
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
File: IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json)
Hash identifier: /19dDCqzCZYQTQn89PEvBM6TsgAOayX35rl1Mg51VAg=
Subject key identifier: CF:21:F8:DA:E3:E4:D9:4D:41:DB:31:20:DC:61:7C:8A:02:13:6C:E9
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 019E1FB570A4E668A7F928848AF567D95ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
Manifest number: 1916
Signing time: Wed 13 May 2026 05:00:44 +0000
Manifest this update: Wed 13 May 2026 05:00:44 +0000
Manifest next update: Thu 14 May 2026 05:00:44 +0000
Files and hashes: 1: 5OuAtNn0l8oe2em-i-_BkRqZL7g.roa (hash: vANhq4PdID8vPwTjDrBS+mXwABE8TzXjEn+JW1v5ExU=)
2: 7t8wgjK41lzapDs5jikBb5vTFhI.roa (hash: pNcEvtuu1o2hH2eMF61QKg8HYUfp8zz08CbYNkIzxoY=)
3: 9Ftjq_Eq-fyNHlW3WtWYGabPEOo.roa (hash: RROt5jRdMmps8oCVGgLhKd+7IXUEEDExlgWjv5fKF/c=)
4: CLa3JNQ78J4sBQQxh8GAqDQBO2U.roa (hash: Ptpr2OeA+6xL/czPzBtIc73Iw+siDZQ42cRR8gFjgKk=)
5: Ep3XVJ-_t23pza2fzpUEP6EDP9w.roa (hash: hoiisfSpISgCVFz1VXlgIuAWQt8MugVbvtDs45VkzlE=)
6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: AHQRHW0K7nVuR6LrpApFDmzWUMeMRbdLlcG45+WABYQ=)
7: LCWtZ049FoEMI5HAwHzYkDXlzb0.roa (hash: fito6QodYmgMrVei2hs3ovjCGv+4YYqwwa8c3/bKpq8=)
8: LRyKKJzTBliMx34ASYig8HFEXqY.roa (hash: HoiPjv5M2f1QZDzcqH+pau0FYK61g+kOdOsd3jsE6KY=)
9: N8_jgVETZSZgMZuy7Nmx901ELco.roa (hash: +zMjL/+nyqUTVAJWqSLmseSeJa4kcd3Eto/YmX3LSA0=)
10: QZOA4Cw_wJbFqn0TYzvO7eAmllA.roa (hash: urP1bJFXb+aibHUz3y+1eQjAxhXGlX3kRZlCoVkKq8U=)
11: VPsOpQzvuZLSVdRpUbPccqsH0HI.roa (hash: LNvdod+2moYgqIRIXig9MujeQAei+hV7OeUdz/G9T2c=)
12: VcaphQh4vHAVmPQId2jsNB2aQv4.roa (hash: 8e+QqZ403DJ8rCqJdp/PBd4JgkUk23mp8hqKweh0FDA=)
13: VrIgLz2PFQgd63beVRzJrL2SQBc.roa (hash: sXPs4ggxGfscBiESz3blqF00BOn9YaRW1W7ATtbBk3s=)
14: YEIy-4popFF63uiUMaqEq6MP2-k.roa (hash: gVX7vNZdK/HpIGkA/+EuEhyy05rdK5xmjj38Yi11muE=)
15: ZwVEwgiwITzzAorGck8VXul9oFU.roa (hash: qDVShcnTFlPrk8WY/vVUFbSS/IUCjtruta++I3zUCp4=)
16: _KdTD9Hfu5k6hVTondfZQJ_OxLo.roa (hash: 4TQXprbZCs5Jf+ifvEFuTZxSKFFhMf/XaJeUj1L8wlE=)
17: b5_puVoiaaK1luof_u2L7B-PTEE.roa (hash: Uuu9Wl4sZx9v7YzIOuwEsj+WuePom5BSk93dnj/mc9Q=)
18: fLzeZ00IYj-IxnoGIbn7t2eWUGI.roa (hash: YW5jkNHqF6tBgAJfKMQglVG8Rn1wn5A7xiLfsMA393U=)
