
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
File: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft (raw, json)
Hash identifier: zf6Z8+MM3CCjZC6MbJ6SevlTzVzctyPf+XmVzkTeTmw=
Subject key identifier: CA:50:3B:1D:56:4F:3A:22:77:C5:44:C5:23:26:E9:AC:85:DD:D3:3F
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019D9A06F69D5B9100B56F0267A4869DEA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
Manifest number: 0505
Signing time: Fri 17 Apr 2026 06:00:40 +0000
Manifest this update: Fri 17 Apr 2026 06:00:40 +0000
Manifest next update: Sat 18 Apr 2026 06:00:40 +0000
Files and hashes: 1: 1-Boo50kngk4kJGoCOg2QDkNtX5E.roa (hash: 3+BBFqGEZbBoRjxfdp+gs4C5E0HbNx2NCgzd7yBrYgI=)
2: 1-zfvela3gTtSU0Zxk_qmMqiWGy0.roa (hash: OQAOpz82CSjUEMjy/IwaBDn+AK3uYtqBMtS2qxamScE=)
3: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl (hash: Wn/76okn2P9g8v/9X34R6xyv4K/5/VS3LUwkspD+q7Y=)
4: 5n4uvrNtnkO4eGR8ZtmlT5JQXXE.roa (hash: 4cYHd40RL707GScqgxSvABvoDBiTFeHb4+nk74FKrXY=)
5: 5xHvZdmeiGs8QNu8uCvUdKsh87M.roa (hash: 2HA1Qmnv/0DmcdIsvOUrY2LByA8trhy2E7QkML7YAsY=)
6: 8SAtM8IMR2YkrpygIGIpM4TdRCA.roa (hash: paNW3tKH+SaFHT3KIqEpy4lTXiy0sBoaMdBNqSt4tE8=)
7: BlYKNaebEqnJcG7MjHMYllll4W4.roa (hash: 5rOtsWwUTndJqNVTM18t297dcWOrG9S+X6OosQK/cJ8=)
8: KDJCV2KWqxqP4itFZc0vnyWHg-M.roa (hash: ZdQlom/XrmZVTovIG/Wu0KyZZPE8vYBX2PPuyHGQT0o=)
9: PpX6Lsph6rTaL76Tj2A4yQr961M.roa (hash: HFF+cIFVcNuSSJ91Ot+1zWOlMJiB1K2AUufg3nSBkcY=)
10: Q6S6DEWeTdaNo4RLFHSga5G24TE.roa (hash: /vqg99pETnOiWOT15E0Qy+efouY/dSqrRAnrIsKDpi8=)
11: SMUYHJGqPA3wQQI63UlSS2FCfUY.roa (hash: J7ZEbIf8CEpYVZLgafo0n+Ok/RB6jdMafFrTE9kMXrM=)
12: VCw4N4Zs1DGjtZzf3wBgxZrel_k.roa (hash: 5kAoOyOQgv/RLB12MJcY8aU26UzS1uKwmDAxZLgrp74=)
13: VktbYjlefqpu29SjO1yJxvF-b0Q.roa (hash: H3AVJ4ctdSWTlP3EEmexkpARxHd5AlfrMOcP2H0qzAo=)
14: Y7ayARvbYJBLfe3vp4W9v_P3rss.roa (hash: dUaJTBjjtSwH29cUEez0PnC9Q/Nyh4qAC0/yQk/Zo2U=)
15: bOGK-i6sQG7WCHvE4FXVJT58zlU.roa (hash: tayfvyx217Xws5KJCeCymFPS0aqS71FkBV3qyWTO9JA=)
16: cI-L7pef_AdHI_QGBFTE5PiVJ0U.roa (hash: jgu+5sRPCpckA/cZ1yBuc9ZXcWSw0y0C+/Lk+J+5CkI=)
17: g-Dw0lZsOsb9XuKWb3g0E47UyIs.roa (hash: nsgNEhjHAiGOzBMeJvhHNadyfL9YZc5PQ6L4B/Mp7pU=)
18: jFMyXReftDBObIji5fbuWeHPPWQ.roa (hash: 0tJfIrSZd7jqVA4yoSOu30eU3DK0ZW1q29jI0om8eT4=)
19: lIG1b91dGC5ndWbmzjIp_fubDNE.roa (hash: Bvl3uk2S1zwHFCA6eMLSAsz9eN2bKrsslaZc1w8UTMY=)
20: n2qaysiqOxYybG2o_t96d-JWP-0.roa (hash: eHISssRI0wVI8jcyz3iPD9ed/F8IfOhPuqU8QqlNado=)
21: nKUJDHCeU1gLe-uc4MTf_4VBCKg.roa (hash: Y82sCFrBKmcuMVtDoZNxuvqKr2VBrJ9dHltfx2yTZk4=)
22: nOjA58wyDiQ_zRw7avoPEh5_s40.roa (hash: V7B/P97cRl0fsQwMRzVez4oDaZWFnkjVorYQBWfrtpg=)
