
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json)
Hash identifier: ffCXZlMjC+q8Qi0W4ncH0UGbRCfQnYNKuHcni1Ntxic=
Subject key identifier: 37:94:BD:60:22:04:EF:1D:50:52:B5:A0:28:C3:A7:2C:B2:50:25:6B
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 019D29CE25091A8AF4C2FD17E57D20A4BB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
Manifest number: 10EC
Signing time: Thu 26 Mar 2026 11:01:08 +0000
Manifest this update: Thu 26 Mar 2026 11:01:08 +0000
Manifest next update: Fri 27 Mar 2026 11:01:08 +0000
Files and hashes: 1: 1-aAnZPPZWae4lmSE9DlntwOcXpY.roa (hash: TLz+E6d2U8toIx66GckohN5FWKsxPmC34gYYCDNp0r0=)
2: 4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa (hash: nSZRPOQqe7DVG+VL7Za1u1OIJhF6Aajk+6MyhNvdJuI=)
3: 8mCRXCtonebQyWHGJmlph-emqDk.roa (hash: 4h/4zlSVQ3uClic9xPZW/eCYpC+NvSaS6+RDz79In4U=)
4: LQ3rz3zVoUTed5OAPDBbq1tAQz0.roa (hash: Ar/LKRozDT6A+/9HgHGJRKF1bqwqINiTlNo97b3clYU=)
5: SvWH_F0xbXxOUFZQOL_3i9ck6iw.roa (hash: zNIPgBSX8VCcabNEfftrOoKWD6CfW4gZjvdLbZ3CW10=)
6: TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa (hash: y1ZUup4RV6VYrfrFEeKQot2GjsYXMJViBC6DIcYY0x8=)
7: VvuULWo9vnBO8IgJn77OurAnWAA.roa (hash: ShcVZVH6pnVAy2008Lo5H5VH8tpGQf0z80jAV3QDe0I=)
8: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: ZaZdnbt+F8Dq24xo/cN1ilxqs4GvtSEfPyKWx+2BdFU=)
9: _dx2CJojBdg1dQ90hMAD_lCOwHQ.roa (hash: 0ULsxNCLOF7Mmtn3rqBfqWSvtKN6lj6291u6ShH3qyo=)
10: eAYv8vDO2qhIknKZLTDaqDcYe_A.roa (hash: l1XCq+KcyC0Vi5Vj0FihyhILnDir1QdAPneVvVSs4Nc=)
11: h_yiaR3EGim6MLv4wKm89eZLt8A.roa (hash: E2gv1E8KeqioSiQ2UiAhiWEUqE/cYHvimtqkuYdbZCo=)
12: keGrabfGTJ2PEb01MkX--1neS-4.roa (hash: UEjR3a/XAnpTopt/espJ908UvKBCEKVmdYlDVMZv55A=)
13: oPwG9ExReYsnz5p8vqlzN-e5OB0.roa (hash: a55Jgbq5JGC8OLRc6+/t9QpTipFlzpXiFcszhhlrsgc=)
14: sCs1RNsbbpdtdRshELC1NWwIFUo.roa (hash: j90iLo+GDhNMJvSg6R7KagmOxlr89VNNZUUzZVXbYuI=)
15: tVehCQA-0IdFUBojRkGxC6ziJ8Q.roa (hash: w4l/5QNspHBtCuymre4LSN3BUOt0TxFzN4DS6VDcIh4=)
16: uCQIdQRThP22a-vG2hgUMuJi64o.roa (hash: J4OTf97Q7mJGTx3r4bDe4F/00WPH3RPpof+YFgGU2K8=)
17: uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa (hash: RsHJ5U9eOIuGOA1dGk00xAYGTPYQHBbKZ1jbE2JgsM4=)
18: y1QDMX1RAbu1Kwa57mrptTZjJpE.roa (hash: VJ2cPikLiBRQj2D0yK7yoI27euxpQX3kpa5NIbLsEkE=)
