
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
File: SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json)
Hash identifier: GL+IbscBoveYPGxP1dA5tp5R/aLGeFiwRgc9rJ22DWU=
Subject key identifier: DC:30:87:31:B9:63:4E:6B:32:16:74:49:47:16:35:9D:6D:8F:0B:CC
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019D9886440295C89CC3AE860C94410B4E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
Manifest number: 19A5
Signing time: Thu 16 Apr 2026 23:00:29 +0000
Manifest this update: Thu 16 Apr 2026 23:00:29 +0000
Manifest next update: Fri 17 Apr 2026 23:00:29 +0000
Files and hashes: 1: 0AZvivRyYF50IkEBIyepECAE2jg.roa (hash: NHL6zV+TwZnzL3xEUx+Gn97YTD4tGPxMGpJnsuHL5oQ=)
2: 0tjMx9RMD3HiVUOJNj2O3zJUOec.roa (hash: mv/1iB50iXR90GwHouWFnvkEvKegSx0mHsky5a8Dbac=)
3: 1b8pXJj7x0TOWFRoeZjRnOReobM.roa (hash: XrB9mwl96CQ4ZJuMI/6y0WXMFuDor7G7Y6ifr6Zhj3k=)
4: 1bmj8GONQQBKMf3s4Oxc-ZlfsBM.roa (hash: wkPtMNp/SGcXYDsb9VbL+hkba8hGwB+mm04x9jIVPQo=)
5: 3aSHn_j8RtFjPkxGx5eiI0L5zXY.roa (hash: nBPyAA0DKhBkjVysZ8vABPe+cEvgn6LLEUpiFGRroy0=)
6: 5ZAEGSa-J6BqvizMXGj0UcS3Kc8.roa (hash: Lo/UXlhLKvZlPcUxfDE7Px5J4XOqSoIVcTDtq/WURk8=)
7: 7Vw5tZJdatJ5lnnSgTifYQstE2g.roa (hash: 9A1oAxQlRS1oQXh5DOH9cq5ShbOMvKunx3RdrubZ+64=)
8: Ckbmwdo69uWZLFdhnIqi1EVx-As.roa (hash: 0See61yjqZJwFH53PpcLw3mYiFIVA0D2E4nf89wyg+A=)
9: DBdmcuzJA5EDAtOoACaSFGmDW9c.roa (hash: u5C0lrPpVUxYr5UektHNiniMSvjMcYM6DlOSyRv5xcQ=)
10: Guoxwahp0mrpH83oscuF3StmgL4.roa (hash: b9u9ODGvV7E1dMwdtXwMfxsCLt+neWPY0Xa0Njg/95g=)
11: LzMoFpwq1xtr399Q2O-eh1qOgKY.roa (hash: VssinASuDA5vdl3dqNLJWGOh/DQjAfjboGvEqrLgXeI=)
12: MJaBHnPBPoiX26U_szdp7RvWUtQ.roa (hash: qFctKJR4yu14bDLmMuycFB3M33Jqb8VwTlP3l9MF2n4=)
13: PkTdOvHQpAoLE5-E62yI2NnbOcc.roa (hash: BRkGV2HSAKwuVpy88X5Qo6iT+ihU5FcatMIoPr6oe40=)
14: QnL2C3-KGaekq-1q87fzI7-f6vg.roa (hash: g47Y6ZOFMFnPYe8Q7Dl4VLnyKH5AOEhgtWJJzN6BsaY=)
15: Rrm3ofCc0LRADkFvv5z2nLU1Lc4.roa (hash: GUP9CAOD/lZ7zRDp3tb1cccBeuujTmIae2sSdpt219A=)
16: Rsd9tmeGIhGuC32RRTqMOhvYKbQ.roa (hash: PMC54QUfoznlYL5Dx4xudhJ86P6zIvFtq6pV3rKVTWg=)
17: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: LbEOzX6O2/fO6o0MyzgxTy6z2vQsbm9EXEGnMuhfk1k=)
18: UrvAOW6o1x_xUPe2Wpq5O5rgNdk.roa (hash: xOELlwPlmGC0KfJ4SLs0ytNPaAK/tDksySoDWj3wbS8=)
19: VQxPIf61tYrF4PpboF_ivCID26A.roa (hash: KTMviLnc+JWqNZxaJvafJ0HSG1Yb0F9ogTifEhrwNrk=)
20: X_ZY7bhlCimk4A4rT1m_7ox1lpA.roa (hash: Te4JGy7suNJwGqJ4fGrVMOQc/VeF1iQInhbVnodspgc=)
21: bW4fZtzKzqdebS9mwab0I7h9ocA.roa (hash: JJXH2qpBItLk/3pyTLi7Av3TAC4RCYzc+Kn3MqETFkk=)
22: brIJhXE127mnZSH-sgVgPTdMriQ.roa (hash: OPHDQPDKv2sbNbcG8M/if1+Q1GQUEy9nOuk2NkDBWwk=)
23: e0Vr9Cnimt0BB1kf2VAWoyGA2ww.roa (hash: Gg20gx0Zl93rBkAVxklCgwkS7jTSu0rjxkvOvn5J2KI=)
24: eEF_zqAUxZoXqv_AFvmiL3P_Ng4.roa (hash: KqnBx9Z7NrcBEhqssBHFNIjBHPFvdg987eaQWuWEZFQ=)
25: lXi2CpWk0uX1PD09wOxdn3LPCk8.roa (hash: A6e1oKqDntw3FBNRZExtqdaDdknBbCGaGLLQW8KzQ/s=)
26: mGU_ZM8C_67y-U_MSCItqM-7NVs.roa (hash: /prGVdEgBVD01uVKzuuRhV754d4P2Vo6sa25WVn4UwQ=)
