
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
File: mh5pNoq9NFOP533aq83INa9ZXro.mft (raw, json)
Hash identifier: XMbImQDiXpnL/VUTnInZCx6wTcEe6UVcLL8WZmrE2nE=
Subject key identifier: 0A:B3:BB:47:E4:A5:61:4E:9F:CC:28:ED:3B:DA:89:49:B6:B1:21:E7
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 019A4DE23357D77B37C40762564AF09F1B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
Manifest number: 173B
Signing time: Tue 04 Nov 2025 08:01:01 +0000
Manifest this update: Tue 04 Nov 2025 08:01:01 +0000
Manifest next update: Wed 05 Nov 2025 08:01:01 +0000
Files and hashes: 1: 0RyrSS5TsuNkSrgX42mZlqnL_6Y.roa (hash: BRzu0fdIaz6Lovt3QNbsRMaTYaq8KePDTC4YuQ5xp+8=)
2: 13v_SFUUaJanH2ti7gyyAMAe4E8.roa (hash: 9BOoaT9u38i4PO8whYYhUIN3eU3jwn/DC/9uSOlK5Wc=)
3: 1JXcZFx0cVgp_nurSkDz34ejXRw.roa (hash: eT3VUKiYG35yZHjK8chZuS2ARmnYiiATHH1jK3UENw4=)
4: 6z4rHWGcADRparknQzyj2yRTc7Q.roa (hash: n4ymMhjOhAWzzuUuICwnt0DuPDacCxWlW+NEkRCL8OQ=)
5: 7-CIZj9uif--br5voFAmQlLSW6c.roa (hash: uTSjmKpL+cFNc34iNkcWzIdWbLSiGj8LHYTNjwuj3bY=)
6: 8JryklODS-H6RCW3s1L6jAA10aM.roa (hash: N4V6jxdE6ULDTseAhDT5eiy4WHG+mdZx70Ca/CGSOis=)
7: A31_B2nuhoGFF02yDR9tIcsA9vo.roa (hash: xg/RP32VB0XjW0/mDPvjyFUORhRt5edu/HqQYElspR4=)
8: BAByn752h23LDapbWtvPQCf7FGA.roa (hash: aEzN77kDLNn/k0lFsBHzbqjz++GYSZ5QPiWUhv2jUcs=)
9: DgqNbF9iJTN6tJqFHFsmrsPTN-0.roa (hash: LWJhYWGLPkv6XiCgsYq7ikNGs7uAsKZdQqaT/g/DLbI=)
10: EA04VGqvrPQszKxiTiYT5otCGRs.roa (hash: jxzccstOx8k+w6FBDeBmh5NVBQOSYOxvaie7YTOrrr0=)
11: EHXBWUxeWMDtm-263T3CeCfIQg0.roa (hash: upykUfWusTim+qPavoonZ87RcamCDQGsa5cCnxfzAXA=)
12: EJJjIWEkSJVR16lMZ3JAA3Erae4.roa (hash: cEYNtBA9K74UcwqPRIFv+v9Gz/Ga0WnXLgpuQ29y8a4=)
13: F8f4kxW24uJzOzniLERBk3yZc8g.roa (hash: Ve8YWI7OVk2wPQ5uGjmWzFVz86n7rtMNCFhPgNLkgZE=)
14: Gf5l1q8M-R9ATztiNG1wYa5QWW4.roa (hash: 97mQ1AfgdstY7yHk40JSfso1yc9R8LG4mzhYmCvo4E0=)
15: IUoj14L85V7dFoSNxHQERg8IME0.roa (hash: yLZKOBB3BN8zxQwSxMgLL7kO6gXgb1541/UgXA3XP8c=)
16: Jf79I31rpbTO5W9IPaX7rIB_nKQ.roa (hash: v37HfVcSPPGTt9P/qQorvZQf7f7Dq5xgbuMnSpO2rw0=)
17: LZ4tnH9lGxh0iu-rU3u9Fkm-pFk.roa (hash: +JM6B0zdaawDdz8KRtRSCTdjUiYYSokishxaS8i4x7Y=)
18: QO4VVs5SI_NodctTdkKAUO1ebEc.roa (hash: Lg34OgBQ8Ox1b1e+BjsftLuK02aFfjJ/oJTA/t+0XB8=)
19: Qgnr5pBRl_rZGcPCmikTzbpdRhA.roa (hash: CsJlJBJH3+6jV3tl9xVBuGfLlTLLS9kglg9jMQQ1KqQ=)
20: ZIBj51rvzdxNBOQu45s1TsXZfA4.roa (hash: Mlg1sMaq1AzoqpdQv0YafCX4XwaQte0j2dMM5uFDd64=)
21: ZbERZjYg6cuT4X-RnR4eWqsmK2w.roa (hash: nziMUISsqPUXbIiPbxCVPBDhbRy0MibwmCl8xQisRW8=)
22: b_rI4TYzOidB7VM9UUtKiSxW5LU.roa (hash: FSPXI3Dcd4NYJhk5Uaoa5iEsUpA3P4ClToZPryW5vs4=)
23: cJspXZBTRkOp7Qt_iJd_u0-CVXM.roa (hash: +Q93BMqAczWnkXHr2ly5zbZ8kF90gI/c8DRSS/XTs0A=)
24: eH9NeYZ6476-_LV8hEYeX0fc0QI.roa (hash: qpYMUOd5FFvMlQNvSubLKokumQC5dpDSUWn6yu3Z38Q=)
25: fiXZjFVhkN8HnCYHCQ4y4EM5tTw.roa (hash: WGUlo6TBZJCZDArB+udlJuMvOeQwlu964bRVTQeiYz0=)
26: hgUVlBMr-3weLeCDxLmYbzcEvDs.roa (hash: uNZAsOSUtlXYpFt0EPAGWC7rkjy2E7P557kov/78pUY=)
