
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
File: sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft (raw, json)
Hash identifier: JGomwQDCeBJQ/G2AyHYx/v5a3uVOf4CasgG+BNgPZx8=
Subject key identifier: AA:AE:3E:2E:35:5A:8F:9D:B8:40:88:61:B4:BA:88:30:01:F4:4C:0A
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 019D9B19D6143E2864E23FA0F2274432E856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
Manifest number: 1936
Signing time: Fri 17 Apr 2026 11:00:54 +0000
Manifest this update: Fri 17 Apr 2026 11:00:54 +0000
Manifest next update: Sat 18 Apr 2026 11:00:54 +0000
Files and hashes: 1: 0NoIA4B1o_RwUOm9ByU8OFq-7hk.roa (hash: r1a5OydsBxO6MEl6yChWRAdGUgqH3oCyJLH5bIwTve8=)
2: 0QgAlgZPZqrv19rDzeh3eHUVUjI.roa (hash: /jOhKcUSCUKeMR6n8Ebwwi0KkeTixMIdUhS75UG1AFs=)
3: 0geZMvmwvZ4SsgUxE-raaM8yExg.roa (hash: wGsmWUUx+InKH/pHEB+22Iwd2em8rXE3d7MMVtqDdGg=)
4: 1-NOCLZoHctFRxLM-r5gF2XNKmN4.roa (hash: 8iv62DOUTXS1sb7lp8Qzp9Cwkm97PeNUgrv/Ly0R5Ww=)
5: 5qOLrCet16wYK8yjm6p9aPX1OW8.roa (hash: aLONT4uYmvdAHS5doL36LjtRsNGUktugfKwJ4Vmavww=)
6: 7OrrjRSIohhlOzDy5iCgiFkZ-w8.roa (hash: gq+NhZWA4AcO6EA3K0PZqbNfho/ij3J0dzti2DxF2II=)
7: 88OxeMyclDuCM-XGy1vyZJ0MjVI.roa (hash: NrH1CK+Qlg4Jb0s5eAUMievQdVKIQaKIT+Afju3AdMA=)
8: 8hVYPel1lCj54Itf-JZ0swg4NDU.roa (hash: 8vXpZvSQqRcIJBkv6M0oSSAAy8ttmBeMTFPoznBxM14=)
9: B9eEu8e4yIdtPqrh_iA5W7OUpOQ.roa (hash: 8CVCh5ZQ80XsLZZ+eaWcwJcJBHEenQUirqskEgN4w2A=)
10: BPyJKL2LEjqnxrjcu1EWzSfZjCI.roa (hash: IW2t1m5gIiuXHedBDTfnG+PcIt6emdN2QigirAHjYwY=)
11: GjZ1JpvrKQS1iLcDNvLVb2T5EBI.roa (hash: d0OoK7akyC1bmNgU+wnwXuN9qnkRWPDQso9AjYii7HI=)
12: H-2qY4a7c8MlesaJzQyd4k8aP5w.roa (hash: zxe6qu6AhRtbkeK3hWiyERWLP3LHCnSy6HKCWXJfa78=)
13: I8Iy4_ziF9l-jO-WdRwMy8_bW0A.roa (hash: mpJX+t/0+wMiXhav0ZYODkUjhmBnFQ5EDp/Bv/DB4Fc=)
14: J68_9Qnogqu4jKJivniTi4srlPw.roa (hash: ByPXDVPbgAkUrv0lsY2eYA3GFGZu05MRA9WYa9fH2qw=)
15: JP09kOOoDIPck9bP_vL_59ocq9I.roa (hash: y6UcXCGlAhYpDHZzGmM1JK8hUvLWF5EeltfmarDuJwQ=)
16: KUICOncS7D3aHrthtZYJyWJb3so.roa (hash: Z4YgeJXr9hd8vt3s+AhagMsktbm/uNe90ZBrA2ghNV4=)
17: RGqCvj9uTQazu4yVrY0uHX8imBc.roa (hash: xBw16ZaoKz3+2dPg6gUCa4pN1RDhHcc1C4AmW+IOCt0=)
