
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
File: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft (raw, json)
Hash identifier: kx+zFSb8Mafca7HQO2e7u0TNDQnFfQP+qfFWdNKd1KA=
Subject key identifier: BA:29:D7:BF:F3:09:22:7C:53:53:26:84:A2:20:B9:BD:5C:0E:B2:2E
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 019CAB33DE388A68EA85E4590B80AA9C68AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
Manifest number: 1860
Signing time: Sun 01 Mar 2026 21:00:28 +0000
Manifest this update: Sun 01 Mar 2026 21:00:28 +0000
Manifest next update: Mon 02 Mar 2026 21:00:28 +0000
Files and hashes: 1: 1utoEShH5AmTt79y1zx-Gta_IU4.roa (hash: ORpna8ZAvXV8ys2iYurxCqgk2LCtS/yxIeHlBJ5A+tA=)
2: 1y7xTrL6Zi63EaoYq9pgRa2ZmlQ.roa (hash: x6v+XwxnZ+9V385BiBIu0MPWBYFFND0ofcUwqGHURxo=)
3: 3ASjA1q8ARIV2ZYv3dMNfit6u3I.roa (hash: 7NA9a/ZKJFAsJurJjGE4qQlN7WKcef8AvmYKofmxtdA=)
4: 3wThh6CKhn_ncQErP2xOaMw46vM.roa (hash: U/vQzD8zfdM0QCfGbqv0YkKIdI6EBacCC74VpNhb6LI=)
5: 4krczbw6OIfHLsE4rx_N8Co4yOw.roa (hash: zxKlKv1GZqpmDDrZvXoufwn7GqO5TPnVqQ8ZVbSEX/k=)
6: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl (hash: 0y+1fyZFfXvSugXEXUEHiwDnlyhq/oXoDvUU4yYPuTY=)
7: ADSCFOnjMJLAi_8BKddA7FSJKFo.roa (hash: YTUiHXsQfmeuHGdgWhbD4DOLIxz6/HL1IPSKvOV9r04=)
8: CI_IbIiOr7bX2nxFp9oik4WuQKw.roa (hash: LoeO3X2rVxLRDsyO+eMBMVv3AZSWcHWTpYLzyG6GgFI=)
9: GnjgrlX5ldq-8V0xMtEgsEXb8K0.roa (hash: 7TO2wIfe9IgC+RH76SDWjU1AztJO8iq77EyqtjbsQmw=)
10: GzMKu8jXjKBUVxDX-5sQgFMQgJs.roa (hash: 0LE/1Wb9HCROg7521ihQ2bGsxl+ElnIJTcDjDH1Uxqs=)
11: Ho6mNf_9Z2hzoXQrFFuu_J0WfRM.roa (hash: Oprieq0BOhCbckP7sqbHtzOf/Mysy62W8N4pVZm/UiU=)
12: K6IhTrUZclyMeBVpYLNDvb8TUbg.roa (hash: 72NmOOFBeGJuzIR1SE1cUuWu7D88rU3xoreFGRYXduw=)
13: KS0FVLSMGfWzQdYtQuL8y-oJdD0.roa (hash: bFjxw1lHEJZaqaMp+L6ugQRb5WaLfdFW4jxueW8cRcA=)
14: Qfk4KZDN_NVec0Fh5jidYk7fEsM.roa (hash: WIiLwWhQcJYVRWRpVwBUqqxiCRvroZi4xvJ2AYsOSJo=)
15: QqOV1t_rvWgp7d8XnXyjaPwjar8.roa (hash: tOqX3TdeefdEULHlf/6xKuTSxXbTQGcNvDfPoledb9E=)
16: UESPvkGn40lC_qnNZUih916lSYA.roa (hash: wn/Z//Pr0RHYOOOY6bI6NqL/aVXg8hzJxv1NUOW+0pY=)
17: WQgnD-JktijZnRhzkWWmxreQGms.roa (hash: bt7fHkMyPJ2bu7raN/9QpGM2Pefyuc7nqym8N0GRFqM=)
18: XnhnoeUHsuoR4mhcctsEjt9lvMg.roa (hash: /V0gM4qnoLR414oEzXK8LbL+H5gHt5BmuPHE3nwesY8=)
19: ZtShHMz-REHUe_J3G7Tmy5eaDh0.roa (hash: Fy2XCkK7ctUyF3V7KU+txzoLT8gfSrRwreVPim8LfHI=)
20: _hJ5inVCuiRHr1ByD9sfswwfeDc.roa (hash: chkzKXrbHJgb52YpJC0UJmLYGqQmDccAXemw3TUuxDc=)
21: a6YPy8t2smPnddF-vAybhOouYkI.roa (hash: 2VTnHbp49NXPzMqgsIFYWCQ+9Ms6/ReLgmJTyeo9QTM=)
22: bv5xG98RESJXrwU1xeck7PUBsio.roa (hash: 8309DITknQ+X1sMxvcKqt7keYSOvkVj+qcP2H19wns8=)
