
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
File: 1Ion9EsQQExS9v_E4I3IK_i13uQ.mft (raw, json)
Hash identifier: +5DVmy4LF3s1ND7R9KGKTSV0HOXPkdyWfUpvcbwby+A=
Subject key identifier: E4:9F:7E:70:AB:1A:56:2E:42:80:81:BA:A8:BB:0F:38:66:EA:A8:9A
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019CAA8F527F6F927BE66963F08DAEE2A10E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
Manifest number: 0D04
Signing time: Sun 01 Mar 2026 18:00:45 +0000
Manifest this update: Sun 01 Mar 2026 18:00:45 +0000
Manifest next update: Mon 02 Mar 2026 18:00:45 +0000
Files and hashes: 1: 1-L8tDfEG-3pgIU7kfSKnf9ffLk0.roa (hash: iZJZZ6IHUsAM2x3U2uVQeumOeN1QKM3CgmxIrUe3hSU=)
2: 1Ion9EsQQExS9v_E4I3IK_i13uQ.crl (hash: G5XQpA/qt+1u/bfgm5bdei1kuhiQyXK2c+iRorTozaU=)
3: 2f6PQ52RrE2rBdK-zJ6WM_j95eI.roa (hash: uNZ99GxNYSx799rRk/4xuT3cH59ZCsDIn0sSjir72VU=)
4: 2v1pQuTwC884qOqMuPFIGe3hLEM.roa (hash: 9QYXHAznoJYbVxUrvlkB+2xgeSleEtgz8F3cc5bCAvg=)
5: 66PvU9zZe40QPvYfUbIMVwRtoUc.roa (hash: PuDY7T0dTQnWl6fRZWtjtvnzjPu119CD4rEyspEfVG0=)
6: 6T8JuJI5zBMlhhsnMWJwqschkxs.roa (hash: y3Ffb+9k264Crde/fiQpnad2BjTOVvWEHiSxXwbuzAw=)
7: 6TAhwel28mn1EkKNP8zK_phx-fY.roa (hash: ASRsbD8Q6E32M18wKwO98fu3c6RpmRXPNQyvdS3lfG0=)
8: E89yAQtO79M-1Ms7Kd_oXCvLPh8.roa (hash: 5du/pnLCkjqXOpm9RfFvPGgH9EWazk1nBHyV5aHULNo=)
9: EanbdxvpQ8YPKktBIMtq6aA5Iik.roa (hash: FIQbob6SdbdBIWE3qNGlhsXeIMRffnyctbKh9SLGzb4=)
10: GHtx92XK6yIjK3lcHPo5sov-XWw.roa (hash: 2moJc4PYALug9KGrlP5vC1bPAu6G097omiLInZPacKw=)
11: GWkEKO-jjYXKvJ1IkOHmMuTaMMM.roa (hash: 5SE2deMTvP0ySSnwGxZWlc8RDVoTqcq938sEZ/Qd1+M=)
12: HxcwusE96Pu4klA3JVP9ca71QRk.roa (hash: geWZwbjFXtpXNCgh8QcSp0aqYZouzyEjG0Xg6ZT16Q0=)
13: LgH1Me-2eqYoL-0zNcmnVpsomrQ.roa (hash: 382IR5KX357ftVcZUNVV6W3Ot0v8DcTQMbqIjY9RuVI=)
14: LxR6ymO2jTw3ogIuaUShbQlGTdk.roa (hash: 8fZ9LesjpoPrv1NgIcb6YI3BUredk/uWtux2rOwhc5k=)
15: Mx9B9hAEqLYTXQZ61hw0ACEgjyE.roa (hash: NJCE700WkOf9hTWVW5JZ/csL1Ex7RFOI14hRWLuaIz8=)
16: QiFIDQaK57RQDC2wBjTgFDeAGGk.roa (hash: i5P77GwNdzqnxs89g/W5Ts+xYO0h1KNAlwDqj9gxX20=)
17: S9R4kfXateW9DiicYhQOk_HsyCc.roa (hash: 6tWmU70/4MEWbvV+ci3xerNiMtekKazP7VSfBAnVejg=)
18: VMe6oVea4JH4JSY7fPcNrhdKRXg.roa (hash: 4zNlXcLLXGUVEab2oJM3gKwsrSRnUYbnT5rLCiqqs2c=)
19: W-iGdfrXWzVhktlrOj6ji9PTTVI.roa (hash: LisKv+NARInTtmqbTfKgDTZvU5Ejrq0c/4kFI8VtQYo=)
20: YWn3_kOmvMICb5PtlbN2PUVpwOI.roa (hash: zMKagDS1cv4q0fyGdmCZSTRmcOaC06mZ8/iFRXUPWcc=)
