
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json)
Hash identifier: 1ARoOm7FoBzaOcFKNiIsQW/QnDAan5OgvdWdW5iIWv4=
Subject key identifier: 01:6A:99:27:E9:43:CA:EE:72:61:92:7F:F1:F6:87:E2:9D:1C:B6:46
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 019CABD8E86C24FA1391FC6B5CE29CB9BE2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
Manifest number: 186C
Signing time: Mon 02 Mar 2026 00:00:44 +0000
Manifest this update: Mon 02 Mar 2026 00:00:44 +0000
Manifest next update: Tue 03 Mar 2026 00:00:44 +0000
Files and hashes: 1: 8alVrjrWY968nNzLuKlTYJqWO5s.roa (hash: n3cPQVf1JqZIIBHl4vdLfSmHsel7C5NhWsG2ov9U0fE=)
2: AfDFx5CztN26DfCfFCFVeLtbfYk.roa (hash: 6hydPd19IUZH5tUXaWmgrdl0J31zdN4Hkjua9Sst5JQ=)
3: OsaS-W05X64hVseLWVJ98CCH4bg.roa (hash: ZOdWLGxsnjVKDfjbUq3CekoJyLOWeoL5aqMKIGP91V8=)
4: ZGek-6HBksI7UR516vE0gk5R-L4.roa (hash: t0Obkj8sK06HaBNs4kmLvSB4hxDxnIEARfCn1Ni3RSc=)
5: aVt770ox2y_ajisGJcLBAp12qrQ.roa (hash: ppH4GSX2vtSOi+/C8jmwr3Y0jkIjeAyEHZJp5pXIbsA=)
6: cY5-1Q-gCudDvvsjntcM9LHNJ5E.roa (hash: 3JUexyB8UKFK23yZaQJY7snnPpz1rOPKcvmbdq5kUeg=)
7: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: csTYu16/pChk5rcH6+y5NZUEpI5XdjIsFU+mpEB2QHY=)
8: nWdXzo03Nv5euYjJfrUQ8HTtaRI.roa (hash: 4zzXn53ZU7R+himiAEAxl3zTsYnZiM207WqrGti69uY=)
9: pJv_j_K2EgBCPVKk6BgeU9sHfR0.roa (hash: FZmisnstiTUOgcPXpHL2ZJ5p2aJPRBsk+SIz8t4Ftlc=)
10: qtFUd8UrHAjg1CQzxCUVYh49r34.roa (hash: zeOnhH1WA+57cINQaOKMw3j5q8bJlC2Ele92zkBPv4I=)
11: rQ8ohk71V4ClseY7wRU6uUdfWw0.roa (hash: +Un59zWJ5v19ef4G1vmVABla4G6FDYt+TwXokRhf32c=)
12: t6LGbWPehA5-4bGA_0I8d0ATs2A.roa (hash: VJvhwVfSb8eKnL2DGvlH1c5C6AHV73YvtD/x841o6yw=)
13: xpxQq-XYLTeZi1RJOWi2RhOZm6M.roa (hash: stugu/O0ZbeQlykuDSWoq5P19xqk7ytCQZZAgWlL1aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e8:6c:24:fa:13:91:fc:6b:5c:e2:9c:b9:be:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Mar 2 00:00:44 2026 GMT
Not After : Mar 3 00:00:44 2026 GMT
Subject: CN=016a9927e943caee7261927ff1f687e29d1cb646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:bd:b6:f7:8a:aa:c1:04:44:d7:af:11:ca:
10:de:f0:30:a5:09:cc:24:28:45:3d:16:d7:3c:b4:
3e:3f:1e:8e:c3:61:37:23:95:38:d9:55:be:18:4f:
80:bd:fe:6f:6c:91:b9:9c:d4:f4:07:ff:63:9e:64:
bb:8a:52:fb:8e:50:7c:c6:61:f7:5c:30:4d:e0:f2:
99:e6:78:db:ed:c5:e6:bf:f0:04:ea:f8:2d:23:d6:
e8:23:c3:86:00:b6:a7:aa:e6:e2:57:dc:34:e8:5b:
f0:0b:f8:d3:30:07:41:83:11:aa:75:c2:a1:40:9e:
23:d4:0d:ad:fd:6f:82:a3:9b:ce:ca:a9:13:cb:91:
48:e4:b4:a8:ed:f1:45:73:b1:31:c5:a7:9d:c9:ce:
1f:d6:02:d6:95:84:dc:ee:d9:54:5e:54:6d:fa:bb:
d6:de:a6:7e:52:9f:9a:c1:db:dc:0c:41:fc:9d:61:
45:56:4c:5d:75:d1:d7:19:02:a4:b4:54:01:c5:ab:
4a:e7:c1:07:04:f3:7d:66:f0:e7:86:50:6d:96:3d:
70:b9:ee:e0:85:7f:45:83:c8:05:9d:ab:49:f4:68:
98:fe:32:de:56:29:1c:11:f9:d0:d3:a6:2b:4b:10:
11:55:6e:af:ab:b6:c8:21:bb:82:86:c5:9c:bc:db:
cc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6A:99:27:E9:43:CA:EE:72:61:92:7F:F1:F6:87:E2:9D:1C:B6:46
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:76:2d:b7:e5:ee:10:44:bc:1e:a6:aa:37:b4:96:c6:e0:84:
39:cb:66:81:84:9e:5f:94:88:da:98:5e:03:b5:f1:db:95:08:
7c:3c:60:61:26:df:e1:ed:be:c9:6b:d8:b9:5c:db:0d:b2:f9:
4a:53:21:ef:91:d3:6d:a4:e2:30:4a:08:d0:53:73:3c:b0:42:
e8:fd:8c:4f:19:29:b7:49:7f:71:f9:0a:60:d5:bf:ad:bd:6a:
44:48:b8:ad:32:95:c1:f5:e5:7b:66:d7:77:ef:ce:57:ae:ec:
95:2b:74:04:22:a9:dd:a5:f6:b0:95:0d:26:ed:6b:0a:61:14:
44:33:69:3b:cc:25:26:eb:3e:48:46:6e:b2:a1:68:f7:79:9c:
19:78:9d:89:3a:d3:5f:64:c2:00:e7:d7:cd:56:9f:ad:d2:bc:
43:8d:20:38:b9:99:6d:02:d5:9d:f0:28:c2:9f:d6:10:cc:aa:
fb:8f:d5:38:01:81:10:c1:cb:1e:a1:3c:33:e6:f7:20:32:b8:
f7:41:64:38:32:69:7a:e6:51:d0:b5:e2:bc:3c:a5:10:f8:45:
af:41:52:d3:07:05:e5:f5:bf:3d:95:fa:ba:1c:95:85:71:b0:
c8:9e:bb:5c:0b:16:5f:12:fb:6c:4c:14:e3:4d:5f:b1:2b:c0:
9a:25:ac:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:46 2026 by rpki-client