
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
File: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft (raw, json)
Hash identifier: 0DPfhppOrH8lk2G9UOY7/OlwPRGQbTmhvJuuRTwwcZ4=
Subject key identifier: A7:C0:50:A0:E0:A8:7E:CB:A5:54:31:25:4E:0C:78:22:82:C5:CA:13
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 019D329AF5455B040453584A6A1553016B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
Manifest number: 18DC
Signing time: Sat 28 Mar 2026 04:01:49 +0000
Manifest this update: Sat 28 Mar 2026 04:01:49 +0000
Manifest next update: Sun 29 Mar 2026 04:01:49 +0000
Files and hashes: 1: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl (hash: FVjMSqSqGsqwzBHluI5c2iqtIRRY3cl5NsFs8acCF9A=)
2: 0NM6OSy1-2utk4vYfW3N3lcm6CU.roa (hash: T9zHPa+wiHk/vH1viiblf2/lNsxeACCEIu0h4BWNOn0=)
3: 0Uc3BxU_hXHpSu7kErsjHH6v97E.roa (hash: WMKCnIPbNmoxZ3upeXUrLDZyCXrsFGG09LEi5Qnl5mI=)
4: 1-bpC3R-TJzAZkx7Z3Jw1SoB5KZ8.roa (hash: 6tyEc5tMWuMh2FkN969E+Sctsk4S0t8ffe4PDGzRuAg=)
5: 1-n82VSkOxrSKgV1PsGvwKKSfCdI.roa (hash: ZZsyj+78mzK435bwg8IeS0gsZEU0AFtCxgKahg6foPg=)
6: 16nRyZBneqNvEfGo1-HpM9Ja0Qg.roa (hash: jc0qTiU5kUL9CDVuEIN96YPjHZwKeP34Xiz/uIOIYSs=)
7: 2R4qazNLSt_RDhIqgNJX537nd3M.roa (hash: IvWoPDvDk15n6pb3UgrI/eE54rqQ+OqHA7wWhj9Kyy4=)
8: 6T7wlM6C0qqBOLawcH0bO7G9DLM.roa (hash: 9NAPSc05b+DVo+TnqKYmM4gkM8VaqxeSULCyj7IwNqU=)
9: 8f1gsQJvei2ndGgGzbE2q61rqaY.roa (hash: iWFMGHls8EyIEkAg6Qm+dl/+p7FExBuCdoG6ggjSBpA=)
10: BRRlr-O65m98wAyGeEux0ziZQTg.roa (hash: r4yxbGgOabU6dy/wqqnsPsdmZlo8myEwwZceeDTTub4=)
11: CkvM4RqQ-786VcbBaoIZjU3ZJQA.roa (hash: sI3YWga44CFHLW4l4QO3EywjCuMYYSObR+oVP14vFnU=)
12: DsTtMGQ0L8mM4brEnLkUKrq-UwU.roa (hash: oE4VTfHSNDRDGHt9TR7fUWF8m+BPcMZmJzIcx4TX/hs=)
13: Eq5ioVwY0Z8MJRoQEKvMar-suRA.roa (hash: x5+YRcpOPcZJN6v4+CqB6CF57wC48AN2GfCAXoRkaME=)
14: GFbvwxHreaHsN26iR53CTvGiaIU.roa (hash: ri3kwHvnHm4Ma2XOPIzNZmz4mCbBdBwPzLuqnyqYSKQ=)
15: IUNZ7k6Be0InVz26bkrmn4bWfkw.roa (hash: DDlLvGK0psVjxhmGzrMeKyqnXmOhbxm+rWrp7gXndKE=)
16: J9v7IiuRP1pbAznPUNvJOlnWfvg.roa (hash: EYQYgTyVzWI0iNgScvYcbg1KIwbJ7qZmmAC63DQl9Q0=)
17: JXZCrFRVlexsnr-6gFTDn3l3dME.roa (hash: WueDk2BO0sN5/26XG9ceGnKt//QvHV1jfqgq6yH3Uhg=)
