
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
File: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft (raw, json)
Hash identifier: hdewoYCbVune1ObbJVqa5mBZ6cykFGS0d4RxNYfPn/0=
Subject key identifier: 14:A9:6D:BD:F8:43:16:65:FA:1F:F1:E4:32:D1:87:47:B1:9B:F5:35
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 019CA8D88298167300912EB20722BF08A89A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
Manifest number: 1852
Signing time: Sun 01 Mar 2026 10:01:27 +0000
Manifest this update: Sun 01 Mar 2026 10:01:27 +0000
Manifest next update: Mon 02 Mar 2026 10:01:27 +0000
Files and hashes: 1: 67pKVcBP4g1ka7BHnXY8o1GjatI.roa (hash: NHI8d7vH5tjpxPomV3eBVCOa5aQTAvgW0GwAOx6HDCM=)
2: 6oyqxH6fbfCjScGv2qC0XiD5gCU.roa (hash: X2pwG2wmLfB4M+6njFbtbY0lJjAJiNG8E4ePk2t5PZ8=)
3: BG7hZwdKTnkeh7F43mqTspITrC4.roa (hash: 9w3fRT22xu3zZICYpxgXI0CEKv6s/N6rtv0UUVT3l1A=)
4: E3UcI6HbofZm_snwFtZqoqwg5-4.roa (hash: d4QiFFj+amh2JyYpNEFn0n/k8uKNUlkfpX81m7S5ZMs=)
5: FKX17PHtkRiTG0VO4fdkemmP9q0.roa (hash: 46njTd7Whv8oDcKQQcq166dpo8DO+HMFvA14eGT2kvA=)
6: Ig2ees5HLfOePoZmV44oy1ypzFU.roa (hash: Xt9yas6tqq8RhgQUndyXvcQyGrhriLDFS4gSQyBaGSk=)
7: KsuuqZuzWciosvKgFRPXzNp2Gcs.roa (hash: fH9tuqcfvS+JzHyWBgJi96fMfx/uXZQsaH9PlzbW4JY=)
8: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl (hash: c/EZrIvOcT5JAe8GY5Yn+HHUrbmOe/HjwWyDcgcHwjc=)
9: k0wZqmhMQI1_yKbqeg-OeoA8ghg.roa (hash: okOMVmkk1MoA9VfXhi+YW9SB7pABGOjg3hztcxMcS9k=)
10: nzPG4vwX1IeVP2cSHRY5OFKnn24.roa (hash: OLyA9Gv/rl69xwJleWIyqhvz9X35ZOv/7WlzFp3vKrM=)
11: qOQMcO_XSSMHONHJzrh7779P3jo.roa (hash: ade5av8pqt7Ksv1kVj/c8U/iRecFohg4Rxixd7NnxeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:82:98:16:73:00:91:2e:b2:07:22:bf:08:a8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Mar 1 10:01:27 2026 GMT
Not After : Mar 2 10:01:27 2026 GMT
Subject: CN=14a96dbdf8431665fa1ff1e432d18747b19bf535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:07:eb:fc:78:65:83:b7:11:a5:84:88:24:61:
ce:17:4f:20:35:a0:d1:20:a3:7b:c8:c0:82:7c:4d:
cc:0f:b6:90:05:dc:97:12:2e:ec:cc:f1:89:39:bd:
54:55:dd:74:56:a4:b5:91:12:fd:43:c6:11:53:35:
e7:9a:56:18:fc:53:5a:12:49:b3:6b:5c:16:a6:5f:
88:8c:be:d8:a2:ee:e5:93:35:5b:1e:20:0d:27:64:
ee:78:36:c4:d2:1f:88:47:f2:2c:e9:df:cc:95:e6:
14:8d:7c:31:51:ed:25:5d:17:f7:f3:32:26:16:f7:
8d:b9:d1:cf:18:b4:29:ba:96:a9:46:f1:1f:82:17:
74:2e:d1:90:3e:22:af:df:a3:dc:38:01:a1:e3:e2:
10:e4:09:e3:19:1e:f0:21:08:63:f8:a0:be:4d:68:
1c:34:2b:de:71:2a:a5:8b:df:e0:d7:af:e2:11:a1:
29:d4:bf:a9:8f:74:d1:df:a2:ef:b6:44:67:45:53:
5b:6f:62:9f:d1:40:27:af:47:29:a4:c9:bc:62:ac:
