
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
File: sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft (raw, json)
Hash identifier: VLpzGTcxdB/aekMAEN7FR6k4wWRnxL5c1AGm+7/GZfs=
Subject key identifier: 89:27:B8:AE:7A:33:06:C9:85:54:E0:A2:B6:9A:D1:23:81:D8:64:73
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 019CAF7EFAC4604B53FA7EF77A1EE80D5FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
Manifest number: 18BC
Signing time: Mon 02 Mar 2026 17:01:00 +0000
Manifest this update: Mon 02 Mar 2026 17:01:00 +0000
Manifest next update: Tue 03 Mar 2026 17:01:00 +0000
Files and hashes: 1: 0NoIA4B1o_RwUOm9ByU8OFq-7hk.roa (hash: r1a5OydsBxO6MEl6yChWRAdGUgqH3oCyJLH5bIwTve8=)
2: 0QgAlgZPZqrv19rDzeh3eHUVUjI.roa (hash: /jOhKcUSCUKeMR6n8Ebwwi0KkeTixMIdUhS75UG1AFs=)
3: 0geZMvmwvZ4SsgUxE-raaM8yExg.roa (hash: wGsmWUUx+InKH/pHEB+22Iwd2em8rXE3d7MMVtqDdGg=)
4: 1-NOCLZoHctFRxLM-r5gF2XNKmN4.roa (hash: 8iv62DOUTXS1sb7lp8Qzp9Cwkm97PeNUgrv/Ly0R5Ww=)
5: 5qOLrCet16wYK8yjm6p9aPX1OW8.roa (hash: aLONT4uYmvdAHS5doL36LjtRsNGUktugfKwJ4Vmavww=)
6: 7OrrjRSIohhlOzDy5iCgiFkZ-w8.roa (hash: gq+NhZWA4AcO6EA3K0PZqbNfho/ij3J0dzti2DxF2II=)
7: 88OxeMyclDuCM-XGy1vyZJ0MjVI.roa (hash: NrH1CK+Qlg4Jb0s5eAUMievQdVKIQaKIT+Afju3AdMA=)
8: 8hVYPel1lCj54Itf-JZ0swg4NDU.roa (hash: 8vXpZvSQqRcIJBkv6M0oSSAAy8ttmBeMTFPoznBxM14=)
9: B9eEu8e4yIdtPqrh_iA5W7OUpOQ.roa (hash: 8CVCh5ZQ80XsLZZ+eaWcwJcJBHEenQUirqskEgN4w2A=)
10: BPyJKL2LEjqnxrjcu1EWzSfZjCI.roa (hash: IW2t1m5gIiuXHedBDTfnG+PcIt6emdN2QigirAHjYwY=)
11: GjZ1JpvrKQS1iLcDNvLVb2T5EBI.roa (hash: d0OoK7akyC1bmNgU+wnwXuN9qnkRWPDQso9AjYii7HI=)
12: H-2qY4a7c8MlesaJzQyd4k8aP5w.roa (hash: zxe6qu6AhRtbkeK3hWiyERWLP3LHCnSy6HKCWXJfa78=)
13: I8Iy4_ziF9l-jO-WdRwMy8_bW0A.roa (hash: mpJX+t/0+wMiXhav0ZYODkUjhmBnFQ5EDp/Bv/DB4Fc=)
14: J68_9Qnogqu4jKJivniTi4srlPw.roa (hash: ByPXDVPbgAkUrv0lsY2eYA3GFGZu05MRA9WYa9fH2qw=)
15: JP09kOOoDIPck9bP_vL_59ocq9I.roa (hash: y6UcXCGlAhYpDHZzGmM1JK8hUvLWF5EeltfmarDuJwQ=)
16: KUICOncS7D3aHrthtZYJyWJb3so.roa (hash: Z4YgeJXr9hd8vt3s+AhagMsktbm/uNe90ZBrA2ghNV4=)
17: RGqCvj9uTQazu4yVrY0uHX8imBc.roa (hash: xBw16ZaoKz3+2dPg6gUCa4pN1RDhHcc1C4AmW+IOCt0=)
