
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier: YiFGzKQdXS8kaBLMI4W9lsKnzh/ibHd8EDhx0kbGni8=
Subject key identifier: FE:12:2C:AC:D6:0F:81:82:CC:9A:D8:6F:E9:8E:93:AC:18:CB:72:D1
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019CABD915EB142871A912AEE8AF3BE5623E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number: 075A
Signing time: Mon 02 Mar 2026 00:00:56 +0000
Manifest this update: Mon 02 Mar 2026 00:00:56 +0000
Manifest next update: Tue 03 Mar 2026 00:00:56 +0000
Files and hashes: 1: 0JjZ6nBL6aeXv09AdHrm0lx-nAQ.roa (hash: nAX22x5LZPcFuwmumoiB6l6vDoqVxTHeyYCue4WKY+Y=)
2: 1-fHKEGdQzHKJnoO-QxMVY_4pRE8.roa (hash: zDRe41xbopOMDmDagY2NOiL9+JF7qRmR3ODp2uFdORY=)
3: 7UOO4k4Zq2DJBIH7tWwLjr2nB-w.roa (hash: nTcrUbr5u/berqohC4ga7k6wljP1uQR96ROF4KN6bMQ=)
4: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
5: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
6: BS5IPpy602b0P9LZT_8NLf8j87k.roa (hash: rFpHzyrk3W9kwB0GwSUlANwsnD6QKAwk516vFwL56UI=)
7: Dp9nfao-Lu-2nBFo3SQ17XgKE_s.roa (hash: ftH8WXmCe7E5NBIPoJRYR7JenBvr3AQxF7w5t5Bh+jA=)
8: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
9: FsWz95bjpsQz09qkc-hQos-M0m8.roa (hash: 3XsppK5S7iL8gQ3L3NeC1DD01cY/1dPaUa81kDoWAKE=)
10: GLCGPLD2hC5F_Pc0a6BQBHqcuQ4.roa (hash: mZ//Pt6zUTFrir/wUF/TZOQPoUNgkHjZamNtXvnZye8=)
11: IsBBsngSbH8D8ll-zq-eILoo78k.roa (hash: IhxGipNDNaViG3gc042e0dM0fgWzrITGBsZ2jJSSTNs=)
12: KQADPW4owxweNKfg2K59-o0aLv8.roa (hash: K4s/3hL7SRQbmE+iSSxyvalPmcaK7KFBbuUY95NP3Mg=)
13: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
14: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
15: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
16: SqsOc_l_Byw8A63bMs7bGr5Csfk.roa (hash: yDuYEQpT9u0kVYnoDL0S45vkKwdy3kU/Xh9r8KwY0Mg=)
17: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
18: WuFVi91PLw1PUGyRssd2Q6yHyks.roa (hash: w4KZzG/sU1/9RMrXZYTWNuUrYY4VCLIF4AOLDV1SBW0=)
19: ZjezsyQwp__S_-4bnAPJityXs-A.roa (hash: KtcE3154yrRhHpULPsbebKDxYlMS75i4aRoAd7gorN8=)
20: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
21: d3URZqZU61DXU8Pxx8p7KdaQhTk.roa (hash: 0sFhnZDT3nptAp7FfkP3V+TkjPROY/IHl0rud0LuY7A=)
22: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
23: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: 8Nr2XYtbzrlKQ8XNaM/GKNxnBlyvVtI8zZL3fxeBTxs=)
24: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
25: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=)
26: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
27: xcfdLGMwx73rBrDSPhMoi1zff7E.roa (hash: TfS9qHi0yMcUxCZA9A/YoEU+5Wx9ewWvK31z5A1/myQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:15:eb:14:28:71:a9:12:ae:e8:af:3b:e5:62:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Mar 2 00:00:56 2026 GMT
Not After : Mar 3 00:00:56 2026 GMT
Subject: CN=fe122cacd60f8182cc9ad86fe98e93ac18cb72d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:80:e4:e5:f2:f7:fc:11:b9:05:2f:bf:78:
38:3e:6b:cd:be:a4:0f:52:5c:80:1f:24:75:a3:eb:
14:08:64:8f:97:dd:66:3a:d5:04:39:8f:e8:df:2b:
e8:81:76:9a:35:cc:91:01:0c:67:d2:4c:e3:46:ab:
66:5e:4d:4c:80:6b:34:e4:17:0a:df:90:44:47:ff:
a5:cf:bf:a4:31:72:05:cf:ef:eb:40:53:c8:7f:0c:
e2:31:d9:8f:4a:ca:4d:12:92:b1:da:3f:63:ce:c8:
50:7f:08:70:9f:5b:f1:47:d5:1f:87:88:79:5b:e6:
6e:8f:44:29:58:42:84:89:91:28:3c:86:16:e1:ee:
f4:72:c0:13:2c:96:43:42:5a:b0:7d:a0:e6:37:f3:
84:bf:e5:31:8d:53:21:dc:3d:28:d2:71:50:2a:13:
64:3d:e0:6c:63:82:84:e7:c4:3d:49:7a:17:48:fd:
31:83:67:89:b1:4c:74:e8:e6:cb:13:d5:89:7c:c6:
02:b4:d8:32:4f:d4:06:24:27:82:7e:a9:79:03:1d:
29:38:99:48:6b:5f:e7:0f:bf:f7:d8:9e:cd:09:47:
24:5d:47:f9:8f:b7:b2:a5:03:81:c7:28:cb:07:53:
6f:2d:e3:5b:25:af:5f:b0:19:03:83:20:4e:a2:1e:
77:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:12:2C:AC:D6:0F:81:82:CC:9A:D8:6F:E9:8E:93:AC:18:CB:72:D1
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:88:e5:02:b4:78:61:d7:2f:51:4f:b3:d6:9c:5c:eb:4e:fb:
7c:a3:89:fd:3e:39:39:6c:79:48:71:d0:7f:49:94:95:db:7a:
13:da:8e:d3:76:2c:0d:8b:e0:48:c1:79:6c:2e:03:9f:44:bd:
3f:00:75:ff:bb:08:77:b6:c7:ad:a9:7a:55:b2:73:2d:0c:1e:
cf:7e:d6:35:6f:44:f1:39:aa:09:5b:0a:28:cb:7a:7b:9e:98:
a2:f8:cf:8d:d3:78:07:74:dc:ee:46:ba:92:8c:67:fc:f0:1f:
88:e7:a1:10:c3:df:c8:11:f6:4c:67:72:4f:cb:77:d1:f8:72:
68:cf:68:69:be:68:f6:5b:a4:fe:7d:bf:07:a7:70:66:16:5d:
ed:63:42:23:de:3b:f0:7b:40:22:cd:55:00:8e:7a:e1:20:66:
71:b1:9a:45:06:c1:db:df:2f:42:c8:57:5c:14:36:c6:d5:b9:
60:3d:b1:c6:e9:9d:d2:9a:a1:7a:c7:ff:c9:19:b2:4c:43:a5:
69:49:fc:be:81:33:a7:c7:0d:11:d5:64:96:2b:bb:fe:cb:85:
a6:d4:89:2e:61:15:23:a8:10:e0:36:8b:91:77:7e:d2:9f:36:
15:8b:3b:6c:c4:4a:ce:72:79:f2:18:78:94:78:be:bc:74:b8:
a7:31:e8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:06 2026 by rpki-client