
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json)
Hash identifier: +xsNQTM5+U2hTDKYSfMV5c4PnZT4D611eCb7tQ9gOPE=
Subject key identifier: 2B:4E:CC:50:9E:1E:0A:6C:7B:A1:32:C5:2A:05:66:0E:31:AF:6E:AE
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 019E1CEB682665DCED63C019D05C3A1BF0E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
Manifest number: 1121
Signing time: Tue 12 May 2026 16:00:50 +0000
Manifest this update: Tue 12 May 2026 16:00:50 +0000
Manifest next update: Wed 13 May 2026 16:00:50 +0000
Files and hashes: 1: 6JluXjhm_3nHCCaPoS3TfBvKy-U.roa (hash: o1cOjM+O0qiescaG0asYe3SHOLXy9bPb72S0RHPk1N0=)
2: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: EdijPkAX7MoGeOoURKINPc8tMd4CnS8owStRYadXwD4=)
3: EXPtgF3pZHjNUJl2LJCVZFox4fI.roa (hash: eBmFuREOuZdP3B6dGKEKnHjrjSuhSyhM471vSjq0eBQ=)
4: EtFx9f4oiCywxFykUSR2QjU7eFQ.roa (hash: b2AfdRFwbg0njOLl9hGqSCvFbx4kUQActP2xft37G50=)
5: GDHsmxtHVdYa1bZaIWOH1_OImP0.roa (hash: 7pk8LdfcytaksybidRQnrYPauwLqusCRjPdg0+T84EQ=)
6: M_AsK8xtgHW--enKh1Fv-0yD_GQ.roa (hash: kvJW1SXagKB0pbzliKf7XR3LeE5GTsMSJYvmlREXthM=)
7: QojlrQ9a8Sf-3OscCFSF9lKZeL0.roa (hash: 5zZB8tcLmgJvpKxRcJyw89w0k3VioDwJSjfpHcGceEg=)
8: _DBibvy1y9JoyoGE-bKCjSoDWyc.roa (hash: tHTDVPFwK8Ocp3huDTizupo9HBbejkSKeT8H3qb/iR8=)
9: aI7K851ffCc0tWN8S0U8Ns8VJxg.asa (hash: 822VH5CA3fhDgHZR6uAc8SFbxTllR+Bitc8kZBqFSyY=)
10: jFHWQVied9oZQfm4vhIvSC4eiV0.roa (hash: dr0KfgCKcAC1kV4SsWObX5dDQnEh0pKNGg0bXRatP4I=)
11: u21fpxmmOR9mlnHoRxP6iE7HrmQ.roa (hash: UB+VK364X+iu32GdfVjBn8r1mi4BDsfoTepchYMyQUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:68:26:65:dc:ed:63:c0:19:d0:5c:3a:1b:f0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: May 12 16:00:50 2026 GMT
Not After : May 13 16:00:50 2026 GMT
Subject: CN=2b4ecc509e1e0a6c7ba132c52a05660e31af6eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:41:f2:76:17:4a:95:de:36:88:7b:47:69:
d0:7a:65:77:40:d2:a7:7e:7d:54:38:20:0c:96:1a:
ff:ad:27:b1:4c:80:8a:52:be:4a:62:45:02:c8:85:
3b:6d:12:b0:06:bd:7e:e6:f7:50:bd:6e:f2:ee:69:
83:cc:a0:ed:ac:9c:68:72:60:21:98:53:07:d3:15:
45:97:ac:cb:49:bb:ca:6b:fc:4a:bb:32:b4:5c:df:
92:0b:f0:e2:9a:3b:9c:47:fb:82:78:17:29:61:e6:
90:e8:79:f9:88:b2:08:e6:e5:74:ba:fa:ac:4e:9c:
61:76:62:c0:3f:db:1f:11:bb:2e:3d:f3:47:b2:8e:
5d:7b:e8:39:a5:88:dc:a9:f5:8a:44:29:95:bd:72:
ef:93:85:af:4d:8c:85:7c:5e:0d:0c:fa:01:46:17:
39:66:4e:00:b7:67:1a:f0:7f:62:2d:c9:5e:d3:aa:
c4:c7:e5:4c:b7:a6:32:ff:f2:44:78:2b:d6:13:0c:
7a:25:e8:8f:1d:7a:1a:11:ff:b4:8f:e6:56:57:3a:
5b:c5:e5:9c:aa:5c:34:a3:a2:eb:f6:17:7c:aa:53:
a4:4d:03:b9:a2:0f:01:18:b0:b5:c1:53:3c:26:4d:
fa:71:d8:f6:6d:fc:c5:92:58:98:74:33:0a:c3:3d:
82:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4E:CC:50:9E:1E:0A:6C:7B:A1:32:C5:2A:05:66:0E:31:AF:6E:AE
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1e:1b:74:b8:b2:65:f2:0a:ee:70:c7:03:fb:5d:3c:4f:3a:
74:23:57:31:a5:82:29:83:7e:6c:43:b6:a5:c0:1f:c7:29:ad:
6f:1b:93:49:d7:df:d7:d0:92:3a:6f:44:e3:3f:16:d8:81:4c:
25:ea:18:ae:b5:6f:f3:5a:43:d5:cc:31:20:3c:e9:d0:67:77:
f5:f4:6d:75:b0:6f:8e:f5:b5:3c:b0:29:ce:2c:ba:c9:a7:9a:
e8:53:fa:2e:4d:9e:91:3d:41:fe:65:2d:82:8a:ff:32:79:25:
98:30:42:73:76:aa:2d:89:0c:2d:94:a0:45:cc:29:5b:f5:14:
eb:65:92:e5:89:1b:1a:d4:a1:68:60:3f:28:6d:f7:0b:62:f2:
5c:64:74:e7:e6:6e:01:b5:ef:12:a6:03:d1:11:fe:1c:31:32:
29:7b:58:b4:95:c9:74:4b:df:42:b8:be:60:70:cc:70:dc:c3:
6f:04:62:a9:c0:dc:b3:91:45:22:7c:54:64:c1:ce:2b:1e:b1:
82:3b:91:74:02:0f:25:4e:7a:da:e9:c3:f5:7d:69:8d:e2:56:
ed:6e:46:47:f9:aa:a4:c7:94:3d:b1:6d:b0:8d:99:8c:53:eb:
4d:7f:e9:ad:26:2e:0b:10:4a:4d:89:9f:1e:67:42:e3:c3:90:
5e:d6:91:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:09 2026 by rpki-client