
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json)
Hash identifier: Bhcp3kAQEmet2qhbWmEpvm2QxyxDKaul8j1ann5VkMs=
Subject key identifier: C3:4E:24:C6:3D:48:BE:5E:5B:01:F5:2A:3A:94:20:48:AC:59:94:D8
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 019CAA590991C097402D3A7951F65890E552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
Manifest number: 184E
Signing time: Sun 01 Mar 2026 17:01:27 +0000
Manifest this update: Sun 01 Mar 2026 17:01:27 +0000
Manifest next update: Mon 02 Mar 2026 17:01:27 +0000
Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: XQ25OnGwwbFc5e2RU3YzMny0y56JRZdr1PEqGNtIZgo=)
2: 8cM6v3_NRAZ3FP_fGe0mwmajY0k.roa (hash: UZQldaFo6xwnQkumeQ30d5+3aDGt7jMCik6EMuRJupg=)
3: AA4leRD0fxCP27pMiyTWgt1l_rg.roa (hash: 7SvYjkQmEnHNW0Fizpa0BEm4+FNoAcLpGmBVskPF0pY=)
4: AnJCTd7AgRSldDmx71BvWIQlsjc.roa (hash: VFBhkSbr4RUTAOsdzP+CuaTF7y4EenVQsmWrwQQVwpM=)
5: D9vysDJ6akM7Z66wywlmqWF3jxM.roa (hash: +6sSHR1vJhbnSV1+bNKy86Yi96WvoRkEvwudcBXDAQg=)
6: ES-7aSo6ovYXFf1ggrOgufF4HXU.roa (hash: oBAEPOe3qVf8emRhcuSX1FU4S9ycxaYKQRzrtaIuUZQ=)
7: dBEozjZ87taP7CwFVSXV3w6pkxQ.roa (hash: Q0IadO2WrRqgDE01zeYb4r27Fa+c+ppGgdLscaUKNKk=)
8: kLGlFczsrbvI1LLNYABL3V31uw4.roa (hash: PyJOpPlpidMPg9tlr0wrxczB6f3WILsayIOfBgsOza4=)
9: lIxr1Y2g6tW4Go6HwrrCY4g1GhU.roa (hash: qocUAMn7M/1zyYPDlsc7BcT51RuGObx2kW5wM3NnVyE=)
10: rDXd_OZlN4Uiv52rfRn8xHDUy80.roa (hash: 91Ja2DiUDudi8VvOpGDDJuXajBkTzaFVadsjPhZfAy8=)
11: xVvAeAbjAnywjqQvLFjnqGabFzo.roa (hash: MHe3EjYa15PyEjrwN5cSdo1Ogd8ywELYCfO8/S46e2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:09:91:c0:97:40:2d:3a:79:51:f6:58:90:e5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Mar 1 17:01:27 2026 GMT
Not After : Mar 2 17:01:27 2026 GMT
Subject: CN=c34e24c63d48be5e5b01f52a3a942048ac5994d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:f7:c2:14:08:4f:3d:ed:a6:52:97:42:88:
8e:b9:26:83:02:7c:e1:e2:0a:62:6b:f0:de:5b:0f:
5c:2b:71:4a:af:14:a0:71:6a:07:dd:68:53:a9:1c:
56:77:d2:42:f4:81:40:5c:77:50:ef:52:ba:15:5d:
b2:11:e9:b2:d6:a2:35:41:94:99:e5:b1:d2:c9:a2:
71:99:d7:d1:a7:a0:14:eb:75:46:72:65:87:2f:d3:
6d:5b:22:0f:44:4a:66:8d:b7:cd:44:db:a4:52:20:
ea:0a:fe:c5:55:c1:c8:77:0c:36:52:25:4b:17:62:
10:49:09:78:90:01:da:b4:57:5c:74:ce:3a:9a:49:
50:ef:51:4f:39:00:79:c2:3f:87:9f:e1:c9:3c:45:
f2:7a:75:ca:4d:2e:48:5f:85:4b:4b:d0:9f:ec:aa:
d6:82:ab:1d:2a:5c:73:ed:6e:a1:88:9e:d9:4a:a3:
5c:05:40:3b:1a:26:28:e9:a7:50:54:40:86:eb:31:
13:24:28:8f:9b:4b:a5:4d:dd:a8:53:42:71:28:79:
fa:24:6b:65:7c:d1:21:c0:fa:1e:f6:c8:0b:fd:4b:
29:0a:53:4b:47:a5:2e:e1:bd:b1:19:d0:89:cd:9a:
18:35:65:c4:05:2a:53:d7:87:90:ba:24:78:df:39:
de:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4E:24:C6:3D:48:BE:5E:5B:01:F5:2A:3A:94:20:48:AC:59:94:D8
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:dc:ff:32:3a:61:39:25:ae:26:0e:cc:1c:c0:63:9a:e4:75:
3a:16:49:b0:83:39:f1:61:de:67:48:3a:de:6a:06:ce:df:43:
fc:11:bd:67:18:11:43:0d:50:7d:ce:0e:19:5e:9f:4b:2f:93:
a5:66:7f:48:43:d4:c3:3b:a7:ed:f0:b1:4b:fa:3d:89:34:f1:
19:2b:f0:7d:4c:6c:dc:3c:00:ca:92:7c:bc:44:d6:9b:15:6e:
88:11:4d:37:ce:12:17:a1:5d:8a:fe:41:25:33:d4:b9:bc:64:
c7:86:16:95:19:fa:74:c2:52:8a:f4:c0:51:ab:56:56:0c:3d:
bf:b4:e2:5e:7b:6f:a3:6a:47:3f:32:dd:50:de:08:3c:15:c0:
6d:5a:11:cc:89:15:a9:34:a6:80:43:22:f1:40:cc:3f:74:fa:
28:f2:a8:10:78:e2:3b:15:2a:b6:f4:92:3f:85:51:c3:1c:07:
dd:3f:b1:30:b7:0b:a5:51:66:b3:01:30:bd:22:03:b5:26:14:
bc:7f:0b:70:a0:4f:ec:05:e5:7e:8c:39:7f:d3:66:61:db:72:
7e:c1:2c:a0:fc:ad:a7:e5:b9:5f:e6:41:98:92:25:55:5a:c0:
04:b4:ee:f3:dd:15:e6:ea:84:cf:b0:fb:2a:9a:f2:44:ac:86:
f8:0c:53:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:25 2026 by rpki-client