
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
File: 1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json)
Hash identifier: 9b1qYGc1aY9xN7SdaC074M1bBOG+67Jh64GOwI3YbtU=
Subject key identifier: 1F:BD:06:A0:5B:40:48:B1:B9:74:A8:9C:36:8A:63:48:F9:BC:96:A0
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 019D9A06D98EE1247A6B1E78C367D32FBCC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
Manifest number: 1598
Signing time: Fri 17 Apr 2026 06:00:33 +0000
Manifest this update: Fri 17 Apr 2026 06:00:33 +0000
Manifest next update: Sat 18 Apr 2026 06:00:33 +0000
Files and hashes: 1: 04AoVxjBetq6uzr8Trjx1RVUhaM.roa (hash: Sss0a/NwObdXT4eZeD2s2rS/zf/fTumkYihBh1YTsso=)
2: 1-EC4g1z7TKmKDC6BMJKVgcX5rqM.roa (hash: VN5SDY0+gW7ILuHoqlm/fJEeG3YnPoZJ808VzHVdxfM=)
3: 12-QpuXSG6_8hdl7cf1qgoYRbQ0.roa (hash: mN467/7GywnhA1L7FMjs4ZJkbmIwDxnvQEUBR43WDpM=)
4: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: TIKL0mLu75XUwdaFFQ6ocxs4KXN9NN6iLfHMyjq9yYQ=)
5: CVL1CK8Ow2cSKBowHcHY0tF8Sjo.roa (hash: ld+tNyBKiP3cgMuyEV6zi3LHUSVViRV1Xe7EeZEcgOs=)
6: GvCaLEMtreWe0TE7iBl-Fn1BAQU.roa (hash: Orxttow5nHsbqOjaRE9vUN+mw4qCsQAWnb1ehA7+MP0=)
7: Ipx7ZW4ku9jbIsLnJ7YdfGPhKwo.roa (hash: L5paJbyh0KobKYZie3ywNQHCitW9V1gxFkZu+lLubKY=)
8: LYO4EVL97axXFG4_1JIRGo_Gcr0.roa (hash: M8NjdLPy4NRB155rg30Ob5fe1Garsp+Fkc/ASUzAL08=)
9: NZPmGfMlXNXVCIzj2BQPnQI3e_8.roa (hash: zE5S0+ZJF7WaGLugEvIAwCS9/+Sc61x6ImWftYSyXwA=)
10: O18vIz4ADrWfyTjWv9lwIBf2Q6w.roa (hash: 6t2fxSf+Lmbr9jOdSKExEayPddEKt375FWmUM1ayblc=)
11: OmMFI95X2qnhZDKjI6slDjGRNqk.roa (hash: Pn7MijhIBVlC/zjDS4+PEDcrihjLjcsRGTtxI7Cgocg=)
12: SKrkFUElNTW-RJXzA9GZbuLjByQ.roa (hash: o0t432S7k6ID0P9LUaLorXFdDHZox3y0pV4ne0vCm/w=)
13: SgqvO9qBL1fWo3aBJRZpGp4K-S0.roa (hash: BHxiE3ULzbcJ44lDjqkW1hve5g/jINED6rwFK00YXx0=)
14: UNh9HBTbmAczkdMFcByOEAYWU0Y.roa (hash: W4lijVHAWghHFrkC7iuPEmv32YE3H28oL8DpFRFvg/c=)
15: WSvHFGzj7Vgob_0_S9OtU-eYECo.roa (hash: wV4wq5Kwh3/1RV581fA5ENpc2zmKMDZQlEmeVs08398=)
16: bHsFJaLyCQLt5X5fjeTKRh55ODY.roa (hash: DVWoYx/VlrYQI2tOsueyBqYwG1Fx4jRd1Wy2fvfG26I=)
17: dhB_IkqPVgi3yJTzlaxBzpa9CMs.roa (hash: /dJFhGziZtLlMMTjECful8AqChnK1t2jnoBopwI8PGs=)
18: djZFkLkOP1i4A3QD0iq7FYfbH8k.roa (hash: Ke0UPwLsbzS5tVeJA/RZ8i1nwVPlXEw7kayqjUa+RnI=)
19: e4WdAxYOOZhI1HUnTBJUvTzFLcc.roa (hash: BxWMVdjBecDx+1X50nR2tWLJ9Ko6bUO8kFQ40XFyRn4=)
20: fzXSzzRGH69X9HG_DPX1UIdlnMc.roa (hash: 5e/q/Of0/VbRaI+58tUil5lHG2B8yQNHwFd7IDN7AnA=)
21: hitEbIx3QHgLDA0SFmdJO655wRk.roa (hash: XH2gw7V46PtDEZkxMpXOiXnwxoLCx2Bsx6+D3IRPEM0=)
