
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
File: pTmv66zomajuC7T4u0R1_iR6FSg.mft (raw, json)
Hash identifier: x2/xjusVMTOS1ETjPrp0bFKx619i5YXKf6ARvwHfk5I=
Subject key identifier: 90:E4:AE:E6:0D:A7:97:A0:6E:16:4F:8C:06:30:A3:85:3E:86:AE:71
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 019D2AAA01F5D3EBC2C77171C536FC232FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
Manifest number: 18DF
Signing time: Thu 26 Mar 2026 15:01:17 +0000
Manifest this update: Thu 26 Mar 2026 15:01:17 +0000
Manifest next update: Fri 27 Mar 2026 15:01:17 +0000
Files and hashes: 1: 1jhK6FlZl5hM4Uobk038Kp_qa2Y.roa (hash: 2WoESQPg3Jk+4IXMvTcODAWwogRB6i9rlzqgm3VM7XA=)
2: 6-YwzCAmAdgyKEPBYShhBhIBhnM.roa (hash: +DLsJ42mB+5gKA0FbQs1ttHoaiTNZPqKV5tU9tKbma4=)
3: 7QOSRsUzrv4e8s57xIcce-8fjU0.roa (hash: 83cvs1mHf1GPrHopw/PC9gQSK7E7muVUfyT6Z0+/0KU=)
4: FK7M33h8PneimbbBwlzPtI7UGjQ.roa (hash: aNLGPczAzOxwP3MWrRV4AkrfcQXY2Y+aKOj5IkNZYfg=)
5: ICj8Fi6t02YaA-jCLwPcHN6uGqc.roa (hash: 72ZO0pvNsCtTTKokGnbOowoeWxeA2KxrecfoCsCrB8U=)
6: JD8IpoXqXzIC8vLaBRunpCPEQvU.roa (hash: JEXzDk48fkmrTJN1DyidrVTKmnWcqnbDgWMrAk17GAI=)
7: NFcs3_vtK2cMwEx0AZMkAW4Wi_M.roa (hash: mVHm7YHZkLILOmiDQhdBTk3AqxRLfPypCLO+wiwEnVg=)
8: PVtDvoKDWPbDlmCkVv9Kze2YHLE.roa (hash: sDMl3vZ84jZNLAogEKfEV5Ug2moZQP95H4adBk9Pww0=)
9: SvjLT9N3HGM9eSSMC1QfjoPljVw.roa (hash: 4bE4rSoHbeIVjc0OGc/qn01kC7j9LOwfYNpRhaA8hro=)
10: T65RDGY7jOSroAgPwqBJYPhLD_4.roa (hash: /88fIxUYsWhK6bpbqKiBO/jzJhKYSoaaRWLN0hL9Kf0=)
11: U9vArcy0YpOB_iqMTyKbcwrLvRA.roa (hash: +u8ovOiThImcmMsR0qMCOkY1PV8NHXu8hOW71e14rb8=)
12: VgXmiw3JjrXoBSIzlY_DaWaWxSM.roa (hash: vfRsWV2tt63Zp2pKLXvqyz9hs71tP2T2P3y8dqOioMc=)
13: VmHJNehSaSjf_RY01rDz-LkKqEo.roa (hash: 2JsMgajit3cNjj0KEde3MujRcO1NdJZZV45oREiLK88=)
14: WB4MjGibZE7UPAKBKppI7mbtykg.roa (hash: uodhr4uLTH3uG2YqIrdc4iaiOv2sYyQ2pQYPb//WMSk=)
15: X1AMpALcXqAbWZTLQdVQDPCOaVQ.roa (hash: SigMHPmGWyXozax3MHPbaNs+MpPR14/hwXpyD5vkCnc=)
16: amjmGxaJIouWoE6HVWZtWe57bQM.roa (hash: p//cUb//yTdGGVAL3sZJcljerwKjDHHVgX3jo/mQg5I=)
17: lKxpnXLQNARfqONah81rGmtc86w.roa (hash: eC37YRWZVPznB3X4x4RduQ4G+eGvRdFwA+NZ4sUf8CE=)
18: pTmv66zomajuC7T4u0R1_iR6FSg.crl (hash: NRijTbq7Kq22MHJCCy27vMhaYbZqOpqyK8urYArmwD0=)
19: ra6EqpGuSemlaKju63quMj14eoA.roa (hash: 5jJE3CEsbl598h/zzOY8ksmm5yxY/xcgelTxwbVAr2U=)
20: rtWyT0ydn4TbKiT2WPrlr1PKiuk.roa (hash: RNjhWF0V8FlD5sEBigcfklZ1Ji8x5NrJUS7A6XO++0E=)
