
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
File: HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json)
Hash identifier: GD3OQSq8IR8q5G/UKRokCBmW32KyCXPdhBiThBbsTm8=
Subject key identifier: 6B:F9:A7:09:E1:82:30:19:17:36:53:C0:D6:DB:96:2B:80:19:1E:25
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 019D9A3F199626EF1E3116DCC5B62D7ED51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
Manifest number: 18EF
Signing time: Fri 17 Apr 2026 07:01:59 +0000
Manifest this update: Fri 17 Apr 2026 07:01:59 +0000
Manifest next update: Sat 18 Apr 2026 07:01:59 +0000
Files and hashes: 1: 1-V84oobFXIlKZ3Dls5nBGbkUta8.roa (hash: Y6oUsmKL79cneGenSJvYXaOULigPUniMqNXXoxtkoQA=)
2: 1-spxrtAD4oXbrE0RHzjgwEyo9dc.roa (hash: laO24ACjIVLZyTAa5hofsg3cM+gHDkRC5wH6+r7XTlw=)
3: 1WdFXv1Jg5APhjnipHcc4mLeqvg.roa (hash: IZKCSGM3fACKg/PrPaA+UZQwdKhIoEOq7r5L+j4pjTg=)
4: 2W2MCcTiOGzKibb9IktRwoV7t7w.roa (hash: 9hzbcjFutrF6fmKr1I+WiZpYh5ANj2nzThUtT9+uWLQ=)
5: 6ZzDjxgNYdOCdszBPZyujZWdIQU.roa (hash: 9UI3twwOpxPDECF8g7XXCOiJN8BzbbKSShDSCVBs94A=)
6: 8rKgBAJA8MJvfJn7wlRXaLSOltg.roa (hash: vKik0l+/uPuH0Z6X6US0ts7buVtMAj4tzTB6bbsDKWw=)
7: D_XaVdSAo9MO91lS2vDjyI3P6Ys.roa (hash: 3brIsivCbhFviJ62ZCvrk45wXBqMSMZrnrXYGWBpVqI=)
8: Eq8JCzY_2xgrWNLuTFpKz8LyYYI.roa (hash: /lqPOANyW17qinqhiK8qfXDXg0mEzP1UjKBeGgxEB10=)
9: FMdvNunKljn8ofGnpjf1LZVHjq8.roa (hash: 8mvnTEy6JbB2XqN3FH0fr8TfsaVsZ+l1QCmyb/WMQRQ=)
10: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: 6UIFokK/cQ83hRWyH6LYdqz4WxZegtGFd4nHTtOo8V4=)
11: LsDa6KTrverRW5gJHEDYsnUiWaA.roa (hash: kyRRzPpmtC/6cc1RLLOBnwLx4RCN3jXZIWgVX+OjOJY=)
12: OsXJRVI9Phmgo0xXhFQ7ia1dwww.roa (hash: oyzTksz2QKSnafMS1kmCzYf1d4YWDMBQktGYceuURLI=)
13: XDU9UWSQ0e6UimvguU5iuXs0EOA.roa (hash: SCFRxNca9zUGzw86U8+KWNOZievAR3LE2W5GLXuSUcY=)
14: hD5Jp6vS9axOhOQnGtkd8d1fNdk.roa (hash: b4EBco8NgahSA81khEE6SumwN6LoQGLW/RXHQz3fVtU=)
15: hc27-Du5AK-QSwEPPlUOrqZiXBk.asa (hash: NZwly8DKYsKefjnwC5ZEjbZE7IIJQUE4bCO5RCZXMKA=)
16: jl7QDhibiq_JOYv1vjDrL8Omz9o.roa (hash: JDmYOxWLUYSslhLzawMmaYVHDSzzt7UH8K2KDqbbLwo=)
17: rmRD7sZaIQo6NKmJlFJdecxZ0JY.roa (hash: 6M2XOWFy53R21mcWbAHRpsAh3NRSx51bXy4kBppg9Z0=)
18: sY1Z0d4UP1k0MtMv6mu9PscYSIo.roa (hash: OEBAEu1SEBwrWfciVaKHy8l9XFDNXjoEFOCceQeIsnI=)
