
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json)
Hash identifier: dqJU3nwjuHH9ALcx1hrtJ0+jniRw8RE431fyUUkm14Y=
Subject key identifier: 2F:D1:78:AF:BC:FB:BF:17:77:EE:ED:A8:9B:38:3A:32:F2:0F:54:BF
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 019D27E00ADD1061CD5AAE32BA21EE470768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
Manifest number: 10EB
Signing time: Thu 26 Mar 2026 02:01:27 +0000
Manifest this update: Thu 26 Mar 2026 02:01:27 +0000
Manifest next update: Fri 27 Mar 2026 02:01:27 +0000
Files and hashes: 1: 1-aAnZPPZWae4lmSE9DlntwOcXpY.roa (hash: TLz+E6d2U8toIx66GckohN5FWKsxPmC34gYYCDNp0r0=)
2: 4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa (hash: nSZRPOQqe7DVG+VL7Za1u1OIJhF6Aajk+6MyhNvdJuI=)
3: 8mCRXCtonebQyWHGJmlph-emqDk.roa (hash: 4h/4zlSVQ3uClic9xPZW/eCYpC+NvSaS6+RDz79In4U=)
4: LQ3rz3zVoUTed5OAPDBbq1tAQz0.roa (hash: Ar/LKRozDT6A+/9HgHGJRKF1bqwqINiTlNo97b3clYU=)
5: SvWH_F0xbXxOUFZQOL_3i9ck6iw.roa (hash: zNIPgBSX8VCcabNEfftrOoKWD6CfW4gZjvdLbZ3CW10=)
6: TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa (hash: y1ZUup4RV6VYrfrFEeKQot2GjsYXMJViBC6DIcYY0x8=)
7: VvuULWo9vnBO8IgJn77OurAnWAA.roa (hash: ShcVZVH6pnVAy2008Lo5H5VH8tpGQf0z80jAV3QDe0I=)
8: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: 2vh2iqa/YtpiSUBzdJb3zhNA+yUFlh7A+neY3eukXlE=)
9: _dx2CJojBdg1dQ90hMAD_lCOwHQ.roa (hash: 0ULsxNCLOF7Mmtn3rqBfqWSvtKN6lj6291u6ShH3qyo=)
10: eAYv8vDO2qhIknKZLTDaqDcYe_A.roa (hash: l1XCq+KcyC0Vi5Vj0FihyhILnDir1QdAPneVvVSs4Nc=)
11: h_yiaR3EGim6MLv4wKm89eZLt8A.roa (hash: E2gv1E8KeqioSiQ2UiAhiWEUqE/cYHvimtqkuYdbZCo=)
12: keGrabfGTJ2PEb01MkX--1neS-4.roa (hash: UEjR3a/XAnpTopt/espJ908UvKBCEKVmdYlDVMZv55A=)
13: oPwG9ExReYsnz5p8vqlzN-e5OB0.roa (hash: a55Jgbq5JGC8OLRc6+/t9QpTipFlzpXiFcszhhlrsgc=)
14: sCs1RNsbbpdtdRshELC1NWwIFUo.roa (hash: j90iLo+GDhNMJvSg6R7KagmOxlr89VNNZUUzZVXbYuI=)
15: tVehCQA-0IdFUBojRkGxC6ziJ8Q.roa (hash: w4l/5QNspHBtCuymre4LSN3BUOt0TxFzN4DS6VDcIh4=)
16: uCQIdQRThP22a-vG2hgUMuJi64o.roa (hash: J4OTf97Q7mJGTx3r4bDe4F/00WPH3RPpof+YFgGU2K8=)
17: uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa (hash: RsHJ5U9eOIuGOA1dGk00xAYGTPYQHBbKZ1jbE2JgsM4=)
18: y1QDMX1RAbu1Kwa57mrptTZjJpE.roa (hash: VJ2cPikLiBRQj2D0yK7yoI27euxpQX3kpa5NIbLsEkE=)
