
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
File: SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json)
Hash identifier: l2RcMmrRJU8W/gkTuF9Jpk7wzHApDpcHLV8AGKUifm0=
Subject key identifier: 92:91:09:5E:CC:3C:E7:28:66:CB:B0:F3:99:58:2B:1A:38:BA:D3:1B
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019CAC7E4572C5747108495BB75396B39DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
Manifest number: 1920
Signing time: Mon 02 Mar 2026 03:01:22 +0000
Manifest this update: Mon 02 Mar 2026 03:01:22 +0000
Manifest next update: Tue 03 Mar 2026 03:01:22 +0000
Files and hashes: 1: 0AZvivRyYF50IkEBIyepECAE2jg.roa (hash: NHL6zV+TwZnzL3xEUx+Gn97YTD4tGPxMGpJnsuHL5oQ=)
2: 0tjMx9RMD3HiVUOJNj2O3zJUOec.roa (hash: mv/1iB50iXR90GwHouWFnvkEvKegSx0mHsky5a8Dbac=)
3: 1b8pXJj7x0TOWFRoeZjRnOReobM.roa (hash: XrB9mwl96CQ4ZJuMI/6y0WXMFuDor7G7Y6ifr6Zhj3k=)
4: 1bmj8GONQQBKMf3s4Oxc-ZlfsBM.roa (hash: wkPtMNp/SGcXYDsb9VbL+hkba8hGwB+mm04x9jIVPQo=)
5: 47Z6Ijl4snZDpzGTcBWb6wSz44U.roa (hash: PQ4OiK0LGaUldwwdRnQasOlGzvAQnY86J+hvKrPo2OI=)
6: 5ZAEGSa-J6BqvizMXGj0UcS3Kc8.roa (hash: Lo/UXlhLKvZlPcUxfDE7Px5J4XOqSoIVcTDtq/WURk8=)
7: 8F6xBDF2hu5ane-PhoxLk36oZJQ.roa (hash: vS1BSEEKFf+21yhzerLtY0paqKpylZdHL0hj/Ak/coQ=)
8: DBdmcuzJA5EDAtOoACaSFGmDW9c.roa (hash: u5C0lrPpVUxYr5UektHNiniMSvjMcYM6DlOSyRv5xcQ=)
9: Guoxwahp0mrpH83oscuF3StmgL4.roa (hash: b9u9ODGvV7E1dMwdtXwMfxsCLt+neWPY0Xa0Njg/95g=)
10: LzMoFpwq1xtr399Q2O-eh1qOgKY.roa (hash: VssinASuDA5vdl3dqNLJWGOh/DQjAfjboGvEqrLgXeI=)
11: MJaBHnPBPoiX26U_szdp7RvWUtQ.roa (hash: qFctKJR4yu14bDLmMuycFB3M33Jqb8VwTlP3l9MF2n4=)
12: Rrm3ofCc0LRADkFvv5z2nLU1Lc4.roa (hash: GUP9CAOD/lZ7zRDp3tb1cccBeuujTmIae2sSdpt219A=)
13: Rsd9tmeGIhGuC32RRTqMOhvYKbQ.roa (hash: PMC54QUfoznlYL5Dx4xudhJ86P6zIvFtq6pV3rKVTWg=)
14: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: JrqhIyqmqGapHS3RhrfAoEsOmNYpjo0avGEMCUQkbPs=)
15: TepoQzb_OkN02aVrqQzItNSAQBw.roa (hash: sQa9lUNFIpLbzUpA5kRg5OnEndSxlkazblBiFu60bkw=)
16: TjvY6_wQh4ElWjrNHu6NMN5m1R4.roa (hash: eLkaaEuqTRCkEOyM+frlXpUlpbL2ioneT/nqumVoi9c=)
17: VQxPIf61tYrF4PpboF_ivCID26A.roa (hash: KTMviLnc+JWqNZxaJvafJ0HSG1Yb0F9ogTifEhrwNrk=)
18: ZMw3cABI3jeCzMfqSI0aApS6QDU.roa (hash: 0yaPTYckWtuZprVw19TlXaMtQC9ymP6ykZcR1615rtk=)
19: e0Vr9Cnimt0BB1kf2VAWoyGA2ww.roa (hash: Gg20gx0Zl93rBkAVxklCgwkS7jTSu0rjxkvOvn5J2KI=)
20: eEF_zqAUxZoXqv_AFvmiL3P_Ng4.roa (hash: KqnBx9Z7NrcBEhqssBHFNIjBHPFvdg987eaQWuWEZFQ=)
21: lXi2CpWk0uX1PD09wOxdn3LPCk8.roa (hash: A6e1oKqDntw3FBNRZExtqdaDdknBbCGaGLLQW8KzQ/s=)