23: gC3rqU1DQllcWWxpBdLFhPfJBRY.roa (hash: GquGRvoP/5ANJWdn0l9uPSHphibPvx3UXVQbIIbaOLU=)
24: gW1uhT9HvHgWpqxNHFn9zb_bckI.roa (hash: yv2SpzaNQSnqQxF5j8oS7CnPtCJZkjwS6Ua4y5pKnjw=)
25: gnDuj3azpU1wiHZUf0f93N7QjnA.roa (hash: E6mUU2oB8TEHtnH3EsNLe+0P+s9OunlKpVDohgw7f1Q=)
26: gzIiWHGRR93M4EeKSxyFElEnzfQ.roa (hash: P6od455G5jZ5lUgI4sqFMNPmAnYBu1OSIcRyPwUOGuY=)
27: nf1SgFBUZCq1g5bffJRLfEK0Wy4.roa (hash: WIZOSDt0Es9Gm8CvqlkZaoIujiZBkOCxPKGB1dEZdbA=)
28: sPKozshk0dw84yWnLecAcY4Jsz0.roa (hash: CVBUXh81vA8yv2uJ0Pq3RtuahHuKnl7ugAr2hYXTx7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:de:38:8a:68:ea:85:e4:59:0b:80:aa:9c:68:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Mar 1 21:00:28 2026 GMT
Not After : Mar 2 21:00:28 2026 GMT
Subject: CN=ba29d7bff309227c53532684a220b9bd5c0eb22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:75:63:e0:f7:95:81:40:78:10:54:61:21:
28:9e:03:d5:08:f9:2d:f4:39:3c:88:25:4c:9c:ec:
7b:fc:73:b9:2c:0a:ca:9f:a3:60:8f:9e:29:91:c6:
5c:4a:fe:29:b7:4d:b2:3d:dd:09:d0:d4:1f:98:d4:
0c:71:eb:a2:d0:6e:6d:24:6e:63:cd:d4:e0:df:95:
ac:c3:36:ac:aa:cf:bf:33:f6:82:fd:ca:88:55:4d:
83:2c:88:ba:03:77:f4:b7:f5:4d:91:2a:54:88:a3:
d1:a4:0d:ae:67:84:d5:7d:f5:a8:fd:67:40:39:a6:
97:9a:3d:fa:e3:a0:61:ae:78:19:07:28:63:ec:53:
ae:7d:8f:92:4e:99:57:4c:c0:44:10:54:91:bd:ae:
17:de:77:a9:85:a8:ff:f6:85:38:a6:4a:e6:7a:c6:
4e:ff:1b:53:8e:12:79:5c:40:46:d2:7f:c1:ad:45:
be:e0:92:64:6d:2c:62:e3:22:82:10:df:40:f0:dc:
43:a7:35:60:8b:d9:19:e8:88:e0:5d:d3:8c:19:7e:
fa:60:d9:a9:c9:be:7a:81:1a:bc:84:83:0e:70:3d:
82:df:dc:a5:fe:cc:43:f9:98:80:8c:90:56:36:ea:
e1:f8:09:18:85:ad:8c:f7:3a:b8:91:20:09:39:10:
79:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:29:D7:BF:F3:09:22:7C:53:53:26:84:A2:20:B9:BD:5C:0E:B2:2E
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7c:01:6a:2a:f4:9f:de:85:be:0e:19:a6:5a:f3:c9:85:d8:
5b:b8:33:a2:35:c0:0d:ae:9b:fa:7f:1f:4e:33:87:d9:1b:8a:
b5:7a:d9:bc:a7:e0:44:57:07:ab:bf:ea:29:df:b0:ce:bc:f2:
1e:57:d6:b0:ba:b9:d0:8c:5f:5b:79:20:34:25:af:d3:43:39:
93:aa:8a:76:6f:01:71:0e:ee:c7:73:a5:b4:f8:c5:3a:0a:5c:
98:04:27:b3:c2:41:a5:ea:af:00:bc:2c:15:3e:54:65:94:b4:
b9:27:4f:b6:aa:34:a0:92:54:2f:c5:36:50:68:2f:e2:5b:e1:
09:4b:df:3c:0e:c6:b6:b6:70:74:c4:5b:c5:3f:ef:26:3f:40:
dc:c9:87:8c:13:d1:37:35:03:9a:e6:32:fa:b7:fb:92:c4:80:
ec:46:da:e3:ba:6a:00:75:29:a6:6e:6a:2e:ee:06:dd:8f:5b:
65:3d:fd:bf:9d:28:45:1c:7f:f0:32:e7:c6:4e:c6:9a:7e:1d:
24:a5:20:25:eb:32:f3:1e:ca:32:8b:ac:f7:66:d0:b2:3b:22:
a1:e0:6d:0c:8b:1f:67:f7:5f:2b:f7:df:92:53:92:ba:db:e9:
54:29:1f:60:51:51:44:56:5e:9a:e3:73:66:ca:3a:c6:4d:49:
8c:97:d9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:36 2026 by rpki-client