
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
File: tVfM1Dr-gW5JUyKL8Up13CkBS40.mft (raw, json)
Hash identifier: c35JR0Zalz5aoFBNTlh9SY4FU+nXhMcXTvU2jkro+T8=
Subject key identifier: A8:C8:C2:08:90:3E:12:76:3F:3B:0A:06:EA:2B:64:05:77:D9:A7:DE
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019D29E181E638D931CFAF6FA339B240B7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
Manifest number: 1975
Signing time: Thu 26 Mar 2026 11:22:17 +0000
Manifest this update: Thu 26 Mar 2026 11:22:17 +0000
Manifest next update: Fri 27 Mar 2026 11:22:17 +0000
Files and hashes: 1: 1-9eUDWcxbt2aqbNSlZi8gTl5DCU.roa (hash: p8wctqzFNtkBy6RhhhlaT7VtYKQMWW5FKZWtYRgVcII=)
2: 1-Aqw_jlnEh5mzI_JFRmOyaEiPjY.roa (hash: tXfoCwpHJbuZxjYEzHdSS4wRnSV0yN9so5GmJzrVHLc=)
3: 2HdAV3PGBEUlasUNtW_jCYoPD3Y.roa (hash: ync7Bqe2ZS8Us4KTHfLVYTl8WbPdgW2Owp+mtCPVyr4=)
4: 2_UvfbsFxKUUaVcrdfYacSKl2L4.roa (hash: L+O8j8f4gfZj97qEmoJdpXmH/Ua6ICqOYh06yVj5Qkw=)
5: 5qZtdGGQPYCB4GQr1wjcWz32C6A.roa (hash: aKQ60+nGzkXNMGNGLDuML0KK2apTuxjrP6T8ue86sWs=)
6: 8P_M0aIDtey6z1-uBYdoER49gbI.roa (hash: FSnmoR8GJtfy3UCUFj4zRO9IpsS4G6PEH7oMczL8wlA=)
7: A3LobdPOZ7HejpQ_FMCpYizUx_w.roa (hash: ufpnhQSUHaLon4166f4aCj0fe7h4Tal7d8HPyF5uiJg=)
8: E4_LCYAyoNw5Z6N1qrZL4gqRIUY.roa (hash: rwJ5587Bc7BJP4v6xl5VcHy6DfSAotRzBjDqDy0qIfU=)
9: FGLrLKZULm0mhSDMTuKG_6HhyEA.roa (hash: gghYFbteB4VfP78hKwnuTRHlZR7ah9jq0XQbq7TGOa4=)
10: M-v28PFLiT56tATmxh_dxjXIz48.roa (hash: wk4xU/TxE3WuvzAmyr1klkvnIlWP+ZayRu5Ot8is1ek=)
11: OI8QWVv_chgdmwAWrY8TiiEHfx4.roa (hash: I5/vA6U+NqqViBqDeDmORphsSlyAGX+Zx8sUraJzHAA=)
12: OXURxrNe03171n8bX9Y6CdBFZZA.roa (hash: cfxWumMR7w5M2kaXm/XjKT3g/gie/zgJWrUDlK4masI=)
13: PddS_JuRiBoo8-dVCXym0acDd9k.roa (hash: vVLJG0UTNRcx2S32EykgHEAids5Zl1wtiFOsx/4Ez4Q=)
14: RU1OY7v2nhWXT21hWMhOgsqhF9M.roa (hash: HO8CFdI2T/vSNVqtiw2GDyzzGYeXGauouVL1zqhgbhU=)
15: SIiK7KO9qRsYGFDrQF29ZYeRN28.roa (hash: V80trQbO4tDLVeGxGEbPS8GIdLCj2usc5m9tpR0hd4U=)
16: SJQ34xUY1VgaLmcVn3m2WNmODRQ.roa (hash: VkgG7AknRSRs1qeLfxSRhqQGiUxjAhr1QS3nIvTYH7M=)
