
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier: 163+GUk2N+ANKdj/RyDkkuPeVUVqSvsHCvOlS9vCML0=
Subject key identifier: 9A:B2:CB:2C:70:C8:D3:31:F5:46:54:B2:56:E6:80:3A:D7:F4:FD:54
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 019E1D226DDA907853D64F802C2F6F378226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number: 0951
Signing time: Tue 12 May 2026 17:00:56 +0000
Manifest this update: Tue 12 May 2026 17:00:56 +0000
Manifest next update: Wed 13 May 2026 17:00:56 +0000
Files and hashes: 1: 42iMMMRyCj6t5Gb7iHxpdxdIZnw.roa (hash: oV05xJ3ianPj2d2p5u2rAJjPxzr+kZmbQ6SGxfEYdL0=)
2: 9skBFy-gVmDl-nkjxXAKgHcli-I.roa (hash: 7gSJ6zN5NW6BGUihBJnVoBFmgqEGP4fmTIDMGINspMU=)
3: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: X8npUW6sjo8+peMkFdV9epzEICUGvjdesAzCDqXWV8Y=)
4: CYN-6kj2u9HIpYoQ3hmgvSsB35k.roa (hash: uoS5teZaIQEfymaaNdwi0VIQaDXV2jMrircb9XoayTE=)
5: Cn2XHyeB81WqaZSjg7QBfwHD8CU.roa (hash: +H1tXQmNkJ0PpJOqloukby4uXtryrpKFGs7NDZGKF+U=)
6: DC-2va12O2p4wJaztsxQYqxlteI.roa (hash: 8DuSeuFCejqmMZ/sp4dL3rLoQsC1vmmd0qUYceaaN1Y=)
7: Eh1zKu3hD9M9mfNTxR_zbWN_UoY.roa (hash: LmM/Lacelv6UENbWxP7rIgedmTwgXdIq3BTIdVtbP+c=)
8: GXpP16JP0Mjym_u_vszjldIXucM.roa (hash: 0GFGujZKcR3Ga+pFC/exC5L1CnjeKo6DgEs39y2hAc4=)
9: IzioJZxghFwgMTnVeVHHpMj-swI.roa (hash: wRkEhmwjz0Z3CuNMqban/3il9wF+W+3UoPcrnrnPUQI=)
10: QxRT0q4FzTnTcacN8tWvzsCAarc.roa (hash: XiEdwKLVvGeQdfVFaF47mebbaJXtp25EOB5RwY48keA=)
11: RHYHLfX7MZwqTOjtai1Px4dZdUk.roa (hash: 9gqUDjHutLNZlP+IlfjuYLEG7YjcoaY1UFU3hwr+l/I=)
12: SyWHbYOnHu_cvDaajuYM-To7M1w.roa (hash: YSRENKcj3fhKWRCWRTPdwxBLbJ6LeYaoc5YN/u+MBoM=)
13: U0T21bHsT2j1MueUQfzfVxTuFZQ.roa (hash: 8mdLmQ605wsI8HkkExAKeuL0NcxSn5gGLXOqg42+2n8=)
14: ZTRYP_xNQ-xHfjwU3V1iHE8I5Sk.roa (hash: 82wNZlZVa9PTuuaZD0iq9g3BjS5GghQ+K3v6FuHGgcA=)
15: _Hrgg9TwnO9PoE-2Cm9MNkAYl0w.roa (hash: bu/cyj5EwB3TDiwyIVSQeElzT+joOr0r21e4GEpp8jI=)
16: fd8bJA8DM-0zr8RLGfMJuFRYj1U.roa (hash: AOSETmD6hQ/zex92QpyDr+KfP3AtnIbAXfSo/7qIWOQ=)
17: gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa (hash: YAjRepSXiV21hnlqtzGBka5AQsC2Q/c9dyI4/lADp+0=)
18: u5dp8n3I7jflzjFJbZJ5BPdSfSg.roa (hash: SdwZS8EmIER4C5RBFO+zi0xPjMT8sLGC4SKpUhZ0ViQ=)
