
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
File: mh5pNoq9NFOP533aq83INa9ZXro.mft (raw, json)
Hash identifier: HNOYGFuLvAPDAoedLnKmIdQcMZwlyLtQPPySZLXUXQU=
Subject key identifier: 3E:AC:B0:75:38:46:36:52:BB:20:D1:44:86:4A:82:9D:CD:B8:10:DD
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 019D996306D3460ED805886CEFD884B09D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
Manifest number: 18F0
Signing time: Fri 17 Apr 2026 03:01:37 +0000
Manifest this update: Fri 17 Apr 2026 03:01:37 +0000
Manifest next update: Sat 18 Apr 2026 03:01:37 +0000
Files and hashes: 1: 2Hc4YFcU8ovqMtT3nDy_-Mmmpuk.roa (hash: By6JZckFdiOutj8o+6oMyXRB9HR4gdxFVnXhuj/iQm0=)
2: 2yaXAAUSdtsPMaSBJFquEdDTT6k.roa (hash: judwS/WZsJiXUyPGTQqvtLBMK0N9HxSeMb7YxOm0ElY=)
3: 3gGcFRvr1pwpGKp8J_owuE8piH4.roa (hash: NIgKE2RVbifnf8DXxCkQaZgBSHqic6iJrtoPDVmLBd4=)
4: 6d_ENWzH-VQ6PZSxBVnrr_FPch4.roa (hash: nLEVzgKnOcDJKPh426JAlzQMVVXnAa8GP6UiExx+ycU=)
5: Bfe7L2rRCwRxeEADyBmboJ0sWyw.roa (hash: jn4v7UaJGuF63x4KwRuVVxNuQK5XDXqr9trOmgkxfWU=)
6: CO3NGBtj6lvSDwNx7qgisnxcpZE.roa (hash: Ta+b1EmbPlRx8CBP3A/a0A01hRd22nzH/W3OVEU0ya4=)
7: DehND8NWso8fnWINtOcuecHBpxM.roa (hash: Gz26lK/lJI78kkVOCpMyQ4aBO2ZM1W96onuysw9+iUg=)
8: F40rkkhDW3ybCB_12cIOKOyXk08.roa (hash: h+hLlHz7DDayf/In7Q6RDRACl8fHTXkiC3/X/Kl3h7E=)
9: Jtp72CS2jEm3lTCDgWP7039dKYg.roa (hash: Q1Hpm3kD459iodRBV3umbkyn+j4+wiimsCk0/+2lO84=)
10: Ke0VSjrkP1jgta_WS5ntQtfKR38.roa (hash: yxWTZVrICzskJJpD6AIg7gNqPSzszPgc+Bf6OnBQWQw=)
11: Kqrj1I1nhBciDkKkCGbNHZhNTMY.roa (hash: a7/AaQlYcrFAkZVVuXf4+IUOGpcRC0INBiFnmBVtSx4=)
12: LnDxIxD-hluuct808CIO9EDyMIU.roa (hash: BcxRwhFwjkIGGKDrrvqL77SCEYThrU0rRvnjjzU14s8=)
13: MAhbKgRlvoF4_D9KUePJuDoAmS4.roa (hash: ZxoAbFForFx0WnVahVEJoAAhiXTlHQB8gaScqzkZ4UU=)
14: MOd1w7flMfCwv3SyFF--8p3elzE.roa (hash: EYwivvrV/eFyx237VqFEYH6spoOnfr8g4cHpOeBFaeU=)
15: McPz5S5PBhTWxGifH8fs1_NS2jU.roa (hash: KEIARx1I4vqfMuZP+WJZ2f9AE00BEAWPF5jqTraiMB4=)
16: RY84_ZI7xoALeQIscSY6f9kpXlA.roa (hash: z6waEn1aCDURcxsyuA7fD4JPp6J8E7kzdN0orgB/LDk=)
17: Rlj4VlWfwkfz6GkH-OueIIaSCuc.roa (hash: ii4MZTYhkg0ytZp/Vdsah05JAy4dduK8Ytc1ySn7mXs=)
18: SoVFcNc1lU_1SEfGUkw_ciUcpAQ.roa (hash: I90mbwCIchHVNf7BLD+pAvrY/vzh+76mAoOiyMR3xRk=)
19: Wu5XKk4A36HO6OHJ1FPfD_SFW8Q.roa (hash: BzMn4OoTVBTxxNmlLvxwZaB3pPDI9UpM0YGpy6OvehA=)
20: Zkjg3hn61JFL00ei8OTWJjwR5z4.roa (hash: 588yrYLogN7emBldqJ08eH+eoXXQ8TYe9+BBfSEy2Vs=)
21: _uRGOQez4F9IJ4Gje99KnY5dr8A.roa (hash: pCEJUwH1c1/puNRCPg+jE/RCxUnjqEhyrOo9cHXdY5Y=)
22: bXvBo_CQO1mQ2Jmfwik38TsSdgs.roa (hash: v3xzvBX/k+ZUQX7D1tuVRaHRVvVvUQdIj7NXDvVhP5I=)
23: i8o1wvAhrbjSp3BYIhISOUXvW1I.roa (hash: 4Iwgm5dU08CJdYBhUPj/wfHJLQ3KLg/J2wrS95smlME=)
24: icBjslH5ERqmqpU1USzkMdhkEjI.roa (hash: wMYjLB/rE9ycsdnG1IDtuH3D8/HkxmDfxjH3cnkuOvM=)
25: jb9SdOC3s-L1tQx9YD9dSwx4lm4.roa (hash: C4fwq2ctCqLfFVuzRmoqBvwlEei99AA0lShohKylmsU=)
26: kZx2IxBD5HOKLTGnyUCslhrff3s.roa (hash: Vt6Cc39kOpNIWweAmZd5zbwANosQpiB4xiB1jbdvahg=)
