
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
File: 52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json)
Hash identifier: TkK9JIWhMp14mXsLc2iuA4iTUmTivJH7t6OLsrYyH8k=
Subject key identifier: 67:75:5E:87:77:98:8E:F8:16:8A:07:62:81:03:DB:9D:9E:9D:D2:71
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 019D9962C50131FC2696DF44CA7E4E5D2EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
Manifest number: 190E
Signing time: Fri 17 Apr 2026 03:01:20 +0000
Manifest this update: Fri 17 Apr 2026 03:01:20 +0000
Manifest next update: Sat 18 Apr 2026 03:01:20 +0000
Files and hashes: 1: 0AHImsbMetIR9BMrmd3qpDL6OSc.roa (hash: DTeCz+/e8dz3wJQ9sOWTPFZL93bF/N1lUR+tm2DzoBc=)
2: 13WTNIS6A0dihpmd1UZATvnV9K4.roa (hash: KHlhyO/RASQzL4I4VsavXB94t3yBZq5r1Q6M/Qi/yyE=)
3: 2UdLvPX3YAq1cbjvbaFDJ94Q47o.roa (hash: CfFJBlNu8bngGenYW74kMkvKFLTo885Zt17Qhidzd/I=)
4: 4NasKMzTYIVVFp-ICFK_D4b8RHc.roa (hash: QS3B9ES6p11t5I186zFeNR/WrVazilsqPckCmSgVmek=)
5: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: WGEMWYJDr7kgoo4CEYVZnksddJFP6suHn/zurut5Mck=)
6: 53LrOjzoo4E_JjsRePn1B73fFtc.roa (hash: NrghBBUU3a/THjQg3AhmUAWYpxF5cPsuE6iPec4zb/o=)
7: 6VTW_McNM2gKUiEd9Bc3Gfwm0AE.roa (hash: K0b0iJpVzmEPNcexIYjgjDjmiNKN28rNQZIz8nCu1GU=)
8: BAXXlSV06uuaY8KhG2sNC8heH1s.roa (hash: ajZgoDJ8e9hLXYtp4Hn5DX0X8/kHLIPyvG3eppF2AQs=)
9: E6Wekcit-EQ3TZTNVUcjRu1lw6U.roa (hash: 2zO8BVKL4MFsWKURY5zzeGF0sEV2VJqOByilAEcD1Z0=)
10: G_gkubCq_7tYxAJOgwxm9_sjOcc.roa (hash: HTO/NujLkueszrKTl1jypitd1221vQx4YiPnzs/pQes=)
11: ODKfzqsOm3GYnHVgYihmwo3Lqyg.roa (hash: 3rOjqBfIhvTmF0AbgtiUHguUfUPEBFg5H4WMtyl2b1I=)
12: PG5gaW6QKtR5JzL6q5eBke0iYq0.roa (hash: CI7oeUgCJQOVE+/gNMHsZoUM76jLEBj4sJYAooPBpw4=)
13: X1Gmpx7ELtfrrjtvBfMJbDc_PDU.roa (hash: 3UVhYg8pgXN07FqWkvVyaQiJdCXbQoNnU+1Ji0Fdl18=)
14: YGUZmB5y9Pszxg9mTfxKcyU3wP0.roa (hash: 6EGPa2utleZno/C5hAqexr1JPSm93VrZZ+jL9Q+c4xU=)
15: lC16rIMMnqHHfbg9MNxvqn7mqxk.roa (hash: Mdn1l4dZ+NSM4dG4u4z56RyJO1WeprirQF3/FTo90cM=)
16: rOn4sIWHt6rCUNuLxoNvj-X5Ebc.roa (hash: YE/iZ6y3DFs2Aj9gfYd2A/ANh76BH41kT6FkdNGSzDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:c5:01:31:fc:26:96:df:44:ca:7e:4e:5d:2e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Apr 17 03:01:20 2026 GMT
Not After : Apr 18 03:01:20 2026 GMT
Subject: CN=67755e8777988ef8168a07628103db9d9e9dd271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:4b:3b:e8:a0:31:cc:d3:40:f3:b9:b8:17:
fe:de:27:11:2b:6e:f5:ad:f4:44:ea:91:c9:c4:5f:
03:7b:70:2e:e9:c4:7c:90:96:ad:9a:21:7b:5b:af:
8f:3e:33:7e:43:2b:8d:8e:6f:d2:87:60:6f:53:3e:
4f:f3:25:5e:9b:55:23:e4:ba:90:39:19:57:53:d5:
b3:ed:d7:c3:f7:8d:a0:aa:e6:69:af:98:d0:10:a4:
0a:2b:d5:a2:de:5b:7d:31:7a:ca:84:43:c3:50:ed:
4c:cf:c8:16:54:60:7c:69:16:18:cc:09:d5:51:61:
0a:39:9c:a7:b6:5b:0c:6e:26:de:82:59:7e:41:73:
d2:ec:6b:b2:ec:a3:2e:91:2b:26:c4:55:5b:67:bc:
7c:22:54:78:1f:a2:6c:cc:b6:5e:9b:a0:82:31:e9:
48:d2:c9:ad:35:06:0e:b3:53:53:8c:88:41:bc:42:
dd:2b:51:73:9f:dc:b4:b9:72:2a:af:0f:ae:14:c8:
c6:84:ff:5e:95:c8:df:f3:ae:15:9f:81:f3:86:8b:
5b:b6:13:79:76:d1:bb:a2:0c:af:00:27:3a:1b:a3:
b5:8e:4d:8a:bb:7f:4e:8b:b2:9a:16:ab:19:d8:52:
ab:70:50:7b:52:73:10:cb:26:13:a1:43:b6:a7:4f:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:75:5E:87:77:98:8E:F8:16:8A:07:62:81:03:DB:9D:9E:9D:D2:71
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a4:54:2c:23:32:04:dd:cd:bf:7f:2c:15:e9:0d:21:0e:c0:
48:96:63:57:8e:e8:3d:be:68:e8:28:f0:35:d9:83:9d:82:f2:
73:61:b9:b5:e4:7d:f3:a0:9a:cb:a0:07:72:57:7f:b3:31:44:
8b:be:d4:09:10:56:2c:1c:dd:1d:c8:1f:6b:b3:90:58:d9:3f:
a8:d1:b5:20:87:07:b8:df:49:52:59:9e:0c:68:25:46:11:83:
bf:0d:2c:d2:1b:65:e0:d0:7f:64:33:9d:74:f2:18:31:7e:dd:
32:10:e9:12:76:66:0b:e2:cd:b9:ed:e5:05:ef:16:d0:64:58:
ad:7b:10:73:20:bd:b8:b6:a1:e1:46:8d:16:3e:af:d8:87:ee:
91:79:9e:ea:b0:30:57:b6:13:9b:26:e7:88:78:8d:ba:8a:b6:
3b:ce:5d:81:4a:bc:2b:b2:4d:aa:f2:97:9d:f6:7c:94:01:9c:
bb:24:dc:8f:72:15:9f:4a:1a:21:85:e1:07:c2:43:46:35:6a:
80:95:74:ca:02:60:8a:45:99:aa:e6:cc:eb:e9:45:22:e5:fb:
0b:12:0a:27:02:98:c7:7d:9d:06:c0:43:2c:64:b8:63:9f:49:
18:7c:63:df:c1:5c:8c:8f:82:5d:b3:ad:82:3e:1e:da:ef:5a:
91:b8:13:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYsUBMfwmlt9Eyn5OXS62MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjYwNDE3MDMwMTIwWhcNMjYwNDE4MDMwMTIwWjAzMTEwLwYDVQQD
Eyg2Nzc1NWU4Nzc3OTg4ZWY4MTY4YTA3NjI4MTAzZGI5ZDllOWRkMjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquBLO+igMczTQPO5uBf+3icRK271
rfRE6pHJxF8De3Au6cR8kJatmiF7W6+PPjN+QyuNjm/Sh2BvUz5P8yVem1Uj5LqQ
ORlXU9Wz7dfD942gquZpr5jQEKQKK9Wi3lt9MXrKhEPDUO1Mz8gWVGB8aRYYzAnV
UWEKOZyntlsMbibegll+QXPS7Guy7KMukSsmxFVbZ7x8IlR4H6JszLZem6CCMelI
0smtNQYOs1NTjIhBvELdK1Fzn9y0uXIqrw+uFMjGhP9elcjf864Vn4HzhotbthN5
dtG7ogyvACc6G6O1jk2Ku39Oi7KaFqsZ2FKrcFB7UnMQyyYToUO2p09zqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGd1Xod3mI74FooHYoED252endJxMB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6RULCMy
BN3Nv38sFekNIQ7ASJZjV47oPb5o6CjwNdmDnYLyc2G5teR986Cay6AHcld/szFE
i77UCRBWLBzdHcgfa7OQWNk/qNG1IIcHuN9JUlmeDGglRhGDvw0s0htl4NB/ZDOd
dPIYMX7dMhDpEnZmC+LNue3lBe8W0GRYrXsQcyC9uLah4UaNFj6v2IfukXme6rAw
V7YTmybniHiNuoq2O85dgUq8K7JNqvKXnfZ8lAGcuyTcj3IVn0oaIYXhB8JDRjVq
gJV0ygJgikWZqubM6+lFIuX7CxIKJwKYx32dBsBDLGS4Y59JGHxj38FcjI+CXbOt
gj4e2u9akbgTfg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:36 2026 by rpki-client