19: xuhDpHE2bnYdJOoJ6yInvIa6YrE.roa (hash: ohBVT4HyJLZk/hzU7rkg4mhr642F6fJ3Kl5PbeKWAPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:6d:da:90:78:53:d6:4f:80:2c:2f:6f:37:82:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: May 12 17:00:56 2026 GMT
Not After : May 13 17:00:56 2026 GMT
Subject: CN=9ab2cb2c70c8d331f54654b256e6803ad7f4fd54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:14:81:0a:c5:d2:70:b4:27:21:df:ae:c6:
7f:5d:8e:0d:6f:97:18:73:bb:ca:48:90:2c:0a:88:
b2:74:d6:73:58:b2:ea:b1:2f:52:36:0e:a0:63:bd:
37:61:70:59:93:23:74:1c:6c:a8:40:e5:90:81:3b:
4c:0d:ce:e7:8c:24:50:9a:60:83:b5:7b:a2:87:9a:
b5:b1:eb:58:f7:a8:c4:65:02:d5:a7:2e:c9:8c:cb:
da:34:a7:f7:68:00:5f:31:53:15:a0:5c:80:4a:29:
74:8a:04:50:cf:3f:95:be:38:87:d8:0b:9c:60:28:
b3:19:f6:4b:f4:ee:ab:19:fc:7a:cd:ac:00:b6:17:
a2:d0:ac:24:e4:bd:3b:2f:21:32:76:64:69:8e:4b:
13:5d:c9:58:32:5a:8d:e0:3a:a5:45:c2:73:5b:77:
69:4c:c1:10:c2:4d:b4:4b:a5:4a:89:93:1f:cc:5d:
1e:22:5a:0f:b9:8b:22:24:e4:e8:5d:96:88:15:6b:
67:c7:c4:4e:55:ee:2e:6c:c3:ad:c3:cb:22:48:9e:
e6:f1:25:86:1d:17:95:3c:3c:4b:31:b7:81:51:e6:
20:f7:55:70:d4:51:2c:e1:06:2a:d6:cf:62:23:10:
f5:f6:b1:e4:e7:ee:79:2a:a0:8f:dd:b7:81:6d:03:
d0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B2:CB:2C:70:C8:D3:31:F5:46:54:B2:56:E6:80:3A:D7:F4:FD:54
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:79:f0:ea:a5:74:ce:53:9e:49:73:5a:f9:88:b7:31:b8:54:
21:7f:6e:de:bb:c8:a5:c4:1a:e9:d4:a2:6b:5e:04:52:ca:17:
31:39:39:17:ab:0e:4a:9a:f6:fc:00:9e:bc:ed:cb:fe:9b:55:
44:2e:53:db:fd:8e:71:9f:08:72:51:6a:a3:3f:06:ab:a6:83:
20:99:3e:ad:1c:1a:7c:eb:d2:9a:03:0e:c0:9f:bf:2b:cb:48:
24:0d:3f:09:13:ec:a2:06:18:ef:cb:4e:91:f0:b9:03:22:eb:
8e:71:7c:5c:86:7a:eb:22:2a:52:e4:5e:b7:fd:4c:bc:a6:8b:
d1:fb:04:3c:1c:b8:ae:18:5d:6b:d8:53:db:b4:ff:1a:e9:1d:
2b:13:ac:09:c0:25:1e:25:4f:ee:ae:0c:83:28:6e:5c:66:39:
ea:bb:0f:6b:da:d2:ee:30:2d:ea:9a:c8:07:57:bd:6b:65:f0:
dd:44:16:0f:84:f7:c5:2b:45:93:0f:41:20:ce:55:62:48:69:
d6:b8:a6:0d:d6:8d:07:ca:c2:76:47:f1:3a:22:6e:21:06:81:
19:66:59:1a:f5:ae:11:4c:96:b0:07:b6:d8:df:5a:4b:9f:f3:
a7:9c:9d:e2:b6:ef:29:85:c5:9a:a4:49:eb:95:80:82:76:3b:
5c:ce:00:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:05:59 2026 by rpki-client