19: uC3zCk-SIOTP3v8kN8AvkOioJlk.roa (hash: t6NH48ochz8I1c27bkPFIEdPItgxlKo5FppJqJnPRh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:19:96:26:ef:1e:31:16:dc:c5:b6:2d:7e:d5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Apr 17 07:01:59 2026 GMT
Not After : Apr 18 07:01:59 2026 GMT
Subject: CN=6bf9a709e1823019173653c0d6db962b80191e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:eb:47:59:e7:70:e9:3d:0a:e4:e9:aa:74:21:
a0:b8:0e:8b:71:d0:3c:3d:04:8c:94:99:46:49:d8:
6e:63:33:fa:16:11:94:8a:e7:43:f6:83:d0:c5:6b:
da:30:06:dd:54:78:87:b6:a9:3c:2c:fd:52:19:72:
94:f0:55:ec:fe:c9:1b:a8:a6:d2:a5:90:30:bc:2e:
db:46:91:82:5f:1a:a9:4f:06:7c:d9:be:f9:c5:c4:
0c:a3:29:2e:2f:82:5a:e3:78:88:56:08:6a:57:cb:
28:8e:ad:71:d3:5f:18:b1:79:89:b0:10:52:b4:91:
a3:85:cd:9d:91:2a:4e:d2:2d:1e:19:e5:ae:b5:16:
02:c0:b8:3d:75:5f:f3:f0:01:52:49:04:d3:5c:35:
12:fc:04:1e:94:6f:6b:b0:e3:80:b4:c6:dd:c3:59:
c3:db:8a:3f:38:71:42:b3:88:23:54:02:80:63:ea:
37:8b:7d:db:58:49:c1:c2:44:f7:1c:fe:28:aa:08:
ff:14:b5:82:06:d7:87:c1:96:eb:dd:17:c1:85:62:
05:a7:08:db:51:02:0d:57:8b:d7:b5:d7:63:63:8f:
9b:33:8c:c1:12:da:ea:55:49:bc:c9:4f:09:9a:d5:
47:32:f3:51:0f:f7:d5:66:c6:30:0a:d5:09:0e:d7:
9b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F9:A7:09:E1:82:30:19:17:36:53:C0:D6:DB:96:2B:80:19:1E:25
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4e:69:ef:34:09:c6:eb:0f:4f:48:95:fe:f7:97:ad:73:92:
43:7e:98:ae:e3:13:67:44:24:04:78:cb:56:e0:7a:fd:fa:b9:
f1:01:33:87:0d:e9:3c:0a:7a:13:4d:1f:cc:cc:ff:3e:b1:02:
41:17:ee:fa:73:c3:54:b8:3b:28:1e:a5:57:ba:2b:4d:0e:8c:
70:c0:d2:f7:48:b1:2d:3a:f2:9a:fd:b2:2d:b5:4e:b6:87:be:
13:af:b2:ce:7a:7d:d4:8f:39:0e:3f:97:06:11:84:73:c8:b6:
31:23:cc:34:b1:c1:b3:13:32:9e:06:f1:0c:28:10:84:b3:87:
24:40:45:1c:b1:89:21:26:f8:09:d3:ad:58:6f:57:03:3e:93:
9e:ab:a7:5f:9d:f9:13:d7:80:6d:78:56:26:01:31:f3:5d:80:
c4:7e:ce:c9:0b:13:97:9a:f3:2b:c9:2a:dc:06:1b:45:51:16:
3d:2a:9d:df:16:44:6d:96:93:7a:ef:02:ac:5a:93:bf:34:9b:
69:14:e9:c1:f8:26:6d:6b:42:3d:ee:c4:4e:74:b2:53:7c:fb:
82:07:a3:e5:32:0b:2c:c3:f5:99:21:78:a8:2c:09:a5:63:5d:
60:0d:45:be:dd:51:e9:78:35:b0:08:3c:1b:12:2a:92:ec:4e:
5a:42:87:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:19 2026 by rpki-client