
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json)
Hash identifier: FHbG85UAbgXO0XdE5KcXxHaREmfWgTLW2PfLhtmvjy8=
Subject key identifier: 29:B5:7B:14:BE:6E:50:4B:CD:8A:52:0C:09:11:D3:8A:C2:22:B4:F4
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 019D2628690DE0193F66310593782013FBDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
Manifest number: 18AD
Signing time: Wed 25 Mar 2026 18:01:15 +0000
Manifest this update: Wed 25 Mar 2026 18:01:15 +0000
Manifest next update: Thu 26 Mar 2026 18:01:15 +0000
Files and hashes: 1: 82H1zOCTQDypvCqoPuf64HIGCNs.roa (hash: OjMqE4nBwVgcGVmO5TIDFN6XpFP5Ht4TkG9+jF5A/Lc=)
2: DZMUgwqZTew_AIq02ZLPKDpbTYE.roa (hash: zHfVpuiksrUGKB8ICNHjrDl5IxhuSu4hChZHL57TIOU=)
3: E_7ISSwzh-AzkcURcKG1UBHObwg.roa (hash: fZa0WBEUKgsquXMzv9u9jFUdHdw7HPHhLmdCS89OIG4=)
4: PMLPEEMeDaCa9G0bvEGYFmbkz4U.roa (hash: tkN/efywA+5kpM31KV+mqm28OwLiTj+XO+01vH0nfrA=)
5: PdhTLCzS94CSZKH6b3DIBk5Rvps.roa (hash: aEYKUEVb3YSj13VmPxeTpVeblAEFaCEyE+oxalL99hY=)
6: PdiLR6TNVHL1PiwB_9TjhY2_4Mw.roa (hash: fxJolf7HcMsKt8n4SeoLRKU0s9QwXZsLgW50Kw3yYQM=)
7: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: +rz90yN12jz1BrQcCBXW81J33t4hk9xADghgdjb+r1c=)
8: ct7G4Mom5Boc802bEbFFnAVpv-0.roa (hash: adbr+0r2/YFext/ZvzXaEL0mKU5w0/dxwR1z36K4Lc4=)
9: mhTVQr4r3DZ7VGITyIG_xnJTKZ0.roa (hash: wCR6DC8Pqa4qxwOFxGkFj4Y4ZzJ+te0bBqmlHbBzVjQ=)
10: ty8paLCk4TaEs9kfb6irUZZ4p-g.roa (hash: E3jPnIGaX9YCeoKgK4OtXqPGRq5byhzJcS6QFpLOQV8=)
11: w54MSAoYkvWAhyocjd5urm0fs-o.roa (hash: Fxvw/XX9z5X/yBtzMmWjgC1aQmrGLx6Nw2e1Qr38xVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:69:0d:e0:19:3f:66:31:05:93:78:20:13:fb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Mar 25 18:01:15 2026 GMT
Not After : Mar 26 18:01:15 2026 GMT
Subject: CN=29b57b14be6e504bcd8a520c0911d38ac222b4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:e0:7c:df:b3:0b:51:51:1b:91:03:a1:77:
5a:11:22:f8:0d:c0:52:97:ed:e9:cf:8c:14:b8:fc:
35:fb:8b:d2:97:38:75:ae:ce:da:86:57:7a:16:e4:
c5:9f:98:61:e0:c5:bc:1a:41:28:71:d9:91:5f:46:
0f:0e:8b:a8:9f:fb:4c:52:4b:8d:38:3c:ac:05:8c:
9a:66:18:9e:82:22:82:15:32:c7:6f:47:a3:12:4e:
9b:ea:f7:82:ae:f8:8b:43:b0:e0:8d:8f:01:9b:f1:
75:be:53:1c:ed:da:66:0b:e5:25:65:80:6f:55:2a:
a9:44:6f:01:17:e4:df:eb:f4:23:1e:9d:c6:bf:2c:
5c:0b:b9:4b:75:17:4e:c0:e3:47:89:66:e7:0e:a1:
7e:bb:24:e2:63:5a:12:67:b4:9a:01:2a:7f:b2:91:
c8:74:2d:06:39:23:76:29:a6:40:35:da:d0:18:b5:
d9:f6:98:01:20:ec:50:e8:4e:26:74:e0:b9:66:73:
fd:fe:d9:dd:42:9e:81:fe:3e:3c:45:3b:7c:48:cd:
55:98:81:c9:11:09:5c:72:3e:8e:84:a6:d3:b8:bb:
1d:fc:27:b5:b3:b4:bd:5a:fc:21:72:f3:ef:ae:57:
69:a3:c8:08:ea:85:7b:24:a9:0f:f1:d3:9c:16:0c:
44:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B5:7B:14:BE:6E:50:4B:CD:8A:52:0C:09:11:D3:8A:C2:22:B4:F4
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:fd:c8:72:86:77:c6:c8:36:23:af:52:c1:70:39:59:e0:b8:
58:9f:f7:75:b1:a7:09:11:c2:c1:a4:c6:6f:6a:de:f8:fb:1f:
6f:76:83:a5:a5:9b:2c:53:0c:76:43:32:12:a7:e1:00:af:5d:
78:48:53:12:00:49:90:f4:fa:7d:a3:d5:06:ff:3b:12:55:26:
62:9c:ad:5d:b1:ce:cd:be:61:02:fc:18:16:89:ce:8e:51:3d:
0f:5d:c3:45:02:65:49:bf:5f:ca:6a:97:a1:86:38:15:6e:d6:
bd:cd:7a:83:1b:51:ef:e0:85:f2:02:8d:0d:a4:b9:20:97:2a:
ec:fb:67:56:9e:5e:8c:c1:93:23:bd:21:3c:d7:d9:16:2c:df:
7d:0c:a6:17:f4:90:cf:e4:17:f8:ba:29:bb:82:d7:58:0f:2b:
58:16:01:37:15:a2:4e:78:4b:17:cc:c8:bb:f8:0b:53:2f:ba:
3a:9e:b0:46:c6:d9:cf:34:c2:51:98:1f:b7:0f:26:10:ec:06:
39:8e:33:eb:47:95:84:38:4e:2e:5d:8d:8f:96:f8:f5:7a:da:
df:7c:4f:53:61:ac:8c:23:dd:85:03:7b:be:03:87:07:51:c8:
4c:ee:03:92:87:04:df:3f:96:f3:de:5b:5f:a9:72:59:f7:18:
0d:a3:d3:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKGkN4Bk/ZjEFk3ggE/vdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky
ZDMwYTkwHhcNMjYwMzI1MTgwMTE1WhcNMjYwMzI2MTgwMTE1WjAzMTEwLwYDVQQD
EygyOWI1N2IxNGJlNmU1MDRiY2Q4YTUyMGMwOTExZDM4YWMyMjJiNGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZTgfN+zC1FRG5EDoXdaESL4DcBS
l+3pz4wUuPw1+4vSlzh1rs7ahld6FuTFn5hh4MW8GkEocdmRX0YPDouon/tMUkuN
ODysBYyaZhiegiKCFTLHb0ejEk6b6veCrviLQ7DgjY8Bm/F1vlMc7dpmC+UlZYBv
VSqpRG8BF+Tf6/QjHp3GvyxcC7lLdRdOwONHiWbnDqF+uyTiY1oSZ7SaASp/spHI
dC0GOSN2KaZANdrQGLXZ9pgBIOxQ6E4mdOC5ZnP9/tndQp6B/j48RTt8SM1VmIHJ
EQlccj6OhKbTuLsd/Ce1s7S9WvwhcvPvrldpo8gI6oV7JKkP8dOcFgxEMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCm1exS+blBLzYpSDAkR04rCIrT0MB8GA1UdIwQY
MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt
Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3
LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmf3IcoZ3
xsg2I69SwXA5WeC4WJ/3dbGnCRHCwaTGb2re+Psfb3aDpaWbLFMMdkMyEqfhAK9d
eEhTEgBJkPT6faPVBv87ElUmYpytXbHOzb5hAvwYFonOjlE9D13DRQJlSb9fymqX
oYY4FW7Wvc16gxtR7+CF8gKNDaS5IJcq7PtnVp5ejMGTI70hPNfZFizffQymF/SQ
z+QX+Lopu4LXWA8rWBYBNxWiTnhLF8zIu/gLUy+6Op6wRsbZzzTCUZgftw8mEOwG
OY4z60eVhDhOLl2Nj5b49Xra33xPU2GsjCPdhQN7vgOHB1HITO4DkocE3z+W895b
X6lyWfcYDaPT+A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:24:15 2026 by rpki-client