
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json)
Hash identifier: KF1f/rGjnYQiQH1lFI9SAU1fG4Ev6c9ZyW4zjcY4oO0=
Subject key identifier: 5F:7E:5D:BD:1C:B8:C0:4E:82:68:2C:29:29:FC:68:33:25:66:E7:98
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial: 019CA8D7DD04D277EC72132D24CFBB506E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
Manifest number: 1859
Signing time: Sun 01 Mar 2026 10:00:44 +0000
Manifest this update: Sun 01 Mar 2026 10:00:44 +0000
Manifest next update: Mon 02 Mar 2026 10:00:44 +0000
Files and hashes: 1: 0uXHR2UhfdGKOw0-7UVbnfQAkig.roa (hash: Q9NPQXWKGQHVWf1Z/Oo69HPn4r2sOJMpx+RqofXuMKw=)
2: 1-jd9OcIMJ3MRmOrCPnxeklbAz-A.roa (hash: 4BT08aUJAH5XA8v2nUCY0ZzKbtYT4OuVlGjXaC8L51w=)
3: 3Hr9NkohHp-0dQh6eby1rDTTvtg.roa (hash: 31UMAD/tu8ErCfftbrPF1UHKdFAEb8fyigVMsh1vdjY=)
4: 50_RqUM3HM1DTyeXhDBU-vljMns.roa (hash: jLfna8CaKrQXjGhh5I5+7KDotyKYCpxYaW8lSXxCxYI=)
5: 8VffJRIzchhCe8rm2mAWoMqOrUw.roa (hash: ZlMVYfC0qcWAgUxCif3zol/JEVTmk18XMebsrNTaMMw=)
6: FXkLPO07K0oGiHX6N80HucLUmQk.roa (hash: pJpxLX/J3IKaGvymzNo/eP+WscosiFBoX/gscobrkA8=)
7: SviK5uP3P_320woFz7MJ74gfE54.roa (hash: cdu27i/9dSf6ELTxYPRMzucVjIzIdkrFCjEQ+8cX0Hc=)
8: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: 9IpI6GJQwD6cp7hfWYjjpSDitGbqRiQ2mebnX1zdr7I=)
9: _yMstHwq62YtmKZbMo5Nl7N0BSY.roa (hash: fA5EOJqyYeCeRJjBOFQnKbcHaakgxJGZzArfMKvJW7M=)
10: mNIa-kBl--UJ4M4sTdW_ScZtluQ.roa (hash: APBGVJ5X0w1VXGqUTI7O+M7iTb0F7m1Cbhdbmsncrvg=)
11: vUnigMLcxEHFFYzam4W0EFuYfF0.roa (hash: qgrF46htEQCa+s16GhFv54cTmD+21CsD7rkwyl8dr1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d7:dd:04:d2:77:ec:72:13:2d:24:cf:bb:50:6e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Validity
Not Before: Mar 1 10:00:44 2026 GMT
Not After : Mar 2 10:00:44 2026 GMT
Subject: CN=5f7e5dbd1cb8c04e82682c2929fc68332566e798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:c2:3c:8a:aa:38:ed:24:88:90:4b:64:a7:
b4:57:19:61:89:55:b1:8c:53:01:bf:42:93:af:09:
02:32:cc:d1:2e:8f:c0:5b:3b:81:4a:40:55:40:09:
d9:53:f4:0e:42:2d:6e:fa:77:87:12:4c:a5:5f:1e:
a4:7c:b9:9c:61:4f:c2:e1:e6:a9:af:55:97:c0:18:
8e:d9:36:e2:16:4c:21:ba:97:91:79:bf:69:4c:37:
ad:ac:28:e8:a6:ac:07:65:0c:e8:f9:86:15:5c:c5:
b8:2c:5b:96:a9:22:e5:35:e6:16:51:69:6f:1f:3a:
c1:da:64:a2:c9:9b:f5:6b:1c:ef:a3:d5:78:00:24:
9b:4b:27:84:07:00:cf:30:d2:76:4e:6f:f1:86:40:
25:e9:18:4c:d7:29:be:4b:74:c3:b2:c4:d2:17:87:
f4:81:14:2e:e8:e2:e3:7a:05:9e:b2:d1:4c:20:83:
7a:08:1a:b5:8a:1b:3c:9e:50:15:4e:fa:98:02:6e:
a2:95:c2:d5:1e:86:75:7b:6c:9e:9f:f8:1a:9b:e5:
e3:e4:5c:42:61:38:a9:d7:4a:c2:25:7c:36:8d:bf:
35:27:8c:d9:d8:ed:f1:81:72:73:ed:90:dd:5d:12:
25:3b:66:44:53:cd:f3:09:aa:c3:b6:a4:3f:5c:91:
3f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7E:5D:BD:1C:B8:C0:4E:82:68:2C:29:29:FC:68:33:25:66:E7:98
X509v3 Authority Key Identifier:
keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:12:b1:ab:6b:7e:41:45:6d:18:ab:c0:83:75:8e:b1:8e:9a:
73:6e:f5:81:53:ed:74:68:5c:65:b0:57:f3:6e:73:cf:2d:6a:
74:bd:85:8a:87:4e:7c:41:fc:79:46:1c:c9:53:48:c7:31:89:
3f:c2:2f:e5:19:4f:d3:fa:aa:3a:09:01:67:90:8d:97:aa:a9:
7c:57:f5:06:6a:3b:a7:ac:0b:f7:fa:3d:ce:00:03:73:e0:a8:
c1:3e:a2:95:3d:03:e7:63:fc:34:81:f3:af:5f:1b:58:bb:f3:
26:2f:9c:6c:c8:bb:ed:0f:d9:b1:62:4a:49:b2:d8:ed:2e:3f:
aa:81:40:77:08:e7:77:fb:70:6d:9d:43:46:84:25:50:a4:a0:
48:56:1a:85:9d:1c:1f:c8:f0:a5:d7:87:7d:80:1b:a1:ca:99:
f9:23:15:f8:15:73:02:b7:e0:f0:3f:7c:21:e5:c0:c8:77:25:
2b:9d:9b:03:da:29:e3:ca:04:93:4f:5e:d1:9b:65:2d:79:91:
31:dc:38:4c:7d:74:15:ac:fd:1c:44:62:69:53:b9:1c:85:0f:
f7:8c:b5:1b:6e:5e:ec:5a:8f:10:4b:df:09:19:57:2c:f4:b2:
6a:74:ee:79:41:0c:cf:08:b0:82:16:51:5d:5f:2a:d1:f6:f8:
a1:73:fe:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyo190E0nfschMtJM+7UG5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl
NWY0YjkwHhcNMjYwMzAxMTAwMDQ0WhcNMjYwMzAyMTAwMDQ0WjAzMTEwLwYDVQQD
Eyg1ZjdlNWRiZDFjYjhjMDRlODI2ODJjMjkyOWZjNjgzMzI1NjZlNzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhjCPIqqOO0kiJBLZKe0VxlhiVWx
jFMBv0KTrwkCMszRLo/AWzuBSkBVQAnZU/QOQi1u+neHEkylXx6kfLmcYU/C4eap
r1WXwBiO2TbiFkwhupeReb9pTDetrCjopqwHZQzo+YYVXMW4LFuWqSLlNeYWUWlv
HzrB2mSiyZv1axzvo9V4ACSbSyeEBwDPMNJ2Tm/xhkAl6RhM1ym+S3TDssTSF4f0
gRQu6OLjegWestFMIIN6CBq1ihs8nlAVTvqYAm6ilcLVHoZ1e2yen/gam+Xj5FxC
YTip10rCJXw2jb81J4zZ2O3xgXJz7ZDdXRIlO2ZEU83zCarDtqQ/XJE/nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9+Xb0cuMBOgmgsKSn8aDMlZueYMB8GA1UdIwQY
MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt
NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh
LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhKxq2t+
QUVtGKvAg3WOsY6ac271gVPtdGhcZbBX825zzy1qdL2FiodOfEH8eUYcyVNIxzGJ
P8Iv5RlP0/qqOgkBZ5CNl6qpfFf1Bmo7p6wL9/o9zgADc+CowT6ilT0D52P8NIHz
r18bWLvzJi+cbMi77Q/ZsWJKSbLY7S4/qoFAdwjnd/twbZ1DRoQlUKSgSFYahZ0c
H8jwpdeHfYAbocqZ+SMV+BVzArfg8D98IeXAyHclK52bA9op48oEk09e0ZtlLXmR
Mdw4TH10Faz9HERiaVO5HIUP94y1G25e7FqPEEvfCRlXLPSyanTueUEMzwiwghZR
XV8q0fb4oXP+Zw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:36:28 2026 by rpki-client