
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
File: dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft (raw, json)
Hash identifier: OT7iNP52bZbcakoq0HVX1EYXu+k7KMAXf9JRus3AuY8=
Subject key identifier: 8F:FB:9F:BE:51:CB:6E:44:4C:39:8D:81:0F:DB:47:8C:E8:15:EE:44
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019CA7FC86A7C3673B85B084E3406EF3BA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
Manifest number: 10C9
Signing time: Sun 01 Mar 2026 06:01:10 +0000
Manifest this update: Sun 01 Mar 2026 06:01:10 +0000
Manifest next update: Mon 02 Mar 2026 06:01:10 +0000
Files and hashes: 1: 1-OFiNLlRzB9gQ8rsqUmStAURmZE.roa (hash: quk6uhyttW/EQZVx4h/mLlD4R/KssH6i1p34w64L7zg=)
2: 1HgN1jwalcG4P8feVb04KhuFrV0.roa (hash: /w9O4XbKLbxExGjrImzaWfj09XVEcX3nuVWjs3rYjs4=)
3: 1Waoar8xJafvNKM98KbPPpZpO10.roa (hash: FVUFHFwDvFIi/NS+ywIKrLhu+WhKWGoQsTo08Z+OPm0=)
4: 1bcAiDqSjg40EzVO4ytfDWpkSvE.roa (hash: 43VS4CRnWISMDMLy+6UcYdAY7CkwReNLiVh5H8h6WqU=)
5: 3bMwKPGkCpUYdK3M6gxRPzbeOlE.roa (hash: 79Ubn1LP4gtqzeIby6w27GXFentkt53aRIvCQoznPKw=)
6: 4Hry2GHWIQNsyjQrTIx9fQN6gB4.roa (hash: gzVtaF4oZV0YS7EVbW+xgNO11PuUAiMDYx+s9V8pZcs=)
7: 4T3IbnYh4saIcnPZM7_bM8SrdUk.roa (hash: bQElEoR/i/ETSq5yQpPm2JLHUn2xQq3oHlgi8Prxj7o=)
8: 7ZDTLwuc17GtsZsMN1ExkVk2x9U.roa (hash: bN7rx+fuzGGRqgrRx4HiLqHFyL7jp2FUiYn5hgrI+gI=)
9: C1n3UPGE5EB0uyIS_vS1FQvWdTE.roa (hash: c3UxVvvTqyAS1z/maaAMv3FhjUnQX6aILRuaQdJ9+dA=)
10: Cg5-4-MPHdR8rHLYCSeMDcuN3WA.roa (hash: Cib4HxTsrIRtaj55BTF6+WAR6MahtZRAFeprgaqN1EU=)
11: DbHsIS1wsGD5VENgKaURW87eGBM.roa (hash: Pg7LFkTLHIS+tij3rt6g9Emn9DJ6nvCMWnQoCISIDpo=)
12: DpKOrE_cvDpYUUmh7MvwmGOWBPk.roa (hash: HH9fYr3P6DqXc1+m5cKoAOtNDzmk8tYbfKtERsO0Vok=)
13: En94w1aoQT2Df-plLIO5o_mJDiE.roa (hash: T1Z8KGa2hhTOXx23lLVrR7iImIAiFGfiumitd/czjbE=)
14: G1copBYS9CmMlX2FVwkbhIhbgBo.roa (hash: iiTpPKuQy+sIvxdb8BIjv61/rd0bo75wTrkKcwU7rb4=)
15: GfvrudqQtadcfEHpprwynTfNYIA.roa (hash: ReY30DmSZMs/0/wYnNlZrGqTcQIT5Z9nTZMHFV2s+iY=)
16: HEEBNvj21luiVf4won7bq4ZQmKE.roa (hash: udPIy2ibL7Vj2lt8/UkNkqdezAjsD65iSObaDZOKY84=)
17: HSTLkhClz6LRADHXHrCQqqSC04s.roa (hash: s8VSLrC5qvSowdJpecSp5doTo7LDHBtmqawdvNkdw/I=)
18: J5hS-MwRa0Pp1Ax-eXmJXTFPUAI.roa (hash: 0OShF4FaS2H4QHgvZ8CoH/llz34UbR5B713YVNSs1JE=)
19: JHqDa2vRI-wqNg_Y5rLnrSHRvVI.roa (hash: lz//lyPSLWsPEiRIqlog1rZYWW/jlzMOrQAdZj8R60c=)
20: JxkpyyP7d_E-0Cii8CW-5t4BsM0.roa (hash: djpZA96AI3V3aNYhwLJeVpkRf9KyT2JvxMUQr+bsTOg=)
21: KBQCvdZ1Fih2U9PEnXZaHYZQKaQ.roa (hash: aJ2vN0uyC0Hga0lux0w4oAz9DV1ub2HSd8DIya7fmtI=)
22: LnnTovLuI750TfHC0xewXl7THNU.roa (hash: gnERhSsWK3S4zKeNtNnqJoJ8yYwpR1CtZ/z7wQ+Xm1A=)
