
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
File: SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json)
Hash identifier: fbaQ8619AdOclbRK/wJ5xC4KHj+0mVBqb7qUy9SidgE=
Subject key identifier: 13:B6:83:C4:44:EC:80:0D:FB:80:DB:7B:D8:B7:2F:91:83:DE:DE:FE
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 019CAAFC006162659D56C17DFAC2546C6AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
Manifest number: 0977
Signing time: Sun 01 Mar 2026 19:59:27 +0000
Manifest this update: Sun 01 Mar 2026 19:59:27 +0000
Manifest next update: Mon 02 Mar 2026 19:59:27 +0000
Files and hashes: 1: 5cflrPSBczVw-y9CBdznGslTCz8.roa (hash: e3Ui7ThS6C0Gj8prOOjSxh7lUAWtygpEnNw9xX2dtRk=)
2: 6ikDq3uU-14xeZ06o1f5sBEku08.roa (hash: 14bAM4PQevceSeTCaULI+ouG0nOTQYIq9lETR/sCBX4=)
3: 6zmwiCnaR_RUV1zVvXd131O-Byk.roa (hash: wivF7cNRJAl3OyL7EJY6TuKfTwqgRld3+ZHQke6SRP8=)
4: 8lF-x6f7B2bwP5qOnFQwpxn9L0I.roa (hash: ciLzKnjSavNPyQD1IQHv/gt0vWyFhjCiKLjRitLPEkE=)
5: DJA8iYfOt3bjbbEH0sfO-Yzt5D0.roa (hash: dll+XV6deSG185dIKUE72K/Hgk2Qi2c2WRrfDucz8Pg=)
6: DbbcNPtDfL7-gagtJ1a0Eyc1Z_A.roa (hash: MbxJlm+ziQoeXoBZ7l2IXv7uYhNPhhJgV3LLj54kjMg=)
7: HLY3yOfkVYAqEx3IXqQjGqSe60s.roa (hash: 89cRs5OEP6GzsmQJJPOS43nhrd5JryCvGoLQgmsG8Fk=)
8: QbspjSgom0qmdSedksWxw1y_dkI.roa (hash: eJ1YS4oVCoR1VNmiqp1NCkjDzMJ9GIvRJ3pjx5vZ9ic=)
9: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: D2RXtVlZ8SEvSCHntdb7BoB/tYbJT2MhkRmwnQqzwLw=)
10: TOVytZLtGiR_loWDvv77N1q9Wfs.roa (hash: Sv4e/TvtoYqQVyB6uh9qVYGBsdkIHsts6lbRC1DO+ec=)
11: UcQ1Ippcic9QsMq4m2D2gO9ZpIk.roa (hash: Y4z7KLj7vfcDesQxa00pP19sxOBjnRSBjEe98F7tXaU=)
12: bZJA4Zdk6OCETrYbfAEHSsuzwDE.roa (hash: IUm+Or+NvYeQ78zXKIY9OqKwxZRYHCF8Axsyp7t54Y8=)
13: dUjFQLESWsl_QXSBInmxoIlDaEw.roa (hash: pbE9s/6VGIS0LorujhO3ihuwl0L3NPmLHXN9zAPkenI=)
14: q-kjvAzpx-ZYDXpOS_cviEYAaOc.roa (hash: 1g4myUSs6hufFOhffJJdUxf69ZM3/4EE4AG3+gn7wds=)
15: uLmKjHdh6xVL5Ct2SX4RrNBGZlY.roa (hash: M6ZErU+xYI38Ut27LDMzp6JcZbiEl5nEdPQAb8KQF+I=)
16: vEQzBYHoPzDXuty_rx-5GlAJtfQ.roa (hash: s7mP1EwT7gSUHcvBRHCBoQGsDjEPpmRpeu0/iQN+vMQ=)
