
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json)
Hash identifier: gFVeBDDEbMIiTt4uMOo9o/5nce86bPl9Ab30wJeL5+w=
Subject key identifier: EF:C4:01:A6:B9:86:D4:CF:C4:6A:20:BA:A3:5C:A8:36:AB:CF:BF:0F
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 019E1EA2DC95FCFAE1160CF13BB4D51C7747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
Manifest number: 1911
Signing time: Wed 13 May 2026 00:00:50 +0000
Manifest this update: Wed 13 May 2026 00:00:50 +0000
Manifest next update: Thu 14 May 2026 00:00:50 +0000
Files and hashes: 1: 7xRPjWRLv-aOK3RWvqXG2c8wv2Q.roa (hash: LEykf9FAgj9CLpBSSjkYwOuUKW3pC3jsUO4x78cVavQ=)
2: Aom3Kxh_ZfDKRkP48Wo8nXkLNo0.roa (hash: KpxhStVMF2wImp1UC0ve4GmaBPQ/XlCf8ect0VpLF0I=)
3: Fgv2pLB1IP6lLeoMxaYjqQ0hVKk.roa (hash: ItGk7pZicra55KKf6s/67/p+3dH+7mzo9kuzCaFglZg=)
4: I-GxtlJhzGYYRg8Wgfp9tQaL5Ag.roa (hash: JBs1U9vJlSB2FdEOWcBpaJo3IbbOgjp9v20dwFHbjXo=)
5: I4kWLJQcJIN4yvOhIUBxDHfcBXY.roa (hash: FOUTe4+/Wcl97bGV2vBsOsKmLc6qFDjUlYthAxSgRb4=)
6: JnUH1sslDBZ7lrgWYQqW6np7d2o.roa (hash: KaaZsj+qH9qEx82FJor1KbhmmMbYUaSEVs/hy4FDH5w=)
7: Ro8LRBlcuDbCiK_y93exT9nN0Eo.roa (hash: QtMlmeOF9Qrugbq+UIrG5kQoEulUbPI2vyELAcoz11Y=)
8: ZM7IXq1aVoF0HyrEjDEjF1ACgTU.roa (hash: e4ID0eKCg4EYXOel0bb4GNxbGHMhnw/HXCfepegWgN4=)
9: iDjssrdC0F5mx4tgjWxfoS4pCmA.roa (hash: YIXLFZ5HUqpRsZLVA3j60nXxyiZGaGAkhiCCJd+/5OE=)
10: kiAttdnigrAzCEAY7KtA_Ptxn70.roa (hash: EUQsR4w7EieqixHcTYy9ql09+zYzH1DmFw+qVviBPa8=)
11: l85mqhkuv7xdnX1yM97W1ykxfdU.roa (hash: btZjRqpdMDGd0trKva0fZ2+uBjhpzizkMnsbZWSCXS8=)
12: wU7UXJTytHy3PiMHcD7sGscj8UU.roa (hash: +SsUnX48TKNad5n7G2zrkmhLQEecIJqG1W5xpOPLtwE=)
13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: HG3eKNdhTovf9fUccBAzK9i3XruYnJauIb4ocno22aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:dc:95:fc:fa:e1:16:0c:f1:3b:b4:d5:1c:77:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: May 13 00:00:50 2026 GMT
Not After : May 14 00:00:50 2026 GMT
Subject: CN=efc401a6b986d4cfc46a20baa35ca836abcfbf0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5d:28:99:6b:22:ff:9f:fe:d1:a0:5a:08:9e:
c3:88:98:05:c6:01:62:e2:75:1a:e7:02:09:07:32:
91:15:67:96:d0:79:1a:8a:2e:93:f9:cc:e4:64:92:
20:1d:44:f4:16:c9:fb:97:9c:a3:ab:a2:93:cb:97:
21:be:7c:07:c5:f1:3b:bc:fa:2f:59:a8:10:02:ae:
3e:b4:79:50:df:92:a4:2f:34:b3:49:9e:25:ba:37:
91:44:96:c1:90:c7:2c:3f:61:db:82:7d:6f:2a:0a:
48:8a:7e:d7:ae:b7:2e:ab:d4:1e:f6:2b:05:d7:09:
a7:5d:46:fa:93:9d:22:9d:94:6a:9b:00:22:18:1d:
4e:56:bc:fb:fd:ec:b3:98:27:8b:12:81:49:24:ec:
d7:c2:c5:d4:08:48:24:79:a2:c7:c3:3b:e0:09:39:
c6:42:dc:f0:8a:7c:f2:ab:b1:6d:1f:bc:f9:5e:6d:
e3:78:7f:7f:30:eb:5c:f4:b7:65:9b:25:e4:f7:5b:
a0:19:40:30:12:2e:a9:cc:81:f4:66:69:ed:82:cb:
18:5a:6a:2a:99:8f:c2:fe:07:00:ba:8d:55:20:45:
48:ea:98:80:7f:a7:f9:e8:f5:ec:54:b5:69:9a:54:
35:b7:09:04:bc:4b:6e:28:8e:e7:c0:b4:28:6b:b8:
b5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C4:01:A6:B9:86:D4:CF:C4:6A:20:BA:A3:5C:A8:36:AB:CF:BF:0F
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a6:1f:d8:da:f4:0b:92:a8:4b:2a:39:e9:f8:9b:9a:fe:8b:
f8:9a:e8:eb:ee:63:3d:32:e0:8c:df:4f:37:70:df:6c:27:21:
6e:f4:00:9f:85:4c:f6:bd:e2:ba:0f:eb:9e:4b:f3:45:fa:eb:
90:22:2f:80:1b:a6:6b:16:57:2a:26:fa:36:26:4e:18:26:66:
19:9d:41:4c:fd:2b:bd:c2:0c:d2:82:68:2c:79:c5:d8:79:99:
bd:a9:c2:18:a2:63:ee:46:0d:a0:63:ed:da:e1:6a:60:bb:8f:
c6:a7:0d:bb:2d:8a:6c:0a:fc:e1:f3:2f:be:ca:d4:cc:89:df:
8c:07:b0:f1:8d:e9:03:2b:bc:54:52:61:ce:20:dd:3b:ac:3c:
da:a1:04:6f:71:df:69:59:12:8c:5c:e8:96:9c:aa:14:fc:f4:
a3:ae:91:a0:63:ac:fb:bf:8b:06:1e:4d:4b:9c:27:a0:f7:14:
ad:4e:ef:ca:6c:5f:a5:a6:06:af:0b:fb:23:99:10:bf:7f:f5:
cf:76:0d:72:ee:84:85:dd:e7:8e:c2:ef:45:95:d8:dd:51:09:
05:e9:63:59:bf:cf:5a:eb:a7:9b:b0:0f:29:05:de:5c:fe:84:
f2:1e:18:81:17:2a:56:66:e4:1e:68:d8:4a:ab:d3:50:b3:21:
32:16:4f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:21 2026 by rpki-client