
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
File: L6FqsGAgBndApMH7R6kSYi8dByI.mft (raw, json)
Hash identifier: 5OoZuoTZlh0+bOXEc4cV96jtTz4IfrucL3pOgrTm7f8=
Subject key identifier: BD:50:2B:E6:09:FD:87:F6:23:BE:A3:40:4E:B6:B6:50:09:DE:FE:62
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019CA90EF7FB5C1D5347ECEC68A3F5DAD0B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
Manifest number: 18A8
Signing time: Sun 01 Mar 2026 11:00:56 +0000
Manifest this update: Sun 01 Mar 2026 11:00:56 +0000
Manifest next update: Mon 02 Mar 2026 11:00:56 +0000
Files and hashes: 1: 0FVqGtFahGdxcAjyrCXqm-_D_2Y.roa (hash: wbB5r687Xo9TiBjn1MYz/iIirW8EwXDXFQpb0dYotVo=)
2: 2lMPUfwDH8K0NAdIPI92MZeaRNo.roa (hash: U4mWJbeH1svHCI4n71GUu9jQHQ+p0m5kueQEDHnX2hA=)
3: 3Qr0L0RQ_Z8R5Cc74oenvNgwB5I.roa (hash: pkT85WzVKfS8+6maKuMZ3/z/S227uMf4I4OAK0s81z8=)
4: 71fh7xRTZMQEFeADtvBms8Jxriw.roa (hash: TUhapUQZ7I+Jwf6YXi6D4YZvbKOEtBxwBuVU+O4dqaU=)
5: 7XKrY6sRi0TOpYVIC72L4eR2QMQ.roa (hash: dRjz/HPxAbIEZD8TfYo3oBDmUxS8I/PLZra+7sLx66k=)
6: 8h_MXgB8CHt4pVo3hhkzuVR8UeE.roa (hash: 6zfjT+xp3/NBDc+/uiauLAz/t0qrDE3jLAUyYHa96hI=)
7: DEqgDw1OjuvCUcoY_GFoXdYUL-g.roa (hash: uaVIfBigKYn9jPBacBnYHFMS2xbXYfQ5wT7j6FjYz1s=)
8: IEYsZgA5S8VfmxdDgbohhLTNNns.roa (hash: iEIpm0ezjdj8b3/qEAPdEkQRFU/FlcYxVmHq5++f9/Q=)
9: ITJ_4YK0o5n4s0S4B56m9EJ0ogg.roa (hash: kcpE8+HMiQBohKY0fa+TOjXFBG4SK95c0ErHWF7t+v8=)
10: J-fPqsN-bTywutCgBgm0oMsMZn4.roa (hash: GwWRnUTMSKlctTV12vVbv4ww0CbgnMjaJS61PVU8Qu8=)
11: L6FqsGAgBndApMH7R6kSYi8dByI.crl (hash: iHOMODbp6x35y9L9yCRRs4v+mHDgK6w3ZIlzvWyzgUw=)
12: LY1fBMtbeXqoPs6JAb2Fp7GAya0.roa (hash: Qr2vedHCJgdf38v/J9aAhF6BgY1+sX1GDop+VSlJ8A0=)
13: QV6aNnm8UURvRuqfgI_kdEPt9EA.roa (hash: qGBvHUvU86fHU5nWskcmW6tvE6Bk4I7Gn2L3djwCsps=)
14: Touy1G_QPr8UYTeYYQtRpqJk_5g.roa (hash: KcWcsKPmd8sllWoi5Lk5MB90LqzJor5vq1GKXnj4Hx8=)
15: WA02GFX9SRvxayCo0SId8dfIeH0.roa (hash: 8XxyibdnMfXS5k81Eyo8aEM0J+Lg1bADYv4ZPH2Nugo=)
16: fjew1KnVpzzXG6cN5QxMH1dxtZY.roa (hash: CFIRgEEtl7KP9tjWTC+3GBX23co/ZjLI+BaThsq3dao=)
17: iFHV-4_PQZAPSbyP-_eKAC5sXQc.roa (hash: YPZedpyXjCCm6shSV1jcGheCVvP+CziI5XLPjJa9XgY=)
18: ikqYwXx4ATF9s6KHl2PLmUXCWlM.roa (hash: B0bQ9MUv2KBsMgq8JKkZLtmuuK5t3EQXBliyDo6a9w8=)
19: inyGcps89W0KJ12qgHdULfVbny0.roa (hash: u8DcCG0CcvnANGvMJRgwaWdMSpZ52dquk6zoYwmbVJ8=)
20: kfRFlh2dLpW8sNJO1buOQVN72X0.roa (hash: BrZj7l3H0Iralufb5r3WkRR6DSVm0J2UClYS0enarOw=)
21: o11PYbJBpHt2QD8aP50cnaIP_04.roa (hash: H1LNbj1fgg72IfhiQy+nQ2zyaJ2+S6w+DWXgJAkHuew=)