4b:e3:89:c6:43:54:5a:29:c3:e3:fa:01:4c:97:80:
77:d9:b9:54:41:f2:08:a8:f2:7a:83:7c:f8:33:8e:
ef:78:9d:9a:f2:84:c2:de:bf:ce:0f:2b:cb:a9:1b:
5f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A9:6D:BD:F8:43:16:65:FA:1F:F1:E4:32:D1:87:47:B1:9B:F5:35
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2a:82:cc:b9:d5:0c:d5:1d:e6:9c:25:f7:05:9e:69:77:b5:
06:b6:58:5d:e0:bf:be:ad:3b:c2:59:82:3e:14:31:3e:f0:00:
94:2c:eb:be:48:e9:fa:32:00:b2:26:35:4a:82:4f:a8:ee:2e:
06:3d:c5:65:f4:7b:cf:a7:11:4f:65:52:fe:55:52:52:7a:65:
0d:6d:b1:36:af:a2:bc:eb:2a:d1:a1:d2:59:c5:e3:03:92:a1:
e7:6e:b4:0b:63:99:e8:3a:c3:c1:d2:1f:a3:03:cb:03:22:10:
d2:4a:91:d0:67:84:ca:ee:68:c8:98:62:0b:79:70:5b:14:fe:
35:d7:97:bf:17:4e:b9:c8:b0:44:e7:1d:72:91:6c:a1:fe:f4:
7d:b4:6e:57:31:1b:74:34:dd:26:2f:24:11:13:18:2c:ea:a3:
55:5b:1c:3a:00:9a:0a:e5:03:54:9a:af:f1:f7:93:94:35:af:
d0:43:42:11:3b:08:05:9a:e8:2a:07:8d:d5:8d:ec:da:56:1b:
68:7f:7f:af:4f:f1:b2:a8:08:9f:bf:d9:c1:81:1a:e0:5b:75:
78:cc:f5:ff:9d:a8:d9:08:75:d2:dd:af:32:9a:e7:c2:c6:db:
a1:d6:e5:bd:86:e9:e3:4c:ce:79:5e:fd:7b:f1:44:58:57:0b:
53:3b:26:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyo2IKYFnMAkS6yByK/CKiaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZTg4OGE3NmU5OTg1MWIwMWZiODZjZWM1MzdkNGQ4ZTYx
MGRlMTYwHhcNMjYwMzAxMTAwMTI3WhcNMjYwMzAyMTAwMTI3WjAzMTEwLwYDVQQD
EygxNGE5NmRiZGY4NDMxNjY1ZmExZmYxZTQzMmQxODc0N2IxOWJmNTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wfr/Hhlg7cRpYSIJGHOF08gNaDR
IKN7yMCCfE3MD7aQBdyXEi7szPGJOb1UVd10VqS1kRL9Q8YRUzXnmlYY/FNaEkmz
a1wWpl+IjL7You7lkzVbHiANJ2TueDbE0h+IR/Is6d/MleYUjXwxUe0lXRf38zIm
FveNudHPGLQpupapRvEfghd0LtGQPiKv36PcOAGh4+IQ5AnjGR7wIQhj+KC+TWgc
NCvecSqli9/g16/iEaEp1L+pj3TR36LvtkRnRVNbb2Kf0UAnr0cppMm8YqxL44nG
Q1RaKcPj+gFMl4B32blUQfIIqPJ6g3z4M47veJ2a8oTC3r/ODyvLqRtf/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSpbb34QxZl+h/x5DLRh0exm/U1MB8GA1UdIwQY
MBaAFEToiKdumYUbAfuGzsU31NjmEN4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUt
YmMwZGJhOTMyYjM1LzEvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUtYmMwZGJhOTMyYjM1
LzEvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyqCzLnV
DNUd5pwl9wWeaXe1BrZYXeC/vq07wlmCPhQxPvAAlCzrvkjp+jIAsiY1SoJPqO4u
Bj3FZfR7z6cRT2VS/lVSUnplDW2xNq+ivOsq0aHSWcXjA5Kh5260C2OZ6DrDwdIf
owPLAyIQ0kqR0GeEyu5oyJhiC3lwWxT+NdeXvxdOuciwROcdcpFsof70fbRuVzEb
dDTdJi8kERMYLOqjVVscOgCaCuUDVJqv8feTlDWv0ENCETsIBZroKgeN1Y3s2lYb
aH9/r0/xsqgIn7/ZwYEa4Ft1eMz1/52o2Qh10t2vMprnwsbbodblvYbp40zOeV79
e/FEWFcLUzsmgA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:43 2026 by rpki-client