
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
File: bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json)
Hash identifier: FE8H9x71pb0JIkn5CGZWNqssHNKoRT2kiy2YxWIZ9ao=
Subject key identifier: 6F:66:32:75:ED:24:C4:2F:20:6F:39:BE:FF:45:EC:0D:4F:FB:4D:E6
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019E1CEB6EDD17FF77240EBC84198FB807F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
Manifest number: 181F
Signing time: Tue 12 May 2026 16:00:51 +0000
Manifest this update: Tue 12 May 2026 16:00:51 +0000
Manifest next update: Wed 13 May 2026 16:00:51 +0000
Files and hashes: 1: 9xgiRaoDHZpfEWCuWGLVozZH1gk.roa (hash: v8wEhG7uE5X+Pic34dsR8NNSQFk/2P4s8T0Y6bprmWQ=)
2: Aq5wESOUolAkTosvnE7ETStDfyU.roa (hash: yfEBzyPkUQCnnTcx22tGTzIIsK+Ma5c/+X+c6Yry/fU=)
3: B3ZlbL4gU6mGNdfE7GNgbCqsduM.roa (hash: 0PhXlz7OHulz176DWbBx9T4BxrFfJgZd9rJZ8KuMZgo=)
4: BGTIebFN8Np0NsQtF_avGDoUny4.roa (hash: NPCQmuapy/fWkxHdwPSPdnEK1QY4KGIX45+Q8l7yby0=)
5: BVAbby4n4nfVJfXWrR5Zl8eKCNw.roa (hash: 9h5dLOvIi1c2+opBBUG4urPF6XN2qAHfeKjpbM4tCxM=)
6: Dbdu-sAYIxR5QPvvVrRAhYH105w.roa (hash: fWwOPydmpUe+IsyFRDNgiL4cigw5qNtOrAk6xHxF7LI=)
7: HeSSKy0hpbFZwXpL4wRARD7sBKI.roa (hash: QjJUiqYDK9L1FM50J7fBEzbh41rsVg1rLGSgPBSUCpc=)
8: MJgiLKofa3--UVTFUoDMYpkd14E.roa (hash: H6wYuGz0ahIxYTCSRji68dw9L5rj0iVmY7ULRmePIqo=)
9: OGG1AN9r1K7fCCBDdkuKp2YurRc.roa (hash: uKPYBtL6H7NRJR1/TrQfck1LuVNFXIVWB3lTB8Q9nkM=)
10: SXe4L80C6NNAi8_Z_r_OzYlFJMc.roa (hash: rvAKW+Jnjq6JcXJuZTuezh3N37RsgK/dxB2hqkABN5g=)
11: Yi_0sb2Cd1tYZiiWIymmt_L8-nc.roa (hash: ZfN0GVzt124vq1vIJ26ojNWgsCUqMSJ0wE5cCnsN3gQ=)
12: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: kAtzIicrafeUrX07GEBqk53BFCGAjvP2cCXAP1dC5fw=)
13: bYiLveRsDlX78OsxGY3h5GANwkU.roa (hash: 7RIU6dRlDTBOGvkvNbaGxFh//l+X7XqnppaYQdzpO8E=)
14: iuRgfu21PTYsbZmCXChlKNQrvwY.roa (hash: bBVTlacYWROGx5pT6t29eLcMFfwpCwecFakjUlLqFkQ=)
15: lQ5I1RQhBLo7oEEMwItGQL1D4co.roa (hash: JsbTSCE7CBEzvAaKOwDU8edPgIOKQAAWgiGQC/UlKpg=)
16: sxM1hppwo8IA3sUIRWSmuh2DulM.roa (hash: d0rCe3Bx8Ky5qROI9ax/UnPDyR2WjD1W4X7Y8WVQZls=)
17: tXOl2ubuLkmi5Hms7cr2oOrONy4.roa (hash: /mpuqbpXTMSqEVxHEhqKLpXW3WVDEqBZMvkdGp9RQuk=)
18: uPXsHfVse8rlnzUbj2UoRMWOq8g.roa (hash: SCLabx4GN4AnmWRb1f32gO5dZZyqhDCGfjhfHlPlGlM=)
19: x4pQf17vDFkXV3GUtqmWbktS3Fo.roa (hash: TF4r3ErV+VPSElRBLhwHiJMcDMk0C1SKhfdxBMi4KUM=)
20: zw3H3DTpeUhcqqHWXtBf0WnIJoM.roa (hash: 6GByi9aIOsCybNHah1sj3rggT+SfOktCNujJlbLQbPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:6e:dd:17:ff:77:24:0e:bc:84:19:8f:b8:07:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: May 12 16:00:51 2026 GMT
Not After : May 13 16:00:51 2026 GMT
Subject: CN=6f663275ed24c42f206f39beff45ec0d4ffb4de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8a:99:29:30:9b:f3:85:6b:8c:a8:3c:87:2e:
7f:8e:fc:27:f0:59:66:7d:78:f1:ab:0a:91:b9:a4:
20:ce:cd:5e:e3:0d:7b:50:f6:c5:03:8d:33:a9:cf:
bf:93:66:91:cb:76:21:7d:2d:e4:bb:89:cb:6f:ae:
2b:74:b2:92:64:e3:03:63:e9:eb:30:b7:2e:d8:3f:
ac:79:c7:c9:0c:b9:72:42:ba:b0:47:28:6e:08:7f:
39:aa:a0:c6:13:57:a9:50:ca:e7:ac:d9:e2:05:e0:
6c:47:b5:32:ee:d6:8f:ca:1c:ab:e4:1e:55:e6:74:
29:64:fa:77:ad:a9:85:3c:ba:6c:b2:68:7f:60:c4:
a9:8d:1e:1b:5f:9e:a0:e6:e8:17:d2:7b:a9:49:4e:
4f:60:34:8f:40:d5:82:e2:d7:a4:a6:2c:e1:e0:25:
42:24:f8:82:a2:b8:ab:ad:05:58:f9:b0:0d:a6:54:
58:37:86:9f:46:0b:78:b2:0c:ae:aa:b6:1a:d1:9e:
3b:8d:cf:8e:d6:34:c7:84:7f:f3:cf:c2:07:e7:c4:
7d:db:e8:54:ce:37:c2:3d:ad:d9:ff:87:72:31:14:
e4:de:a5:0f:c7:98:d5:3e:e7:2a:41:d0:94:5c:69:
c7:eb:5d:b5:2f:79:fa:35:e9:18:24:95:72:f0:75:
d5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:66:32:75:ED:24:C4:2F:20:6F:39:BE:FF:45:EC:0D:4F:FB:4D:E6
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8c:ae:c9:81:07:23:bd:2b:0e:bf:e3:43:ae:57:92:02:6b:
b1:fe:20:a1:35:c7:8e:14:97:5f:4b:7e:b6:94:da:e3:75:04:
8e:81:8c:52:51:0c:95:01:59:99:13:0c:a4:37:00:30:2d:59:
88:d6:24:6f:b2:3a:f4:56:73:11:51:d6:0a:a7:95:a3:ca:ff:
57:ee:be:1f:9d:a5:2a:2f:9f:d2:0c:04:ca:34:ff:54:50:ea:
aa:a6:1f:a9:64:b9:b1:37:26:bf:6c:de:67:9f:c7:6f:14:42:
ea:40:5e:3a:93:8c:47:d6:e5:67:a2:5c:05:46:ac:f0:c9:0d:
f5:8f:3e:c5:2d:82:2d:63:b7:74:43:3c:c2:a5:68:f5:30:7f:
60:b4:ed:2d:86:4c:21:d2:12:c8:5a:52:0c:a5:cd:61:5c:84:
e9:a1:f8:16:e2:27:bf:63:5c:54:d8:c1:64:64:d6:c9:20:12:
ac:3b:eb:af:18:e6:96:cd:b3:a7:27:52:f8:57:2b:9f:1f:e4:
0a:69:be:97:c1:9d:24:58:ee:77:44:68:a5:69:ee:09:63:62:
0b:3b:03:97:5f:71:b0:fa:d5:2f:2c:ff:53:e5:4b:68:8e:7c:
ba:98:de:05:98:90:69:0b:f1:2d:b9:15:62:f6:12:80:2d:8c:
68:ea:fd:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c627dF/93JA68hBmPuAfxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3
MjRmNzUwHhcNMjYwNTEyMTYwMDUxWhcNMjYwNTEzMTYwMDUxWjAzMTEwLwYDVQQD
Eyg2ZjY2MzI3NWVkMjRjNDJmMjA2ZjM5YmVmZjQ1ZWMwZDRmZmI0ZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oqZKTCb84VrjKg8hy5/jvwn8Flm
fXjxqwqRuaQgzs1e4w17UPbFA40zqc+/k2aRy3YhfS3ku4nLb64rdLKSZOMDY+nr
MLcu2D+secfJDLlyQrqwRyhuCH85qqDGE1epUMrnrNniBeBsR7Uy7taPyhyr5B5V
5nQpZPp3ramFPLpssmh/YMSpjR4bX56g5ugX0nupSU5PYDSPQNWC4tekpizh4CVC
JPiCorirrQVY+bANplRYN4afRgt4sgyuqrYa0Z47jc+O1jTHhH/zz8IH58R92+hU
zjfCPa3Z/4dyMRTk3qUPx5jVPucqQdCUXGnH6121L3n6NekYJJVy8HXVEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9mMnXtJMQvIG85vv9F7A1P+03mMB8GA1UdIwQY
MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt
MzZkZTY1NzIzMmJlLzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl
LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIyuyYEH
I70rDr/jQ65XkgJrsf4goTXHjhSXX0t+tpTa43UEjoGMUlEMlQFZmRMMpDcAMC1Z
iNYkb7I69FZzEVHWCqeVo8r/V+6+H52lKi+f0gwEyjT/VFDqqqYfqWS5sTcmv2ze
Z5/HbxRC6kBeOpOMR9blZ6JcBUas8MkN9Y8+xS2CLWO3dEM8wqVo9TB/YLTtLYZM
IdISyFpSDKXNYVyE6aH4FuInv2NcVNjBZGTWySASrDvrrxjmls2zpydS+Fcrnx/k
Cmm+l8GdJFjud0RopWnuCWNiCzsDl19xsPrVLyz/U+VLaI58upjeBZiQaQvxLbkV
YvYSgC2MaOr9dA==
-----END CERTIFICATE-----
Generated at Wed May 13 00:22:24 2026 by rpki-client