
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
File: dqdYJumRIlpCn_ih5__cgEZkIN8.mft (raw, json)
Hash identifier: r+awhyD2InEev/jDSUS6eH2JGN4Yb35yYGex2IIvlTc=
Subject key identifier: 42:3A:BD:89:41:59:6A:42:BF:B2:A4:90:BA:67:AF:08:37:F4:BC:2C
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 019E1D229C3A595439E45822CBC8304A373A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
Manifest number: 1929
Signing time: Tue 12 May 2026 17:01:07 +0000
Manifest this update: Tue 12 May 2026 17:01:07 +0000
Manifest next update: Wed 13 May 2026 17:01:07 +0000
Files and hashes: 1: 1EIOosMYuD73h9CRUOVLrDf2lBk.roa (hash: BJYCiLgwQZEOXx4/ggwCHkEwe20mmZnB00Jyo+D3/6k=)
2: 3lVoSteGkpKcde56m2WcsA8N-s0.roa (hash: 1XrtONYMpJVe4WnBQhEVaGnetVY+4paKXOigWmRK674=)
3: 72qqOl08Ng_75PrEX39wChvsHq8.roa (hash: wdAGiwDNclYEAAkLFN5CEwmjhcr+4EBdtbN76kXOOjo=)
4: AFJzhmH9R0mG2bUCJPJT6j8bKrw.roa (hash: EzibNTyau7BTPE7oIO9TUlGehtGq8uPVCAnORk3k9nM=)
5: FfL73uShzwqZVNoRtUTTUlqkYtA.roa (hash: fZCZHAPoxQlmosPyGQ71gASDy0FXd3AMU+JCShnhFxI=)
6: HBckW3ER80MSeSiwpy-Z-q1qiGA.roa (hash: QBBHo4qiNBL+JHuv6YtHpt1D3ezGsz5yopdFgNvM84U=)
7: Jj6QniBhg0ekrss-TvVc94h0S2M.roa (hash: qf4l8DU2kkBt1QRzcva1hlT0ObLg86RVHmV+gl/DthY=)
8: M_Zrv0eTt-hhAHKM89cDFtPfvPI.roa (hash: 8QhFDfLhK8OB14NksFoRCKIZ2O0CQM/pbJL/g+vvAt4=)
9: Piwh6Gdq7GydD4rudpdk_H1-iJ8.roa (hash: wtN9D7HevPrfH3K/IMhwZNny7MHPmsA5+nenLp6rWiU=)
10: S6Hd3FrMpHr5gvirr8r2mfbNpH0.roa (hash: 4FAbzOC5Rxxuxqqf2z3xB7vLnXd0RHMz4zlLK9WWbfU=)
11: ZPI9qfs0gVUf8GTfcfWaO2bFXW0.roa (hash: yeSNEsXwHcAXCBN4T17R4L112mUgEsEF+By7doIb0CM=)
12: dKz_j_O-lAoD6qg2pO9vZUA4BGw.roa (hash: AKN2pF1PfbziQzZH+0SJyj3F9OOfW1sRqDb4wG8eZgw=)
13: dNznR1-S7vVnFASVh_hci4jZkMQ.roa (hash: zQ1QJ64mxnosKyQobzETFihGQBbENfar+9z/U7xN1lc=)
14: dqdYJumRIlpCn_ih5__cgEZkIN8.crl (hash: jIR04v+JzazMEDAa1sl60nWyv4QUFww8Xa7kjhZ5ZL0=)
15: fUNqCWuIckYGiVfEbuqCIkLI6d4.roa (hash: 2XlV9ynqjk3ChcE4Iw5juKC67TwbxBsySYHKnmHonQo=)
16: j2x4B6ObPzHT8ea8R_EMWP2PPik.roa (hash: X9UYUryQZPrf+c81HDCEnwfx3vw9iA0hQ/eJMGoOoMU=)
17: qrN-Uu0M-3HDr-76__U4MO8Jem0.roa (hash: F/0Bv+YLgCLY8hUXxBuIT6dqQV4aBe4yFDyDrHdklVY=)
18: sN7KZAb0tSBb8kQXanj5RVDo87M.roa (hash: sNtlv5Kfns7Qub92+PG+1MiYKqG3uVLYzRGiFbw3ks8=)
19: u3HM98A-Q9MDGyUnaURhtvW-lGU.roa (hash: orjD4qXj9t+4NhQVjT8wKDidu8IPZ4dL81G059Mpu9c=)
20: vbIqeSU0561jYPf76GOTQkgqkkU.roa (hash: I6pxxL2tdL5sG8uXzs35tb/DbPA84Se4ObiynAzOPa8=)