18: RRAu4Kf3uusLM_s-L7i8xC-lax8.roa (hash: /s6Jj47WwdoBoOMK3IGd2te/xhi4Nj/NKSQB5UNNjnE=)
19: Tx4nNjRtwFbSFmUyNe0g3ERtKlw.roa (hash: kCLOm6CnSZXutMZvLsHNUNkxlqUEdGOIfaDrL0BbKRI=)
20: UhGW6dl-ME2u7P68oZQR4ngjVTM.roa (hash: yHH1bOJVbDxIUnOJRWdM16USF7uKpZsUS8QEK6mDBRM=)
21: XFwhkREkiCuis-x8G3Sppv-Bqow.roa (hash: OLOGsI2X7RE16wC+U4hSm6vZWwQ0fXQvkhO0lzPvMig=)
22: bUpsiGX-aGb34WbdNOIw9DZiH4s.roa (hash: xl03C5kmFTt0TLdmB8hxX8SxfLM5FDJ9iWqRX+kYeCg=)
23: ficnaqwZz9Eh17Tv92zrRP5UQnc.roa (hash: 3WSz2U210ojYNjYboRvj8jx8Z0W1JYVkUfqakNPoQvo=)
24: gB1pX4BxgfU_EYAITWsbI-n7JYM.roa (hash: 9HJZFE7Q9DE0uz+hhoDcpQ1v4qVPN4Dd5bNQtWv7Amk=)
25: h-DVLaLD3fOk7-r7yygvP-7G82w.roa (hash: bSqucFKTvyfgzaeGNnQuczPNKsSuEyi+XX78lRREfAM=)
26: hTPkcwELxJZyDnpp_4uPjK6uTWk.roa (hash: dstDHLyzAWv51zrNJrSqvTpN7X8CLl+/BjDhR+EfQtQ=)
27: imYPU-rTgiLBfbGJuTyuhX4TUZQ.roa (hash: 6orNc0rnhJILmpahuHtYwHjk8ytv9c4LqO9tdEs0kIU=)
28: jlEQqU8_vmkBR6hGRkj_btgUHEU.roa (hash: oUDpi5fHOC9AehxlR0Gt+x3Ku/0yIOWr5eUkAw2h5UA=)
29: kNXSQnW7_P8ntSSXDnxRMraKaXM.roa (hash: +oQBr9RLzJ3lq6HjViqWYy3YdmDFC0LINq7kQQBGd/A=)
30: opvih5xxd1A3a7secRqTbCxccI4.roa (hash: JJj7osBgzvQYD1FDJBv3PuuwK/WNsWoujvTBrwDuoEU=)
31: rOXSxFVdlGz4p5dzWag5xGv4b-s.roa (hash: PVmZOOJojEPRoDhr9z8ZMA/VoX6FKNqWidv30DvvQcA=)
32: s4NM_hszI3NHoc-KUiwIxLtS-BE.roa (hash: hggXHUncC0nQtN6/Yxfqom6znMWdj3u4WYY/vXLUvws=)
33: sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl (hash: a3L2AzBLLaYv+4NesotfU+wrVRAAWDilJNQil+E1zo8=)
34: sZNRmX5-TWMqt6EpnEWQ2z3JLLw.roa (hash: vs+YC5ijta6AkuKsZWovwWmRuOBXgPOrn33z33jIpW8=)
35: tE6zrDYdj3KiYaKvZZw-m5wUUEw.roa (hash: pkquP667+a+Kvcmf+y2tDteV7M1Wm88bqo9mUrnbncY=)
36: tMTuUNH0SbtFDSs2xFUw5nOZU9k.roa (hash: 4+Mq45Ayqs1X4gtbMXtaUmq2jveO0RDco7Qaees0X84=)
37: uBzvm71VAJIjS9oXOzzgbdAbwTQ.roa (hash: Km5VRE7tBd96n2M5uc47Oim9JP4lJW6hKMdElqTzBXs=)
38: uYot5tEJfj6hFOwNQEImMW--BM0.roa (hash: ecbB/eDwUVf9YE82kPBIYgrYl7TjhzTaHG92py1d/js=)
39: vWRrWwtAN_AuXjapNHLwhv1SIBo.roa (hash: fe7bV4O9Sg+YHMh3WE3GIDnP0xzL2AGZaC/cvFRSiHw=)
40: xAqWyuVJfTBU5sO6tZYwZQPSFtM.roa (hash: MWM191D6m++4D2OGJ0Gjx6X+AoLdVo9Xw0WCymZXSQ4=)
