
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft
File: nZibOZjhn8APhnDPbJ10AXFc808.mft (raw, json)
Hash identifier: WRK1CRhaybyZhIrEJPYey4t18AcpJ1iymS7er5fw5b0=
Subject key identifier: 4B:89:D5:F4:E0:29:D9:97:6F:A0:11:78:CD:BD:42:5E:6E:A2:C5:DF
Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F
Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f
Certificate serial: 019CAEDA308C2246DB4B3DA806E4F751C0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft
Manifest number: 0340
Signing time: Mon 02 Mar 2026 14:01:00 +0000
Manifest this update: Mon 02 Mar 2026 14:01:00 +0000
Manifest next update: Tue 03 Mar 2026 14:01:00 +0000
Files and hashes: 1: 0hivjmx3zESdF4O-A2SSYqLGRzk.roa (hash: shH0/H2kUggaPw7GkO5zNoGa7K6ORDulOONVmqwNyzg=)
2: 34ts3PIYYIFWGi911YLJC_MNTy0.roa (hash: 4pjAppUY+fw8yDaAV/Qux+rVoBRiKl+Kw/H8kkGtDI4=)
3: 3iXoIa0Tnc6nSmaQlZwJpvHoBP4.roa (hash: 92O5pIZ5W4yGOk4rHe6wXslYmPaUdiXeWtRLQm4goss=)
4: 4BsASipyNhMfne7kcDB1nUMHv4U.roa (hash: gNxM9v4Ci9bVQzz6zMSsl4HxARtJa2mrpaEAF1ssvBc=)
5: 51oAIofJkFXpGxq0u0pMpGIor0Y.roa (hash: luFon6hTssLT0GVFCEnyosU6nzOcK0/WHgWU8mcIjfk=)
6: 6v6eeI5cY68j_2oFbpbr5jPTgdU.roa (hash: zqirwLCXgdjJFeXHZFQIYNjwkSF+pg6w51CqhX494MQ=)
7: HHVyXzUcc_YIy8baKZaV2Y45k38.roa (hash: ndUe7viQWWyFXFChfyWy877/Y7Q3qjUplP6K/mFzfDE=)
8: SodBob46gHvkE9f0X3aM1jnjv_0.roa (hash: USjt5jELYEu1iaW09TQw060b9YelZ/w0+6LrYh++vTo=)
9: bCcuJlZ7M57UlbvTbB3xJ5-RVYo.roa (hash: JYxMnFiCRaisfCjM99QzlqqTlxpJrwkoJa68usH9YxI=)
10: cHAy_4A-CMasQbGFupRjCXJRveA.roa (hash: Z5sX4UD5pwFqxzXI/4DJgcahhJVYCnCAo+Vk4S1WDik=)
11: fwIX4p6uDI8a1ig_uNG57F-CyyQ.roa (hash: sPu4yXxTGRc2nkq1SBHu8c/xRYRB8YjHSE2w/qhSkXw=)
12: kEgukI4x5ATV385AVFHglji0HH0.roa (hash: 7W67j4OKnAJPYfKA7VB2yMPYazX4qvOU73e4/HvQ//o=)
13: nZibOZjhn8APhnDPbJ10AXFc808.crl (hash: l8QGqusEo6HDWPUa4EaRYQtJ1IAjEaDlqg166j1faJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft
rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:30:8c:22:46:db:4b:3d:a8:06:e4:f7:51:c0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f
Validity
Not Before: Mar 2 14:01:00 2026 GMT
Not After : Mar 3 14:01:00 2026 GMT
Subject: CN=4b89d5f4e029d9976fa01178cdbd425e6ea2c5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dc:b0:38:8e:5d:3d:5f:3e:75:94:ed:ac:8d:
fc:82:99:7f:d0:91:a0:55:f9:06:83:e1:0a:ad:a1:
e0:16:8b:91:bc:f9:5c:0a:f9:1b:df:14:75:49:e1:
60:4b:52:ce:9a:5f:e4:17:e7:fd:76:c3:a6:57:1d:
e0:98:34:6d:51:e5:b9:cf:31:38:16:40:71:cb:2c:
31:c6:91:52:99:d7:b1:70:82:14:37:db:c9:7c:78:
77:81:3e:79:f3:8c:78:03:7c:45:ff:08:ef:20:ab:
94:18:93:21:2a:82:18:fe:46:7c:af:43:99:58:37:
9f:c0:f0:65:52:66:2a:a3:42:42:e2:28:02:75:4c:
74:c6:76:8c:f2:34:59:37:24:d6:31:70:36:10:00:
e7:f0:3d:e6:27:20:37:c6:a9:dc:12:87:ec:3b:19:
c0:53:8a:72:91:db:24:6c:11:d2:fc:3c:7d:95:0d:
7f:24:b3:db:6f:01:6b:ab:37:8a:d7:ee:15:c0:d7:
4d:d2:01:7a:96:d5:b0:16:b2:9b:c1:2c:bd:b7:2a:
3f:9c:e9:e4:67:57:f6:d5:ef:1d:75:b6:01:7d:49:
85:98:3e:cf:24:41:2d:9d:96:c3:c9:b4:f0:3a:e3:
16:22:38:a1:26:0d:c4:61:b4:97:dc:4a:c1:44:9d:
37:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:89:D5:F4:E0:29:D9:97:6F:A0:11:78:CD:BD:42:5E:6E:A2:C5:DF
X509v3 Authority Key Identifier:
keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:15:ad:13:6d:69:dc:3c:b9:af:6b:b1:c1:aa:48:95:62:05:
f9:67:ab:a3:54:e1:54:43:62:fd:1c:c6:c0:ce:76:0a:7b:59:
8e:ac:ae:34:a8:8a:81:06:f9:e7:04:4b:cf:3c:b7:4e:4d:b3:
0a:e9:65:66:de:a1:2d:b0:ac:98:07:c1:c2:0e:64:c9:b5:e1:
db:c3:83:c6:1b:5c:bc:51:d6:24:72:83:fa:4c:bc:d4:43:09:
9b:38:d9:1e:72:2a:f9:21:76:a1:31:91:de:64:40:d8:a6:cc:
18:9d:ce:78:63:f7:dc:71:91:ee:71:de:b0:1b:7d:3b:d9:49:
01:0d:84:bf:e3:cc:3f:ba:82:f1:98:6f:54:35:34:a6:31:1c:
8d:de:76:7e:30:6f:12:1d:6a:69:45:2c:24:c7:ce:22:70:c8:
3b:75:22:57:7e:76:66:22:a6:2f:75:02:ef:ab:4d:81:97:67:
27:04:75:22:0b:35:fc:7b:5d:35:67:2e:2b:b0:4c:17:4b:0c:
1c:71:9c:ca:5d:cf:6a:4c:3b:ce:34:7e:db:2e:33:95:3d:25:
18:91:73:2f:94:45:ac:94:4b:71:47:49:6c:49:16:0c:5f:bf:
03:35:42:3d:de:5a:c3:5d:07:57:84:77:b3:23:f6:f2:3f:c0:
c4:8a:f2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:11:08 2026 by rpki-client