17: ShuynJljCkiL4lyyWU1IO1rGU2o.roa (hash: zjWIEvbs7Z+grn2tvgU8MTw/fqRpBJB8km3HegXxyGs=)
18: TQAaFv5ALTHh63epl7LLu1DH9nc.roa (hash: hUGYLBMhX2Ty5hzrbfSfblaqdRUKpDToGmssIdKl46w=)
19: ThU2mBbAHrnyESzRe6tfkZlbjUI.roa (hash: ULNfH10N674XhO/1prWJKP2j9z5MH6CUdMdCXtR/9Gk=)
20: V68VgvWFXK8SNckccpiLmpleGX4.roa (hash: yrkbL90m9V1JdVtjSlyfTTPXiIJR9Gk9nvsichDj+6I=)
21: WFq7FEpO1Iycb1yqpZPnE4hFJjg.roa (hash: MevGR9qgcVcvlRayBhJVUo3kjeWsQbcikC4WmtwTEw4=)
22: Z-YCzchVF5bQH2HicwMC7TiNiIo.roa (hash: S79GiezgHAF6LzHXyznfu+6Fnlx8lKM8RhqxjBgw0Qo=)
23: ZNKvFPEQOxElP83PEas3vxV_rd8.roa (hash: Yw7PJJLrozmu0y73W6WqhOH+ocmNk1/zb5Wm1iOru30=)
24: _1qYl_E9z61RVGmZyGtCwxyB0-4.roa (hash: 18SyY5CRP2Y5oEKH9NlPWn4JmOCzEhI4FF2wBT008ig=)
25: _Zm8MTF_L7EyQ_6YveeS2IaebTE.roa (hash: VQ+xE18B7YQkYF3RoWjSVJ+ofw9TAXhOCMfHnM466LQ=)
26: a-bdMU0PKpZcHud_zlSMCqMPwfc.roa (hash: FjKrhZi7OcCNDSXEQfdLc/TNzOD//gv/lZ5dmyUEaYU=)
27: aUWRzQkmamgBj5uYCZs7Snjb2w0.roa (hash: D2dS6ceN+toMKXqgsq9ovyx12/VkAZ6hcbpyGxWkCbw=)
28: bMTS2A87aEejzK3eKCQU8zS4Tsc.roa (hash: NSTOiMnZOnB16p7UkLVVaCLUT9cLixKW/555b9iQG/0=)
29: hXwiXKPzjzALLb2-aV0H6o80chE.roa (hash: KsKknnspRreD+LtOldSofmy5lxz3mxIMssf2KBvH1MI=)
30: htGXjVomK79OKrmcY2KJgs4ezPg.roa (hash: Ecl/Jiy52V1qsICQs2cHZIKGG76jH9NDSw0LPqpC/rA=)
31: i8l89em4Of6ApfPf9UjoOp1M6SA.roa (hash: geS2phjbctHcz3SW4h3goY9kgAMZD8IxSZASoBbYaX0=)
32: jkioZ7sMtN29opHHMof3tv_YZR0.roa (hash: z+ea8bYxi98v1D0ZT+9JXvz7vJ4jYL4VA16/BZkZvwM=)
33: k6R2EMc1jHcegHcYvsEaV2UvlZA.roa (hash: byoNW/ZgL2eaul6bek1NQxuUanhUUajegKqr92UrXrU=)
34: m57YsWq8w_ZAQgkm8smpZ3EN5N0.roa (hash: DOPMeZOfGq+jzc64BcbcPLyOPAp+75vksjgsOjXMlhQ=)
35: mB5IiCH_newq6qbP2kCzfpUSUUw.roa (hash: YhW5V+4PKfLERoAKrC4EG5FsVV0PNU0jPh/XSltcZh8=)
36: nSiUjHGJg1_NG7MGG7mbfkbl_ms.roa (hash: nLy78X+XVrYs4fJKoVbx5CKz3kGaFoiDi0xYmsQEn8I=)
37: oHTKl1BDUVQv5BZ9d1o41D8SmFg.roa (hash: OZrzmSaMIO4XTjvZmhAaJ6ipcXJYLxmtmBRfg4r1PS4=)
38: oQLxEXQNzlebuTEadeHk2PXoDOk.roa (hash: ms5ThIyloAKhim+xvau3wCzl5Vh2LKreAWDnN6XBHRo=)
39: oSVvPOy3DcS_J21hCHOPnBixIsY.roa (hash: DFtHinQdzCM+BlKU8F5bIFjAI/DQwKU4K4hplb7qoKM=)