41: z2vW7tiYOyrD-jbrKE2AFi-xwqc.roa (hash: QRZcJvpK6Wvq3nCgJSFwXPW7yw+NhY5x3R0Yau7Lprw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:d6:14:3e:28:64:e2:3f:a0:f2:27:44:32:e8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Apr 17 11:00:54 2026 GMT
Not After : Apr 18 11:00:54 2026 GMT
Subject: CN=aaae3e2e355a8f9db8408861b4ba883001f44c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:48:80:79:9e:09:b7:a9:9e:1b:8d:1d:5f:
ec:85:ab:f2:f9:6e:50:0a:03:f0:c4:43:ac:f2:5b:
a6:6c:d2:46:43:c6:70:f3:f7:3a:8c:70:13:56:45:
84:92:8f:42:4e:fc:ce:51:a4:fb:2c:8a:50:b0:61:
fb:62:4b:74:60:92:3a:43:94:fb:59:40:f2:04:d8:
b6:99:16:05:09:7e:44:78:12:8c:78:b6:91:f6:59:
dd:9c:ea:f7:95:eb:f6:5d:30:e9:77:10:5a:05:af:
3f:59:11:bd:f2:28:d6:31:2a:57:8b:6c:c7:08:e1:
de:d1:e9:86:da:ac:a1:45:0f:be:55:46:7f:70:78:
c6:37:7f:39:9b:93:9b:c5:3a:9d:dd:6c:ee:95:af:
5b:b1:b2:21:03:4c:94:f6:3b:64:bb:eb:2f:ca:5d:
6e:36:29:66:4d:1d:73:39:1d:ed:d8:79:88:1d:70:
4b:3e:c2:35:9c:0f:37:f7:e7:21:3c:0c:c1:43:bd:
c8:b2:ca:e3:40:28:4d:7d:45:d2:48:f8:33:f7:a1:
27:74:53:f4:de:59:53:b1:6a:09:50:a7:f8:57:e6:
b3:79:49:f8:47:d0:40:fa:3a:ae:c7:41:a6:ef:8d:
27:a9:58:dc:65:ea:f9:17:9b:41:c7:0a:07:de:5c:
26:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AE:3E:2E:35:5A:8F:9D:B8:40:88:61:B4:BA:88:30:01:F4:4C:0A
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:09:fd:fd:07:e9:95:f1:bd:84:fd:17:ad:75:c4:44:8b:ae:
ae:45:53:97:7e:b7:75:bb:d0:1b:fb:f4:79:c0:af:f1:60:4d:
fa:5c:12:4e:f9:b7:dd:ed:57:5e:2e:20:7e:c7:5f:7c:7b:02:
bb:3d:be:f8:f7:65:d7:fe:bd:d0:b8:42:81:67:53:de:44:97:
58:f7:27:39:33:ad:2d:05:78:dc:4d:80:fb:d0:7b:2e:e9:ed:
9f:67:fd:f3:46:eb:d1:fa:9c:54:b3:61:1f:94:15:a8:aa:84:
f2:4f:53:91:bb:4c:86:c7:e0:34:47:b3:b1:e4:87:58:3a:c4:
75:54:a2:be:ed:02:59:c5:82:6b:99:d0:00:bf:94:07:3b:c8:
24:c7:35:ae:86:cb:82:97:12:b0:ed:3b:d3:d3:fc:ed:26:0d:
2a:56:27:02:aa:a2:29:4d:d6:c4:93:c2:ef:a9:6f:e7:c4:eb:
e7:66:8a:f0:5a:56:a8:21:b9:85:22:c0:48:f8:77:e4:a5:12:
0d:64:ae:56:c9:d7:cf:1a:4c:63:92:e1:eb:d8:8f:d3:5d:d4:
df:53:95:56:d5:bb:72:be:67:eb:8b:fe:6d:d4:6d:0b:40:5e:
d1:73:e4:31:a5:46:25:a0:ea:8a:5c:5b:1f:57:7c:66:0d:12:
96:f3:d7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:56:16 2026 by rpki-client