27: lnpel8l0zvHfaReJqv_lxZ_B7Z0.roa (hash: kesVe4OXCvVFnF3zB6nMGPK6v8LEXAUi0VV82fdI66M=)
28: mW7TNNKOcx8Asff3LA5hFbwolus.roa (hash: C0qSa3VXz/TpxHHnVA5yQuQAXKAh2TZvyE/riAp87yc=)
29: mh5pNoq9NFOP533aq83INa9ZXro.crl (hash: ZPoFvi4aivPuM0darjf+79fPaaa0XmR79SFjHdZPIxw=)
30: n50HYNvX301s5gEUcCw5M0DpFnA.roa (hash: jEK7Am032lzW1juS2l3eGVIV9V+ymC/9POxHIJyEPwU=)
31: nDe-qNhnM7uiI6FvKA4tpUFbkwY.roa (hash: sTzHHKSFfupRttU47uock1mVJaqqApZAZwwhHCKIkSw=)
32: nWWjV-FqWRviIQq1sbPjpszS4J8.roa (hash: s/947r8f3drp/IQDPbvU6DHKccsz6mcfNtNyGVLNQ+I=)
33: sH-rx8tmxtUlkAPsANTQF0wHaOY.roa (hash: YlV5vFTDmgtf0eEsrUs5mGeaHd46OeYW58DJe4ZgWg4=)
34: utcMZoZ-bKrrR12tmJyNO0cBhnU.roa (hash: 6+DnoOfl4lL5gwEZUZds9jlaGi0yZaNkuduSpVBj2X8=)
35: xNY2gUvtLtxYfY6gU7_3js38DyA.roa (hash: 3CcNNA7q88gUr/9Ae4mjWpxXE8KozaNGoTSekGYA77Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:06:d3:46:0e:d8:05:88:6c:ef:d8:84:b0:9d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Apr 17 03:01:37 2026 GMT
Not After : Apr 18 03:01:37 2026 GMT
Subject: CN=3eacb07538463652bb20d144864a829dcdb810dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:d4:9a:86:7d:af:fe:c4:d9:cd:72:1d:c6:
42:8b:e7:55:db:8d:89:11:a8:9d:4c:1f:5a:92:77:
bf:67:98:5c:c9:f2:6f:ae:a4:c1:da:b8:2e:f8:81:
b9:92:9e:61:97:77:35:bd:7a:ee:92:08:cf:23:42:
f4:52:bc:70:a8:4e:00:62:23:65:ee:53:ae:47:1a:
69:ef:b6:ea:e7:53:61:7d:5e:35:d1:94:6c:8a:0d:
3e:e2:ba:7c:7a:06:b2:ff:f3:83:17:93:ef:65:f9:
29:a1:41:90:15:9b:1a:02:f4:c4:22:05:39:9d:3b:
4b:cd:05:e9:4f:c0:53:a5:6c:82:8a:65:69:ad:21:
c5:64:6a:25:3b:40:c7:fb:55:e3:c8:c6:bf:d8:d4:
5c:2b:ab:81:c2:92:08:2a:d6:e2:ed:f7:ea:36:70:
bf:9b:0b:85:a8:78:e8:85:07:19:99:a2:67:44:90:
76:ad:26:52:b2:5b:b8:c4:a4:5d:93:c0:4a:4e:c5:
b6:2f:4e:23:8a:77:dc:7c:d2:ce:42:1d:a8:9a:f9:
36:f8:43:6b:6d:6d:79:9d:17:58:04:b8:47:c5:41:
ab:c8:0e:ec:88:8d:56:27:7c:31:55:ec:d4:99:5f:
51:66:31:ba:df:96:ef:b8:9c:94:04:61:ad:09:12:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AC:B0:75:38:46:36:52:BB:20:D1:44:86:4A:82:9D:CD:B8:10:DD
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:de:63:cb:c3:0e:9f:88:b2:6f:10:35:38:ba:79:a4:d4:99:
a6:7f:6c:5a:60:5f:35:dc:ad:25:e8:22:91:86:34:3b:f5:f3:
a8:64:a7:37:71:b7:7f:be:14:da:2f:99:69:84:1c:07:2b:54:
36:cd:9a:a9:7c:cb:0b:41:76:62:fa:4b:a2:a2:55:7c:e2:38:
ff:84:66:73:94:6b:c2:ad:71:d0:be:7b:ad:27:53:56:28:e8:
d0:f8:a6:44:3c:89:ed:e2:b7:6a:de:30:8a:46:a5:60:b9:d1:
cd:54:0b:df:9b:18:dd:45:74:8e:73:18:4d:df:04:57:99:7a:
0c:66:d7:cd:fb:9c:1c:bf:76:68:bd:a4:22:07:4b:05:a3:75:
25:72:81:66:e1:77:15:7b:9a:6c:e3:0d:5d:89:95:74:ca:9d:
43:d4:21:25:6a:04:c3:44:a5:70:0a:dd:4a:40:97:b4:21:d1:
1d:f7:53:8f:4b:d5:14:99:63:d5:11:d5:61:72:2d:21:a0:e4:
8b:b4:cf:17:ee:fa:80:75:02:6e:bb:12:07:a1:7e:2d:8b:77:
1e:bc:7b:49:33:dd:dc:87:ea:36:1a:c5:00:8f:96:6f:61:46:
ba:37:3c:fa:85:bc:f9:e8:db:c7:38:54:01:db:db:4d:a6:59:
bb:ab:b4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:04 2026 by rpki-client