
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
File: _E0Gl4lpqL2rbWNZBi13geA0Sco.mft (raw, json)
Hash identifier: uiicqpkiRoTYubNpg2r+gZtAmdU22UWP5QxxQuEKcyk=
Subject key identifier: BD:7F:B0:E5:95:2B:85:F9:5E:AC:54:DE:43:7C:7E:3C:99:B1:BB:14
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 019D273AD5DB4AE780765AB71FAB23DC93BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
Manifest number: 189A
Signing time: Wed 25 Mar 2026 23:01:00 +0000
Manifest this update: Wed 25 Mar 2026 23:01:00 +0000
Manifest next update: Thu 26 Mar 2026 23:01:00 +0000
Files and hashes: 1: 47j10L2FA0h0SXWX0_tR6wJ7Q0o.roa (hash: 7u5kHtfhaCssp4lrIEgNlB6JTB2fBx54wnUP6zs21K4=)
2: 4gMZHAMR_BPbuB338y_IXIZ-TwM.roa (hash: MHqCRr2lDvvzcvSPmVEPyLmMZGnIpXWk6fvIlYc+tgE=)
3: 5YHMBC0VodXZbHuQ51XhYOh2u3M.roa (hash: k5Z/DaH5PMWSdfAyzNbmSPv5sh+fLZEdzkZBFkv5NY4=)
4: AdKsvqaXiePPmCvq4AXis3AzPUE.roa (hash: mDooRsVJYcbpnCTMKMMlLqlbhhCwSBdmXTbtG5YkI+c=)
5: CAwg9RpMTZkQ2CjwywAVv30ObyI.roa (hash: CmiEaVke8slR4JQ9Ux3fkIMf0wFRKRAaG3OB0Y27DGc=)
6: CoyZCfaOcZY80oMLwGYLGifGG00.roa (hash: nYHBOEN0r4yuBEIDk5skKHs7ZJbN7Zmh9lRo7Z6eAxY=)
7: Q5T30tBRJ6WpNS1KBNmqV-rp5lE.roa (hash: 7cNBtrboEwVliDNxsqw3Ccz3IbV9XyGzoKXp6/JfiMA=)
8: _E0Gl4lpqL2rbWNZBi13geA0Sco.crl (hash: /f9r3fnOL/Ep0ToD+0j8v0WQVzrehyMoCUEHmVDlLj0=)
9: ejT2O82rAZ_iuHzk2T-2HoOL_ac.roa (hash: ia9NgZrL/DdllfSMu50SQNusjrApTyAFAcYBy1z+uwU=)
10: hSPUDriBFUPkOhUeKC6Y9oSTdZI.roa (hash: 7jTlCQCzPDALzsRPiXMqvUwWzgkv9Ko9WwplcAGJOl0=)
11: vsBaA-DAjB_pb-CXPiGUcKQM0Vo.roa (hash: 8fTcamSpnyKmu51ZjoDnGRELER/PxBhqwN2tDlXJQV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d5:db:4a:e7:80:76:5a:b7:1f:ab:23:dc:93:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Mar 25 23:01:00 2026 GMT
Not After : Mar 26 23:01:00 2026 GMT
Subject: CN=bd7fb0e5952b85f95eac54de437c7e3c99b1bb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e0:5d:aa:1c:38:f8:b6:1f:fe:de:36:b5:12:
69:cf:b5:94:8f:5a:c4:64:0f:6c:f8:84:be:72:37:
87:89:2b:ec:5b:e2:cc:47:eb:89:02:07:8e:bc:14:
47:f8:91:19:70:ed:9f:83:cd:2a:89:6b:ff:39:e3:
3d:74:11:40:7d:8d:6b:a4:f8:2c:73:71:cb:83:42:
ae:38:5f:51:31:00:8b:ed:7d:55:47:f5:19:53:d8:
6e:e6:85:1e:45:bf:41:48:c6:79:61:ed:0d:c0:b1:
f1:bd:e3:89:c3:46:4b:06:a1:9d:38:5d:6e:49:a8:
17:05:34:47:57:d1:16:34:d3:cb:cf:10:ef:fe:43:
11:e1:c3:12:71:2c:64:c6:0b:2a:e9:58:dc:c9:53:
6b:bf:79:45:0d:d2:eb:5a:76:c0:33:2e:12:60:ab:
eb:54:40:91:2c:84:c9:d4:2e:37:7c:df:c9:e6:bc:
39:90:84:e2:cd:67:b1:01:1b:9d:03:8c:ca:73:9b:
7e:de:21:3e:26:f6:6a:df:8f:f2:df:f5:f1:91:58:
d0:e6:20:b2:ae:d3:f5:47:5d:b7:67:13:1c:8e:bf:
21:b1:d6:58:e4:03:4e:0c:fb:dc:ec:c7:49:0e:c1:
27:74:a9:dc:80:9a:d5:42:1d:d4:44:5e:a4:ac:20:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7F:B0:E5:95:2B:85:F9:5E:AC:54:DE:43:7C:7E:3C:99:B1:BB:14
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8d:14:00:b6:87:59:75:1b:e5:87:f0:96:fc:fa:1a:2c:93:
7e:c6:8a:e2:49:a6:07:90:34:d0:c0:a3:26:f7:19:da:2e:80:
5e:13:dc:a5:8a:f2:d8:93:a1:69:5e:b2:77:64:31:c8:10:b3:
9a:87:4d:97:29:30:57:00:8f:89:02:a4:46:29:7c:09:0a:73:
24:0a:26:e6:f4:6a:e2:a1:aa:29:72:02:be:3e:eb:76:89:d3:
22:01:0e:2a:19:2c:42:cc:9b:6c:4a:38:9e:c4:49:39:b2:11:
25:61:ac:e0:90:6f:0d:4a:7f:91:33:d0:62:f6:f1:79:a3:fa:
da:d4:7f:9c:10:81:f3:bd:58:43:ff:fe:26:e5:12:0d:88:da:
86:f7:72:83:dd:d2:27:ae:03:13:63:97:d0:bc:e9:f7:8d:09:
a5:14:00:01:92:7e:a7:d9:9d:19:3b:2e:4b:1b:80:2e:5e:31:
20:cf:14:56:f1:66:03:18:f1:80:32:fe:d2:02:c7:76:9c:9e:
cb:7d:2d:e9:d7:1e:f8:b8:d8:be:6d:d5:43:7d:b4:c8:89:e6:
f8:36:54:18:30:f5:92:de:7f:84:77:70:bd:fe:60:89:33:06:
73:f2:d5:14:17:b5:c3:c7:cd:c6:43:4f:84:d4:b1:cb:1b:ac:
ae:7a:a5:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOtXbSueAdlq3H6sj3JO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNGQwNjk3ODk2OWE4YmRhYjZkNjM1OTA2MmQ3NzgxZTAz
NDQ5Y2EwHhcNMjYwMzI1MjMwMTAwWhcNMjYwMzI2MjMwMTAwWjAzMTEwLwYDVQQD
EyhiZDdmYjBlNTk1MmI4NWY5NWVhYzU0ZGU0MzdjN2UzYzk5YjFiYjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OBdqhw4+LYf/t42tRJpz7WUj1rE
ZA9s+IS+cjeHiSvsW+LMR+uJAgeOvBRH+JEZcO2fg80qiWv/OeM9dBFAfY1rpPgs
c3HLg0KuOF9RMQCL7X1VR/UZU9hu5oUeRb9BSMZ5Ye0NwLHxveOJw0ZLBqGdOF1u
SagXBTRHV9EWNNPLzxDv/kMR4cMScSxkxgsq6VjcyVNrv3lFDdLrWnbAMy4SYKvr
VECRLITJ1C43fN/J5rw5kITizWexARudA4zKc5t+3iE+JvZq34/y3/XxkVjQ5iCy
rtP1R123ZxMcjr8hsdZY5ANODPvc7MdJDsEndKncgJrVQh3URF6krCBRPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1/sOWVK4X5XqxU3kN8fjyZsbsUMB8GA1UdIwQY
MBaAFPxNBpeJaai9q21jWQYtd4HgNEnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0UwR2w0bHBxTDJyYldOWkJpMTNnZUEwU2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wODJjMzEtZjRlZi00YWNiLTkwZjEt
ZGEwM2JmN2EyZWMyLzEvX0UwR2w0bHBxTDJyYldOWkJpMTNnZUEwU2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wODJjMzEtZjRlZi00YWNiLTkwZjEtZGEwM2JmN2EyZWMy
LzEvX0UwR2w0bHBxTDJyYldOWkJpMTNnZUEwU2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPY0UALaH
WXUb5Yfwlvz6GiyTfsaK4kmmB5A00MCjJvcZ2i6AXhPcpYry2JOhaV6yd2QxyBCz
modNlykwVwCPiQKkRil8CQpzJAom5vRq4qGqKXICvj7rdonTIgEOKhksQsybbEo4
nsRJObIRJWGs4JBvDUp/kTPQYvbxeaP62tR/nBCB871YQ//+JuUSDYjahvdyg93S
J64DE2OX0Lzp940JpRQAAZJ+p9mdGTsuSxuALl4xIM8UVvFmAxjxgDL+0gLHdpye
y30t6dce+LjYvm3VQ320yInm+DZUGDD1kt5/hHdwvf5giTMGc/LVFBe1w8fNxkNP
hNSxyxusrnql3w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:19 2026 by rpki-client