
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
File: UFkuaIlccGi0ZVUIkXrVu929Cl8.mft (raw, json)
Hash identifier: jjUIOKX1GgCwdDMSjaZuZpUMWjkGUEKlSSnV+dBvId4=
Subject key identifier: 2B:32:8F:54:38:98:DE:98:D0:DB:DD:47:46:34:3A:1A:94:91:C2:B2
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 019CAAFD690FF8A765547D029D619E149553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
Manifest number: 1884
Signing time: Sun 01 Mar 2026 20:01:00 +0000
Manifest this update: Sun 01 Mar 2026 20:01:00 +0000
Manifest next update: Mon 02 Mar 2026 20:01:00 +0000
Files and hashes: 1: 6cPzePL8SbPhYxlEre30SLCYl-Y.roa (hash: bpE4jQ6I0nBPjXRqOCXt82xgQ0N1iRPYG2gk58BlGfE=)
2: 7qKC_f93I4x5vZAkFd7YPrFcC7k.roa (hash: Fej8whp10bdKNIubAsMMxHxf8nDoH0W086yoYql/4Y0=)
3: AglMX7mwwb3rspJEIopyVPwTx-E.roa (hash: S+AWhAQbQR4GQpkHiPCQOCsaczJj/pHTNHnGM4CmrlA=)
4: H02yV6HgXbkB7Sblo8iq_zMpEUA.roa (hash: wdaj1AYOG7ohn8sLP/a8ErBCpxjqgUG9MpQNoEmcpoE=)
5: MNvipI6k91242S53W3jqVcArQhc.roa (hash: 7sDpPYB99HElo2KA5xuF+lvuTcscLhsFKunpulQrN5o=)
6: MiUKM4-anjUIiLLo25o4aW1endE.roa (hash: 8GJk2lpNvqF8G6oHGKOgI8d2pjeWdDUhOm/xZPhFJK8=)
7: NFAuHU7LF_HyqchSKTj8EafONIY.roa (hash: 6n1a8gPcx7eZe6weWqKlrMFgR6RhTx10TMdXBJFAWF4=)
8: UFkuaIlccGi0ZVUIkXrVu929Cl8.crl (hash: PwqplAS49gxYlB+033Or3ZNmdB5F96jrnQrpiKD0cJE=)
9: WFdUi3XXatfTABnfBpngGAHzARo.roa (hash: kKjPRwwZCBaY9u1h1EFLYB9g9DPTFuUTOwPzWAxE6M4=)
10: Zpq31QxZEBIlYUReZR_zQ9fqz_s.roa (hash: kvahSoEODcR6XaCVi1n2GMeJPQJl3cEsFyNEhPCk3BY=)
11: bHuZc9mUYBcqpEDyA_8H3U2OWFM.roa (hash: LIqVQ9mxztvdOqUbAJcArQV2MAsX+TwnaJ0MIMH4BK4=)
12: dvCXrpuIgKHCZtQqB3diL4N4JNk.roa (hash: fvscbXWy0N/msqi2rtIwXgUHt2kq1AX6g+9LTX7Mfrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:69:0f:f8:a7:65:54:7d:02:9d:61:9e:14:95:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Mar 1 20:01:00 2026 GMT
Not After : Mar 2 20:01:00 2026 GMT
Subject: CN=2b328f543898de98d0dbdd4746343a1a9491c2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:82:94:8f:cd:f4:d4:8b:b5:bc:2d:af:4f:92:
ac:ff:d4:26:e4:bc:2a:71:b4:c4:0f:2b:61:29:a0:
a5:54:b2:42:6f:a1:54:e3:c0:56:a4:b8:8e:01:f9:
0d:0a:5e:a8:3f:65:b2:7f:24:c4:a0:d9:d2:fa:06:
c4:5b:e3:f4:dd:f9:de:59:f3:eb:72:9b:62:e9:b9:
ad:75:3c:23:62:4c:2d:18:aa:92:15:85:31:9b:5d:
93:2a:fa:5b:83:66:8d:9b:13:e1:33:ea:b6:63:f9:
22:d4:53:90:1f:98:fc:1b:e7:26:db:be:31:82:1f:
24:9b:62:6c:2b:c2:bb:46:a2:a2:79:d9:72:b0:f5:
2c:f4:a0:30:d9:b7:39:bf:6c:d3:6c:bb:22:a1:d8:
d4:34:19:cd:b0:4c:0d:20:77:90:c5:e0:af:6d:18:
c4:91:63:fe:87:fb:09:0e:8d:b1:27:8a:0b:33:31:
3f:37:8b:95:45:80:08:cb:4f:77:36:bf:5e:ff:3b:
1a:48:cb:58:db:49:ed:b7:20:bf:9c:85:43:69:56:
76:9d:d9:6a:7d:a4:8e:66:51:b5:0a:da:0b:3e:d3:
9b:af:24:43:39:27:5e:14:b2:b0:b1:4a:0c:b2:14:
12:6c:88:b2:c9:e8:d4:58:67:be:78:35:d7:14:46:
5d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:32:8F:54:38:98:DE:98:D0:DB:DD:47:46:34:3A:1A:94:91:C2:B2
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:88:13:0e:db:7d:8e:43:1b:1a:bf:ab:33:c7:c1:c4:cf:e7:
f6:f3:65:fe:ee:dc:5c:4b:31:b9:50:07:74:a5:4c:4b:a0:1b:
a7:e6:b2:1b:73:28:cb:02:88:68:0a:5e:fe:6f:3f:d8:9c:a3:
2f:0d:e3:39:57:9f:bc:77:87:ba:02:2d:2e:68:89:fc:e6:aa:
89:4d:ba:14:e5:68:d5:de:4e:9e:9a:2c:ce:00:66:4e:a7:d3:
dd:91:c9:4b:d6:8d:bf:0a:3e:ca:bd:ad:eb:7f:b7:5d:46:68:
8d:94:e5:8f:79:09:f6:1c:5a:2c:06:5c:d9:4f:ce:2a:fa:35:
b6:28:49:a1:6d:a2:99:88:1b:f6:34:4a:e8:c7:9b:42:94:f7:
10:50:cb:1d:5a:c5:b0:9e:10:62:45:a0:74:bd:dc:21:85:fb:
ef:6d:f3:e5:fe:88:b2:03:b3:da:ce:22:4e:07:8f:d2:4e:2f:
9b:e1:bd:5d:d6:10:90:78:d6:e3:50:25:50:cc:d5:72:1e:1f:
56:ca:b1:3e:63:a2:11:96:8b:b9:ca:0d:9a:0b:73:f4:0f:df:
45:a7:66:05:b7:28:65:b7:9c:ea:08:21:e6:27:af:81:21:4d:
b0:8b:d8:20:a2:54:8b:db:c4:40:e4:97:39:07:73:5f:bc:cb:
62:25:35:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:56 2026 by rpki-client