18: RRAu4Kf3uusLM_s-L7i8xC-lax8.roa (hash: /s6Jj47WwdoBoOMK3IGd2te/xhi4Nj/NKSQB5UNNjnE=)
19: Tx4nNjRtwFbSFmUyNe0g3ERtKlw.roa (hash: kCLOm6CnSZXutMZvLsHNUNkxlqUEdGOIfaDrL0BbKRI=)
20: UhGW6dl-ME2u7P68oZQR4ngjVTM.roa (hash: yHH1bOJVbDxIUnOJRWdM16USF7uKpZsUS8QEK6mDBRM=)
21: XFwhkREkiCuis-x8G3Sppv-Bqow.roa (hash: OLOGsI2X7RE16wC+U4hSm6vZWwQ0fXQvkhO0lzPvMig=)
22: bUpsiGX-aGb34WbdNOIw9DZiH4s.roa (hash: xl03C5kmFTt0TLdmB8hxX8SxfLM5FDJ9iWqRX+kYeCg=)
23: ficnaqwZz9Eh17Tv92zrRP5UQnc.roa (hash: 3WSz2U210ojYNjYboRvj8jx8Z0W1JYVkUfqakNPoQvo=)
24: gB1pX4BxgfU_EYAITWsbI-n7JYM.roa (hash: 9HJZFE7Q9DE0uz+hhoDcpQ1v4qVPN4Dd5bNQtWv7Amk=)
25: h-DVLaLD3fOk7-r7yygvP-7G82w.roa (hash: bSqucFKTvyfgzaeGNnQuczPNKsSuEyi+XX78lRREfAM=)
26: hTPkcwELxJZyDnpp_4uPjK6uTWk.roa (hash: dstDHLyzAWv51zrNJrSqvTpN7X8CLl+/BjDhR+EfQtQ=)
27: imYPU-rTgiLBfbGJuTyuhX4TUZQ.roa (hash: 6orNc0rnhJILmpahuHtYwHjk8ytv9c4LqO9tdEs0kIU=)
28: jlEQqU8_vmkBR6hGRkj_btgUHEU.roa (hash: oUDpi5fHOC9AehxlR0Gt+x3Ku/0yIOWr5eUkAw2h5UA=)
29: kNXSQnW7_P8ntSSXDnxRMraKaXM.roa (hash: +oQBr9RLzJ3lq6HjViqWYy3YdmDFC0LINq7kQQBGd/A=)
30: opvih5xxd1A3a7secRqTbCxccI4.roa (hash: JJj7osBgzvQYD1FDJBv3PuuwK/WNsWoujvTBrwDuoEU=)
31: rOXSxFVdlGz4p5dzWag5xGv4b-s.roa (hash: PVmZOOJojEPRoDhr9z8ZMA/VoX6FKNqWidv30DvvQcA=)
32: s4NM_hszI3NHoc-KUiwIxLtS-BE.roa (hash: hggXHUncC0nQtN6/Yxfqom6znMWdj3u4WYY/vXLUvws=)
33: sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl (hash: xPFx47U/A+d+0hehDfYgGiXQReaVKaJE8Ro0Xzc1dsU=)
34: sZNRmX5-TWMqt6EpnEWQ2z3JLLw.roa (hash: vs+YC5ijta6AkuKsZWovwWmRuOBXgPOrn33z33jIpW8=)
35: tE6zrDYdj3KiYaKvZZw-m5wUUEw.roa (hash: pkquP667+a+Kvcmf+y2tDteV7M1Wm88bqo9mUrnbncY=)
36: tMTuUNH0SbtFDSs2xFUw5nOZU9k.roa (hash: 4+Mq45Ayqs1X4gtbMXtaUmq2jveO0RDco7Qaees0X84=)
37: uBzvm71VAJIjS9oXOzzgbdAbwTQ.roa (hash: Km5VRE7tBd96n2M5uc47Oim9JP4lJW6hKMdElqTzBXs=)
38: uYot5tEJfj6hFOwNQEImMW--BM0.roa (hash: ecbB/eDwUVf9YE82kPBIYgrYl7TjhzTaHG92py1d/js=)
39: vWRrWwtAN_AuXjapNHLwhv1SIBo.roa (hash: fe7bV4O9Sg+YHMh3WE3GIDnP0xzL2AGZaC/cvFRSiHw=)
40: xAqWyuVJfTBU5sO6tZYwZQPSFtM.roa (hash: MWM191D6m++4D2OGJ0Gjx6X+AoLdVo9Xw0WCymZXSQ4=)