23: pCxUrX3JS6C-vwjylp3PoHtHz9o.roa (hash: HU3ykSkKtwWdnQCYdZshRCL8vy57v9FukL0OXuPtRS0=)
24: rf9KTHpYwkkNInVQ5EifsWm0nxA.roa (hash: djP7Njwn08dcs5j6JOQWdwZwxz1jVEkhEi92YG/q5uQ=)
25: s7NOa3tdTv46yOJCv92uI2UB4zs.roa (hash: 5hs9AfN14zEIY9p9/O6GJm1GkUBmXkj+TK1asikXhNI=)
26: w-eJqf8pDJJqzwEEQkRmGKTY3A0.roa (hash: DLavvl24qjY3L8xwPWJHHU7Ty7w8TSmp6JbhB1hZDXs=)
27: x_HXyOcTxvKsJ1FK3hYG-e8tozQ.roa (hash: wLPSE89LmRkrX2PmXIgR+apvR38jpkzXueA//i8vmoo=)
28: yQZZyJ-guGbGAaz47oUguuGjfLc.roa (hash: o8aHjEfUbVkyklvg+YTE8nyjgPYwybI1TJcaTA9wb/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:f6:9d:5b:91:00:b5:6f:02:67:a4:86:9d:ea:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Apr 17 06:00:40 2026 GMT
Not After : Apr 18 06:00:40 2026 GMT
Subject: CN=ca503b1d564f3a2277c544c52326e9ac85ddd33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:96:ec:96:11:65:72:d6:13:4d:e2:68:b0:14:
3e:b7:66:54:7c:77:c7:80:68:16:16:47:c5:c3:b0:
b9:47:58:b3:d5:ff:4e:9b:e0:f7:5a:ba:63:06:5c:
65:ff:48:9a:25:9e:80:e1:6e:66:bf:bf:95:ac:c8:
36:ed:57:b9:0f:5b:ba:1a:8b:13:46:66:db:78:78:
69:8f:5b:52:8d:ef:5c:cd:1e:42:94:a2:43:dc:cc:
11:3b:b1:52:e0:5f:ae:4f:cb:04:0c:c7:cc:4f:71:
17:6c:c0:c8:50:3b:a5:e8:57:9d:b7:7f:25:d5:4d:
30:01:e6:7b:f1:0b:df:9b:27:b5:8c:db:7d:7f:e2:
0b:b1:1c:81:4f:dd:4f:ec:f5:3f:f4:c8:f4:9d:c4:
ca:6c:19:1d:8f:41:c4:f3:88:97:62:47:61:bb:c8:
18:70:40:98:16:13:8d:3f:87:ab:e9:63:f7:dc:cb:
f2:1e:1e:fd:34:40:37:3a:c5:e6:ba:83:07:cb:5b:
b2:93:2f:e7:11:57:36:67:4e:0a:c1:01:63:ae:7d:
9b:ee:ed:dd:f3:4a:42:88:b6:4a:89:8f:88:56:fa:
e0:0d:82:55:3a:09:85:cb:e8:80:36:e1:eb:3c:d9:
6b:2a:c3:fc:5b:ce:b4:55:17:95:75:59:28:8c:b6:
d7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:50:3B:1D:56:4F:3A:22:77:C5:44:C5:23:26:E9:AC:85:DD:D3:3F
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:13:1e:ca:78:d2:68:ee:6b:6c:cd:8f:9d:47:74:aa:b6:4d:
42:77:93:93:4b:26:71:47:b9:7d:50:26:45:0c:3c:5c:de:a5:
9e:50:06:80:29:d8:da:72:46:7b:11:2d:a1:28:c5:94:2a:62:
ad:c5:39:24:6c:30:51:93:b5:b9:82:2c:41:28:3a:9d:98:fa:
1e:8d:5d:c2:c4:36:43:45:b9:e8:7f:81:ae:b0:b9:a1:50:c7:
4d:95:17:c4:41:48:a0:80:89:0a:97:70:3b:99:23:c3:c2:51:
d4:52:58:be:b5:c1:6a:ec:41:58:3b:a2:66:c0:f5:db:55:e9:
81:36:d7:5d:a1:c9:a5:92:57:f2:b2:fc:e5:28:e7:74:d0:4d:
e9:fb:7d:23:65:29:01:ce:8e:f6:c6:2f:93:60:94:a9:36:c1:
f7:ab:be:76:67:15:e8:92:a2:15:b9:1d:81:14:0d:3a:9b:1e:
2d:56:7c:aa:97:8f:b8:20:10:96:5c:bd:48:c3:3c:82:20:9c:
14:95:6e:26:3b:32:d3:11:a2:c4:82:6a:16:16:cd:c4:69:47:
3b:88:51:08:9c:9a:c7:e1:e0:77:25:77:2f:70:d6:68:fd:d6:
33:b6:ee:df:af:6a:40:dc:6d:cf:41:10:1a:09:c1:11:bc:5c:
b4:f4:b9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:15:18 2026 by rpki-client