17: yaioAwQqgstiMhVwqwEHasXnYDs.roa (hash: B1OftcLanWUv1RXMYsVOlCmHJWT10XchoJjDrQXqjiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:00:61:62:65:9d:56:c1:7d:fa:c2:54:6c:6a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Mar 1 19:59:27 2026 GMT
Not After : Mar 2 19:59:27 2026 GMT
Subject: CN=13b683c444ec800dfb80db7bd8b72f9183dedefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:a1:76:e3:f6:38:2c:5d:45:89:12:56:39:
e2:5a:b1:17:a9:d0:6c:d2:82:a9:bf:6e:2a:f6:c2:
28:96:0c:0f:57:87:8d:9d:64:8f:ef:4b:4b:4b:19:
d6:7b:8c:00:d0:0b:72:8a:8a:eb:85:30:da:c1:00:
66:5c:4c:93:b1:11:f6:30:41:70:3f:cb:3b:e7:01:
2a:09:df:bc:a3:22:c5:78:a7:82:50:7b:57:32:62:
80:06:4d:af:6f:46:b7:d2:aa:b1:c9:b9:e8:f7:7a:
5c:d3:b8:bf:9f:d8:f6:c8:fb:10:af:70:f8:69:db:
30:c8:e3:9d:6d:35:45:69:7c:97:60:ad:2e:52:59:
5d:81:5a:02:a1:89:3f:2e:50:64:5b:bf:5b:90:33:
fe:1c:4a:75:4b:03:24:33:95:5c:fb:f7:1f:87:c6:
65:2c:cf:ee:a5:a2:07:f9:62:45:5a:d1:95:5a:35:
3e:41:72:23:cd:be:2b:17:db:4c:3d:7b:20:61:ff:
61:ef:65:29:aa:92:49:8d:97:95:9c:d8:c8:04:1b:
73:3c:89:20:3a:06:cd:b5:86:a4:1c:14:2a:2b:a1:
31:c6:40:68:76:84:2a:9b:bb:80:2c:5b:e0:26:2c:
b1:28:f1:68:25:70:3c:84:7d:e3:6e:62:61:8c:6b:
cb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B6:83:C4:44:EC:80:0D:FB:80:DB:7B:D8:B7:2F:91:83:DE:DE:FE
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:13:70:0b:95:1b:f1:db:78:a9:1f:1c:d1:f2:87:57:48:55:
87:ac:c7:38:93:0f:85:4f:6d:4a:a7:03:07:ad:97:25:f6:d7:
0c:df:27:93:f8:b9:47:85:b9:80:85:73:6e:3f:bf:9a:27:a6:
3a:c6:1b:a6:ff:09:32:46:48:71:17:2e:f0:3e:86:09:cf:73:
4d:1d:be:82:7d:e2:de:8b:c1:59:77:70:83:c9:f8:e3:f9:8b:
95:fb:a3:c9:1b:d8:f8:84:f5:b0:e8:03:d0:22:ea:5a:2b:c2:
af:b5:05:33:aa:5f:59:3f:29:e3:02:f4:7e:ee:29:ed:63:4c:
4e:d1:fd:bd:5a:94:da:47:de:bc:18:cd:36:50:e5:c5:a9:e1:
b6:1e:ca:3c:83:65:af:04:ef:8f:16:a8:1c:9d:05:6c:2d:dd:
ba:e8:8a:1b:83:68:66:73:20:c2:8e:ad:6f:e9:c7:4b:6d:5a:
d9:d3:4a:4f:54:29:b8:3f:6a:b7:35:6c:f5:11:e1:e5:9c:f9:
f7:09:36:fe:b2:19:d5:ed:fa:96:62:7c:13:32:24:e7:06:af:
6f:ff:da:fa:19:ab:bf:9e:85:b4:59:42:3d:fa:bb:25:d5:c5:
c4:fe:7d:db:50:88:aa:7a:66:30:c4:f4:30:3f:80:d0:98:77:
7c:52:e5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:48 2026 by rpki-client