
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
File: BR8pRi56fafrX0XaeHPxTkA_46s.mft (raw, json)
Hash identifier: gjJBWpN0X603zb9vRrQoNiePF9x1Vt4sdSmw7AVjZ/k=
Subject key identifier: 12:6B:1F:14:DF:B7:A1:10:44:10:4C:F0:08:CC:0F:2B:30:B8:E7:A5
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 019D259473CFEC920EB76B16D34B3F04F562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
Manifest number: 04BA
Signing time: Wed 25 Mar 2026 15:19:39 +0000
Manifest this update: Wed 25 Mar 2026 15:19:39 +0000
Manifest next update: Thu 26 Mar 2026 15:19:39 +0000
Files and hashes: 1: 1-TF_DNYPytFCDM9ob70FwezU19M.roa (hash: d02a+8r6UEOH7tUcT4ldHX7Qn837ccWleqSz8aMVP1Y=)
2: 1-kAeRcYs8N834iNDMDprOqJ8Dbg.roa (hash: JGYkH4jrc0W9U8ZV3mJqPcgKRn06DtzcgGerdHLNLUc=)
3: 5efjrUYRokXCOvT4J2mHomdLJXU.roa (hash: kCs0w342k8pWszMUssxco1fg/yQA+DYYLLu22hu4Kp8=)
4: 5n2b9maD-WKBvGsJL4HCi6NMYJI.roa (hash: Nn5OtfAxQwpd29OmMbi7586ulW0AdmiqrnApRdvkbGg=)
5: 9EjUnibhEJq5bLfdbGt92aCmGYY.roa (hash: DnS2jnsGqE15sINmHwk3fDd3mcW2MTDLdlWaO67YF34=)
6: 9LQRctI2YftbEKVnyItaOOy3d_M.roa (hash: pgk2Inrux/7lL/EYb6kKY+A+qh5ghGB3qij7g35sOh8=)
7: A1bQAOXZNhA4xD0DYsbXMY1DEE4.roa (hash: eGOJmOh8umGTdfiUy3BddRThCQh7xj1QJBNZ6Dmw0So=)
8: BR8pRi56fafrX0XaeHPxTkA_46s.crl (hash: /dHJuZE4hyjhT19kvTgjbGbpO7LQOMYq27j1LH3u4lU=)
9: FS2smUh78VcAx1pJo864e-lr3gI.roa (hash: mixZibFB0hFz56z+JYqSccSF9Jdi9meBEB5gjBMrGmw=)
10: HUfPguDLv61FjwhE83RjHvo6SG0.roa (hash: TVSqZsAvt2m9gNwVr8IK6jrYRpSQJdNbVnyELUQDzIY=)
11: HvvYce2lyVlZo0K5qONasUupbiM.roa (hash: kk/JmVvld/s18l7uimHCEPJ58RJkP9Sl4O6TUSKa5vQ=)
12: HyAI8oS_M9RrtnBFX4mgVsfZ3EI.roa (hash: tOuIfCuuSHHG5cx/angD7pz9vkeVH3Nbhnif6O6zKS8=)
13: LEC1offLjwJrFzx8Dpv7xkLNEyg.roa (hash: dFznU7yxG8+kgv1O/dEk2D3HMFQlxv6V3RwD+q16duc=)
14: LOsKKPB0HhM0tMDj5Xy2Likr-Mg.roa (hash: V2v+4vi1fkAuP3HFSTiQqZk5Ych9yvJZ2q3KENPbMwg=)
15: MxXFFNbnKeVGQoJUUSPIFAh3HFE.roa (hash: jJ9eXrKVZallfBng8qzQIoukBNtwZT2XORL8UeAPSWU=)
16: ON_ctMOAUZaapm2VNE4MUGlm5s0.roa (hash: 4OAfdVogeIliIwtkxx+7QSj3X/gCNixWQKVjGlrxtEc=)
17: OoSGRjrHBphJN2JOMMOGmztsf0c.roa (hash: e+6frP73UQ10M6Kn5frXhfNKMsxMaXLrAjBVlYHUnQI=)
18: PGmJMw7v2srp34c2MWaM7Sl7S-8.roa (hash: cNcf4e832Zowk/7Wxq5VwsFfaNNsCFcyx18A+DfXRUQ=)
19: QKCRwXV0KlqGb8GAJmYwpUO-0EA.roa (hash: Rr+NwshtCQpa7LHQuWVgydY+wZTnKwGAZ6E2PxjHpcw=)
20: SVPLS2ubDGmz996fszQp7r_8WjM.roa (hash: zb6o8Pz5mahpV7VTvHHDSV5gjebzFr1Ex6x7GDwi1/I=)