19: zOEbGJULluKjsKP-6SB80Ki-zPM.roa (hash: CbTOwAg9UzNbOO3cwH9W5POV271hMLj4rly3u023LhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:25:09:1a:8a:f4:c2:fd:17:e5:7d:20:a4:bb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Mar 26 11:01:08 2026 GMT
Not After : Mar 27 11:01:08 2026 GMT
Subject: CN=3794bd602204ef1d5052b5a028c3a72cb250256b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:8a:18:13:b9:1f:0f:7b:c0:ae:de:1c:3c:
5f:97:af:e2:4c:76:f6:bc:65:0c:e2:b9:c6:4d:3a:
ad:94:a2:26:44:f5:e6:d5:96:fe:15:11:c4:23:f0:
e3:1c:30:48:7b:c3:25:21:bf:1a:c3:b3:0c:cc:7b:
35:3e:85:c8:d1:48:47:e6:d8:dd:38:f1:30:fb:e4:
ef:27:3a:bf:67:a3:84:c4:1e:4a:3d:a5:7b:35:33:
af:83:8f:e6:89:5f:11:d2:25:c1:7f:cc:ec:07:7a:
95:06:29:b8:07:74:10:bb:c3:f8:67:67:57:05:79:
be:70:1b:52:10:53:84:51:d0:b0:f0:38:e0:da:3a:
21:77:32:40:e3:ff:43:15:e4:87:b2:36:0b:27:b9:
d5:50:42:b3:73:4f:bb:74:29:af:f8:07:74:cf:84:
36:be:f2:ae:55:4f:00:94:63:25:0b:82:e1:71:11:
91:2c:fa:61:b0:27:dc:d4:c8:48:c8:b1:2a:c3:a1:
09:71:5c:9c:01:96:e6:0a:ed:dc:9c:a3:37:8a:25:
63:a5:54:a8:e2:6f:5f:92:f5:4e:28:fc:57:db:dc:
67:bb:1f:8a:65:f4:25:9b:1f:15:50:e9:d1:06:51:
c9:6c:f9:c3:05:a0:8c:0d:c4:63:66:ca:2b:8d:59:
44:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:94:BD:60:22:04:EF:1D:50:52:B5:A0:28:C3:A7:2C:B2:50:25:6B
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d4:80:af:b5:c8:a3:4f:b0:df:fb:64:1c:ed:43:64:58:71:
20:da:37:8f:be:56:79:62:5b:e5:9e:18:59:22:b9:3c:90:b8:
55:86:da:83:28:0c:88:b0:64:0d:44:8e:78:1a:40:2c:92:cf:
db:ac:50:d3:f5:52:24:68:1f:5b:74:8d:ba:d8:4b:43:32:3b:
7a:c6:d3:fa:1a:9b:d9:9d:da:3e:97:a4:5e:d1:f2:79:2e:ac:
6a:0e:cb:a3:dc:21:24:34:86:5b:d7:8d:b4:eb:27:33:f7:65:
76:0e:47:7f:c3:1d:fb:c4:9e:f6:f7:a8:51:c8:6c:f6:44:3f:
44:38:e7:d8:91:a7:9c:b0:83:01:37:a3:94:ad:19:e4:aa:32:
4a:1c:f3:aa:0f:6f:bf:ec:a7:56:3f:d7:ca:e4:e0:b3:e8:a8:
c0:54:92:fe:82:91:2c:d2:cb:97:f8:48:74:0b:1f:bd:e0:77:
87:cc:71:67:bf:32:87:0a:b3:48:07:d2:0b:49:3a:43:65:a5:
93:2c:23:c4:ff:cf:40:07:1c:1f:d9:02:be:f5:75:10:00:e6:
38:3d:59:7f:80:8d:7e:70:1e:7a:28:51:0a:7c:c6:3d:c0:e2:
8f:d8:64:b4:b1:62:26:0d:66:3c:a8:33:2e:1c:4a:e2:67:dc:
f9:a9:97:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:32:56 2026 by rpki-client