
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier: 116f9dnzUTXnDU8w2QEDlnH6vO2L/lEFin+cVO42MMA=
Subject key identifier: 0E:9E:B5:2C:B8:0C:FE:3B:B0:0A:AD:C7:F6:33:3A:9C:DE:3E:F7:83
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019D2583684343493B01DBAD307049B8478D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number: 0F49
Signing time: Wed 25 Mar 2026 15:01:02 +0000
Manifest this update: Wed 25 Mar 2026 15:01:02 +0000
Manifest next update: Thu 26 Mar 2026 15:01:02 +0000
Files and hashes: 1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=)
3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
4: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=)
5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
7: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: X2vhzjCQaHmkQ/MqKdEmv7RsBtwsJ1lYdsgHYp1jf9U=)
9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:68:43:43:49:3b:01:db:ad:30:70:49:b8:47:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Mar 25 15:01:02 2026 GMT
Not After : Mar 26 15:01:02 2026 GMT
Subject: CN=0e9eb52cb80cfe3bb00aadc7f6333a9cde3ef783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:25:ee:64:f6:78:52:f4:5a:0a:eb:9e:8a:4e:
be:29:48:cb:4b:33:06:f0:4b:fe:1a:a9:d2:6a:28:
fb:47:bb:a5:17:32:12:dc:4e:54:1b:7c:07:bf:50:
d0:40:60:91:85:c8:52:e5:fe:ff:0c:cb:3a:2c:a6:
76:e6:64:af:9e:b7:e4:41:e2:f8:fa:d8:49:7f:03:
13:21:f8:54:da:7a:23:13:e0:9b:28:97:80:ed:1f:
ed:00:25:99:b7:bc:90:2c:bb:4a:df:94:ff:48:02:
f6:e4:95:b8:de:3d:d0:4a:3d:11:a6:f0:91:60:bb:
cd:db:32:a0:4a:ae:44:eb:49:da:0b:19:39:9d:b7:
78:6b:aa:a8:8a:5e:b3:fc:ea:72:bc:f0:75:92:65:
1e:f9:67:3a:9f:f7:37:e0:4b:f8:f7:7a:d2:04:fa:
89:64:73:71:28:58:ed:1f:08:96:5b:c1:06:94:78:
bb:db:2f:b4:ed:ad:36:08:23:23:33:21:9e:4c:4f:
28:a5:01:54:7c:ec:79:65:09:cf:6f:9b:c1:3e:4d:
db:a4:7e:31:ce:ea:6e:18:c5:29:57:ba:22:43:72:
01:4d:86:83:b3:dc:33:83:47:e3:a8:64:ad:96:9b:
15:53:f2:bb:2f:4f:83:f5:52:b7:4c:a1:50:c6:7b:
b8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9E:B5:2C:B8:0C:FE:3B:B0:0A:AD:C7:F6:33:3A:9C:DE:3E:F7:83
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e4:5f:3c:93:5f:c2:d9:05:2c:61:00:40:19:69:d0:8a:e5:
e0:cb:f6:8d:bb:3b:73:c7:11:ff:60:57:64:66:b2:1b:c3:3b:
7b:7f:16:a0:0b:96:22:fa:01:5a:0c:39:b5:72:4d:f1:b8:b8:
6e:2f:b8:07:ad:e4:00:d6:b8:8f:13:ef:57:81:03:90:9c:a4:
e1:0d:20:64:ed:55:3c:c5:d1:80:b3:c7:85:d9:1d:66:ba:86:
3f:52:33:dd:e0:f7:a0:47:1b:4c:73:2e:82:49:ee:40:30:62:
7b:d1:8d:05:d7:7e:52:e5:f9:2a:53:b2:8a:7d:42:f6:85:6e:
e7:22:a4:dd:9c:f3:be:5e:b5:d8:b0:39:3c:33:64:2b:73:02:
78:e7:4a:bb:eb:13:b8:d9:c2:6d:ac:4b:e6:6d:f6:e9:69:13:
4a:47:86:ea:56:6f:ab:62:fa:a8:7a:6b:45:cf:1f:19:01:19:
dc:0b:4d:e6:42:ae:33:4f:f7:c8:3c:ff:7b:02:6c:58:d9:49:
8f:fb:38:6b:3b:41:0d:f6:e7:04:69:b3:0b:ca:c1:e5:79:4c:
32:4a:cf:f0:16:1e:54:92:16:a9:10:17:b5:b5:ac:88:bf:fc:
24:61:18:78:8a:0f:5a:75:18:ae:68:b4:1d:19:91:8b:6c:8a:
e8:7a:84:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:19:28 2026 by rpki-client