27: mR2VgpUeIkByOi-FP_fIKjS95bg.roa (hash: gSSQQUWvAuuJj9LKju1G38u/ekMfsk5jiPCrwLLkZ7I=)
28: oMbkLubRHpA6QKVm4O5LMWLQtSY.roa (hash: E8qozcbC+2Ne/l2gvjBAhkNeL30d9qDBiZcSfFbFzUk=)
29: ojsjf-NPcJu8YOAiwCABNHClj8A.roa (hash: BdxisMsqcak0dRALeB9HUtxCYiTxxK6VVobdUh42wjM=)
30: pGeq0B-Mzg0q4NmMgPUNvpE-lTI.roa (hash: cINCKzd3dIf/VdNxQaJ9bIeKFH1cTlbmZ9wu/VN+feI=)
31: q1K3mBP6tAwWbGS6T7xJBkYKSz8.roa (hash: wr5HNzjC8IUzrQZPy+nMV2gYW00yPWdfWqjJEkjh148=)
32: roD3FIJ_Qs5FtxjP0Jm1hUns1Ck.roa (hash: Nvdv7sBW68P4ZeVIAVuG7dWEQPAEIM4InjtltzOfZ3M=)
33: suovzHsoDlN0Hb2AdeewhUysXlk.roa (hash: DecZNdwPz60RPQKYYm+RGNe+i+BUh+N2BaGtnkWEt/U=)
34: vfcIEd89w7RHFNMpkDPFKdiuSXU.roa (hash: ixlqDv1r7we5MxrflT22tc1tM+oGVmsMKCPwwcmUkV0=)
35: vjx6049Oaq-tndl18g_6Bm9j2C8.roa (hash: BVltqq8LZ1DeA64vexnQtov2krYYu5gv3DiEiBbiaVU=)
36: wi1RA5BI8oNacbRgbyfKdEiybII.roa (hash: sssybe7+qI8tKgzrVZFsNOeNSc0N+lx3VRgqvv5wBeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:44:02:95:c8:9c:c3:ae:86:0c:94:41:0b:4e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Apr 16 23:00:29 2026 GMT
Not After : Apr 17 23:00:29 2026 GMT
Subject: CN=dc308731b9634e6b321674494716359d6d8f0bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8b:1f:00:f3:75:f9:29:33:ef:28:66:63:08:
e0:a6:11:fe:d7:8b:54:3c:c3:a0:55:c0:54:dc:88:
a9:68:2d:29:8b:e2:5e:3c:80:db:91:d7:21:54:20:
6e:25:75:cf:40:c2:df:51:54:3f:fd:1a:75:bb:15:
19:a0:ca:91:ed:d8:95:b5:44:ca:cb:97:55:80:21:
67:d1:5c:3a:d4:0c:0c:dc:73:34:e3:32:b6:f3:2b:
6d:f1:4d:c7:4f:26:cc:f2:4c:25:86:c4:37:74:7a:
07:00:0c:12:84:54:dd:e5:fc:22:06:38:37:82:e7:
2f:a8:ea:aa:7b:a4:74:33:b3:27:5b:4c:a9:90:9c:
08:1a:dd:22:3d:c5:00:91:e7:4c:17:0c:02:e4:8a:
5b:01:fe:4a:8c:52:7e:dd:88:fa:c1:79:26:85:38:
bb:61:20:5c:8c:98:fc:2f:1a:61:d9:66:d3:c0:0c:
73:c9:37:86:c4:49:21:20:bc:38:0d:51:c4:5c:ad:
26:ac:bf:9d:be:57:82:b9:08:17:c5:28:f4:e8:b3:
0b:1f:7c:0e:47:9f:d0:04:48:4b:c6:d1:bf:8f:74:
92:56:76:87:6b:b4:d3:2b:e6:03:9a:00:ee:50:a0:
03:93:6d:8f:cd:31:f3:e2:d7:9a:a8:8a:55:57:7e:
3e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:30:87:31:B9:63:4E:6B:32:16:74:49:47:16:35:9D:6D:8F:0B:CC
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:de:23:ee:ee:d1:2b:1d:02:c7:46:de:b9:89:1a:95:ad:4f:
e2:7d:24:ac:d2:22:c1:06:30:01:65:11:f6:c0:6d:2b:2e:e8:
02:51:12:6f:0d:75:ac:42:ec:d1:50:7d:56:e5:40:99:2d:a1:
10:60:e3:88:7b:43:52:22:c4:92:c9:e3:d8:6c:61:3d:90:5b:
cf:5a:77:17:2b:e5:e5:c0:08:ad:f5:15:38:7d:39:c6:a4:93:
d9:d3:b9:38:da:16:eb:e9:90:38:59:c9:1a:29:db:01:ff:0b:
fe:a4:2f:e5:8b:c4:29:49:43:d0:b0:6c:55:03:d7:ea:e0:87:
ef:8d:e0:c3:a1:00:57:54:fe:f1:43:05:7b:c8:77:dd:ea:ce:
dd:6f:67:32:44:ed:37:e2:98:17:2a:bb:30:f4:46:eb:53:60:
ad:38:25:1a:02:65:24:5f:23:05:fd:d0:df:44:0a:b2:3b:3c:
02:af:b3:ab:3e:92:4f:c6:f8:ff:9c:be:7a:ef:7e:b6:c6:80:
6a:68:e0:66:8f:3c:c4:b5:8d:f4:c9:12:d1:57:21:88:e3:08:
71:80:a4:d4:df:6c:ca:a2:b0:20:3d:19:35:7e:aa:43:70:78:
36:67:07:5d:80:ce:d1:77:7c:8f:98:8f:24:84:15:5e:3c:c5:
75:b4:d2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:50:10 2026 by rpki-client