
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
File: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft (raw, json)
Hash identifier: r4xUOI/PhfGjN9q+i8aJaO30o2LREMgNG3dUdm0Qios=
Subject key identifier: 86:FF:11:83:52:9F:EF:AF:4A:A5:5F:DE:E4:49:91:6E:B9:F6:C2:D0
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 019E1E6C296199480C29FBE47F3F0BFFA237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
Manifest number: 161B
Signing time: Tue 12 May 2026 23:01:05 +0000
Manifest this update: Tue 12 May 2026 23:01:05 +0000
Manifest next update: Wed 13 May 2026 23:01:05 +0000
Files and hashes: 1: 4cLeBIUzolxvixomGkjZcKiBte8.roa (hash: N/jmOnjqMHqyGA9wdQXttd0JDYddztlZ/3k1FyNVxQU=)
2: 746QFPJyT0Rq24L0EZYCq84Zm3c.roa (hash: AeIcxvfsKv+u4oYl0aaRx7pmRMFAkAPk+AYZdKgn4Uk=)
3: 8Gbdi7IUMhZxUxQuZhGJDiVa0LQ.roa (hash: /DvGyvGrOeXCAY+suzbyYJaZlIPzhL5zJA/RiuGPNH0=)
4: CjPEg_1_YC8pnKYDbVJlTX6LL9M.roa (hash: zyX+uPItpF4LWUTzRFEpi3sBDAJ/wqUUHQFbPwYtfPk=)
5: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl (hash: B9Z60Vi+dgVgs8gekiQ5kPCPoXP7mb6VLBicQEiVGCg=)
6: RMb8Tr40WGqktnRvQ9k7HNh5paw.roa (hash: QKnRrBqaLeAjI9PH/jR6hgz76ZPuClSBgTtF3GK+KSI=)
7: VOEqbHkGWWPCfYghmq_qCzJyCks.roa (hash: DW2E3Bv+Uu/QtgNYK+Kni5CDezUiIfsMXJ3wb8ndf9s=)
8: _SvrltKT2d95s4aJXfwotwRjxTs.roa (hash: x78Dq5GqOFiqHEpOdeEmGfWK4U05pqaKZhv6jrrmznc=)
9: f9jkPBByxWpkqaavwL8qGLxgr5Q.roa (hash: SPZe+PWRSrXFLEuZHJmbPAOdsKTcAWkqgps/fPGP+cE=)
10: pxPPJn_U4Vz4mZrrRcMDpeAkFOU.roa (hash: eCE3WajmYZ6Pqwt3eSv6POPsJiPisCy+Hx33j9Wd8VQ=)
11: r29J5i1S1Gu8Uj_A_Wz6NKuvkEs.roa (hash: 8e0tYCtiI0iNQahlyYDb4Q4Izluuf3hdqVeE3n5XNmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:29:61:99:48:0c:29:fb:e4:7f:3f:0b:ff:a2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: May 12 23:01:05 2026 GMT
Not After : May 13 23:01:05 2026 GMT
Subject: CN=86ff1183529fefaf4aa55fdee449916eb9f6c2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ee:d7:f6:d7:69:73:e6:46:39:c1:f0:cd:f6:
68:be:e4:5f:06:e1:6d:13:cb:a0:48:ac:fd:4b:b3:
93:a4:43:4b:fa:20:41:ad:3e:0e:fa:eb:0f:25:5c:
05:29:bd:98:12:b9:1c:d0:89:00:59:49:a8:1a:a3:
3f:3e:e4:38:42:ac:21:48:ef:90:f8:3d:e2:b5:d2:
2d:9d:14:89:0e:68:35:ec:81:a4:13:65:50:8b:8f:
94:5a:3e:e9:2d:b4:1c:ba:54:78:b4:f4:b3:a3:5a:
ce:78:86:e9:a2:65:9e:40:43:6b:53:51:c1:57:06:
bb:53:59:82:a5:89:87:4e:78:44:0a:ff:48:b3:22:
3f:e7:58:7f:55:c8:93:a6:d1:ec:53:2f:8a:37:8a:
6b:06:d6:64:4d:84:aa:48:f2:a3:25:53:91:31:43:
1b:f0:70:c4:7d:11:32:2d:32:1c:31:84:eb:e9:33:
18:b9:d0:c6:e5:f1:a1:eb:9e:b7:db:d5:6d:6d:a8:
1c:9c:8b:08:80:58:59:e5:0c:3b:23:d3:19:5c:e3:
f4:44:20:9f:8b:8e:f9:4b:0a:25:01:ec:b2:85:94:
ba:a5:62:6c:56:ba:33:d3:66:c7:a1:df:3b:d6:a1:
e6:d4:ad:a3:71:29:a4:86:87:60:fc:18:84:6a:81:
4c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FF:11:83:52:9F:EF:AF:4A:A5:5F:DE:E4:49:91:6E:B9:F6:C2:D0
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:38:2b:04:62:10:24:15:fd:62:60:4b:09:0a:1c:09:7c:e6:
0b:03:2d:1a:31:7f:06:a8:d6:e5:25:f5:f0:a5:a1:ac:85:f2:
9e:f8:56:5b:f9:c3:0b:2c:6b:10:de:bc:5d:20:d1:b5:e2:dc:
32:a3:bb:04:1c:ba:4b:73:d2:f5:d6:3f:b9:39:48:28:65:0c:
45:72:bf:3f:4d:79:e0:b0:9e:fa:2b:a9:0c:8f:c2:dc:9a:80:
ce:08:54:01:fd:75:f7:c8:33:85:88:4f:1f:2f:ea:fe:ec:d0:
0e:36:15:06:c7:81:92:fb:e3:de:08:69:40:cd:3f:f7:d9:e3:
0f:94:b9:4e:6a:be:c5:5f:ba:57:46:2c:c5:5c:22:00:e3:07:
cd:a6:f0:83:e3:e3:4d:71:05:fb:96:ed:66:3b:95:a8:a6:d4:
0f:cd:07:0f:cf:39:59:f1:c7:3a:d8:55:8e:7d:e8:28:a8:31:
48:9d:1d:12:32:8b:45:f4:8f:78:05:ee:b5:b2:88:ca:ad:ee:
21:7a:e0:60:cf:6d:0e:cc:0b:e6:5d:6b:93:39:3e:09:2c:5d:
d0:b7:40:4b:b0:73:03:68:f1:69:dc:8f:40:f1:74:62:18:48:
8a:f3:6d:2d:42:ba:7b:cf:3c:15:8b:40:d4:ec:b9:71:fa:42:
c4:09:78:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebClhmUgMKfvkfz8L/6I3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMTRlYjFlZWY2NmMyZDM0OWYzZjdkN2JhZmE2OGU0OWZi
ZmVjOWMwHhcNMjYwNTEyMjMwMTA1WhcNMjYwNTEzMjMwMTA1WjAzMTEwLwYDVQQD
Eyg4NmZmMTE4MzUyOWZlZmFmNGFhNTVmZGVlNDQ5OTE2ZWI5ZjZjMmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+7X9tdpc+ZGOcHwzfZovuRfBuFt
E8ugSKz9S7OTpENL+iBBrT4O+usPJVwFKb2YErkc0IkAWUmoGqM/PuQ4QqwhSO+Q
+D3itdItnRSJDmg17IGkE2VQi4+UWj7pLbQculR4tPSzo1rOeIbpomWeQENrU1HB
Vwa7U1mCpYmHTnhECv9IsyI/51h/VciTptHsUy+KN4prBtZkTYSqSPKjJVORMUMb
8HDEfREyLTIcMYTr6TMYudDG5fGh656329VtbagcnIsIgFhZ5Qw7I9MZXOP0RCCf
i475SwolAeyyhZS6pWJsVroz02bHod871qHm1K2jcSmkhodg/BiEaoFMlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIb/EYNSn++vSqVf3uRJkW659sLQMB8GA1UdIwQY
MBaAFB4U6x7vZsLTSfP317r6aOSfv+ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMt
OWNhOThmNDk1MGNmLzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMtOWNhOThmNDk1MGNm
LzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDgrBGIQ
JBX9YmBLCQocCXzmCwMtGjF/BqjW5SX18KWhrIXynvhWW/nDCyxrEN68XSDRteLc
MqO7BBy6S3PS9dY/uTlIKGUMRXK/P0154LCe+iupDI/C3JqAzghUAf1198gzhYhP
Hy/q/uzQDjYVBseBkvvj3ghpQM0/99njD5S5Tmq+xV+6V0YsxVwiAOMHzabwg+Pj
TXEF+5btZjuVqKbUD80HD885WfHHOthVjn3oKKgxSJ0dEjKLRfSPeAXutbKIyq3u
IXrgYM9tDswL5l1rkzk+CSxd0LdAS7BzA2jxadyPQPF0YhhIivNtLUK6e888FYtA
1Oy5cfpCxAl4pA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:08:04 2026 by rpki-client