18: Lz6lHqe-0qNjuvGLNOv9PGwX-NU.roa (hash: p7LdI92cIDtfHUvUoIs/QxfMZyom0tUqYoPCeudg8NE=)
19: OfQeP38YLp0H-vHTzOU-QIF2dU0.roa (hash: +bXd+URu/u2uHwGSmr3/gE7IFl9z0b4rIn3DtAlbhwU=)
20: P1I6iwGTt85fYfYAUkquFM4T7-I.roa (hash: EReexW3SdLOsBVVQTNn3ybvI9YT+LPx36BNRZrBsBWA=)
21: PIEMIRczLIOfdUkkwdVSw8e9KPM.roa (hash: NPUtmhTPQAwtBBDWToashg8KhDzj3KM74Q0F8kyz/dg=)
22: QplKZEAadiuuJTpAFqdo8OUK6YU.roa (hash: XF7HLXwpectK8gVVho5HepLfu5XeAN9oMvpqGWsxGj8=)
23: Ts5PqWGJj2W9EIosEAfizgq213Q.roa (hash: CTqIT1awwqBKy53JmlWWx69BitjHGxp4vFXWpWSK68A=)
24: UKjE1pTZntp5XJ0LkIvSm1AM4Ho.roa (hash: H1SamunUnJmGWMd+mnC6zCfE97JuUVFIkS729mOu4kA=)
25: _93efxQgrZmoM7LY7A8dASmPXFM.roa (hash: iJkW4dVpgkk39bS1bRdj8dysS+u4EOLDejwkKagLJFc=)
26: aDdgy9okFT-VH-8Xe0iyw5Cf9U8.roa (hash: faf5JgpqOgasBUcFYGvX0bWfnDSi8YRdOLG2fQ4cWJs=)
27: bynx7CE-y5l0VuSf3AjcyS1DaLg.roa (hash: fcdqRQLhX2egD25I7LkNu0Qa2H5UuDKqtnM0W8Ih6KY=)
28: c3UQkLaK622oNueWHIwY2pf0u50.roa (hash: 68H5EYdpUem6VsrZDqSO1jCXZzTxv1in5+mPEJKKQkQ=)
29: cHwQrhBna2lxomTJDkhtmpkhfTU.roa (hash: 0pTkk47OKi+H2lTtbFgx7fEy5JTDq1MlYtJ8OXb0yNM=)
30: eZmXsP_8WtuzPmHHINoHGtkInLQ.roa (hash: xAlYoOeA/RbIFUWmiaNoetBhfJGEtjYTAa3ebpYj1+g=)
31: f741Q7g4kseNO1ry24nPUdQstbs.roa (hash: /ArewhrEGu9bVv2osl1xlS+ZuEvT8uAPiOtXxX8FF0k=)
32: g7yZx1fNYRztkH6Egf1MCdRKIp0.roa (hash: LeThgOMJvz5v6ZJTEM4z4doFArcbIegSXRy9an5TMEY=)
33: irocnpPXgA_Fth-m3en9JGahONo.roa (hash: BxmKvUydui/NHX3OGtlV7yFHY1hNbUVdGtKWN7hbOqk=)
34: jorfWq_1YnE5kHaeGqCZdPdeWNY.roa (hash: Y1UP/CLj7/bw212cAWqRM94fuvrK4D40u1bvJepra2k=)
35: lpJ_XjHkoBndBFAe0tPQdczaOcU.roa (hash: iJVprFgnDog5VHtz2hfcJxpWi7GFVg7T/irCMENFCFc=)
36: m1_hE1G8c1LjncKYSzWbUrqzXN8.roa (hash: y1uuERcSJn4xDVrfrVjdDqOO/t3/J4I0wu+VFqAHi6A=)
37: mZIbZUM5n7SNvXZOBEvALh3oD_g.roa (hash: AV63YnpqRQM0cB0PktZC8zmEKBSBUm96dCFtXeH4o7U=)
38: ssFgEvQaOxn1bVNWbgkIqqVCO7w.roa (hash: hwJ1nu3zOiqOogdc9jXDw2wMUcpERaX1zFgf/BAycx4=)
39: t74Gnb-SZFQRRgZRdSh0r6dTX3w.roa (hash: WSh8AcjKhf5L3RHoE5ZlhGpTH3/BR/yZVCcKaKkQ4b0=)
