
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json)
Hash identifier: ANRt/w4VAV9CYE9GDYZa8BTT+z/uV3LD0ymS/Kyvwyc=
Subject key identifier: 5A:62:0A:C8:3A:A3:94:56:78:EE:68:AE:8B:3D:B0:93:C9:42:C4:68
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 01A1DFF181A7CA1B9E5AE75990F7695733C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
Manifest number: 0923
Signing time: Sun 15 Nov 2026 16:01:48 +0000
Manifest this update: Sun 15 Nov 2026 16:01:48 +0000
Manifest next update: Mon 16 Nov 2026 16:01:48 +0000
Files and hashes: 1: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: L/KPNWYtf3uw7mjCDyV/YYO8paupQZJY7ZULNelU7Q4=)
2: 3MMGuyxk5BA1h4yKFwGuekYBWpE.roa (hash: qDDPw4rjqe8Of6FqTmZ8vNfrRu70pioyOFhkznkxbn0=)
3: 7PMwWghG1f2GH2kcgJJT1T19mKA.roa (hash: iSWM8zD4dnBfc8rm3hdCfD29wpDU7MXGImntX+CzTys=)
4: CUZDkD-NcFvyMKKqxpqKTImWldI.roa (hash: BjgaQINh/o8BqluKWpCRQpHRBGijPayFIzTWLEZZ+ZQ=)
5: Dhrq3603FXAC1wqjo20wzUmr4F8.roa (hash: 93F+LmWkBd0KITwFzxwwnm7wh1Nm582E0rUj/2gWiKA=)
6: DlLXddAis5e2NiYpDlPFgCC2fqQ.roa (hash: wChHj1a1SOAqKO2XbDKNiJzmDLWZ4VK+PUQtszQXCaA=)
7: aoX3qgSrCGpVmGI2-sNdQlbBEmo.roa (hash: fUASGNwLnomXxmckWPpEyeY/fBQ9vTiFVyQieAo28z4=)
8: cojKfvUL96n8v0NW6xv7i34QuKg.roa (hash: lYPKoP4F96eul1kxPLkPqkS5F4CgrEIREjfk+V+jg3o=)
9: f-9ciEqv18Kub9fxi8gMgTEDiN8.roa (hash: ys7Se75WP1iZvGd8oeyIka2FlXVNvmTKA8g4Bz+pUFE=)
10: pPL6_ILH_OSb0uend9BsYY1M5zM.roa (hash: uPRcSj9Qet/R5RDAAlJ1xCgadEw0HnsrDGUuZztgzUc=)
11: qse_CjeAhZ5mrJaaeqQbXdzwq6c.roa (hash: DcaCDcXxQuFqUhYc0T6gyos8/cyyoYS+q0uMnwfEmhU=)
12: qvL5cNpCo_XaFCNykh7Gx2HPj7A.roa (hash: Je87v5hgNV1x62aPiR7j/Cjy7ey6GNmVdBbyWoayWLE=)
13: rtaxspuDF4uli6my-kG3x-CfzyM.roa (hash: Mbr6HPYPHlUpdc2sSsGgV2VBSnLTCf311AToZ6BeZWw=)
14: sRTNLbJ3g2jrnoN7xO2uBbfWguU.roa (hash: 97xAwvGhhXW1GC5fGvIVMkcoGK7MfJbMcwrs0H6Prc8=)
15: sSEuPuJKSwvGPl8OYtUAbNgjLFs.roa (hash: t6MnFRdD+DMOOopxl5hauoDky6UirAHK0zqLM5bjQWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:81:a7:ca:1b:9e:5a:e7:59:90:f7:69:57:33:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Nov 15 16:01:48 2026 GMT
Not After : Nov 16 16:01:48 2026 GMT
Subject: CN=5a620ac83aa3945678ee68ae8b3db093c942c468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a6:25:4b:1b:06:4c:7f:83:d9:2a:b8:d4:99:
31:0f:e1:87:70:b9:e3:5b:26:1d:da:d5:c2:be:06:
1d:0c:15:f6:0a:01:ef:86:04:ef:1a:51:56:29:5f:
49:ff:4a:2c:c7:11:c6:20:34:a2:1a:51:eb:db:f8:
1a:a1:77:d3:84:16:f3:b8:e9:a4:10:30:62:a1:c3:
38:6b:81:54:24:a3:77:e1:2b:34:0b:d6:11:ab:92:
24:66:2b:5d:ff:65:af:28:e5:ce:02:ed:df:1f:17:
cc:4c:e5:92:7b:38:e3:df:ae:f9:2b:6b:de:6b:5b:
27:a6:39:cc:02:57:35:62:84:c2:78:e7:c6:4b:39:
b0:4d:f2:f2:47:df:b3:f5:80:7f:ae:e7:e7:f5:3e:
db:8a:08:ee:65:26:b8:04:ab:68:5b:6b:e9:8f:4e:
fb:db:03:03:8a:e8:d1:9e:80:c2:18:ee:a7:78:c5:
81:7f:54:9c:cb:73:f3:ca:c7:66:16:fb:0f:48:fd:
f2:7e:a6:b7:73:15:d1:d3:d1:44:05:24:88:0f:54:
47:07:e1:b2:bf:35:d2:90:f3:b7:32:a3:0f:93:c4:
47:7b:5e:a2:22:02:49:0a:e5:2f:ef:2f:ed:e8:0f:
e2:cb:27:17:98:33:39:c3:e9:4f:70:e1:cf:e3:be:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:62:0A:C8:3A:A3:94:56:78:EE:68:AE:8B:3D:B0:93:C9:42:C4:68
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0f:65:97:4f:11:f5:6d:0c:82:45:4a:02:b2:84:24:39:e9:
91:28:25:c6:3f:94:7d:70:86:89:e5:5f:56:d6:7d:9f:b4:83:
b6:02:6c:02:ed:9a:a1:ce:9d:8d:8e:c5:fb:48:c9:fe:31:ef:
5b:81:eb:40:63:d9:09:dd:37:60:bb:01:54:d8:f8:97:fb:95:
2a:d2:d0:b6:09:f7:3f:aa:df:f8:1c:47:d1:54:be:ce:87:62:
7a:95:79:15:b3:b9:0f:13:56:9b:76:f9:ac:fe:3b:55:3e:4b:
85:6b:c4:93:b4:59:d8:f0:94:8f:32:99:9b:e5:cd:01:7d:43:
6a:8a:15:0a:47:2b:69:b5:41:f8:0a:6f:6e:a2:36:d2:9b:56:
2f:af:3e:73:83:97:b3:32:09:e2:0e:01:b2:b7:01:96:75:8b:
b5:ab:e2:4b:79:59:48:c5:7d:91:8d:11:e1:4e:7a:9e:e7:5d:
55:a1:34:bf:d8:ba:a0:96:ef:6c:9d:e0:79:a1:75:51:ef:0e:
24:f0:25:58:6d:29:89:77:b1:d6:1e:e0:05:34:ca:73:f5:39:
8c:dd:13:c5:53:48:5c:20:71:84:2f:5b:58:00:d5:a3:41:6c:
17:6b:d1:bb:cd:e5:b0:e4:cf:2b:54:1e:d8:52:4d:14:a7:f0:
ea:40:b8:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHf8YGnyhueWudZkPdpVzPIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm
MDIwMjAwHhcNMjYxMTE1MTYwMTQ4WhcNMjYxMTE2MTYwMTQ4WjAzMTEwLwYDVQQD
Eyg1YTYyMGFjODNhYTM5NDU2NzhlZTY4YWU4YjNkYjA5M2M5NDJjNDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaYlSxsGTH+D2Sq41JkxD+GHcLnj
WyYd2tXCvgYdDBX2CgHvhgTvGlFWKV9J/0osxxHGIDSiGlHr2/gaoXfThBbzuOmk
EDBiocM4a4FUJKN34Ss0C9YRq5IkZitd/2WvKOXOAu3fHxfMTOWSezjj3675K2ve
a1snpjnMAlc1YoTCeOfGSzmwTfLyR9+z9YB/rufn9T7bigjuZSa4BKtoW2vpj077
2wMDiujRnoDCGO6neMWBf1Scy3PzysdmFvsPSP3yfqa3cxXR09FEBSSID1RHB+Gy
vzXSkPO3MqMPk8RHe16iIgJJCuUv7y/t6A/iyycXmDM5w+lPcOHP477L7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpiCsg6o5RWeO5oros9sJPJQsRoMB8GA1UdIwQY
MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt
NGI2YzFjZjlmZTRmLzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm
LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQ9ll08R
9W0MgkVKArKEJDnpkSglxj+UfXCGieVfVtZ9n7SDtgJsAu2aoc6djY7F+0jJ/jHv
W4HrQGPZCd03YLsBVNj4l/uVKtLQtgn3P6rf+BxH0VS+zodiepV5FbO5DxNWm3b5
rP47VT5LhWvEk7RZ2PCUjzKZm+XNAX1DaooVCkcrabVB+ApvbqI20ptWL68+c4OX
szIJ4g4BsrcBlnWLtaviS3lZSMV9kY0R4U56nuddVaE0v9i6oJbvbJ3geaF1Ue8O
JPAlWG0piXex1h7gBTTKc/U5jN0TxVNIXCBxhC9bWADVo0FsF2vRu83lsOTPK1Qe
2FJNFKfw6kC4uw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:45:11 2026 by rpki-client