21: Z4qehmmIIMgRP7ObXHN1Fjvd9Cs.roa (hash: 0jO7nFM/draO2m1gezepqenb1TXb8u84Y7tHyJsUFNM=)
22: Ztx5883bK84tY0HARcS8sYjlri4.roa (hash: bpcCdBvqDQHLcDos6XVgo6TvWqDUz3X955uO9/6fckE=)
23: Zyo9GK454m2Y9Hx3gQAA2RVkkzg.roa (hash: mbKN457fTUnOw3MdaP/O9IlT3j3fwRDhf3hiIlpCzIg=)
24: a8PPU1ip3j32Ymgqfu62wHKo5mw.roa (hash: pjbHZ4qnhuGinRxZROwWTf+1L8XWffBeqFR4/Nx4i4M=)
25: bIKyF2Q2GTRRfkCcfpg-PYm-LAk.roa (hash: S0GM3HoDdp+EGNSxNl3mIV/O8dn7DSvjLXDYeT6IM4U=)
26: bV5g9xO1gWLyZE-xFxBp6KcQkc4.roa (hash: ywUsGA0qRHlNgSAcO124wmmxvQg54JHyL7K3WEufZNo=)
27: eXmt2jVibjpqoe6NGuHZQJz6WVM.roa (hash: 22Fr4YmY+8Ydz5UaUG7pknY6flPqfENyc12ItVwexCQ=)
28: glK6ZuS9aqKDNeeSV_q0U4t5vXY.roa (hash: s7+RSd0SFVoNOLR0ritAMahQjQAKwe5bQ1PhYBQniks=)
29: jfh4ndJVi_2OCC9En6iTi8N-1Kc.roa (hash: yAiRDCOqj4K8MDuwTH0iwPZgdvZiWfos4vKFlx6nBmY=)
30: lCEndQQuRFKwVDrjJIr6SI6t0UM.roa (hash: y4vvvIiOM6IWgLq+xv6Y/UunBkXZxLfyP01+4Mj48hM=)
31: lti_ZS1qdJ17vzlUErHLJRdShuM.roa (hash: pXwn0qmcFCbouYnI/xcckKVTRJj3c7qW6G8+Sd30GnE=)
32: m6CFvFAczr2F2DiKaFi8VY6jdPc.roa (hash: 1cETzaUqMjEIhVmKAeMSNUEoxmYNmG6Gm0P7w6RCk0k=)
33: mTnpNXtSRSshm6IHF4xPDb9VAyE.roa (hash: mWRi8SVlY7LD0pXjbijK7E8xwH1QgR+28+JZDNM84HA=)
34: mXIUM2kiyOLjpAVTpXs9HhfDNfc.roa (hash: gABdSnnh7vVHsofsdTGV+68MIIXEAwF2Pew3xWqm9n8=)
35: m_3H1L33iu_sTjlK1X6PySnBCCE.roa (hash: VeRZdbR5GDqWeXOFTzkrb42trAhWtCXjDpqyk5HJZrY=)
36: m_fA9JV4UbPXvhLhsaGYJOi5eq0.roa (hash: RK7A9Vb2xwxqtK3XxCZOKxVeAKSGlwepdjvL35LN7+g=)
37: nWKr43KJPGiZdKkpuyeThhqeASs.roa (hash: JJbd06WArevN7NTvfMbhFxIEnpHo49DD/vbrjs5BiOg=)
38: oHEqPAe1ivuwFNv9bGllrDKsai0.roa (hash: wG4lmKGW2sDhafNch0IB2B5XrD9JZ9PYTL5b8W0MG0c=)
39: raV-nGfCRH7nb4cH2VBHwr8bFdQ.roa (hash: emSlxFHfN6IxHEyPyRdKwviBvDuHbEBLYDJSglAnOps=)
40: rrE5_Xv44YbQ9qA5W_yVeWLWQqk.roa (hash: aWkyJwhgcYJNcVUtvT2FylXeuHe4GVHP7OIlYAfjgCA=)
41: rwid864otSc2caBOwHGaSFtuYfU.roa (hash: 36zoJ53OOCRGlpIyib1zJrHiukI78yrS/aL/uOH14CY=)
42: sR6h0Cn5s-Bq9SjJGOCNFGe2Nh4.roa (hash: Gcl+FQ+1UdjTsp72zIusAoy+k/zDoz9dviOvEiJn6EU=)
43: sTU5fBJp-EWdh_BTD1N_DRnGv54.roa (hash: kDUJ3apAD6Z4RTY4CyhZzTpQCvGoDLl/umBo8RSMUaM=)
44: uAPoqs4XSc5_GKACeOHF5LLX89k.roa (hash: 0Kc24VcBAtQsQHN2WWJmVuSPxh0vQzVYQwNYhKs4Ue0=)
45: v-jvspyAIOF2zU4NrMiOG-KnURQ.roa (hash: AKzSr9rMfOU9kLz3zWKI9iRObXxplMowbVYJ1pCTEVs=)
46: v6un0SLKHoyUdlbWhmt_wnpdUDI.roa (hash: QrFjt3OgZToO6oMj5dfqwQ+OO7th5JfOPvzKriOtW0U=)
47: wEri72pFsS9Dly7L_lxzY5OEiI4.roa (hash: bHZk0We/xQIz3XiIA/tBI7ytGpmeQt2piWvfbNOjUp8=)
