
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
File: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft (raw, json)
Hash identifier: CCJUSmwYGfYgGSeRvvn+ANB5lqfmbwrynBjAl7hIlRQ=
Subject key identifier: AC:F0:74:B0:E8:A7:C2:E8:CF:48:DD:36:E6:15:96:E0:72:01:0E:17
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 019D273B400F3FDBBFF2DD23AA769ED20C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
Manifest number: 1899
Signing time: Wed 25 Mar 2026 23:01:27 +0000
Manifest this update: Wed 25 Mar 2026 23:01:27 +0000
Manifest next update: Thu 26 Mar 2026 23:01:27 +0000
Files and hashes: 1: 1--f8TOFOHJxy913_bnxbbB_I8Ps.roa (hash: wDKAE8eJy4a/Xju9oL+J32sQIgyfZxer9kQNnDKALh8=)
2: 1-jH0g_JDLp_7206NgV5uijHSTJE.roa (hash: LRjP11l8Yg7jbG4bbfhfNEvQDZIpDubQ+TvWhkwjrcQ=)
3: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl (hash: SE/Kk+T6EGzZ63gBwWWGBhdTpjBkNrX7dVZiEJMF2/I=)
4: 3GG8eWEP0AsTR5hlJBndfjSVqXE.roa (hash: OqQ6t5k1StJuUPb2wymY353zmLAJ5m9iQ1cfSGHhatc=)
5: Ew6t29Ei1xqX6fCJJvzPjV0QQx8.roa (hash: JiMbHLWrOkAjKxV/HgN8hcqfDizA3AaG0pNVT8kgBVI=)
6: JNr-UC5vFynVEDZr9p42nirYUp8.roa (hash: QrXLI/7uzYtPK46SlviW+E2Eaq5t1mr6I/kJpndD+lk=)
7: OS72UUjy1jIbO6SLm4_mGk1QjoA.roa (hash: JCjobLuVUg3x2yIR7Yj0jA3s02kdH2wYADkCYAZAm6M=)
8: hlYcdx1ybU4O_N_wWLe8kEQOPAA.roa (hash: g8sRkVv7AmG02gcDiKwncGvtRS2uuD1b8FmdkJIrmVQ=)
9: iY5E0iZ2YmwSRo1oZbuozkzcREs.roa (hash: XAB0LIhnvafntszSPTz4cfq/KAQxwohiu0F5a96UkOU=)
10: qWmrXkuHj_sWsoWUwUEWOmRpZO0.roa (hash: MHfvuh3eLEasmU8bZ+QtTWQpVIX8pvTM+Puzp/lNHV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:40:0f:3f:db:bf:f2:dd:23:aa:76:9e:d2:0c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: Mar 25 23:01:27 2026 GMT
Not After : Mar 26 23:01:27 2026 GMT
Subject: CN=acf074b0e8a7c2e8cf48dd36e61596e072010e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d6:74:97:a5:b1:89:d9:95:57:79:54:0e:dd:
fb:76:ec:f8:bf:38:f3:9e:7f:ab:98:5e:69:8e:2b:
e0:90:9f:76:fa:17:95:00:1d:eb:b9:bf:77:5f:fc:
b1:6d:73:65:3a:c5:25:01:61:31:24:74:63:95:e9:
cd:1b:97:3a:10:66:6c:97:cd:cb:ef:6d:0c:a8:6e:
bc:e4:4c:25:8a:df:a8:4c:44:85:a0:86:26:a5:55:
2a:7e:c2:ba:b2:3a:94:1b:8a:9d:ef:08:09:a7:42:
31:e6:25:74:62:88:30:4c:70:fa:c6:81:4b:4c:73:
bc:c7:0a:17:c6:97:75:2b:1c:4f:36:1c:ec:92:22:
c6:d1:b5:4b:62:35:42:43:de:2e:d2:45:63:97:de:
4a:c0:ca:31:38:ad:bb:5a:12:9b:3f:95:66:b8:73:
a1:6f:ce:ba:36:d0:ba:a7:ac:3b:b0:8d:d3:a8:2f:
66:e8:db:f4:64:cf:38:1d:71:fb:31:dd:b7:8f:d8:
f3:cb:5c:48:c5:92:71:a3:59:61:eb:3e:2f:7e:8a:
6b:71:31:98:07:7f:14:4a:ce:78:a6:61:cb:a8:b2:
d7:38:ad:39:81:f4:ea:6c:0f:0a:50:61:ef:59:e9:
65:3c:31:bd:64:f1:61:0c:7f:19:a5:96:fc:db:c0:
2a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F0:74:B0:E8:A7:C2:E8:CF:48:DD:36:E6:15:96:E0:72:01:0E:17
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:92:c2:b7:40:5a:2a:89:a9:1e:e1:32:2b:ac:b1:4b:cb:4e:
cd:f7:4a:ed:84:d9:be:c4:5e:7e:dc:68:85:31:e2:de:cd:df:
80:62:ee:59:d3:c2:13:e9:55:3d:8f:18:0c:45:ed:e3:7b:78:
7f:02:63:88:8a:3e:35:dc:11:48:5e:2d:36:50:3b:74:a8:20:
95:4c:17:06:2d:80:14:93:8b:d9:6f:86:be:c1:35:77:c8:2d:
ae:c6:95:84:87:09:92:64:61:69:ea:74:ef:90:24:6e:48:85:
24:31:a1:80:b7:2f:ce:b3:f1:0b:33:e1:c3:0a:4f:0c:69:25:
2a:e2:d6:04:fe:ae:f1:31:2d:3b:d8:be:73:16:6f:19:a1:8c:
2c:7a:f8:ee:92:a1:49:b3:ff:52:4a:fb:47:a1:d7:c8:21:03:
a9:2d:cd:1c:20:a5:f5:df:4e:e8:2e:8e:b7:4d:0c:54:d7:21:
0e:f5:77:3b:23:1e:e2:9b:01:22:fa:34:c0:ec:e5:22:3a:e0:
41:28:73:96:47:04:cf:4e:be:f2:df:dd:2b:38:d2:b4:c2:a7:
f7:4a:56:41:f9:63:c5:05:26:e9:51:dc:3c:ba:4b:ff:8b:89:
5e:f0:9e:78:ce:78:3c:ec:fe:13:d2:e4:7f:a2:a0:20:c0:b9:
a0:a2:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:30 2026 by rpki-client