
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json)
Hash identifier: dLPcHkCKeAN9ouLsi57+hbIP3OMad78vNjxV1b5q3P8=
Subject key identifier: 56:DE:86:0C:E9:28:53:23:F7:CC:AD:C1:54:7F:60:01:CE:03:B2:A8
Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a
Certificate serial: 019D273B376BE5AE2EA9B3DB2DC0480191B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
Manifest number: 188D
Signing time: Wed 25 Mar 2026 23:01:25 +0000
Manifest this update: Wed 25 Mar 2026 23:01:25 +0000
Manifest next update: Thu 26 Mar 2026 23:01:25 +0000
Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: TUKeiJ54LT70QZmSFJOIgSNj5GJG5e9U5aYTF1zVioM=)
2: 2pZ-2FjfKp_AUPJehyyyCmO33Hc.roa (hash: KSo6Uo4KGXQ+gy+hLjBUZoC/tbnGR8dO325Q6LPyilM=)
3: 4vyc44IoKKHchhCxJ7O1jQ8abqA.roa (hash: UQ4dJ25AUyuNJbd4tfu6FjtMtU5Pbfq3SkU6dc+KnyM=)
4: CvuWIkRHjp5wftfGLU8vOGYCRbc.roa (hash: gj4Tk/zdN+anVbu8mIUIWBYC8RgYdvQOlOOsAUK8Sdk=)
5: IRAfjWAlERnsxDrkVza8YXCUxl4.roa (hash: Ubtt3PSH8NxJ1HHW0Bmr9YJAFmecuPEr+JdwoJmMyLs=)
6: JJfaJkgSEBalqFcc3d6GPKEq5c0.roa (hash: FuHxoLmlLp5uuetTQ7lUzLqCBx0iP3lbv/wcUM9OYTE=)
7: Q_rrlmseqjc9c8mfs_9rzyd3284.roa (hash: GSzKRbWz/hHkNfc9qit79if8AoJkjbgwLaFILxum/nA=)
8: nkzcn1sgGDpbfyqNM00anSE1XXM.roa (hash: /+3MitTOfIJS1gt2shgI9n07vci+NIdPgsMA89TtpO0=)
9: qgc2BHITW3F3Fb1Nu0nXShoQLoM.roa (hash: CQpVzp5lW1S/T6Fu+MruSBubNMRYvg+fyjfJdrmJ720=)
10: uFIM9ORi0Ow0-T4N33qTox0ZbXc.roa (hash: xCkv3YPUvKqN5W2m/5NSb93BBA0dlEC1kEuar7tM8jo=)
11: vJzboGw4HmYyQSuIhf_kLLJ5mF0.roa (hash: LnBImqH9fDlrcbItpIt0qbjCXavrpNmtk6RTIorgw8g=)
12: wYZK_Wy3MKznm7YhZ7I4uynw0us.roa (hash: WAKcd6xIHnq5uvyKJ3Z0qcpHOOGNGSZAHs44HwFAzKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:37:6b:e5:ae:2e:a9:b3:db:2d:c0:48:01:91:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a
Validity
Not Before: Mar 25 23:01:25 2026 GMT
Not After : Mar 26 23:01:25 2026 GMT
Subject: CN=56de860ce9285323f7ccadc1547f6001ce03b2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:94:21:f5:e7:06:f9:32:8e:38:d4:ca:24:17:
69:e6:6f:ce:e1:e0:dc:18:20:09:42:de:bf:6a:51:
9f:03:00:12:f2:2b:91:64:0a:a3:f0:0d:66:86:7e:
04:06:d4:85:a2:28:5b:7f:b7:d9:a4:40:69:d9:ee:
0e:15:83:93:af:7c:10:e5:0f:ef:62:e0:bc:1a:cd:
80:be:f2:ce:fd:9a:d0:e8:f9:45:f3:c6:1d:a5:be:
4e:84:b4:af:89:7c:32:13:41:de:77:da:be:67:8b:
44:8b:e2:f6:81:7e:5c:de:69:35:d8:e5:0b:4e:24:
51:b0:dd:07:29:df:e7:7b:54:a8:31:a7:57:b0:1b:
1f:3f:01:37:7c:dd:0c:fb:04:62:9c:96:c3:8b:74:
9c:f6:17:a6:bf:73:17:fb:6b:47:1d:17:e6:56:dc:
5c:c5:15:4a:a0:6c:10:9d:d0:29:55:d6:b3:33:bb:
34:d1:a0:b1:cf:8a:b9:51:6e:ff:bf:51:7b:72:95:
c4:69:4a:e0:b8:f3:b6:06:6e:d2:44:09:e4:06:34:
a4:e1:6f:72:7d:15:f2:1d:88:05:ca:42:83:be:33:
3a:3c:dd:ac:d2:59:89:9f:bc:32:77:cb:85:50:45:
5e:d1:1f:1f:f6:25:64:d8:0f:44:21:2b:14:98:3a:
ea:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DE:86:0C:E9:28:53:23:F7:CC:AD:C1:54:7F:60:01:CE:03:B2:A8
X509v3 Authority Key Identifier:
keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:7b:4f:47:42:b1:6a:b9:9b:d9:a2:79:04:88:53:ab:72:13:
68:82:a4:df:34:18:16:d1:01:12:38:90:b0:81:71:54:49:5f:
14:17:ab:29:75:35:25:b0:e9:73:af:f1:46:69:ec:2b:f6:73:
8a:7d:fe:a5:d4:23:55:77:91:ba:e7:60:06:1c:38:ef:a8:c8:
33:3f:e9:c9:ed:90:5c:4c:e7:1b:cf:e6:ab:08:ec:22:ef:24:
1e:14:7f:96:af:1e:d2:d1:a9:9c:bc:f6:dd:29:58:c3:91:45:
35:a5:c5:ab:0f:d9:72:65:b7:61:83:4c:7c:9c:e4:ea:d2:33:
c1:88:ed:49:35:90:16:0d:7f:16:73:e5:51:0d:8e:b8:70:bc:
41:fe:94:c9:82:0d:b3:35:ec:30:8f:81:87:ca:d5:f5:ac:8f:
e6:a4:ca:89:04:3c:8f:81:f9:d9:83:e0:9d:ad:12:fc:48:62:
d6:ea:a2:da:24:c2:85:a5:c8:f6:21:5e:e2:94:97:0d:66:86:
df:96:66:e5:75:64:0c:3b:8e:07:94:ea:a7:41:17:df:70:77:
56:1a:62:9d:88:e7:d6:3d:54:91:05:fe:e4:c5:4f:71:43:6e:
dc:48:fd:3b:25:07:f7:20:ed:49:ed:b7:aa:89:2d:bb:ef:18:
fb:81:87:cc
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0nOzdr5a4uqbPbLcBIAZGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw
OGNkNGEwHhcNMjYwMzI1MjMwMTI1WhcNMjYwMzI2MjMwMTI1WjAzMTEwLwYDVQQD
Eyg1NmRlODYwY2U5Mjg1MzIzZjdjY2FkYzE1NDdmNjAwMWNlMDNiMmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JQh9ecG+TKOONTKJBdp5m/O4eDc
GCAJQt6/alGfAwAS8iuRZAqj8A1mhn4EBtSFoihbf7fZpEBp2e4OFYOTr3wQ5Q/v
YuC8Gs2AvvLO/ZrQ6PlF88Ydpb5OhLSviXwyE0Hed9q+Z4tEi+L2gX5c3mk12OUL
TiRRsN0HKd/ne1SoMadXsBsfPwE3fN0M+wRinJbDi3Sc9hemv3MX+2tHHRfmVtxc
xRVKoGwQndApVdazM7s00aCxz4q5UW7/v1F7cpXEaUrguPO2Bm7SRAnkBjSk4W9y
fRXyHYgFykKDvjM6PN2s0lmJn7wyd8uFUEVe0R8f9iVk2A9EISsUmDrqDQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFbehgzpKFMj98ytwVR/YAHOA7KoMB8GA1UdIwQY
MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm
LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi
ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtXtP
R0Kxarmb2aJ5BIhTq3ITaIKk3zQYFtEBEjiQsIFxVElfFBerKXU1JbDpc6/xRmns
K/Zzin3+pdQjVXeRuudgBhw476jIMz/pye2QXEznG8/mqwjsIu8kHhR/lq8e0tGp
nLz23SlYw5FFNaXFqw/ZcmW3YYNMfJzk6tIzwYjtSTWQFg1/FnPlUQ2OuHC8Qf6U
yYINszXsMI+Bh8rV9ayP5qTKiQQ8j4H52YPgna0S/Ehi1uqi2iTChaXI9iFe4pSX
DWaG35Zm5XVkDDuOB5Tqp0EX33B3VhpinYjn1j1UkQX+5MVPcUNu3Ej9OyUH9yDt
Se23qoktu+8Y+4GHzA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:02:59 2026 by rpki-client