22: otaASQB8GGspCrnWLO5XzeVcDtk.roa (hash: oDtuQThG0LQMGhrXFrB1ol0UNfbRDq15W0nys4vTqB4=)
23: r3uWhWQfYQ-7I96xPQgZcGOfgm8.roa (hash: 3XA1JsyB/6+JdqSvjZhGBEJokLbWA2Jq/KVD4Zxhe/g=)
24: vnZI4Od1GtuWmbcfTmasYrA2CVc.roa (hash: hJx0ALHEmU6KnL133ic1OuF6Y0ua/ikvZuJIZHg4VQo=)
25: yD8rwCazGURL-qhAc90jhAEwq9o.roa (hash: LHXN8XxzRdzCYAz40QAs++VkNLHiQdmdvZb4XlWWfGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:f7:fb:5c:1d:53:47:ec:ec:68:a3:f5:da:d0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Mar 1 11:00:56 2026 GMT
Not After : Mar 2 11:00:56 2026 GMT
Subject: CN=bd502be609fd87f623bea3404eb6b65009defe62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bb:66:61:77:78:15:8a:1a:9f:99:50:2f:0d:
00:76:36:ea:68:d1:3c:86:01:d9:3f:20:5d:fe:f2:
d8:ce:1f:32:59:c9:c5:d7:8c:fe:b6:86:8c:a7:39:
54:0c:67:c7:fa:d3:d7:61:0d:23:c7:52:f3:84:f6:
ba:d8:c9:a3:f6:58:98:7d:cb:49:06:7d:9c:02:d4:
d2:47:86:0c:6f:5d:06:45:58:cf:e9:ec:63:14:76:
e6:6f:1c:42:49:2f:72:be:dc:3c:5f:06:30:14:32:
c4:32:0a:8a:10:0f:da:01:36:26:46:9a:b7:01:03:
52:e6:24:ba:86:b6:21:75:cf:8c:28:9c:b7:1f:f5:
e1:45:f0:23:27:36:bf:e7:60:8e:5c:27:76:ea:a9:
69:ec:d7:12:5c:8d:61:da:9e:ba:81:34:64:ef:9c:
45:d5:a5:a4:ee:36:df:22:ce:a2:c5:f1:d0:36:f0:
92:d7:33:0c:d1:e0:59:6e:65:b8:e1:f4:9e:31:b7:
08:27:93:9e:a7:f3:96:b9:f5:35:56:aa:ca:95:9b:
15:47:86:88:0d:54:bf:6b:e6:25:2a:f5:3d:e0:63:
7c:9c:fe:68:37:c1:d1:20:62:06:d9:16:8f:34:54:
9d:9d:f0:01:dd:f8:40:d0:fd:d7:6f:f4:c1:f3:de:
c2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:50:2B:E6:09:FD:87:F6:23:BE:A3:40:4E:B6:B6:50:09:DE:FE:62
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:67:9c:bb:3f:cf:87:27:1c:88:ec:16:9d:e5:c1:5e:d4:46:
ed:9f:e7:ae:18:29:5d:87:77:2a:6b:ad:1f:0a:9c:77:5d:cb:
6e:aa:91:52:d5:ee:a7:55:53:d7:39:b0:27:42:48:97:56:7a:
fc:8d:5b:dc:ce:a6:bf:e8:da:01:e1:88:42:44:04:38:5b:69:
d6:7f:96:ea:90:ea:f4:57:d5:15:51:88:e7:ac:2f:fb:36:0d:
a6:c7:47:1b:67:a9:95:d4:8a:04:d0:75:9a:96:a8:d6:59:51:
5c:6b:ca:35:46:0a:39:60:d9:90:fd:a9:ad:b3:95:eb:87:6e:
f9:80:f3:79:a6:b9:de:5c:27:cf:88:b6:f3:da:a8:19:62:f6:
17:0d:e0:f4:ec:70:79:63:d8:57:6c:66:a3:80:3c:79:64:6e:
12:e5:a8:8a:8f:f9:b8:10:d9:27:70:eb:95:c4:b4:dd:e1:a8:
7b:ad:5f:89:b7:69:e0:d6:9d:36:61:16:de:56:e9:99:27:48:
3e:73:d9:f4:4d:cc:31:fd:3f:13:87:a5:fb:b8:7b:1a:03:bf:
0f:72:d5:85:8e:57:66:cb:70:12:6f:b1:d3:a5:4d:1c:9c:a7:
39:49:ee:98:71:c2:43:2b:bf:38:e9:37:7d:94:f8:1f:6b:c4:
c0:ed:f8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:07:32 2026 by rpki-client