40: oXr-OXMQDlIYBwTEuUb02K5FEWs.roa (hash: v4KuKroQQAeom7scztrCxWsUL7/efzNpf/MjG5frSpY=)
41: q6-gOR3ChVa7BFfzbvZhI88N0Hw.roa (hash: W+o+neEd5lLOipfuBZ07SXEXSqZC2MoxbUXZ+XALuTI=)
42: sos9OQo7SQuATzDAO-88fckXZrM.roa (hash: BvLpnURp1OXbUtdg+BiPw0Dsxp8uR19uuIXSDPU3W0k=)
43: ssTPwx3Ir2xDAbb7MdMwi5Ugm2k.roa (hash: kI6+F1DWAcc+3XLZk055UBjOatQ51Syy2IyT4uzsHTY=)
44: tVfM1Dr-gW5JUyKL8Up13CkBS40.crl (hash: ZWyzYVbYRntsZUUD5ek4Qz3CDmAwAa7/a+4dnBm3KX8=)
45: v0EgzvwenfUuFzJ1WPOCjKPv3xA.roa (hash: HBF5KdghmC5VF+0k49VIpdG77syNkClmpAWbA/Bfosc=)
46: v8SeWykxnCkXQyOZscP2MgpOyZg.roa (hash: O93SDzFlSIJjhC2CFme+MFhBi83g9A1lij8xh+MsV5Q=)
47: wb6tluOUZUayN9G05LwXOnEHcWs.roa (hash: jn6hTpf5caV20SdBM51r7krZlI86ZWqMVK8AHsPyORw=)
48: wjtu5rouI6o5sivHqgZWiEyWYSQ.roa (hash: dh0LGwDXw+QvpsnUYRFis+d3wj/qLdu8NaoSILnm1ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:e1:81:e6:38:d9:31:cf:af:6f:a3:39:b2:40:b7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 26 11:22:17 2026 GMT
Not After : Mar 27 11:22:17 2026 GMT
Subject: CN=a8c8c208903e12763f3b0a06ea2b640577d9a7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:4f:fc:2a:f3:14:33:aa:da:fc:ec:82:b9:
66:71:77:14:dd:a7:47:4f:8f:cb:6d:00:18:ca:74:
e0:97:89:86:2f:40:b7:67:46:8e:58:86:b0:26:c3:
67:e0:93:23:37:9e:70:68:8a:a0:2c:12:aa:b6:fb:
6e:ad:a1:47:cb:30:50:4f:9a:12:54:2c:1a:cd:da:
5c:16:25:83:71:ff:0b:f9:d4:1b:78:de:9c:c2:27:
d0:98:63:af:fb:7f:43:8e:5d:f1:b4:0e:83:92:07:
f7:b6:c8:0c:ce:ba:ce:98:46:e6:52:9d:8f:17:48:
cf:db:da:91:d6:91:5b:cd:5c:38:ff:9c:da:e6:9b:
70:68:55:47:fc:e9:a3:bb:2f:fc:16:46:c5:53:b8:
10:24:e1:75:3c:7b:93:1d:92:f6:61:ed:a8:d9:f6:
4d:61:b9:58:c2:18:fc:d4:67:79:53:da:fb:47:da:
7c:59:3a:17:20:f3:b5:3e:dd:1b:d0:d7:b3:2b:d1:
e9:ae:c2:26:08:91:f5:3f:b0:94:7f:f0:20:a3:d8:
f5:5f:99:d0:09:fa:0b:3f:1e:8c:d1:35:7b:e9:ee:
ac:3f:96:73:fb:a2:26:5f:d8:35:03:b5:eb:0b:a7:
7d:74:6a:1a:b2:5a:73:07:30:b7:94:f4:af:11:44:
2f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C8:C2:08:90:3E:12:76:3F:3B:0A:06:EA:2B:64:05:77:D9:A7:DE
