
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
File: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft (raw, json)
Hash identifier: cBXefKcut5u9Zgjsvd1J0XX0qtQtwbgfP2ysZ2rG96s=
Subject key identifier: 4B:37:7B:47:49:B5:C4:D9:A3:D0:14:49:33:B3:14:FD:87:C1:1C:59
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019D28BB9493C12FEFA66D9DAC275EF5A47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
Manifest number: 1983
Signing time: Thu 26 Mar 2026 06:01:14 +0000
Manifest this update: Thu 26 Mar 2026 06:01:14 +0000
Manifest next update: Fri 27 Mar 2026 06:01:14 +0000
Files and hashes: 1: 3i7eecIYXJFMtWbTomoMld1jbsU.roa (hash: IKHXGLydTQAG9uvsO3wqN1AT0T0tKUnVEdCSkS/dVQk=)
2: 3zPWSVi1xKNHgi-DcSpqaMulPAM.roa (hash: XmSVH6OWOK+57jQiUpzRVApK787x/2+FteNaQECymcY=)
3: 5SMwrN_wq7GbihxhXj3Wp0-r9Iw.roa (hash: rztDOlgxHtA1Pu/RNy1ezx+YrSzDhk4zBlnVU+gOf/g=)
4: 6wxp6D90PbkCxonPP-7ItR_YqfY.roa (hash: /lg76dYtxvJCPKRCwUkyQeGdGXsapuk2HDK2CHSLQQA=)
5: 867DHR_gPpsXfR_6NxjJjeTNrfw.roa (hash: TRrByCoKZXdTUeNEKq7vGJkpkob7vYLVejRCbzVB1kQ=)
6: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl (hash: XYQYRMZzY/YoNfJFQIg8ILKqZgEPV1d4FnNuzKIXp0o=)
7: 9xFZf7INYLbCIzyIf9b3P8fIOc0.roa (hash: /1LZV84DzzmiMTI58aVYXXt0WNKI/eQJpLTcNCvbGck=)
8: Awu7K6uBqTyYqPynAIVRK-5kPm4.roa (hash: 7TiIWybHXRnbv5hE65euWBGO02DixC/YO8jfz7Nss8I=)
9: CaWkjFlDf_GHD_D0djsNXKtYuE8.roa (hash: o86xqFgz878m1TntBnMgIpo2h0QiuhFjerPYUxCcs3A=)
10: DUTgV1bA9_o5dKe8lemDWjvMEEE.roa (hash: gYJWfDKrmLidy0VIroB1npsg2xaP97yBGOTB4byJG3o=)
11: FFYvXG3A9UDJhsj0-YrKuleDeM0.roa (hash: v3ZUhVy1LRa8cnJ36ehyxwdGBypz+FvkxBuOalRK5yA=)
12: G0j4IoE-ugCMEr84DNMqH4xjHZw.roa (hash: NdFWvMVet+G455uF6ZrnwIrwjrfOSjTkt3TcUmOzIEY=)
13: IkbW3p7UPv8rk58pgNjSuxqf1sA.roa (hash: 6macv08vdsEcfjTUw6WLKYaZ1q5waPGq5JAJEmg9ESw=)
14: JlzUlUHXjW5zqvwixAy9oMWnTdc.roa (hash: AmbuKHZkWKwTlajCf56DPydst/tN35Tsh9yESRfKx6A=)
15: On2KNHxJggzhj5AgXK5NbPHrL2Q.roa (hash: fsSPQUeJYyWLXiz1hpLry6K4C/Imk5T/lJNXRxqJKA0=)
16: ZveU_Vqfn9-Be4p3ztmtZTlHkhM.roa (hash: /KDFOVm97hN+qDZV4DOVh7izdesZzp1DJOCDSbno4BA=)
17: _EPwTpyXTdklr6rbc2bFD4AKcjY.roa (hash: mv8Zo3ebEee5w8qs7cTujP3otIfg+5OcbkXbPPRyelY=)
18: b4gApv3V9WNuH1tUYB6hLsjX2Mk.roa (hash: Gl55nIcp7Geh+WGb27hWRSt+zD+uJeV75P0qyXtzqOc=)
19: bnpFISkHVWYEcEO5XwuCPj0u3m0.roa (hash: nd+DkS58Y5hISuLgopesw5jR4eTyK7cGl1zOb/iq1rE=)
20: derjq_a2xULSiq0hLt8SXBP15vM.roa (hash: OWg/eoTyibIEUVgKcv4tF2DTQ0GhFdaM6Rv6pIMddZ8=)
21: eHw1Dv0-iPz6cBJwpcSTNw1s2DE.roa (hash: dU4EZvdrDYCqFvrEmWTYqkLKWomor5VqWMAq1E8iu7A=)
22: jukzqBN3MLbeKVI2HbGH1M6Rq9E.roa (hash: 3VyrLTv5msCiOqxXAT5r6HeXGSHnowkLXALYkydr0XI=)
23: k2Ju4abbP5m9FcP_TcONvNialGo.roa (hash: +xKSaZxzFTvFYXFzopdW+GeQg55zpXmLh6yFWO2T458=)