19: zOEbGJULluKjsKP-6SB80Ki-zPM.roa (hash: CbTOwAg9UzNbOO3cwH9W5POV271hMLj4rly3u023LhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:0a:dd:10:61:cd:5a:ae:32:ba:21:ee:47:07:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Mar 26 02:01:27 2026 GMT
Not After : Mar 27 02:01:27 2026 GMT
Subject: CN=2fd178afbcfbbf1777eeeda89b383a32f20f54bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:de:7f:00:b3:39:f2:fb:d2:d5:5c:05:96:aa:
b1:fa:58:33:4a:27:4d:2a:c6:d6:b6:92:74:69:78:
69:25:13:c7:21:4c:d9:48:66:2d:ef:f3:85:74:28:
5c:57:91:62:4b:5c:4f:cb:31:37:2b:5b:0d:2d:ad:
d5:23:f9:04:f6:7b:6f:5f:a8:1f:4c:3a:28:27:b0:
00:3d:74:b6:9f:de:89:01:f9:79:0b:aa:12:a9:68:
ec:4e:0d:fb:17:43:1f:78:cd:70:8b:53:37:56:fc:
6e:1d:9a:ae:4c:35:5e:1e:38:57:fd:fc:38:31:fb:
93:77:f7:dd:05:9c:91:93:11:78:10:df:b6:fb:c1:
84:ac:7b:27:2a:71:2d:a6:b5:86:a1:94:ba:fe:a5:
0d:22:78:f7:6c:6b:26:0a:d3:0f:1b:37:05:3f:21:
da:fe:36:f6:2a:d7:14:dc:bd:45:ce:21:89:0d:05:
3e:bb:c2:06:c2:43:59:e5:f3:2f:b8:f6:5b:8c:9c:
56:e7:f4:ee:39:2c:1e:3a:d2:86:93:56:8b:77:ac:
da:2d:3a:2a:a9:1d:ac:47:59:cb:4b:46:27:c7:da:
61:55:3d:4f:5d:33:42:24:df:31:8a:3e:e7:11:4e:
a8:93:0d:87:b5:f8:26:61:9d:d2:90:de:74:a4:eb:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D1:78:AF:BC:FB:BF:17:77:EE:ED:A8:9B:38:3A:32:F2:0F:54:BF
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fb:7d:28:2a:79:0c:b2:a6:c6:57:15:62:dd:b4:f7:12:22:
ab:c2:3d:39:cc:c1:96:5b:15:a8:02:00:6c:f3:9a:76:8c:f0:
56:02:9c:1e:f2:34:b5:f6:4f:21:8a:13:97:cd:68:77:db:ff:
3c:c9:fe:0d:fa:4c:09:49:f8:2e:72:4a:6b:35:bc:7b:6c:37:
a3:1f:d1:bb:4f:8b:8a:ff:c6:b7:a2:cf:94:79:e2:f6:8d:b3:
ba:59:ab:0a:5b:8b:06:a4:d5:d9:89:c2:11:e3:e7:45:4d:b6:
6a:11:3a:d4:c1:9a:f8:73:d2:94:3d:d1:d2:f3:2e:6d:20:1e:
95:aa:8e:21:b3:70:e2:02:5c:ef:6c:92:d0:96:cd:6f:49:92:
79:ef:4f:ac:5d:9c:15:08:ec:39:3d:9c:8b:34:4b:a9:a4:78:
ce:86:b3:24:93:6f:0a:ae:af:c7:25:86:d4:12:94:a4:c7:f6:
ea:86:36:ad:13:de:fc:4d:67:64:ef:dd:36:0f:ea:c6:fa:5f:
4f:d7:8e:f9:69:b1:b6:7a:4d:de:87:b6:f0:8f:b5:05:1d:09:
e4:7d:d2:a5:99:2c:d6:f3:8d:51:06:a6:59:e1:72:51:b2:9a:
67:94:85:a3:92:77:9c:0b:b2:df:9a:f7:42:58:6c:ab:cb:3e:
43:3c:0a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:14:55 2026 by rpki-client