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:65:38:f3:62:5a:70:dd:67:c6:25:b7:75:fa:84:f0:ed:be:
09:8d:45:6e:bf:e8:67:e7:fa:5f:2f:b6:7b:1f:57:e6:ab:60:
9e:ec:22:e6:f6:bb:e0:57:9a:dd:42:41:e5:3f:8e:bb:1e:9e:
41:8a:7f:7a:fd:e6:cb:77:bd:2e:78:51:a7:2d:ba:19:f7:04:
f5:ba:9f:01:3f:95:2e:24:d2:6f:06:e7:09:94:9c:f8:2d:cf:
9e:56:6d:6e:ec:98:7c:28:77:e1:fb:cf:d5:6e:4c:bc:fb:ff:
08:9c:d9:ab:a0:8a:02:d1:7e:dc:de:70:be:f4:71:d3:87:e8:
42:d7:8f:87:88:d4:bc:d2:e0:be:14:60:ab:e1:dd:4a:63:29:
2f:db:4d:6b:2e:b0:e0:23:ce:f5:61:4d:da:df:73:a3:d4:30:
f4:b2:5c:89:8e:ed:91:b3:97:fb:9d:a7:03:f0:df:dd:73:79:
ff:ec:b7:30:4a:b9:9b:2a:dd:8a:f7:96:75:72:30:32:7e:be:
d0:67:77:ad:72:cc:cd:3c:14:df:55:62:90:d2:fa:4d:b7:dc:
4c:83:8f:4b:23:ab:4b:f6:84:c7:85:d7:66:18:80:cb:2c:fe:
18:29:aa:53:2f:3e:26:bd:37:bf:84:fd:f3:05:d1:cb:3e:59:
0e:de:f9:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0p4YHmONkxz69vozmyQLfZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjYwMzI2MTEyMjE3WhcNMjYwMzI3MTEyMjE3WjAzMTEwLwYDVQQD
EyhhOGM4YzIwODkwM2UxMjc2M2YzYjBhMDZlYTJiNjQwNTc3ZDlhN2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjpP/CrzFDOq2vzsgrlmcXcU3adH
T4/LbQAYynTgl4mGL0C3Z0aOWIawJsNn4JMjN55waIqgLBKqtvturaFHyzBQT5oS
VCwazdpcFiWDcf8L+dQbeN6cwifQmGOv+39Djl3xtA6Dkgf3tsgMzrrOmEbmUp2P
F0jP29qR1pFbzVw4/5za5ptwaFVH/Omjuy/8FkbFU7gQJOF1PHuTHZL2Ye2o2fZN
YblYwhj81Gd5U9r7R9p8WToXIPO1Pt0b0NezK9HprsImCJH1P7CUf/Ago9j1X5nQ
CfoLPx6M0TV76e6sP5Zz+6ImX9g1A7XrC6d9dGoaslpzBzC3lPSvEUQvcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjIwgiQPhJ2PzsKBuorZAV32afeMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomU482Ja
cN1nxiW3dfqE8O2+CY1Fbr/oZ+f6Xy+2ex9X5qtgnuwi5va74Fea3UJB5T+Oux6e
QYp/ev3my3e9LnhRpy26GfcE9bqfAT+VLiTSbwbnCZSc+C3PnlZtbuyYfCh34fvP
1W5MvPv/CJzZq6CKAtF+3N5wvvRx04foQtePh4jUvNLgvhRgq+HdSmMpL9tNay6w
4CPO9WFN2t9zo9Qw9LJciY7tkbOX+52nA/Df3XN5/+y3MEq5myrdiveWdXIwMn6+
0Gd3rXLMzTwU31VikNL6TbfcTIOPSyOrS/aEx4XXZhiAyyz+GCmqUy8+Jr03v4T9
8wXRyz5ZDt757g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:39 2026 by rpki-client