41: z2vW7tiYOyrD-jbrKE2AFi-xwqc.roa (hash: QRZcJvpK6Wvq3nCgJSFwXPW7yw+NhY5x3R0Yau7Lprw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:fa:c4:60:4b:53:fa:7e:f7:7a:1e:e8:0d:5f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Mar 2 17:01:00 2026 GMT
Not After : Mar 3 17:01:00 2026 GMT
Subject: CN=8927b8ae7a3306c98554e0a2b69ad12381d86473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:da:8e:58:bd:6c:ec:2e:cc:7a:63:32:a4:b1:
80:cb:27:7b:12:0f:81:51:3f:43:0a:32:8e:3d:9b:
c6:5b:6c:de:87:f4:ba:39:a0:10:fa:c7:9f:03:86:
78:6e:1c:6d:60:79:62:89:5f:fc:b5:d1:92:83:de:
b2:35:8d:4b:3c:63:75:77:f1:0e:15:2d:0e:5d:81:
bf:f5:87:01:bb:53:7a:a8:6e:85:32:0e:cb:dc:ef:
2f:eb:27:68:da:79:8e:71:20:24:56:3c:43:bb:98:
cf:04:71:ec:53:4b:c7:e1:b0:84:94:58:5e:72:c4:
88:7d:39:3a:77:cb:d9:d3:f8:b2:90:37:63:3f:ae:
52:07:e5:0a:a5:34:c5:93:ea:33:fe:cc:42:65:0d:
ad:82:2a:b3:62:89:0b:87:64:72:6f:07:e7:6c:93:
61:c2:25:0a:8b:71:9b:d6:4a:53:77:b3:08:7d:88:
9f:32:0b:c0:bb:cb:8b:61:ba:bf:c3:09:ee:aa:79:
d0:7c:33:fb:5b:1f:0d:e2:bb:e7:bf:ae:a6:36:75:
46:cd:09:9f:7d:4b:d4:88:9b:70:5a:7b:7c:6e:46:
17:7b:7a:f6:ab:10:79:75:42:52:6c:31:f1:95:c8:
d2:10:80:f3:10:a6:b6:d6:8a:f6:44:9b:85:3f:bb:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:27:B8:AE:7A:33:06:C9:85:54:E0:A2:B6:9A:D1:23:81:D8:64:73
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7d:93:2f:8f:45:e0:eb:ae:ef:18:65:0a:8d:73:ca:6d:a5:
af:ac:22:0a:d5:7f:6e:1e:63:fd:cc:ee:ac:59:10:4f:ef:1e:
b4:74:37:92:6e:0e:c2:1f:a2:40:72:e7:f9:07:05:61:8f:c5:
ee:d9:fb:ba:34:91:07:27:60:c0:4b:e2:7a:14:3a:53:f4:4c:
f9:a0:e8:0e:a7:00:fe:93:71:8b:03:11:ca:ff:3e:b2:c2:db:
62:cf:e5:97:55:36:12:4c:ec:da:7c:47:1a:04:1e:d9:78:72:
c0:51:7a:4d:a1:d8:b5:dc:b1:7b:c8:6c:b5:8f:8b:03:87:27:
96:10:88:11:1c:cf:6f:61:48:95:14:ef:9f:4a:9d:2e:53:6f:
dc:e8:da:56:2c:94:8a:84:08:87:c2:46:2c:fd:9d:d0:fe:d8:
1e:a6:b9:55:78:a2:de:35:d3:62:ee:bf:38:aa:25:61:90:75:
95:dc:1e:0b:66:85:6a:52:48:49:e7:aa:e0:83:cf:73:83:28:
87:c5:40:c4:c1:52:5b:25:1b:b0:89:b3:f5:ad:fd:dc:1c:4d:
22:05:5a:91:2c:cc:89:d1:40:db:b9:b8:43:fc:be:a9:1c:8e:
d3:7e:98:95:d6:8e:7b:3f:b1:ed:f5:e4:07:6c:1f:2e:97:9e:
ba:8d:5a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:53 2026 by rpki-client