TE=)
17: pgzudYLpdZvgFskxqzTZKF0vyLQ.crl (hash: Xt0FKbvKcDyTu+dkjDc/hlgE9/ZyNXXuR+NP4SA4MuI=)
18: sLk-izSTWX7GM5E-kM2g-ymgESA.roa (hash: a3gJXW/HoyQtdrjVm/h5X6VgqIynZQ0Fud92Ay7J9lc=)
19: t2IZILmIlkrYmXptt2wUGw2uQwM.roa (hash: qFiwLdqK/Y7OvzgsKoQ4QT/arrjkDtpZ8/DZq9XFtzw=)
20: wnofk64UVBKP93Op1kPJw8OAZVA.roa (hash: tsj9FpIfOqGKJfVIRwRR/8c5mdUoax0lYr1/5kPg6Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:9d:d8:0b:bd:c3:0a:c8:75:d2:bb:25:ec:4e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Apr 16 21:00:43 2026 GMT
Not After : Apr 17 21:00:43 2026 GMT
Subject: CN=0a0150d0b3354f538d659d13070745db28ee00f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:3b:e2:ca:65:cb:35:d0:3c:2d:59:ca:88:
06:64:bb:7f:5b:87:7d:90:2d:a1:66:89:cc:03:92:
75:d1:35:d7:88:44:ef:2f:12:04:b2:13:59:90:fd:
28:eb:74:f1:82:09:68:ad:2a:dd:da:a2:05:cb:44:
3b:91:42:ab:14:f2:ca:8b:3b:5c:f8:27:6f:a0:87:
d2:1e:14:51:33:52:60:83:cc:f8:ed:3e:c4:09:94:
13:e6:62:5d:97:92:17:ba:82:39:93:53:51:25:02:
02:2d:14:52:39:69:89:e1:6f:ba:96:ec:9e:a3:c5:
c5:37:f9:c2:5a:55:c6:5d:59:3e:ea:6c:c8:7a:a2:
6a:4b:c1:e1:ac:a6:a3:8f:03:ae:4f:e0:af:69:e0:
8f:70:9f:ff:c8:62:2b:8a:cd:fe:4e:ae:19:3d:34:
86:34:d7:a0:57:b0:6f:5f:8d:b5:19:5f:e5:9c:70:
16:14:29:69:31:7a:2b:85:a9:27:c9:41:87:46:79:
7c:b0:cc:b3:84:1f:d1:69:12:5c:53:95:12:17:30:
ce:f6:6c:7d:dc:ce:e4:d5:89:07:21:c5:b2:51:04:
2a:47:bf:33:1c:fd:ac:7f:eb:98:a0:a1:a3:a3:c2:
d4:fa:fe:99:01:b6:91:f0:4d:4a:85:52:95:d3:5a:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:01:50:D0:B3:35:4F:53:8D:65:9D:13:07:07:45:DB:28:EE:00:F0
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ec:b2:21:1d:92:8a:67:52:7f:1e:e1:23:cb:1a:19:f1:75:
3b:93:61:08:46:5e:45:ff:78:9f:32:d9:dc:35:05:69:53:f6:
57:14:a5:10:3b:9f:d1:ba:4a:99:94:5b:85:b0:c8:87:37:80:
27:76:b8:ef:49:b4:1c:9c:33:4c:bb:22:2f:50:bf:87:0a:13:
d4:df:9c:f5:a9:cf:3b:16:ec:a4:c6:9f:67:b3:b2:b0:4e:f1:
93:68:6d:71:58:fc:32:f9:50:03:1e:7a:ec:90:83:c2:33:31:
bc:9c:ff:6a:b3:7b:49:73:04:8c:6b:fc:3e:ae:c0:73:48:66:
64:fc:2b:ff:4d:5f:26:75:bb:a4:8c:6e:c6:c8:43:99:9c:d8:
d6:80:13:74:47:4b:b0:98:05:b1:a3:f9:a5:89:3c:0f:95:27:
2a:77:9a:07:0c:cd:f0:02:62:f9:fa:ff:45:8f:e9:55:8b:da:
12:2e:39:36:e0:a2:e3:2f:4f:dd:8a:f3:b0:c1:1d:f3:20:27:
a5:1b:c7:d4:8d:6f:a6:08:71:ba:54:d1:23:d6:6d:ad:2b:64:
fd:8c:e1:4e:5a:46:f7:86:9c:7b:cd:f1:93:e7:93:42:94:28:
aa:13:71:e7:3f:d2:3d:5a:65:55:64:d2:f3:79:d6:23:ed:2e:
f5:59:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:57 2026 by rpki-client