21: SX2yfivC2Mb3ex4bB6P0yhlsJEo.roa (hash: C6JVJhycJzCawG6LBIDQyT/VYXWc1YKRdSeg1TGaCT0=)
22: TA96EluuK9hYtFKHPh9w57H26w8.roa (hash: Rr7s9I5Bo7KScSJwkfbGRNqNcD/eMP2Gsvt7bqHcZaQ=)
23: VkW9wv564hDafmgem7iN4Pq0eg0.roa (hash: rHiCzFG5HzMXM3bkuQnCSkoGdPunuITBDMRZQXzh+hU=)
24: Xb1Ypft5Y54bcYQ8b79qIwrScbE.roa (hash: Ptw9WulLvCzzd5LJ241CpZZU4h4IU0B2dm9/idnoGHM=)
25: apcs4_oanmR8NCDusffG9AvEfsM.roa (hash: sHeaDVArieWiT+UWIxgi2mojPq8GGVCZyBNdboptcLo=)
26: ci0ptYRrl3soT0-X9BF8_u2tuDM.roa (hash: JO6OUsm1lQx/mMSgHEn0FT4Fg0+OMrrpuHf6e9wSXno=)
27: eY-jbaTO9qAMmUNm2U_mUvD9oXw.roa (hash: DE4ibWon9YTdJq0az/Rzpdn4yRH/8+IxBFpWlTJrvso=)
28: fay_KIPQYeRk21dJN7RLGfTf3ig.roa (hash: rgA8dGwQgdG2uChHAnDIz4pqzfnVDZx8vl1RsRoyjNc=)
29: fq4Ew_A_fioISiNqHSgmJitAwlY.roa (hash: I1TA5DBYGE2CE9MFt2QJJ+Lh1L2n39xQZ1WwsXssVQ0=)
30: gpt4tsVlr92QGxcr1kp4hk9GZLk.roa (hash: ynZtdfE+YEDV/1HH49Virb4Hc0ZG8v+eXOdK/wc+KcU=)
31: kqwgQwpaGv-qjbJtnBbAhvql_1M.roa (hash: IaMnuVL7JGmrqGqpSLQSd14hY/SD7WineiRtNHWYaGI=)
32: oK-l_3d_vcNuFOm12ibmb0cbNHs.roa (hash: lVkSdNlZrQRcuVVCpchBeA9OcY08H6oNlvysY5acQSI=)
33: ogG7djAUZ8yRMRdAyuw_W5nzzh8.roa (hash: 1t+gbYROFrlM9v5CjlELwyTvLHT7IFgBhc/IPtaYyfY=)
34: wuDe0P9KWPBSUDn_Z5LtRuHcTN0.roa (hash: PlqJyT9jtqG0tUJWI/AH+Gyp3H4OOPzXZR3URdxEA3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:94:73:cf:ec:92:0e:b7:6b:16:d3:4b:3f:04:f5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 25 15:19:39 2026 GMT
Not After : Mar 26 15:19:39 2026 GMT
Subject: CN=126b1f14dfb7a11044104cf008cc0f2b30b8e7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:13:7c:11:4b:3a:16:1a:88:2e:47:75:f4:6f:
fd:51:69:39:a2:29:46:b4:68:4e:59:29:4a:64:e0:
1d:a2:a6:f9:65:60:08:29:1a:1f:58:be:b2:37:71:
bb:d3:30:e2:42:c0:2f:70:d5:a1:a4:21:e6:b8:1e:
b1:72:a8:24:3b:42:c8:fc:3a:66:9a:fe:03:e1:56:
4b:24:3d:a4:5e:9b:58:ee:b4:86:12:87:3f:96:68:
51:12:b4:7c:2b:32:10:4a:72:84:49:93:75:78:88:
90:a1:31:13:18:41:31:8d:b0:9a:7e:44:e8:fc:77:
ee:a6:58:68:52:88:b8:00:e5:2b:8e:60:57:30:fd:
70:84:b9:06:2f:c1:11:e1:59:13:33:ad:96:93:79:
fa:6e:d2:70:b1:a5:7a:91:c9:46:ec:4e:2d:45:07:
89:3e:9d:21:36:b4:06:e5:8d:ee:70:07:91:df:78:
af:8a:ac:e6:05:bd:ab:98:0d:11:e4:90:96:c2:60:
99:bb:47:69:70:33:89:1a:c2:16:b8:ac:04:13:0c:
fb:28:cb:91:9f:7e:ea:67:23:f7:8f:ea:b5:43:34:
9c:10:f0:c1:a5:8c:f7:26:6c:7e:c1:c9:ac:12:4e:
93:0e:02:7d:0c:9b:27:ed:8a:03:a8:44:95:be:3c:
32:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6B:1F:14:DF:B7:A1:10:44:10:4C:F0:08:CC:0F:2B:30:B8:E7:A5
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:af:83:60:e6:9c:dc:e3:e2:eb:57:2b:28:7e:32:6c:72:b1:
61:93:fc:e2:ce:58:08:55:8f:00:8f:0b:6c:51:b4:68:18:18:
fd:65:f2:9a:17:24:fa:7f:c2:91:63:40:63:54:4d:2e:c5:a9:
25:95:60:28:30:0a:61:8a:98:55:54:df:0a:b0:54:90:34:98:
10:b0:c9:d4:56:0b:79:62:7f:9f:a3:31:30:cf:85:34:2c:e1:
88:9a:eb:1f:38:c7:f4:83:74:33:33:23:af:5c:bf:f1:e0:ef:
a4:3d:d2:6d:ea:0f:49:64:8a:e5:47:f0:de:5d:65:0e:2d:bd:
22:7b:e7:41:0c:0b:df:4c:5a:9a:9d:4f:60:b2:79:81:76:67:
fa:d3:54:31:27:80:2c:92:66:ec:e2:cf:b5:f5:c7:bc:df:6e:
20:b1:a8:14:0c:a9:c7:f2:07:fc:9a:29:f9:6f:b6:e1:6d:c4:
3b:6c:fc:cf:71:89:3f:a2:06:56:1f:d1:0e:9b:40:ce:b9:be:
76:8b:70:ab:c5:7c:dd:80:12:82:01:1e:ae:e0:89:f3:09:b0:
6c:73:6e:b6:ce:2c:76:df:23:52:c8:37:82:86:2f:57:ef:1e:
15:01:e7:b5:44:b0:d2:0e:ee:b2:23:6b:fb:cd:a0:06:58:18:
06:ac:98:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0llHPP7JIOt2sW00s/BPViMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz
ZmUzYWIwHhcNMjYwMzI1MTUxOTM5WhcNMjYwMzI2MTUxOTM5WjAzMTEwLwYDVQQD
EygxMjZiMWYxNGRmYjdhMTEwNDQxMDRjZjAwOGNjMGYyYjMwYjhlN2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxN8EUs6FhqILkd19G/9UWk5oilG
tGhOWSlKZOAdoqb5ZWAIKRofWL6yN3G70zDiQsAvcNWhpCHmuB6xcqgkO0LI/Dpm
mv4D4VZLJD2kXptY7rSGEoc/lmhRErR8KzIQSnKESZN1eIiQoTETGEExjbCafkTo
/HfuplhoUoi4AOUrjmBXMP1whLkGL8ER4VkTM62Wk3n6btJwsaV6kclG7E4tRQeJ
Pp0hNrQG5Y3ucAeR33iviqzmBb2rmA0R5JCWwmCZu0dpcDOJGsIWuKwEEwz7KMuR
n37qZyP3j+q1QzScEPDBpYz3Jmx+wcmsEk6TDgJ9DJsn7YoDqESVvjwy9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJrHxTft6EQRBBM8AjMDyswuOelMB8GA1UdIwQY
MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt
M2Y4YjU1ZGExYWM0LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0
LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlq+DYOac
3OPi61crKH4ybHKxYZP84s5YCFWPAI8LbFG0aBgY/WXymhck+n/CkWNAY1RNLsWp
JZVgKDAKYYqYVVTfCrBUkDSYELDJ1FYLeWJ/n6MxMM+FNCzhiJrrHzjH9IN0MzMj
r1y/8eDvpD3SbeoPSWSK5Ufw3l1lDi29InvnQQwL30xamp1PYLJ5gXZn+tNUMSeA
LJJm7OLPtfXHvN9uILGoFAypx/IH/Jop+W+24W3EO2z8z3GJP6IGVh/RDptAzrm+
dotwq8V83YASggEeruCJ8wmwbHNuts4sdt8jUsg3goYvV+8eFQHntUSw0g7usiNr
+82gBlgYBqyYZA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:50:25 2026 by rpki-client