
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
File: 52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json)
Hash identifier: jb9B/DcBsAOSHOIvxbADY8Y8vqqvHNJrS1haBZOXy38=
Subject key identifier: BA:A7:88:AE:41:A7:73:F1:AC:31:21:32:BF:9B:24:54:85:BD:5D:5F
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 019CAAC64B3C45AC8018029BD2CA762E0F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
Manifest number: 1892
Signing time: Sun 01 Mar 2026 19:00:47 +0000
Manifest this update: Sun 01 Mar 2026 19:00:47 +0000
Manifest next update: Mon 02 Mar 2026 19:00:47 +0000
Files and hashes: 1: 0AHImsbMetIR9BMrmd3qpDL6OSc.roa (hash: DTeCz+/e8dz3wJQ9sOWTPFZL93bF/N1lUR+tm2DzoBc=)
2: 13WTNIS6A0dihpmd1UZATvnV9K4.roa (hash: KHlhyO/RASQzL4I4VsavXB94t3yBZq5r1Q6M/Qi/yyE=)
3: 2UdLvPX3YAq1cbjvbaFDJ94Q47o.roa (hash: CfFJBlNu8bngGenYW74kMkvKFLTo885Zt17Qhidzd/I=)
4: 4NasKMzTYIVVFp-ICFK_D4b8RHc.roa (hash: QS3B9ES6p11t5I186zFeNR/WrVazilsqPckCmSgVmek=)
5: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: EePXdxmAWogdy7A3RleNLj9CcpeN1SEVIMvXVopiDhw=)
6: 53LrOjzoo4E_JjsRePn1B73fFtc.roa (hash: NrghBBUU3a/THjQg3AhmUAWYpxF5cPsuE6iPec4zb/o=)
7: 6VTW_McNM2gKUiEd9Bc3Gfwm0AE.roa (hash: K0b0iJpVzmEPNcexIYjgjDjmiNKN28rNQZIz8nCu1GU=)
8: BAXXlSV06uuaY8KhG2sNC8heH1s.roa (hash: ajZgoDJ8e9hLXYtp4Hn5DX0X8/kHLIPyvG3eppF2AQs=)
9: E6Wekcit-EQ3TZTNVUcjRu1lw6U.roa (hash: 2zO8BVKL4MFsWKURY5zzeGF0sEV2VJqOByilAEcD1Z0=)
10: G_gkubCq_7tYxAJOgwxm9_sjOcc.roa (hash: HTO/NujLkueszrKTl1jypitd1221vQx4YiPnzs/pQes=)
11: ODKfzqsOm3GYnHVgYihmwo3Lqyg.roa (hash: 3rOjqBfIhvTmF0AbgtiUHguUfUPEBFg5H4WMtyl2b1I=)
12: X1Gmpx7ELtfrrjtvBfMJbDc_PDU.roa (hash: 3UVhYg8pgXN07FqWkvVyaQiJdCXbQoNnU+1Ji0Fdl18=)
13: YGUZmB5y9Pszxg9mTfxKcyU3wP0.roa (hash: 6EGPa2utleZno/C5hAqexr1JPSm93VrZZ+jL9Q+c4xU=)
14: lC16rIMMnqHHfbg9MNxvqn7mqxk.roa (hash: Mdn1l4dZ+NSM4dG4u4z56RyJO1WeprirQF3/FTo90cM=)
15: rOn4sIWHt6rCUNuLxoNvj-X5Ebc.roa (hash: YE/iZ6y3DFs2Aj9gfYd2A/ANh76BH41kT6FkdNGSzDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4b:3c:45:ac:80:18:02:9b:d2:ca:76:2e:0f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Mar 1 19:00:47 2026 GMT
Not After : Mar 2 19:00:47 2026 GMT
Subject: CN=baa788ae41a773f1ac312132bf9b245485bd5d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:97:4a:8f:9d:8b:0c:b4:e7:14:43:d3:96:
fd:04:e9:0f:68:68:0a:ee:98:92:a9:60:ad:e9:59:
c7:19:90:82:59:a3:0c:b5:cc:99:07:b2:20:d4:cf:
4c:49:12:fa:74:c5:f4:70:e6:d4:58:fc:62:0f:03:
27:d4:a4:e7:12:60:86:21:93:c6:69:15:c6:9d:7c:
da:bf:d9:4e:a9:03:0b:32:73:e9:d8:97:42:c7:49:
0d:67:a6:db:57:ec:0c:a4:00:ab:97:d6:82:68:13:
de:33:9f:d7:2f:ac:a2:45:c4:64:e4:e5:f3:e0:4a:
54:94:3c:ac:cd:ee:e1:26:33:68:cd:a2:44:01:6a:
74:4a:a9:b6:9a:a9:7c:13:d5:f3:b7:c7:3b:4c:50:
0c:4b:71:de:7d:aa:70:da:16:dd:9c:05:71:7c:17:
4a:83:b3:a4:3a:ba:c6:a1:8f:2e:fb:d3:5a:a9:09:
ce:85:34:0d:9e:85:d0:a0:43:55:eb:92:82:79:06:
2f:e4:f3:8c:e0:30:0e:92:34:66:85:cf:8b:80:4e:
de:29:79:94:e9:14:9a:36:b0:7d:e1:a2:ea:3e:c4:
86:fe:0b:9d:cd:cc:7a:4a:3a:14:e5:8a:c4:70:e8:
e5:2f:84:3b:8c:7d:a0:bc:28:db:cf:28:53:53:1a:
09:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A7:88:AE:41:A7:73:F1:AC:31:21:32:BF:9B:24:54:85:BD:5D:5F
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2a:08:e5:3a:52:7c:3a:8e:b4:f2:65:a5:38:44:0d:1c:07:
41:6d:5e:cb:49:e6:57:0f:40:cd:95:df:13:31:78:1f:30:92:
10:37:cc:b9:40:b2:50:98:a5:27:49:fc:ce:a2:2d:9e:d6:c4:
fc:d5:08:ce:c4:22:97:63:eb:da:a1:df:07:7d:da:85:1c:81:
71:17:fa:c8:cc:b1:18:3c:d0:d7:80:bb:88:37:d2:48:46:da:
11:82:94:50:e3:71:d1:ef:39:5d:04:5c:fb:13:41:df:72:aa:
fc:5c:3c:ac:15:78:21:5b:37:c5:61:e5:89:92:88:74:e7:57:
a8:57:f3:cc:a4:62:a7:2e:ce:a7:ee:93:61:b9:81:1d:bf:d8:
bb:7f:7a:c9:e1:57:c4:0c:af:b9:b9:05:2b:08:27:ca:c5:e5:
ef:d6:f8:0f:24:ee:24:e6:5a:00:c1:2a:b6:e4:c8:9e:5b:84:
ec:47:e6:39:81:c7:8c:ef:1c:49:3f:c1:ba:9f:af:cc:35:b0:
4a:f2:66:4f:f4:f7:60:c3:cb:ae:4b:bd:40:61:64:df:48:63:
3e:9a:46:b7:40:92:cb:1a:40:e2:e1:ac:98:13:a9:cc:49:5c:
9e:7f:35:36:69:26:ff:33:aa:b4:b2:36:7e:59:db:f1:87:0c:
11:0b:c1:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxks8RayAGAKb0sp2Lg9rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjYwMzAxMTkwMDQ3WhcNMjYwMzAyMTkwMDQ3WjAzMTEwLwYDVQQD
EyhiYWE3ODhhZTQxYTc3M2YxYWMzMTIxMzJiZjliMjQ1NDg1YmQ1ZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPOXSo+diwy05xRD05b9BOkPaGgK
7piSqWCt6VnHGZCCWaMMtcyZB7Ig1M9MSRL6dMX0cObUWPxiDwMn1KTnEmCGIZPG
aRXGnXzav9lOqQMLMnPp2JdCx0kNZ6bbV+wMpACrl9aCaBPeM5/XL6yiRcRk5OXz
4EpUlDysze7hJjNozaJEAWp0Sqm2mql8E9Xzt8c7TFAMS3Hefapw2hbdnAVxfBdK
g7OkOrrGoY8u+9NaqQnOhTQNnoXQoENV65KCeQYv5POM4DAOkjRmhc+LgE7eKXmU
6RSaNrB94aLqPsSG/gudzcx6SjoU5YrEcOjlL4Q7jH2gvCjbzyhTUxoJuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqniK5Bp3PxrDEhMr+bJFSFvV1fMB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSoI5TpS
fDqOtPJlpThEDRwHQW1ey0nmVw9AzZXfEzF4HzCSEDfMuUCyUJilJ0n8zqItntbE
/NUIzsQil2Pr2qHfB33ahRyBcRf6yMyxGDzQ14C7iDfSSEbaEYKUUONx0e85XQRc
+xNB33Kq/Fw8rBV4IVs3xWHliZKIdOdXqFfzzKRipy7Op+6TYbmBHb/Yu396yeFX
xAyvubkFKwgnysXl79b4DyTuJOZaAMEqtuTInluE7EfmOYHHjO8cST/Bup+vzDWw
SvJmT/T3YMPLrku9QGFk30hjPppGt0CSyxpA4uGsmBOpzElcnn81Nmkm/zOqtLI2
flnb8YcMEQvBRA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:04 2026 by rpki-client