22: rZRJXwJNJ3BfK_DT3CgjF4Gzyag.roa (hash: rFZHyfSVT5PCl89WaarZZiQd7lJ5nZroQNMf7o6RjwQ=)
23: rfIN427V9zPCMZ-z5PwfYOKvWvE.roa (hash: /rLACCeghRFqZopyBKHtIJ9ZVC/Uf5aLpLTNEVJcleE=)
24: t3pdRfKg9vRZuho18SU4sz61E8E.roa (hash: b45C4gL+ScH3KExCK0HAfDIRzNCHEOb/I9PjveaM9Ys=)
25: xQ0hxU5h6aCqKoBozq3lc-OZvS0.roa (hash: dqVw1zy09p9At+bsRY80wcRAlgN5UMI3c+HTy+z8Ljo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:d9:8e:e1:24:7a:6b:1e:78:c3:67:d3:2f:bc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Apr 17 06:00:33 2026 GMT
Not After : Apr 18 06:00:33 2026 GMT
Subject: CN=1fbd06a05b4048b1b974a89c368a6348f9bc96a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9e:42:e8:06:4a:32:e3:0c:b6:33:71:05:c3:
64:21:a7:c8:5d:c9:e4:40:2c:66:50:ef:c2:60:2d:
5e:c7:30:4b:44:91:99:d3:a2:76:b4:b9:7c:60:39:
b6:21:98:cc:95:c2:c0:7e:73:19:bf:11:7e:cb:eb:
4a:4d:cb:04:f2:70:2b:dc:33:8c:46:02:2b:2a:55:
2e:79:fc:b9:e5:28:a2:35:3d:78:e4:66:e2:71:d8:
b0:ab:5c:2c:01:e6:8e:f9:d5:14:f8:83:b0:a5:21:
11:06:2a:f0:b5:b6:a0:a7:47:aa:d0:97:46:9e:bf:
61:2e:2c:8b:cd:76:96:1b:e0:55:6d:9a:a2:6b:fc:
1a:ac:78:bb:0c:ad:06:bd:34:32:04:34:89:3f:71:
54:05:00:66:c9:3c:c7:99:3d:6a:b7:3d:e4:5b:39:
19:c8:5a:c4:96:0c:c8:d4:8c:f0:52:d1:79:d4:2a:
e5:15:a0:7a:45:1e:70:1c:6d:ba:f7:3b:bb:39:74:
f0:19:a2:68:cd:05:69:77:af:9e:75:30:5c:b3:83:
f4:b5:61:88:00:bb:1b:9d:5c:39:9e:1d:64:df:06:
1c:50:a2:45:cc:bb:80:49:ac:b0:ef:d4:90:c8:b3:
1d:c1:ad:5b:e7:62:8b:22:86:65:23:4e:24:6e:77:
43:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BD:06:A0:5B:40:48:B1:B9:74:A8:9C:36:8A:63:48:F9:BC:96:A0
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:25:dd:e7:7f:07:cc:4b:a5:28:55:3a:f1:05:4e:3c:b8:f8:
9b:09:9f:f3:fb:39:52:e9:ac:58:6e:4c:ed:2e:91:43:3d:52:
ce:f8:ee:c3:65:44:47:61:22:33:91:ed:62:96:78:f3:24:52:
b8:51:c0:e1:d6:73:9c:bc:62:29:63:c7:22:a4:19:c2:1e:17:
c7:1a:40:3f:89:61:cb:51:cb:eb:f5:6a:ff:20:1a:70:34:ad:
65:ae:85:15:79:3d:90:e6:fb:9f:03:44:ce:1a:63:ed:17:7f:
3c:43:18:3c:69:93:ee:a9:b4:f5:c7:1f:08:c4:03:01:50:5b:
1d:7d:da:f5:4b:24:84:1d:06:e4:04:70:7b:54:33:2a:d6:77:
2c:8b:a5:4f:b7:a4:67:c0:8c:f8:7d:c3:4e:10:08:9c:75:91:
08:1e:06:a3:24:b3:8d:17:fe:5e:dc:6f:b1:b3:fb:c9:78:53:
7f:50:84:b5:6f:bd:58:af:cb:62:b0:2d:86:9d:5e:2c:04:aa:
f8:10:f2:cf:2c:89:6e:87:b4:34:28:3f:e5:5a:fc:c2:4b:5e:
4c:34:42:19:48:3a:12:6d:09:4e:a9:2f:17:49:ef:e4:d3:66:
07:16:ce:6a:3a:98:e3:e6:b6:32:39:0a:40:b7:ac:dc:9b:71:
4c:32:59:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:08:38 2026 by rpki-client