19: j0nf_y6uB0VgXHQDlN6OhEbU5jU.roa (hash: SKADJBgkOhviqwy7f7gDKRZV4Zt1/yBSufcp/4OhY7k=)
20: pMzwR3DaYSVoHUR1RGTsgZ23wm0.roa (hash: 6sMrJ/AtbSyiDYLE+mzWMFlpOxx6wBjmiT963p9LhmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:70:a4:e6:68:a7:f9:28:84:8a:f5:67:d9:5a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: May 13 05:00:44 2026 GMT
Not After : May 14 05:00:44 2026 GMT
Subject: CN=cf21f8dae3e4d94d41db3120dc617c8a02136ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3f:75:4c:fe:d7:a5:ef:3d:60:85:e4:6f:83:
8c:1f:3f:ca:c3:68:57:20:22:65:62:32:fd:37:fc:
da:8f:5e:ef:46:4d:c7:2a:49:ad:95:f2:59:ab:77:
cc:96:d3:69:fa:d8:d7:db:a7:14:01:ba:f4:24:bd:
51:59:8f:50:96:14:49:21:0b:87:90:16:84:3f:7c:
3b:9b:87:1b:36:40:0f:7b:26:83:99:32:44:e4:ed:
c5:fb:03:de:fc:db:0b:99:24:04:ed:86:07:8a:2a:
1e:5a:0b:8d:85:ce:90:57:91:1d:6e:82:74:40:e3:
b9:4f:cf:bc:b7:45:95:7d:ba:4b:08:8d:5d:74:32:
98:c7:c2:1e:b4:4f:83:27:aa:59:e7:41:a0:37:c4:
b7:b3:77:c8:aa:75:59:55:b7:ee:60:0d:8b:af:78:
33:76:54:fe:39:a4:01:e2:ed:b8:7e:ce:8c:e1:21:
8c:f8:a2:60:42:78:f8:fc:94:36:31:ab:d9:b3:a0:
54:c1:88:a2:4d:a1:28:52:69:56:90:bc:7c:0d:6f:
f8:f9:3c:bd:68:28:d6:16:54:95:71:ff:e1:f2:0b:
5b:02:29:f8:55:f0:47:18:37:b9:26:ee:40:4e:3d:
1f:c9:41:29:9b:b7:14:7c:e2:91:43:f3:07:37:32:
fe:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:21:F8:DA:E3:E4:D9:4D:41:DB:31:20:DC:61:7C:8A:02:13:6C:E9
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a7:4a:89:d8:b6:2c:7c:77:ba:9d:a0:9a:80:3f:ea:20:45:
d7:14:a7:aa:94:a0:7d:f0:e0:9e:01:ab:e7:08:97:d9:f2:b0:
60:47:1a:28:85:7c:dd:3b:a3:8d:28:92:65:eb:64:a6:9b:1a:
d1:5a:8b:4b:ff:31:55:34:63:2b:c7:29:26:52:6e:f3:f1:39:
34:49:0e:27:a5:bf:86:8b:50:de:42:c3:4e:6a:e7:38:f4:3f:
a3:73:98:1c:83:77:b4:bf:b6:03:d2:26:4c:f3:a3:59:8c:ac:
c1:c9:0d:b3:5c:36:a4:3a:0c:28:e7:b6:56:2d:dc:e8:5a:35:
a9:ca:22:3c:66:6d:ef:4f:d9:73:7e:30:53:dd:3a:e5:72:16:
35:3f:6f:5d:87:89:76:3c:b3:93:53:3f:88:81:46:32:6b:f5:
e9:a4:18:1f:ff:d0:aa:fe:0c:a7:49:04:11:2d:03:10:c9:2c:
b8:79:15:30:72:c6:45:a6:79:8e:cc:a1:57:79:5d:41:29:f7:
b3:cc:0c:e8:96:b0:57:b4:f0:75:0e:91:05:04:7d:7b:7f:ec:
fe:a8:8e:35:88:b4:8f:e7:33:ba:0a:01:07:89:e7:46:e4:4a:
4c:6a:d0:cb:aa:b9:da:6c:f5:ce:16:86:fc:5d:43:52:08:0c:
a8:f6:04:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:33:39 2026 by rpki-client