
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
File: SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json)
Hash identifier: rZcXDm6rXEL09UrsGSR2jNNjeDJAvVPf4hCHPlRjSBg=
Subject key identifier: 51:9A:5D:9B:33:D8:E8:BD:6A:CE:CA:C5:C1:31:54:4C:5B:7C:28:20
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 019E1DC74769231FB263A43E43BF1DACCB9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
Manifest number: 0E6B
Signing time: Tue 12 May 2026 20:00:59 +0000
Manifest this update: Tue 12 May 2026 20:00:59 +0000
Manifest next update: Wed 13 May 2026 20:00:59 +0000
Files and hashes: 1: 8DylJ6bMwHx9Bdrvn2E9Zu5-6Yc.roa (hash: vmfPrDMZxv7M04Wo8WXPZw8AXlVkf20vtyHb5e8KwgU=)
2: 9Cp-MTJ4qLd92W1VLnGQl0LXr-c.roa (hash: 5gwGzTjze+ZsjYP/6JdA+Sy/zd3Nz2uvd4XnkQoXRfg=)
3: CiMQMlsaob6RUwchgCgnZuTjr8s.roa (hash: Ar1fgrhz+dRsI5kSs4y0oWEzM2iAvsmrTdXD/xtv77Y=)
4: E4JbKjh9d4V-tkS22c4Y2xMCkFg.roa (hash: 7djPzKioQUY77MCLFItH4oWSHNi6vM51IHyM3Wgv2dk=)
5: My1lWafqU6ikUvtq4M-ub2MxD1I.roa (hash: UvpW6m+Ws53gXcKKs+IbQFznyrhTBzwk2z9Qv12jd1c=)
6: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: v9bMsO8Tdy5SsMwogi/smFAvSXngbhvK5d2I8oYS5j4=)
7: UVRNeFdK0MFmPktuaxuakdFBiyw.roa (hash: Qe3jYuCQSRz8rrbqzPjF4ta2+ILAQBCmo8wsXzpnbtM=)
8: YfIHk0vhXMsawbQpQSUx4NkqARo.roa (hash: jyjsv+8CT/zFqpfSyQvWtrC5fl6L+Qm0Q0VVf1vxxCM=)
9: _GXs5D3IvlrXACIDGV1jenI0WNE.roa (hash: YXv+qavyugnUTBH4aVvxk6AhP8epVFfWY0KRl4DJGts=)
10: f9XaNrWrnsnye9Nnn2-Ly1K5UOI.roa (hash: W/HCDixp3chA9F+ml8Y61wZheEIzzJOIG7tl8p8DNMs=)
11: iRf_gs5n9xup496QtRtuInpoD-U.roa (hash: BDQw7Ot2/EiioII6Hz7qQJc1eJwtGMRxOvQFtmCg1xA=)
12: jteFQiK73wa6i4lrpiIPNofIe0U.roa (hash: G8t6kOJLv2x/ceaMNLBszGM9PcNzECaWuzPtlc+XAqM=)
13: lHqP6_LNIJjH2DY1nkYIw_wx6vg.roa (hash: HTFvctpryJcVZOxTlZV4EEM5WCYV9Pw93rtuaN3DxLg=)
14: mjB_YwpdfbzEMOoCN657fTyMgX4.roa (hash: zKy3p/lM5a5D8i2Rw65iFKwlrzxpy3cP+UdwJk2L738=)
15: tN-kQy8aPMBnCCMoTBdyR8g7aFY.roa (hash: ndjqvay0HNkTp1bfXurPq1sQDj2ISSXGlvnjsKWMyAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:47:69:23:1f:b2:63:a4:3e:43:bf:1d:ac:cb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: May 12 20:00:59 2026 GMT
Not After : May 13 20:00:59 2026 GMT
Subject: CN=519a5d9b33d8e8bd6acecac5c131544c5b7c2820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1f:46:e5:e7:5b:85:7f:52:db:78:7c:14:d1:
1f:36:20:b3:e2:92:4f:b2:56:ea:92:87:e4:d8:d2:
2f:aa:d5:bc:58:e2:0d:41:bd:49:37:5c:f1:73:10:
cb:59:0f:89:30:ed:62:d4:0f:9e:4c:1c:94:5d:ca:
31:38:be:74:41:dc:56:21:32:a3:ee:18:51:1b:13:
b2:7c:ff:cb:30:94:5a:b4:07:a9:c7:cb:16:4f:75:
f2:42:a3:bd:6c:3e:2d:e8:58:69:8f:81:e2:ee:dd:
eb:b7:8f:78:af:e5:b5:ea:8f:0f:02:24:47:85:99:
44:92:34:a3:09:00:ab:3d:19:8d:9c:8c:0f:b8:76:
bb:5a:10:17:ba:63:da:f7:c9:ec:e2:b9:7c:7b:f4:
95:0b:4e:93:4c:64:a4:b2:33:b3:8d:e9:47:8e:dc:
c1:36:2c:1c:72:51:79:9b:18:0c:82:2e:f0:08:ec:
c5:60:52:38:b7:14:73:0d:55:9b:8e:fb:13:64:d0:
b8:d9:b1:89:14:dc:20:47:b4:91:2a:ab:41:a9:1f:
93:7b:cf:28:c3:b1:84:ae:59:b6:9b:55:2a:0b:64:
2d:08:ba:a2:94:5a:5b:63:89:30:6e:08:a4:5a:4e:
40:01:77:56:22:a9:a4:10:7c:d3:2b:e0:45:7d:c3:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9A:5D:9B:33:D8:E8:BD:6A:CE:CA:C5:C1:31:54:4C:5B:7C:28:20
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8a:eb:a2:39:13:18:3a:be:ea:9c:c3:87:db:0a:4a:25:4f:
98:98:8f:e0:a6:a4:8f:43:14:d3:8b:f7:c7:43:22:7b:e2:96:
6a:a2:55:6c:36:3f:7c:52:39:85:ae:d3:db:97:46:e3:92:70:
45:6c:20:58:b5:97:17:46:1c:00:45:ee:3a:a9:ee:38:49:5d:
e3:d6:60:c1:a5:3b:16:27:c6:28:b8:bf:92:e7:bf:51:e0:7d:
d1:a9:98:d2:1c:40:fa:8a:86:1c:05:b1:16:6f:8b:b9:f5:c8:
d9:b1:ee:d5:c3:18:a3:1b:5e:3c:8d:d4:78:7c:0d:65:4f:ae:
15:9e:a0:2e:a7:7b:c8:17:f7:ae:97:c9:36:28:02:63:d8:d8:
8d:a1:2e:59:1e:99:16:05:04:b1:b5:32:0b:36:c0:f1:00:c1:
e5:90:15:9c:c4:98:56:18:55:89:4d:8d:c2:d0:2b:24:d5:ec:
4d:64:2c:b7:97:67:e7:1a:c3:f6:c8:06:9d:d7:b9:8a:6f:e6:
d3:35:42:54:4f:90:e9:c5:a1:76:8e:cd:9e:8b:c5:6c:79:26:
f7:3c:c5:7e:34:a0:5f:be:24:89:ef:2e:fa:ca:73:3c:a0:e7:
1e:4b:f7:78:99:a5:f4:88:0d:80:0c:5f:96:b7:2d:50:c9:68:
90:bf:36:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:32:49 2026 by rpki-client