23: Mo6sIY942w2mOqA6gHPZH1sJxvo.roa (hash: 9P+/MkpETdsVTSW8OwDRt3drUzJjpiPwqRoL7GY/yIg=)
24: NWx-3VRYiVj3rInpt0GC-j6Bk1w.roa (hash: aPMqHiIhFTors8hWctYIEhCCvjVaLha58IZgbJT4DOs=)
25: NoaqM1r-voUvMtXV6c0v9imMsKQ.roa (hash: tA7iKs3kzLEd7cgCrqMemYC62LPi9vTpaH4xuxgWkP4=)
26: QwXJQ-gW-nj7udxCnL15rUHQAAk.roa (hash: 4JkftfFeA+8MJJ74ERDuye4yAiHABdPHlYQTJhofoC8=)
27: RBYeJvnG9BPaoKCf3GTmvizALJY.roa (hash: kRi3zgBMSsciFNO/2eaRHyq4otB+Mdoc4y1HYeeA5rw=)
28: SFMYlN0Z7j7jTfVInMfOAfp757A.roa (hash: 61Le/u2BZHTj8JLBDMpSTN47fQq6QVqFLHjwtsxh4go=)
29: SQTK66WzLAK8TXDSG7HMSsqFAn8.roa (hash: 1jt/Bil6UdOScDCfuLlT86C9WZy4s6/vQGzui9lZXx4=)
30: U6PmbsElL-7MtijxdO0BAbrah0Q.roa (hash: Ofq7OHaNVfJq1ZxKrOfI0SrMBFQRCEoouCi2oXZEPBM=)
31: Ub75tOZdOg2xdvFErJ88k7KaSUs.roa (hash: AsFVQQMMcv5/BxrT0qGoB9Hl+vwn3+3VyS/clSKWb8w=)
32: WzVSfSCn9MA71szaeG3UuHYtodU.roa (hash: kWQzLXCD3ayRG08QODIsJik0zppGZ5zBgdeluY209BY=)
33: Xf46Pw2tgmQ6pve1qLg9BZ7i_dI.roa (hash: D+T6tWOFOaWIc3tUG494jBawlfeKBbjhnuioC/+eLKw=)
34: XpKA71gUP1e7UUjZfSVd57bX570.roa (hash: 6PtbKEpVQwlUQzyUCiZ3HIGqzJT0phPeJKaGDFOYcU4=)
35: Z_byLoGDwDVZ1uuZ26kOsOZN0HY.roa (hash: bKumZUvmKCZ3xxOhEBADxpM32rg2Z2evEh7LsRdeEbk=)
36: aU79596Umtw5a2Y_Rg03LRPN1BA.roa (hash: Bph1g6U7CLK3f0xOwmuRbjpNfRPSDtTfRbBVZmBYogI=)
37: b3obsj7bhISGV2ic8E0aogm2GNk.roa (hash: HS7Xi+YLjjvjjAzScsRz2J0IByu2Q4w1qMjo4TBFOow=)
38: cK89N5HfyZS7jF6HhZwkXV8Y2Bo.roa (hash: JcqlClpjnKH1fpiTqdXi9LCmWrDRy3adS44+Dzy+IYc=)
39: dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl (hash: UEwVzSVVc6OIefDAGZIEBm56aynGoqbdL/ckOjfwB4Q=)
40: dwnSi6hIkl-B0bCu7DnKPlNZzLg.roa (hash: sXUyQ4gvIeZM16LhUWSfjJwXhynuc9X7oDXpD7bSzjI=)
41: hOBQ2pkA-0KSRD9W7HYv7T_EUBs.roa (hash: WyYXRQPNi7imcTjkFnUupixWz7zRkOa+LoRgnw8jDP0=)
42: hSaax3PNMqT-lY0FA2NBN-L2Y6k.roa (hash: TL8+SkkJk80gm8fQRrJdTYhaB9ZhdsTEkaDJpoXwUDg=)
43: hdJu7f4kSdt-uKkfr1zrXBPa9Ks.roa (hash: GG98Q1bl7OyANKUpp9Wym8WZdgAzVgCTFjDl+3fraHo=)
44: hs7UjWv_36Zyjiol2fhZVpdxnrw.roa (hash: I5NbXUDF0WgFjA2XZZ6Uzv6rmmNPNQowTBKmtDFFOHc=)
45: iuklIzN3cd1myy3SDGqaIIPCfVQ.roa (hash: 3qfnX7bi5LJVGXxA1CUbsRAXKqiE2M+t9Nh2aQQGCqc=)
46: jypXh21hN7YdEpy4dXX0h1grdhA.roa (hash: 2PCWogNS3NDeaLLtCqO6S4RyV1g0zZ01LBa4NOA2iZI=)
47: oFcv4p7EMaZn_-HTYsk7xa8PwmQ.roa (hash: MzH0iIY/I1hIFF9okU9QCTKwly5r1itDctKvuw+/5AM=)
48: o_xmKrPL1_AoZs8GvOPm1dKIyhY.roa (hash: bZaaKprcnpy1yZ3w1Gq+0Y+GwujtgYnOL+MJw5ekemQ=)
49: qeIYeI4kLeYu7uLRbJocCx_1loA.roa (hash: KvfJJDGtnxUjjU8tM6px0TBivGi+lJc09QKLwJtVPXE=)
50: rby-gGvDas1Xa9334DJTczkmtYc.roa (hash: h/3pkwNZ0gwBP4ba5gjKhseXzTn04Qnwy4D9dTEdSQ8=)