27: hsXTdDwIDQeR8Y4thDk7zd5XS_E.roa (hash: WxjjzedasgKM79/0bmtsmVyW63ILl73WxBDKWi3e8Sw=)
28: i-BpcnBIQppslPVpu9Ytz-GUVDI.roa (hash: v2afblKiPEHq9bVQqxQqdwwNaJR3fRJr4v5JF0bAYU8=)
29: iiCSGGgxN2dI_YNYAYnLsWSzIvk.roa (hash: rHuaFNuztgBdjSOmq2nEo94MqWDd+bV87f0qBWPvt94=)
30: kjCBwq1j9xX1EaDBTI424dSK14A.roa (hash: y34Z+vhK1gAu2AvvEzAPgCnHcDqbgumJZa/tYihBKvk=)
31: mh5pNoq9NFOP533aq83INa9ZXro.crl (hash: MLYSm5EFGqCYMxFojdLQIMZlVnc7lv+Jf/C476Y8Z7A=)
32: npSbX89ppW1EvXT8SquAkvP6voE.roa (hash: MxmtVOWJZ2CbOzuQXF5iaQtC+5JJ6zax1Xsv1/neKxU=)
33: olZgy9U7ThNnepinAJEKzkRvZJg.roa (hash: 4b9F9m0pUTdzvwoF0mVT1XODHic5uNOOg/5TKG+EAGE=)
34: udpFcarhA2Di-ueqJLzwdxMkwFU.roa (hash: /CtOZMK/oLqOqAo2qZJtD+fd7exGsI2oA16cE8ogLbU=)
35: vtUVPmF_sR2bn9GK3_hTbEIy_h0.roa (hash: EgxlYUmqGL8wGtFTWH2dHB4zW0mfcmREpW1FWRXtq8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:33:57:d7:7b:37:c4:07:62:56:4a:f0:9f:1b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Nov 4 08:01:01 2025 GMT
Not After : Nov 5 08:01:01 2025 GMT
Subject: CN=0ab3bb47e4a5614e9fcc28ed3bda8949b6b121e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:91:8d:11:88:db:8a:18:c5:27:15:bc:2d:
af:ce:61:1d:c8:b8:19:22:c8:30:f6:f4:2b:cd:39:
00:e0:13:fb:71:fa:e6:61:66:57:3a:7f:48:e3:02:
13:02:02:9d:42:2c:8c:f3:02:28:55:d9:d2:de:7b:
f8:cd:b9:10:d0:ae:98:00:cd:69:f5:49:12:8d:b1:
46:1c:0c:f1:de:57:80:3b:e6:73:f4:33:d9:b8:f2:
38:03:86:a8:fb:85:8c:a1:7d:3c:e4:42:db:9a:09:
a9:c7:9e:3f:c7:1f:11:c7:92:f7:da:f3:1e:6e:94:
ed:9b:c1:8b:b8:69:6c:e3:e7:5d:2d:73:9f:67:a2:
ea:28:5f:88:0b:02:22:54:36:00:83:93:b6:16:e6:
ea:67:6e:8b:65:11:8e:0a:a7:09:d6:db:d1:f6:cf:
0b:e6:c1:27:87:ac:21:1d:f7:1e:ff:e7:60:74:39:
6d:91:f8:d9:ef:59:d8:1d:d2:a7:c9:b0:52:5a:96:
c5:e1:72:48:fc:fe:a8:ad:20:f8:3e:00:ed:28:59:
8e:05:19:3f:77:e4:ed:f9:41:b1:28:90:ff:52:c3:
2b:c3:7d:c5:dc:ab:69:7e:d0:8d:d0:5a:f0:3c:ea:
85:2c:14:03:ca:f6:49:72:2f:d1:0a:7b:cf:b6:e6:
19:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B3:BB:47:E4:A5:61:4E:9F:CC:28:ED:3B:DA:89:49:B6:B1:21:E7
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5e:7b:49:b7:52:ed:08:87:47:3f:20:ee:b5:43:c2:38:73:
57:d7:76:ca:cf:df:b8:f6:39:70:29:df:4b:0b:5f:f4:9c:e1:
1f:26:6d:68:f1:9b:93:85:0b:bd:84:49:c5:11:87:dc:27:dc:
93:17:c4:1b:17:88:12:51:2c:be:8b:90:a1:5c:ab:e4:65:7a:
1f:46:14:e1:2b:59:b5:26:02:c5:7e:aa:4b:70:25:8a:03:ab:
4b:75:c0:c2:16:01:aa:7d:ea:60:2a:8b:03:c6:02:40:6f:44:
9f:27:2c:9d:1a:56:2f:3e:da:5a:85:87:ae:e8:d0:64:f2:ea:
5e:33:f1:58:bf:58:18:c1:62:e7:09:b2:51:0b:1a:f1:8d:a1:
3b:9a:04:cd:dc:2a:d4:92:b9:8d:2a:ab:ad:ce:d1:6a:50:36:
c2:32:27:a5:5b:21:d0:81:7f:94:d7:5e:41:98:ad:8b:3e:3b:
3c:d4:be:27:55:3e:f0:2b:81:d6:35:7a:47:d7:ba:63:fb:02:
83:dc:74:75:48:51:02:dd:45:96:6e:2b:6d:7f:56:99:01:25:
df:c2:74:ce:39:16:2d:3d:a5:e3:1d:21:91:73:bd:3d:d1:de:
06:a6:68:b1:73:4d:d3:30:5c:5f:c5:ba:d7:ca:fc:80:05:d0:
fc:02:8c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:17 2025 by rpki-client