48: wJqVatnwz_JACg6Z3PJikK2KuzA.roa (hash: qVtqZA2lMr7M1sPO5Sj/r63rOcaQEXbeL0LGhouPaLE=)
49: y0k0ikvekbGdKC42Wx53vvJWs58.roa (hash: aHtCxHWTyZV0fo1WWYLzoswzW2IzqLy7KE+msLBfGcA=)
50: yKP2nA7yymgE29-Up47_8mTwpbs.roa (hash: /Z6lbsZFXfhtYtUn2xJeLeR9w1jkClj8BOOR/WhoB0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:52:7f:6f:92:7b:e6:69:63:f0:8d:ae:e2:a1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Mar 1 18:00:45 2026 GMT
Not After : Mar 2 18:00:45 2026 GMT
Subject: CN=e49f7e70ab1a562e428081baa8bb0f3866eaa89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:28:da:75:52:74:07:5e:b9:e8:f4:7b:44:
7b:83:84:8d:43:56:0e:a6:42:0b:ce:21:69:83:15:
24:9c:df:bb:6a:e6:10:58:d8:52:df:cb:c9:bd:2b:
4b:34:6f:13:1c:5d:dc:db:ea:bd:03:a3:ae:bd:a1:
57:21:0d:75:df:17:8a:c1:cf:7e:92:2a:d2:91:c9:
98:1b:a1:bf:cc:88:44:cb:6e:bf:68:df:17:c6:39:
bb:75:62:db:27:f5:52:56:1c:b7:31:67:bd:de:33:
1e:d3:e3:f6:84:c3:b4:a0:88:c5:56:ab:de:36:9a:
70:a4:65:90:b7:59:43:c5:9c:79:67:88:c5:13:ce:
a1:76:ef:7f:f0:c0:c5:62:80:26:8e:1a:da:17:51:
f1:b2:6c:2c:99:5d:af:5c:3e:f0:2b:b4:30:9a:7e:
f9:e6:1d:e6:73:3d:c2:d4:55:45:1e:e0:96:62:08:
90:e8:9b:7a:71:60:f8:9d:32:f2:f3:a2:0e:00:18:
3f:c5:3f:2b:dd:9e:96:d2:55:ec:3a:7b:84:5d:e1:
68:1d:87:38:88:f3:c4:8e:da:13:67:c8:df:30:3f:
d1:f1:b6:1e:6e:a6:b8:0c:fc:ac:6f:ba:dd:75:ef:
98:c5:41:8e:d6:fd:ef:c9:bb:fd:51:d8:6e:1e:3c:
9e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9F:7E:70:AB:1A:56:2E:42:80:81:BA:A8:BB:0F:38:66:EA:A8:9A
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:98:0a:2b:7d:d1:69:42:4b:e7:fe:08:25:49:30:67:bc:ec:
24:89:1b:33:2d:b4:19:da:71:1f:4c:0d:f1:25:62:c5:cd:c9:
e8:87:79:d0:16:5b:83:ac:8d:87:f2:21:56:49:f6:70:f1:8d:
7b:b1:ba:d0:74:98:d2:d9:49:1d:ba:ac:41:22:0f:0d:4c:d9:
0c:4a:5b:dd:1f:1a:7d:e4:6c:fc:e0:d2:06:89:17:9e:25:7b:
7a:63:64:41:db:f5:d8:f8:f2:15:51:1f:a5:62:87:d1:f0:10:
a5:c0:65:87:39:77:69:6e:0b:b2:b5:20:f6:e1:6c:c6:77:56:
0c:7e:d8:e8:d6:66:0a:49:d8:84:a8:6c:7b:6a:7a:82:eb:77:
8f:d7:12:49:ed:15:5e:a6:d5:dd:7d:60:e8:76:83:81:87:85:
04:4c:98:e1:4a:ac:a6:23:4f:4f:1b:4e:d3:c0:da:78:22:55:
f4:18:6f:7a:c7:20:b8:4a:88:71:42:64:e4:90:7b:b8:98:93:
d9:20:a1:1f:2c:74:5f:aa:af:3c:de:7a:51:b8:14:0b:f0:7d:
81:9c:8b:4a:80:5f:4d:ee:e5:c7:17:c4:8c:a8:66:08:17:5c:
df:35:15:90:63:f7:bb:8f:98:25:09:dd:4f:5e:7e:48:06:0b:
ee:e0:57:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:12:28 2026 by rpki-client