
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
File: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json)
Hash identifier: ISbBnSAI7XJY3tsElrqwwnNFR/CpRwqqr2QgweR0o8M=
Subject key identifier: 6E:DD:BC:91:0F:33:92:9B:C6:76:AE:22:49:20:A2:3F:AE:B9:2A:56
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 019D25F118E026273E2F1ABA3BDC1B7C6967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
Manifest number: 12E3
Signing time: Wed 25 Mar 2026 17:00:50 +0000
Manifest this update: Wed 25 Mar 2026 17:00:50 +0000
Manifest next update: Thu 26 Mar 2026 17:00:50 +0000
Files and hashes: 1: 19E50qchIIRYPEcBaHq7sGG5wI0.roa (hash: eE5229153hExm9zLLNjIVvIWU28fOYiSgL3s6vOhycw=)
2: 97SNWyMUYRiDeG9n1N95AncRQnk.roa (hash: nI2lxusT43e2HGHQlJ+OS4ZlLDLuDOW3fSKQ9vYde5w=)
3: ARsNkmXZICw7mVOEEqaeLzW0NS8.roa (hash: HGEzOhh+K3s8r+6AsZZdfpNC/GqHLS7ExwsdeMVtoJI=)
4: Bl0qB9IHm1JVOHIHzIJOmcHHLGw.roa (hash: 5Sm32JyDwrhWc3vyfBWLEKgqGMIQn0oSGZgkbi9R4Ng=)
5: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: R0lW58pmD2bk73+RCr58jq/k42N3DUjucayWQtNWNMg=)
6: LkfXZqcx7G1RdcSSUX4VqE95iT0.roa (hash: J2g84l93sai+C1V8lXRu8vRKenlTXlmBdpYyXxL3Hmg=)
7: M4q9DG7_7tEtbxxsWBKXQtxGt7k.roa (hash: l1YoZfcF40wNjjNm0JW8TrQnl6c8teto/VumFdsbKYw=)
8: OdLu_HTcQvIodFBv5wrW_bitNt8.roa (hash: Lh3p2rmlivj/4TCynBLAARFyup/lYvxOvhDJIyFzt24=)
9: axcATIOsEbV9qEHFR_BgJI8InRc.roa (hash: nhsbsi/hDL4AYgein99xctG644QzrEf5lgLkARRpWaU=)
10: ek7FuUU5QqZtmW4c2a1Bh_Nvze0.roa (hash: fcj6iTqUPy26aGGnXwajRdM6fbwzNnBSUbT+6zg93yE=)
11: kz59O-9rHRK3If4NGher4WpZjHE.roa (hash: AakaTSLsPxjlp4i8uprsoV1LtGwgVY7VSh5IFGItGZA=)
12: pmvx0wgSZ-e6Csxblz8UNG8GLh4.roa (hash: HlDfShnHsELTO0EoU+/TscI7vJQLc2cGhli7/Qj3Qo0=)
13: r3dW9lAqMZzJ4q1ECWLy0uvljys.roa (hash: Ydp4ZLQaFBxEhvTauDjxFwFAUVvVLiZ8FUXZtyhH9lE=)
14: rHkDmoeEUk_UKkDPiPl2ZLunlP8.roa (hash: N4gR2twlyF+k4BziCYf7gyFcmHQBn89bTMP/4cwgXIQ=)
15: rjyccDgFllWxfeQb355Lp_fLXxk.roa (hash: tQCLpc6R3fwHVeq06ryeCzjgqeU2l9Z+qX3z3qLohNI=)
16: vndxFTa05fIa6-yUCZPvIBrR_Rc.roa (hash: yxkn5B4HUiA8jl1lZWZyV1zdTXR6L83beQGj3WTktO4=)
17: xiXQ7Ju7uKPaOZAIfjnaz5WFcMU.roa (hash: iBuZkqTWmF5qEyHqfDnsRPYzPSipq5gF9EuzoGnhAUE=)
