
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
File: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft (raw, json)
Hash identifier: +yFgWzpFZBB7pB3I7MBRV+XFl6q0gxd5hHHTZAavK6k=
Subject key identifier: A9:95:C9:28:8B:87:66:37:F6:B2:4E:BB:3B:36:17:C8:3F:15:53:80
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 019D9850613253D29D32A6C79314760F14EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
Manifest number: 18CE
Signing time: Thu 16 Apr 2026 22:01:37 +0000
Manifest this update: Thu 16 Apr 2026 22:01:37 +0000
Manifest next update: Fri 17 Apr 2026 22:01:37 +0000
Files and hashes: 1: 67pKVcBP4g1ka7BHnXY8o1GjatI.roa (hash: NHI8d7vH5tjpxPomV3eBVCOa5aQTAvgW0GwAOx6HDCM=)
2: 6oyqxH6fbfCjScGv2qC0XiD5gCU.roa (hash: X2pwG2wmLfB4M+6njFbtbY0lJjAJiNG8E4ePk2t5PZ8=)
3: BG7hZwdKTnkeh7F43mqTspITrC4.roa (hash: 9w3fRT22xu3zZICYpxgXI0CEKv6s/N6rtv0UUVT3l1A=)
4: E3UcI6HbofZm_snwFtZqoqwg5-4.roa (hash: d4QiFFj+amh2JyYpNEFn0n/k8uKNUlkfpX81m7S5ZMs=)
5: FKX17PHtkRiTG0VO4fdkemmP9q0.roa (hash: 46njTd7Whv8oDcKQQcq166dpo8DO+HMFvA14eGT2kvA=)
6: Ig2ees5HLfOePoZmV44oy1ypzFU.roa (hash: Xt9yas6tqq8RhgQUndyXvcQyGrhriLDFS4gSQyBaGSk=)
7: KsuuqZuzWciosvKgFRPXzNp2Gcs.roa (hash: fH9tuqcfvS+JzHyWBgJi96fMfx/uXZQsaH9PlzbW4JY=)
8: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl (hash: 8vXEMcQlODv6KXerfi6CxH4XUtbi33fMWe9b4k44Kwk=)
9: k0wZqmhMQI1_yKbqeg-OeoA8ghg.roa (hash: okOMVmkk1MoA9VfXhi+YW9SB7pABGOjg3hztcxMcS9k=)
10: nzPG4vwX1IeVP2cSHRY5OFKnn24.roa (hash: OLyA9Gv/rl69xwJleWIyqhvz9X35ZOv/7WlzFp3vKrM=)
11: qOQMcO_XSSMHONHJzrh7779P3jo.roa (hash: ade5av8pqt7Ksv1kVj/c8U/iRecFohg4Rxixd7NnxeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:61:32:53:d2:9d:32:a6:c7:93:14:76:0f:14:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Apr 16 22:01:37 2026 GMT
Not After : Apr 17 22:01:37 2026 GMT
Subject: CN=a995c9288b876637f6b24ebb3b3617c83f155380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:8a:b3:02:68:91:61:a1:53:02:b8:17:8f:
30:a2:fb:c6:89:fe:2e:96:b5:6d:71:0d:ad:c8:fa:
58:ab:a9:1c:3d:44:56:9f:d3:0b:2f:14:5f:57:30:
c8:e1:f9:64:ac:d1:93:d1:cb:81:8c:70:a5:05:29:
35:1d:f2:50:a8:18:d8:35:ae:ca:36:01:65:ab:44:
72:9f:89:78:3d:eb:dd:08:c8:17:c6:e7:70:c6:48:
c1:26:f7:b8:fc:f7:79:b3:d7:c0:eb:f8:f3:c5:77:
85:7d:b9:4b:25:57:32:13:63:d5:c7:51:2b:cb:85:
f0:85:5d:07:64:7c:9e:eb:ab:b5:88:23:00:92:4a:
4b:53:8a:2f:79:d0:62:ea:06:b6:69:ba:1d:9a:8e:
6e:f2:f7:0e:ad:60:19:8e:78:92:43:e1:9d:07:05:
20:93:88:f7:ee:73:b3:fa:e8:3a:da:20:40:d1:75:
d8:f6:1a:47:3c:75:97:0f:14:a8:11:b9:49:71:26:
bd:02:cb:c4:fd:22:2b:3b:53:16:f4:2c:4f:5c:bf:
c7:c2:0d:e0:18:a7:7d:96:d6:0d:e1:4f:d6:54:85:
9d:7f:df:8b:55:1a:fc:d8:7f:4e:ff:25:44:5a:4c:
2a:5b:74:08:87:2e:41:db:6c:81:8b:fd:55:8e:af:
6f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:95:C9:28:8B:87:66:37:F6:B2:4E:BB:3B:36:17:C8:3F:15:53:80
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:be:10:87:6c:85:c4:b9:f6:09:e8:46:37:56:72:c8:ef:5b:
98:f1:20:27:00:9c:ab:ba:6e:e0:ac:40:82:4c:a0:4f:fb:00:
b6:04:b0:97:e7:bf:73:37:83:b7:6e:83:06:55:c4:16:f2:ac:
62:89:ca:ba:a3:49:09:bf:3b:41:c9:53:ac:4c:70:6a:26:7e:
28:3c:02:eb:0a:e0:b5:d0:ba:23:7e:f2:f7:9e:ff:50:c4:96:
a8:d4:cf:23:cf:33:16:b4:1d:b4:bb:21:35:4d:ff:ce:ce:bf:
10:55:79:c9:ee:67:e3:6c:c1:60:05:c0:98:7a:6f:ec:56:b4:
cc:db:cc:ce:06:7d:eb:32:b8:59:33:47:d2:ef:db:e8:1c:43:
f4:77:85:07:35:0d:c1:ec:d6:23:cc:4e:45:cc:f8:82:79:39:
28:9e:60:7c:f8:56:0c:2e:a6:1e:cd:37:ab:b9:03:3b:c7:02:
04:19:63:34:16:b4:88:1f:c5:0d:41:4f:72:44:eb:27:3e:01:
43:db:52:e3:20:fb:91:29:5a:2b:c0:ca:ec:7c:aa:48:d9:69:
0b:0a:53:e2:db:df:0a:08:ff:07:04:5a:fd:c9:89:f6:6f:a8:
2a:41:e6:bd:2e:d2:43:07:b4:2c:59:3e:d3:54:26:ea:7b:e0:
15:f0:19:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:07:23 2026 by rpki-client