21: wVhr9fNebt7ao_oIsxRkpb1DYtU.roa (hash: Zq5CrZMlYnhfNYKFoV1YjUW/LX6JKwqLSmhoDdjZDyE=)
22: x07d8_VNSnI0evnxPpkn3SJAFY4.roa (hash: gSJPBpsS4DxCFyTg3NHyQead7Z1IOT6crgOT0rvN994=)
23: xN-iH4H9eMR0rlQa8wdhMf2l7I4.roa (hash: 1fRI0jfHRH/HGV3lsPgwdyCxPSzmPkzersGfoqaooYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:aa:01:f5:d3:eb:c2:c7:71:71:c5:36:fc:23:2f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Mar 26 15:01:17 2026 GMT
Not After : Mar 27 15:01:17 2026 GMT
Subject: CN=90e4aee60da797a06e164f8c0630a3853e86ae71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:79:3e:be:16:d5:57:f8:8b:50:b8:33:09:
a9:a6:ce:b7:08:10:bc:89:c7:7a:a8:de:33:3f:91:
21:f1:c6:6d:1e:07:dc:ab:31:17:b3:4e:7f:a9:c8:
1f:cf:bb:ed:fd:1b:7c:a0:1f:94:ee:85:71:87:cc:
a8:ae:b0:47:cc:25:2f:a8:d6:2b:e8:42:fe:63:f5:
9d:fa:52:04:55:45:ff:53:4b:54:60:dc:cf:fc:49:
07:d1:16:4e:e8:27:e3:b6:c9:d3:6c:bc:3c:6e:3d:
a3:c9:da:e8:0b:4c:2e:0f:f1:87:ae:25:c3:7b:69:
31:5d:2e:bb:21:3c:59:a8:10:8f:13:47:c2:83:d3:
60:56:96:e5:bc:ab:b2:36:16:d7:26:2d:1b:02:d7:
cf:02:ba:7d:9b:78:f7:25:0d:c2:34:77:d1:4c:5e:
8f:a9:0e:52:37:44:40:af:f2:d1:60:ac:3b:74:15:
17:f0:b9:11:2a:f1:2f:73:9f:ff:4d:cd:90:4e:ba:
43:c5:81:91:39:47:0a:c6:79:7d:ee:0c:3f:ba:bc:
d5:52:94:b8:fc:05:c8:84:9c:79:af:de:45:a7:d7:
d4:28:b8:43:5c:ce:99:81:c7:56:b4:49:27:28:9f:
fe:d7:6e:63:a5:07:7e:41:45:fe:55:b1:4e:ff:d2:
72:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E4:AE:E6:0D:A7:97:A0:6E:16:4F:8C:06:30:A3:85:3E:86:AE:71
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ab:ab:fa:fb:ed:99:a7:78:13:79:6a:9c:eb:3d:51:8e:fd:
58:6b:a6:51:b7:9a:7f:24:12:4b:89:5f:8c:fd:68:f8:06:c8:
a9:85:62:20:cf:1f:59:c3:77:85:2c:a9:d9:43:f7:55:c6:90:
7a:53:f9:f0:2d:6e:b5:d8:75:fa:a3:87:61:3a:9f:9f:60:fc:
45:db:b9:d6:07:71:4d:d3:9d:85:e7:da:46:39:97:44:4e:27:
88:74:5d:76:d8:72:dd:03:9a:ec:8a:aa:d4:9e:c0:2e:d4:79:
f3:a7:9b:88:d5:ac:57:e6:85:df:26:db:9b:6a:59:3c:79:ab:
b2:55:7e:e9:b0:58:5f:59:3c:0a:21:49:b4:d0:74:6b:63:59:
27:27:03:5a:af:9c:0b:fd:50:85:89:73:c2:c5:3c:6f:fb:a6:
68:6e:53:e3:3a:54:66:9c:a7:ee:09:be:7a:75:33:e4:0d:65:
1a:7d:56:86:bc:bc:a5:a5:10:34:4a:26:95:0f:2b:50:d5:31:
e0:48:48:38:de:91:8b:d4:5e:36:6d:2b:1a:a5:55:71:4d:73:
65:9b:c0:ec:e5:c8:3f:04:6d:ee:88:91:8b:87:58:18:2d:f0:
31:64:e5:81:8c:1c:35:c9:28:cc:14:f0:5a:e5:a6:5f:c5:41:
1f:51:cf:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:49:28 2026 by rpki-client