18: zpnZiHFwy0LGsQziGTNhSdlz9Es.roa (hash: xFQHjKoar8tgV6VJF9byW8WcGGZiORzqntKof2KtHCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:18:e0:26:27:3e:2f:1a:ba:3b:dc:1b:7c:69:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Mar 25 17:00:50 2026 GMT
Not After : Mar 26 17:00:50 2026 GMT
Subject: CN=6eddbc910f33929bc676ae224920a23faeb92a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bc:d4:b9:53:de:d7:55:39:ea:27:7a:22:d6:
56:42:56:d6:4a:eb:7b:15:17:28:ac:a5:6f:30:5d:
e2:48:0b:1e:02:c0:ee:a1:b9:48:44:9f:34:3f:ea:
ce:55:84:b5:4b:c0:43:77:50:ab:21:be:ad:6b:5a:
a5:2c:d8:8c:a4:ca:23:b5:dc:9f:2f:db:ab:b5:1c:
47:90:3a:23:78:a8:c5:ad:0e:d3:a1:ef:06:a8:a9:
b9:ad:6b:f1:a9:12:aa:79:32:e3:e8:af:ae:11:09:
25:57:5e:aa:29:20:67:b8:7e:c6:27:57:b3:0e:11:
84:b1:6b:32:5c:3e:74:7a:10:ef:a6:a4:b5:82:df:
ea:68:dd:96:19:a1:54:5a:df:82:4d:af:8a:7a:5b:
7d:c6:7a:c6:2b:e4:ee:37:63:17:3e:be:c9:f6:21:
99:9d:1f:30:cb:e5:a6:81:83:68:3a:fc:5d:4b:ac:
61:e6:2b:05:47:17:e3:c2:bb:4a:81:b2:40:d3:92:
92:20:56:74:c8:09:f6:a2:9d:31:6a:9b:6b:52:cc:
8f:fe:32:de:ad:17:34:31:be:1e:04:53:d4:7d:50:
de:67:6e:9e:ea:f2:e4:d8:33:50:e4:60:2f:04:0e:
ac:2b:49:e5:06:d4:d7:3c:21:3b:26:e1:01:c8:07:
f1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DD:BC:91:0F:33:92:9B:C6:76:AE:22:49:20:A2:3F:AE:B9:2A:56
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8a:b5:9f:e3:08:a6:2a:5d:ca:4a:fb:6b:9e:e0:30:eb:dd:
8e:2e:64:4a:aa:32:5c:da:33:8c:61:93:b7:52:08:56:9d:f1:
7d:36:17:3a:be:5e:5d:00:ef:93:7e:f4:b1:6d:c4:be:64:72:
34:6b:21:e3:8a:2d:a2:80:1e:2b:d4:45:f3:1a:ae:7d:aa:e5:
2f:49:1e:34:8d:ca:f8:c5:22:fc:21:c6:f3:78:b0:86:8b:23:
17:a1:04:e5:46:1f:04:38:e6:e5:20:a4:63:32:b3:4a:0f:1a:
a2:99:1b:87:ac:84:d6:52:9e:bf:bf:36:5d:40:6b:b5:6a:ba:
58:13:17:5e:a7:38:c0:89:ae:0e:33:15:22:89:e7:68:71:24:
00:a2:0d:96:a8:0b:1c:bf:2e:cf:01:4d:40:06:3c:a0:b0:ab:
03:42:f1:cb:74:07:f0:51:08:d9:75:6a:f2:1e:a3:ea:9e:6f:
8e:cb:3a:3b:a0:ea:57:69:93:cf:dc:79:32:3e:aa:2a:5c:05:
d8:d3:80:39:c9:cf:a3:04:ac:47:d7:ec:df:2e:ef:8d:7a:f8:
b8:34:d8:a6:66:5f:55:94:01:73:25:aa:fe:96:8a:30:a0:85:
be:90:39:7d:d9:70:fd:c3:5f:a0:85:c6:b6:16:47:71:f3:3a:
ba:86:64:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:25:30 2026 by rpki-client