
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
File: BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json)
Hash identifier: RXPHQpqu8+8TI9bqByI8l5942dwlUaY8qyd8Z4PNJv4=
Subject key identifier: 99:9C:9B:10:ED:3C:0C:D6:AB:6A:12:41:6D:F5:AF:F9:1D:AA:8D:B0
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 019D273B0B7D6E4C315B41FF5DCA346A3D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
Manifest number: 16DD
Signing time: Wed 25 Mar 2026 23:01:13 +0000
Manifest this update: Wed 25 Mar 2026 23:01:13 +0000
Manifest next update: Thu 26 Mar 2026 23:01:13 +0000
Files and hashes: 1: 3H_vt-3sz3UYPfVr2BQwr8WiZlM.roa (hash: mbq8Pr8PdKSRq7yIi7vQcXKq7HeKQhJfSwx0LhWnGCo=)
2: 5DciNWvtD44nvmowaEInWwk8YZA.roa (hash: 4oBae1cQkYxE+N4xYsBQQveSBxypTMY0DWM/AkkENtk=)
3: 5JKLYCytnUKhdyTa14LHQIEKdFE.roa (hash: eArX0/lwmj4LvmBl8JgKR0ALNuxr1zRBSWvGWN5uFfI=)
4: 5i-KLJS79COzLV51bb0tfcQ1uQQ.roa (hash: PnQ0h19PE6J2No2E8613gpettIVTQSAHkgDKgMMgppQ=)
5: 6JyU7nFUK0tk4VQCPlYI_ZKhXmo.roa (hash: UtIfPnWUVyz8gRBCn75+ObAHW0bhWki1PUUgeHyQ8CM=)
6: 6XFljtVK2V0PF6GXRVQaEjH3Eoo.roa (hash: JvGvYE3ny1jx3z80vidwb1suh41eSZYf4UKZ7JMDcio=)
7: 7IDWuY26T4UCJ4M5vwbNefIa4Ds.roa (hash: 2aXs1iZiP1C/zRertFgP1ov5IhcFnyEWbQzgQUvTZx0=)
8: 8Gf4ilOOHDPy8ShRA6DADyswUBw.roa (hash: Gg3fjKtbtCo3yrbVLuhlxWrBwdUSi5rHbyxOcOG2L30=)
9: 8HWIcI9N3AE2x8zYy673Vd_4kfo.roa (hash: LN2KpWeg+Ys04Rwx9lWA0rODgISnXB2tF8WbAfHw9WY=)
10: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: wesYEXKGfUXiIjYGc7hcCRPwO/KJOgPMeb6PMEEkDO0=)
11: CdcIcZHeB0GsHSds771hQUpQ7D8.roa (hash: YpLVoBlHUKYqmx9AhANgdWKDLZYZ8nUhqGpu7awPbPs=)
12: DMF7_LfD1ucYhDO0ohFJTTXvNDA.roa (hash: Cy/e5SaBm31dnw0xEGtIe3MOgTmE56seaObi9TTZpSI=)
13: D_yFeSNCNOPeNuhYpJ8Sj6yMqrw.roa (hash: dRua2mdx0T28GkQVz9QSWEzbAac9dJJsdOTGdnj90kk=)
14: FPBrUaHiw1Xoqa349mDqQP88He8.roa (hash: 2Mp4pgNFrHCxPuX5oPFoUH8wMArYm0pR6I+49C7XFsM=)
15: IYvPR6-UnbcPyQYUJJWwmHE7NK8.roa (hash: P03T/DLhEWvqxS/8YYp/V2MwoFNKYQGAgYeLfjxTL/Q=)
16: Kky_RCiVZdJF5qQzgzjDIFWXHRo.roa (hash: qaufeqdeipVE1r+9GyOAZSAG0hMF1qh7wENk1s7zB2A=)
17: LXr6C48Lxn5qLALMmRCp0Zvklfc.roa (hash: xyDipUJK+J0EWyFs8iYbI4e4T5NfmKMOryR8EWn2OIs=)
18: OjeVFAg212uWEJPR4j0wAB5XdcE.roa (hash: NgMhCybIfen0bwNj/HLLxxGGd68yCqKlN9cakd8bl48=)
19: Ppvy7LfSl_8veNKT3PCYySGa_xM.roa (hash: KAldC7Ag1Jpktoi15FEM8qa7XkOMpiKNKU124uNCHgU=)
20: Z8_XBqnrMqCaFMrYj-tVqo5CEZM.roa (hash: 0jePTymgcOwFGwH77BGx0LOAQcAPk0ITZHaXgc+bQTU=)
21: ZyyRFBEICDHmXEJlm_evj1CQkis.roa (hash: rp2ujqlQYBXRmh3CjxdyjzYD8KDbQjAAWx5V9965pig=)
22: drYQ3de9ij_y2_dBNv1FHhh_HXw.roa (hash: hDTaJgq7sdjjtHa2UuNNZjMX0IkytWJOW4WpnjNRq3k=)
23: e4ScI9UDTbjinOVrH-HzMhxxYaQ.roa (hash: z4aixSBMgxj9VOGw7h6LRSs/oKtO4+/kMkfuz35WEDU=)
24: eBOwN9hT4zejM0AoU4iSaIEjz9s.roa (hash: fKITe0XHXVAprxbNBR9M8OQ9t4GQsguRxsVQ9HUhdnE=)
25: hG3KpN-cvfJ9mSWPhtQPeu1ItUs.roa (hash: /bY2rtzWMB1/BM4P1MtY/wIJQHWSb2VyMeLJaYe4zIY=)
