
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
File: sMIK4drMoxgVsnRwKSfBpanbx7M.mft (raw, json)
Hash identifier: OTte+l1DuwtjkFU5mm1YZXoPP2alwrkXd92Sly2nCUA=
Subject key identifier: 88:57:D7:34:CC:6F:86:5D:59:35:E9:21:15:E1:76:75:BC:6F:13:E5
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 019D992B1232AB4D982CCAC2A5915C457987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
Manifest number: 18E7
Signing time: Fri 17 Apr 2026 02:00:29 +0000
Manifest this update: Fri 17 Apr 2026 02:00:29 +0000
Manifest next update: Sat 18 Apr 2026 02:00:29 +0000
Files and hashes: 1: EcU0CNE-IiMWy4rJBEYnRcLjWlg.roa (hash: huHb9cQ28qENRbxt4Jo9X2c4RoM7avLuE+mizVHLkVc=)
2: FFAXFP5ez3X5u3h1IVAvcRBfHk4.roa (hash: OODOGsmCz6Qm7uE5z8GW3j0W0K6FvMl33OoYR/8rp0M=)
3: Hx4xdNwCvgB9fLiWs9xvE8usxW8.roa (hash: Y7e1WnGcVWNvFMUYbkyeqz5FloZW76Eh6KqSDa6fAQI=)
4: IwxdusqS3Ab_hpHPJ_FWRPbtoeg.roa (hash: H55puMmQB5OWgkG+g+z4d3V7omo2rQK1VzH3hQXYY3o=)
5: O69azZLJgNqAunz5z_lWfvgC56o.roa (hash: y+mBalpZhDFTPhkJAkGyUyBVLw40n3SmTyy9Fbh3dKI=)
6: PSaX76hLXCC3HwZfR6n8D2sk5yo.roa (hash: /hW3Ol8jGkzLopkuNwrc+rk1t6CwIFcpRCLkUh52Nz0=)
7: Ql1YFiUReCktjzOXgcJSrBSI6No.roa (hash: USou/kCPcPW7NF+NsAzNyLXe0GEfMruJyzGdt4jQ4H8=)
8: WoJUK_VlF2x2Y6RewR1W0jcXELM.roa (hash: 49/N0yckcfgw+Jpt1B3ZylVpCRtLmR+tToTlhzbYrNM=)
9: cLJsj5GbZFPDLqBTAGoEw4keZjc.roa (hash: ONjTw1gt4vqkoZ/+zv3GVV+vpr1bahhrBgTFsZguWy0=)
10: sMIK4drMoxgVsnRwKSfBpanbx7M.crl (hash: hZtcLWtGwRm7e+XeV9B1v5aFyE9HonX6XGJv5XhggYg=)
11: srs-2gJxDmgBkFBU7WzheGqpBy4.roa (hash: M8sahyn+CGhviykxLGO4OXGDUGLt5W/3MG5YlWrxi28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:12:32:ab:4d:98:2c:ca:c2:a5:91:5c:45:79:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Apr 17 02:00:29 2026 GMT
Not After : Apr 18 02:00:29 2026 GMT
Subject: CN=8857d734cc6f865d5935e92115e17675bc6f13e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:01:38:c6:5c:1d:1b:72:9c:3c:c9:28:f4:15:
81:17:93:50:e9:6b:25:84:bf:31:04:7e:00:ea:ef:
23:d4:59:42:f5:c9:8e:e6:a2:b6:54:c5:1f:f5:8e:
42:e5:d7:89:e7:18:4e:89:52:ff:88:5b:ec:33:08:
26:dc:71:61:c5:bf:1f:a3:86:69:7b:41:ca:a7:d6:
93:5b:9f:8f:1d:27:fb:b9:1a:fa:f6:94:a7:7f:fb:
a1:56:b5:de:f5:21:47:57:32:d8:01:9b:42:a2:5a:
44:b1:e5:e5:ef:ef:c4:0c:d3:bd:fc:02:19:0c:ff:
fe:23:28:d0:00:c4:0d:52:3b:dd:01:c2:d1:73:9d:
b1:8c:89:fe:53:b5:28:d9:7e:35:26:02:68:0d:93:
b7:0d:0d:da:04:1f:66:c6:24:22:78:f2:8d:0e:04:
c3:80:6a:a6:6f:aa:7f:f7:10:e1:02:94:35:26:b4:
e9:5b:7b:f8:be:21:53:54:67:1a:84:9f:9f:20:06:
55:03:c6:99:de:4b:f4:92:ca:e6:ab:92:9b:23:7c:
ef:09:9d:07:dd:09:01:78:8c:22:fc:df:35:00:a8:
7d:93:12:cf:98:cb:dc:f7:4f:9e:2d:de:ad:31:fe:
68:c4:32:96:f0:da:82:d3:b2:71:3a:03:88:f7:f1:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:57:D7:34:CC:6F:86:5D:59:35:E9:21:15:E1:76:75:BC:6F:13:E5
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0a:d3:e0:af:1a:12:74:78:67:56:6d:7d:97:08:d6:de:ef:
24:72:49:f8:ac:2f:94:26:43:3a:6c:9a:fe:59:7a:a7:d2:59:
94:67:97:db:ec:16:e1:a0:2b:92:0b:70:08:85:bf:a5:8c:bc:
a9:f7:aa:b8:21:94:d2:f2:45:16:38:d2:96:bb:bd:e4:ea:22:
7f:84:74:a5:08:e2:20:fc:e2:c8:7c:99:a0:7b:76:59:10:70:
d4:11:cd:bf:c8:78:16:b2:88:e7:c6:d8:20:de:a9:8f:5b:43:
03:cb:03:15:8c:35:4d:48:c9:7f:53:3e:22:ab:44:a4:c2:83:
77:b2:12:d9:50:54:fa:23:84:0f:a6:80:c3:40:37:30:68:a1:
d1:1e:e2:76:b1:1a:7f:0f:9d:d8:15:de:3e:2f:07:c4:3d:69:
46:f7:e5:e0:5e:20:a6:d0:6c:9d:99:47:a0:5b:01:6e:58:45:
bc:6b:86:c0:8a:6b:63:ec:4e:e0:f2:5d:75:81:8d:9d:03:5f:
c8:16:9e:c4:da:7c:cf:2e:78:a6:0d:40:50:63:00:cf:35:f2:
78:45:92:b0:1a:8b:d2:c5:33:a9:fb:71:39:91:52:ee:db:83:
ef:88:41:e9:ed:97:b3:f9:5e:3d:c3:c6:1e:81:7a:af:01:a7:
ab:92:11:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:56 2026 by rpki-client