21: xFb3afKCHZ5K-TLErHfTSuMJKOU.roa (hash: 6l4PHj5QdfEodyTxnZX/6jrZVq4xk62zNf4EfjYJEmo=)
22: y2z9eC0pey0L-F8Me0uxP0CdRNE.roa (hash: ynALlANptr3j2opU4Eof0BTlyqYbPLK8fhfTetUFwTw=)
23: ygWs-sHzivtfoMPPnMV6aV1UCv4.roa (hash: KjRCKq03kFFE3PyzvTA3OcOazG7q6LPfF+mD7puBZ4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:9c:3a:59:54:39:e4:58:22:cb:c8:30:4a:37:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: May 12 17:01:07 2026 GMT
Not After : May 13 17:01:07 2026 GMT
Subject: CN=423abd8941596a42bfb2a490ba67af0837f4bc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ba:69:7f:63:9c:ec:d8:f4:c9:90:ab:1d:3d:
98:7c:26:54:60:d9:ec:ae:2d:43:a1:3a:a6:72:47:
ae:67:6e:4d:14:99:10:20:d9:77:b8:9a:2d:8d:1f:
40:65:dd:9b:ed:92:66:c7:ef:6b:2a:c6:0f:3b:4c:
15:a2:81:51:4b:5e:c9:4a:97:71:ec:bf:c0:94:09:
d4:85:9f:a2:11:70:19:b6:28:e2:2e:ae:55:49:71:
15:7d:8e:a0:a0:d7:14:ed:e6:89:62:99:29:70:06:
9c:2e:18:74:91:18:e2:3e:b8:9d:0f:29:15:52:33:
7f:1a:78:51:3d:64:b0:20:90:97:40:ad:41:e7:b3:
37:7c:39:76:37:d4:dc:bb:f0:a2:bf:98:f1:e4:3d:
e3:99:70:b2:a8:fa:a5:ab:df:43:ea:c5:b1:4c:f6:
86:f2:cb:04:8a:bc:89:6b:5d:d4:ec:fc:e3:9c:54:
03:4b:c6:ec:08:a4:93:c0:6f:bd:a1:2d:0d:02:65:
55:3a:33:9d:a6:bb:26:fa:01:6c:70:53:53:19:63:
7a:27:32:0a:24:86:a6:7c:1f:9d:3a:04:0a:8e:8e:
d7:14:83:26:24:a2:e5:52:19:8e:c2:e9:53:e5:64:
9e:40:1d:f7:d1:32:55:1a:df:71:ad:21:e4:7b:d2:
c1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3A:BD:89:41:59:6A:42:BF:B2:A4:90:BA:67:AF:08:37:F4:BC:2C
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:24:be:e0:e5:36:87:99:49:ad:da:b2:b6:a9:8f:ed:55:ce:
34:e7:54:45:b5:c6:b7:d6:77:9a:bc:3a:ee:7c:7b:7c:0d:53:
45:bf:2f:99:d1:e5:6b:b4:64:ae:b3:e5:32:cc:18:19:66:e2:
e0:7a:2b:28:5a:f6:05:00:9f:49:fc:fd:b6:78:6a:a2:19:53:
7c:f8:73:9c:c9:04:14:ae:1e:e4:78:92:d8:62:ff:de:17:03:
8f:8f:2b:6b:0d:db:52:8f:32:2a:2f:72:58:7d:94:93:88:d0:
af:7b:8f:b3:55:5d:43:6e:e2:ae:af:1c:1a:6c:63:17:dc:5b:
a3:cd:47:6c:d9:1f:51:cb:ca:a5:2b:ec:03:68:e8:e9:be:a5:
10:fb:ad:6d:86:ab:00:fb:1d:66:f1:b7:cc:81:57:59:c3:b9:
22:41:2c:3a:80:8f:18:72:08:3a:bb:4e:a7:7e:38:15:69:17:
41:d0:81:49:f6:0f:fa:c5:f8:a7:95:4b:74:17:83:e0:94:39:
25:fa:85:b1:84:e8:90:35:08:de:b2:a0:51:80:40:14:d3:dd:
e2:75:83:51:e6:15:b6:3d:d2:d6:ce:f4:53:71:3c:5f:c5:01:
c6:97:34:97:ae:97:4c:6c:e5:96:b2:35:ee:23:05:4f:ff:16:
90:88:e3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:34:16 2026 by rpki-client