22: oMbkLubRHpA6QKVm4O5LMWLQtSY.roa (hash: E8qozcbC+2Ne/l2gvjBAhkNeL30d9qDBiZcSfFbFzUk=)
23: ojsjf-NPcJu8YOAiwCABNHClj8A.roa (hash: BdxisMsqcak0dRALeB9HUtxCYiTxxK6VVobdUh42wjM=)
24: pNgq3YgvSseaNcvJ5U_GUs3yqXo.roa (hash: 19H5Cq04EoIbtLtQ6pQZI4NLRRYo9hTA+ljxOZbOlF4=)
25: roD3FIJ_Qs5FtxjP0Jm1hUns1Ck.roa (hash: Nvdv7sBW68P4ZeVIAVuG7dWEQPAEIM4InjtltzOfZ3M=)
26: vjx6049Oaq-tndl18g_6Bm9j2C8.roa (hash: BVltqq8LZ1DeA64vexnQtov2krYYu5gv3DiEiBbiaVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:45:72:c5:74:71:08:49:5b:b7:53:96:b3:9d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Mar 2 03:01:22 2026 GMT
Not After : Mar 3 03:01:22 2026 GMT
Subject: CN=9291095ecc3ce72866cbb0f399582b1a38bad31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ac:e4:7f:9c:33:c6:69:f2:a2:29:76:20:b0:
c1:3b:5f:b3:3b:76:77:5d:c2:30:3e:fc:4d:31:c3:
e0:9b:d0:ea:80:36:9f:46:eb:70:7f:34:21:3a:d1:
36:b1:56:92:60:e3:eb:82:1e:34:c2:d1:7b:d8:eb:
c2:14:a4:a6:3f:64:aa:52:b0:51:6b:4c:f1:51:02:
81:4a:94:b5:ff:04:d4:98:50:ed:36:73:e0:6b:2e:
f7:67:86:21:fa:ad:ba:b3:4b:b2:0a:3a:31:7f:fe:
50:9d:a4:d2:64:a7:52:91:a8:11:e8:03:f8:5c:57:
b1:6f:eb:88:00:87:b7:f1:c8:65:30:55:bc:1b:43:
7d:46:88:64:a3:8c:00:1b:b5:ca:06:04:c8:d1:21:
21:7e:5e:d9:9a:4c:86:28:16:a5:96:58:59:be:74:
08:4a:50:b3:8f:23:a0:28:6d:85:60:5a:ad:44:71:
89:a7:08:df:57:9a:d1:7e:cc:62:78:50:9e:23:0c:
0d:cf:05:f2:94:e9:22:64:67:2f:c7:8f:c4:11:f7:
bf:1c:65:d3:e7:da:12:3f:b3:78:20:de:68:e1:b6:
f1:18:4c:59:75:6a:2f:05:2a:c0:e4:37:31:cd:09:
18:0d:33:68:3c:7d:a8:35:e4:c1:dc:fe:7f:ce:b9:
96:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:91:09:5E:CC:3C:E7:28:66:CB:B0:F3:99:58:2B:1A:38:BA:D3:1B
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:82:1d:1a:4b:68:4c:4e:b8:20:f7:40:7f:71:1a:62:fe:61:
ae:b2:72:da:d7:61:40:89:f9:aa:91:8f:86:ee:e2:82:f1:57:
77:6d:f8:40:73:53:59:b4:38:12:ee:73:8a:f9:96:54:b1:10:
6e:16:9e:bb:24:c7:fd:59:08:cf:0a:55:fd:a6:f5:18:cd:89:
c0:1b:27:3c:1e:da:9b:df:4b:c7:34:68:72:25:11:15:37:98:
8a:a4:17:73:03:52:c0:03:af:41:48:84:f6:ff:4c:d6:da:12:
9c:ac:7a:5c:ff:6b:8b:62:fc:96:16:1e:bc:b0:88:cb:5b:e8:
b2:65:1a:0e:37:6e:e6:ef:96:c1:c5:ce:b8:f3:92:27:36:94:
89:90:d5:75:32:c2:31:73:2c:b3:48:91:2f:e0:fa:92:15:b5:
49:03:1d:f9:7c:c2:76:5b:fc:30:47:83:df:04:c9:29:0f:9a:
f1:91:ec:98:57:3b:bf:a3:90:5c:4c:2e:32:58:17:39:50:be:
22:f4:a9:72:a0:50:76:8c:ec:e2:4e:f4:b3:4a:2c:59:ed:2c:
14:7c:81:fa:45:95:b6:60:7c:09:de:bf:a8:fc:7b:5c:59:40:
59:b0:01:92:e2:de:eb:45:b8:aa:a7:bb:a1:d6:d9:17:1f:15:
9c:5b:73:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:37 2026 by rpki-client