51: voN8vwWvhtrarGbETBOSasXNWSI.roa (hash: ceFvyVvNqry/EnDK9LeHP842A/ozch+GOGZX3poJEIE=)
52: wwKe_5nbJkCZEay725-TDTyy8Og.roa (hash: pMdRZjm2+fkkArj9Ia/EQLb5RslFHxVSqKZVI19kX04=)
53: xSlSopVrA7ar-AzHU43kvDoRkZo.roa (hash: EIL/MjiMscFzU/GPSjw2hRcZh5VxPz7Q7L9p0rCpFC0=)
54: xtsdMsyk002qfF3jIDsOOIwPf58.roa (hash: OcuaPeFEZzFGGp0t/Q7RlUFdkUOuvpjJGoKZbeYJ8m8=)
55: z3gn7O2ArUfbRH7IibkSmLe4aaQ.roa (hash: OBFHoWbMgkm2Gitpb2oBEMkW3r4uU6S8dgFs2hCVQO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:86:a7:c3:67:3b:85:b0:84:e3:40:6e:f3:ba:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Mar 1 06:01:10 2026 GMT
Not After : Mar 2 06:01:10 2026 GMT
Subject: CN=8ffb9fbe51cb6e444c398d810fdb478ce815ee44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:cc:c2:e8:1c:4a:b6:60:4e:a2:4e:de:66:
dd:7f:5e:81:3d:8d:0d:0a:9f:f8:34:d9:76:ef:be:
71:be:07:0b:27:24:37:f1:cb:d2:60:88:0d:49:61:
d4:62:d6:a1:4a:21:e7:f4:94:2d:26:4a:fb:13:d1:
69:02:4e:ee:c8:a6:26:5b:54:33:8f:14:60:12:88:
86:88:3f:c1:50:b4:86:f2:14:d4:0f:aa:ee:38:c1:
b0:fe:a3:98:f9:85:46:cb:87:67:1c:2b:10:9b:80:
05:30:eb:b1:33:3f:91:6f:cd:5b:8f:3e:e8:f3:80:
3d:49:69:6c:ab:8b:ec:89:61:dd:22:d5:b8:e2:6b:
ce:07:6c:a4:3f:c3:98:70:b1:42:97:a1:51:d5:9f:
bb:97:05:cb:4b:4b:60:31:37:ee:b2:99:e8:3d:41:
7e:7b:aa:fb:61:eb:f2:84:ff:4b:0e:56:0d:93:e6:
76:4e:86:77:e5:0d:e2:dc:80:fb:9e:a1:59:8c:0e:
c9:33:a5:b1:ce:df:41:0e:c7:f5:71:6b:16:7f:f6:
93:ef:5f:76:3a:b7:ea:5e:71:e5:27:e4:d9:65:fe:
8d:85:ca:0b:e9:fa:8c:4d:cc:0c:82:e9:89:fd:de:
04:a5:b3:72:9b:d1:52:6b:19:29:bc:4b:1a:48:54:
c5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FB:9F:BE:51:CB:6E:44:4C:39:8D:81:0F:DB:47:8C:E8:15:EE:44
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d5:70:51:50:f5:c6:4f:03:bb:7c:e2:b7:99:89:39:99:b3:
2a:be:38:cf:8d:95:73:bc:f4:f6:7f:54:f5:02:8b:f5:77:37:
a1:56:79:16:b8:79:eb:c2:72:6e:e4:fd:72:77:ff:e1:e0:d2:
13:05:5b:35:68:43:a8:28:ad:d1:cd:c7:6c:fb:15:5c:ca:02:
ed:68:06:32:09:0d:ca:d5:28:2e:48:96:c4:ba:d5:01:48:98:
19:6d:de:81:51:36:bb:b6:b6:14:03:34:b5:c2:dd:60:2f:b6:
c6:a9:5f:93:ee:36:29:10:89:7a:9b:4c:e5:8f:d8:8d:f7:d8:
98:f7:46:b2:ac:9c:c9:36:c4:8e:d6:e6:f1:c6:41:ec:3f:f8:
ef:89:a1:93:2e:35:ec:0a:4c:07:d3:5a:84:f8:d6:10:bc:16:
90:e4:48:a9:39:f7:f6:8b:dc:df:1f:86:21:73:90:3e:f3:e8:
c5:58:3a:bf:cc:20:d8:4b:6b:e0:d6:69:28:47:a4:17:75:3f:
03:8a:ec:57:54:0c:e9:1e:ac:6d:8f:20:18:75:ab:a0:36:fe:
e7:f8:d8:44:0e:59:a3:e1:10:31:bc:8d:fe:b6:e3:60:c4:63:
99:24:8d:c3:0c:c5:52:ea:ee:9e:2f:50:01:a4:7b:05:a7:85:
a8:97:7d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:55 2026 by rpki-client