40: whhn-De9wleqXUdRu_Y8guU1R8Y.roa (hash: n5PZSCHH1qAT6JBOY3cNOeI5/o1W1yLRGUGX3GupvP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:f5:45:5b:04:04:53:58:4a:6a:15:53:01:6b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Mar 28 04:01:49 2026 GMT
Not After : Mar 29 04:01:49 2026 GMT
Subject: CN=a7c050a0e0a87ecba55431254e0c782282c5ca13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:61:8e:1f:39:42:1a:73:cd:9b:a4:59:5c:26:
21:5b:21:ba:3c:d1:14:8c:5a:52:88:12:99:ed:77:
d4:a1:27:ed:67:d5:8c:b5:c7:e8:e1:b3:5c:29:9d:
18:48:b0:3d:57:c7:37:08:5f:51:ea:93:b8:f6:a6:
d4:45:47:5d:8d:1d:e1:69:0c:ca:e2:87:91:ff:09:
6b:49:b2:c3:c7:93:c3:7d:fb:dc:a3:a6:a0:9c:8f:
92:d8:03:15:14:ff:37:16:bf:c8:e7:e7:29:9c:fc:
80:a4:51:ac:85:8c:34:86:e1:e3:a9:79:4b:89:6d:
1d:37:2d:0c:51:95:a6:06:62:33:36:cc:18:14:f0:
e4:e6:4e:82:91:b4:ca:fc:3e:f6:4a:0d:54:c8:ed:
25:b6:ec:bd:8b:de:ff:46:2b:6f:b0:f7:ee:42:17:
b8:82:e3:b0:c9:35:10:e0:ce:40:16:a0:c4:28:38:
f0:9f:3c:4a:34:e8:85:b2:0e:6e:2f:72:d7:f0:04:
46:a7:05:a2:96:1a:36:72:79:00:e8:9b:48:cb:ce:
d7:2d:ac:b1:c2:9c:08:c3:09:b2:be:bb:1b:cb:fe:
17:2f:c8:78:17:4a:10:73:da:f8:ac:7d:1d:8f:3e:
37:87:04:27:17:d3:a0:4d:8c:d1:ff:6b:a7:f6:58:
ee:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C0:50:A0:E0:A8:7E:CB:A5:54:31:25:4E:0C:78:22:82:C5:CA:13
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1d:29:dc:29:c3:0a:06:14:d1:e4:06:71:d6:f7:8d:e6:84:
a9:7d:ee:31:a2:76:29:17:91:17:1d:61:99:46:0e:bb:d6:e4:
d4:ae:87:d2:fa:ca:bc:24:a1:88:9f:64:88:f7:4f:32:1c:dd:
26:81:21:f1:11:ca:26:4f:d7:e3:59:e2:55:0b:58:ed:54:c5:
5a:10:5f:a7:15:cd:fb:a2:b9:3a:c1:bd:a3:07:b8:8f:d1:82:
c5:af:1b:5b:84:07:af:2e:43:3a:f9:68:e6:02:87:2d:4a:ed:
1e:74:e7:96:29:12:9e:27:8a:e7:64:30:97:3f:ab:7d:8a:c0:
ec:26:09:c2:15:5f:e0:54:1d:d1:35:69:f3:17:c8:94:fb:c5:
3f:f4:81:cf:97:73:66:62:ac:d4:33:48:5a:b9:c0:a6:51:e9:
e4:6b:98:8b:93:f6:1e:01:47:c3:8a:98:63:f1:8d:af:d2:95:
35:1d:eb:cf:42:db:ad:37:6c:9c:9d:52:90:e3:fe:b4:df:08:
b3:19:4a:42:33:dc:d9:fb:33:f6:fc:49:ea:28:e2:0c:55:82:
d9:2e:f5:15:54:40:59:2c:04:fe:79:ab:26:17:05:19:02:d8:
80:8b:69:c6:96:ef:0f:9e:fc:ae:55:60:54:dc:af:b9:6e:7a:
6a:39:8a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:33 2026 by rpki-client