26: iVkiAHYOg3HtM_uWUc76kLqrONs.roa (hash: XlSThvg6yDDSVBDMohDGUs845WGTZEUqqZulw7z2Ytg=)
27: iwqxgJYL8mBv3G61SG6QzZnZo_k.roa (hash: 3GX+FmWsXoIqZRfY2WtjR43yzm9CJ2GngD6fPIfSxPg=)
28: mWr8FlZO7fOBScqPdp-M7JwH1Xk.roa (hash: W9XfH8Uvi+taIP3eFXkn/Sc4OUtrs4EPnOFSG+QrLlE=)
29: n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa (hash: 12jqzpGaLihSKEn4m7KQUtKkmWE3dp9k5ig5SAQQ3hM=)
30: rc3l3yce_wnaIAhkm-MVLQ6MlQs.roa (hash: nGpl03qXwZbg5LYiikckCucykULVlnfBwTrh22E2cqw=)
31: rymhiapxDDqAtyIh4qaTKoecFoo.roa (hash: p5Zj3OLwAVlNewRpZM1jlrm2hLhqyC5XI9HeIZ/YR4M=)
32: tPWk-AfReXdc60ikE9-d-q2ml5k.roa (hash: fuXAhmrSQOQKR0hkXAvHwO1y6kpzsA61B3meXSwM1d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:0b:7d:6e:4c:31:5b:41:ff:5d:ca:34:6a:3d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Mar 25 23:01:13 2026 GMT
Not After : Mar 26 23:01:13 2026 GMT
Subject: CN=999c9b10ed3c0cd6ab6a12416df5aff91daa8db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:4d:c1:c9:b7:b6:92:d3:16:4a:69:ff:cf:
47:a4:ab:5d:ae:16:53:38:fe:b8:2e:6b:33:58:b5:
e1:6d:c6:30:62:29:9d:d4:49:ee:ce:c6:b1:78:ed:
f5:11:3e:c2:84:6c:58:f3:b0:cd:8f:e2:19:42:18:
1f:cd:e2:67:08:55:9a:28:dd:bd:c1:4f:94:53:9e:
22:8c:41:f5:78:83:32:6f:b7:2d:c9:35:b8:b8:79:
e5:bd:f0:3c:a9:18:d5:2c:bd:ee:51:af:b5:4b:bb:
54:5f:83:e2:b6:96:64:5c:39:2a:1e:bd:cc:c5:ff:
74:2b:02:0c:85:0f:b5:d6:90:1c:31:6c:07:d9:44:
3d:d9:ee:79:c1:41:66:d5:4f:15:ac:6a:44:c8:df:
a9:ee:bc:b7:60:34:6d:80:eb:8f:9a:a9:2b:85:5c:
c3:b8:f7:e5:9b:35:83:03:51:02:6c:da:52:e3:f3:
48:9a:d2:c7:4a:a8:db:90:3a:a1:26:63:15:1d:02:
46:dd:c9:49:3e:9d:fe:44:26:16:79:49:18:1b:33:
0c:3e:6d:0b:5d:b8:27:e0:3e:a1:ce:3a:c7:26:bf:
0d:bb:be:77:41:41:d6:0d:34:7a:6c:ee:4e:5b:05:
01:a0:5d:fb:95:8e:cb:84:e1:6a:f0:2c:bc:59:cd:
22:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9C:9B:10:ED:3C:0C:D6:AB:6A:12:41:6D:F5:AF:F9:1D:AA:8D:B0
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fc:b2:1c:34:63:74:d9:7d:17:45:5c:33:29:a4:b3:c9:12:
3e:a5:59:6d:5e:85:44:11:e8:7a:b6:66:85:87:c6:89:18:98:
20:43:99:27:ba:b4:ca:01:7e:ca:69:1b:87:86:8d:21:4a:0b:
85:e2:53:69:0d:f1:03:8d:84:33:29:07:60:03:88:97:70:1f:
83:7a:21:6c:e8:cc:a4:19:60:3d:fd:3b:c3:e5:96:04:1e:e4:
7c:3c:62:b1:cf:8f:4f:06:15:33:65:6a:98:a6:87:ca:27:51:
15:d4:44:d9:d0:57:75:5e:67:c1:57:f6:6d:20:a2:1d:7c:ba:
59:d8:3d:6e:bf:61:05:7e:9e:ef:9d:18:f4:a9:b8:91:4f:3f:
3c:50:82:05:e7:02:1b:c7:cd:d1:00:ea:ea:7f:f7:88:3f:db:
b9:78:1b:77:70:ef:13:87:29:07:6a:7b:ae:7e:45:23:2a:7a:
9a:c3:1d:a9:66:7e:fd:f5:ff:2c:f9:e5:47:3d:92:2e:6c:c3:
f0:79:7f:a7:a6:31:69:d4:6e:65:32:e5:08:0b:9a:ec:8d:1a:
98:b0:20:65:96:f1:4f:a6:1e:3b:bc:10:f7:b9:34:7c:48:62:
93:e8:bf:0e:fa:7e:66:6b:1d:a7:f6:00:21:ca:e1:67:aa:67:
1b:36:36:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:30 2026 by rpki-client