24: kv8EY5Ye7Eutwf1Db0UJNIUPGSA.roa (hash: RWKNuZDHGzomFz/Fugk4epNi/zZaBPNtfDabOwz8lZM=)
25: mu8sewjnHs63ljc5EPin04mGuqc.roa (hash: Nlly8/HRUi2DmuSutAUb+7rXqXjB8gC4wwHwf9Fq78k=)
26: p0F1Di07cfHgVtNuzv6FJ4iFClI.roa (hash: 9lY1NiQxftdsmh+IAe0uysjcwZzDj+ipCzGUQqD681I=)
27: sstchpp41wfR36zmN_VppKaWZCM.roa (hash: BT2ePRQ519c4Xbc7A10/SCSBxkC+28CQt52Y0dXyeNU=)
28: ta7RNijMrlT7XLwISB-DzbnGBEA.roa (hash: htdQ/B3zavFvNHE8jCWCCL+qsSOUQlVeq0UkLWAcUbs=)
29: u7nEbY5NwbL5HXW0l-V-8pl_64s.roa (hash: LrWkvx/a3seM8ivTnZCNGMGBOaWSwFKUegrXwjkMzAQ=)
30: uCRrF5H6MO65ZSaMccf4F3ImvvI.roa (hash: wGlRyFIjCEhLLNtkuVs0yaGsRVeHljW+UCOqu6XTaik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:94:93:c1:2f:ef:a6:6d:9d:ac:27:5e:f5:a4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Mar 26 06:01:14 2026 GMT
Not After : Mar 27 06:01:14 2026 GMT
Subject: CN=4b377b4749b5c4d9a3d0144933b314fd87c11c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4b:80:89:20:7f:08:ce:60:12:2a:b6:a3:42:
9e:58:d2:cd:ea:8d:55:f3:7a:e2:27:62:ee:8e:be:
14:46:2e:28:63:77:68:e8:c8:0f:9a:9b:81:47:dc:
83:ac:b2:25:44:30:4c:43:2a:2e:28:9b:a6:08:9e:
14:95:ab:c0:1c:21:c4:53:73:92:8f:9d:72:1b:95:
69:2f:92:3c:bb:17:75:27:d7:74:f9:9c:fb:3f:35:
1b:77:f7:9c:75:a9:dd:f9:ae:1e:e4:85:5c:0c:30:
88:19:b1:ae:28:46:70:ce:3c:fc:bb:a4:30:c5:6e:
ee:54:d6:15:29:d7:84:90:ff:df:21:b7:92:50:8a:
65:15:55:d3:44:8f:6b:92:e4:94:5f:5e:b5:21:77:
02:fb:9d:02:76:1c:84:7c:97:e0:34:24:b3:e1:d9:
50:12:b9:b0:8a:41:3b:63:c5:40:ab:1e:89:fd:c6:
cc:04:2f:0b:72:48:e1:92:2b:71:63:16:ed:15:91:
a2:50:39:83:9d:4d:87:0a:3c:c0:56:e0:09:81:d9:
0d:0d:67:27:6b:e1:37:40:6b:73:f6:f7:39:a2:86:
46:a5:45:c4:e8:66:92:51:5e:5f:4f:a4:33:89:4f:
b6:a1:db:6e:e7:78:08:b7:3e:53:fb:a5:a0:95:69:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:37:7B:47:49:B5:C4:D9:A3:D0:14:49:33:B3:14:FD:87:C1:1C:59
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:38:be:bb:96:f4:f8:40:a9:f4:92:96:7c:00:c6:99:33:0a:
df:bc:bc:7d:7c:cd:db:28:4c:89:69:ef:de:8e:82:88:85:ce:
fe:1d:4c:ee:e3:32:b8:03:23:1e:59:23:f9:36:5a:62:2f:ec:
09:5a:be:f2:cd:23:8e:ea:75:61:74:89:e5:fc:bb:de:99:ca:
04:4a:82:30:e3:57:78:2a:87:e7:c5:6b:1b:cd:34:63:c1:57:
77:0e:91:88:b4:e7:c1:44:4f:55:ac:b9:42:89:47:b1:c1:80:
e5:24:d8:44:1f:d8:04:c2:b7:8c:fb:66:72:39:5a:4e:6f:6e:
81:a3:9f:0d:c6:6d:69:72:36:5a:3c:d5:95:d8:a4:b5:ba:d7:
24:f6:ac:51:d1:16:83:3a:25:89:83:ad:f7:5e:54:ba:f8:0d:
d8:9f:70:c5:a6:41:c4:4e:f0:f2:68:30:1c:00:f5:3a:38:ca:
87:81:56:bf:a3:ac:33:ed:fa:11:1a:57:71:7e:94:6e:5c:dd:
f2:e4:19:fb:6b:90:e6:cd:6a:e5:59:75:27:dd:97:71:2f:0c:
37:62:30:da:71:cb:0f:17:b4:53:ee:bc:6d:61:2d:ce:bd:6c:
01:4f:9f:ff:57:b7:66:29:7b:99:1f:da:66:7a:00:e6:dc:a7:
1a:8d:08:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:02:41 2026 by rpki-client