
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
File: 1BGrxMBGirKJHqrK26DcA3eTb9U.mft (raw, json)
Hash identifier: Nq29miftAFG+D8q6GXPU9nOeYt59dEiqz16KUn0I+Q0=
Subject key identifier: D6:B8:A8:6A:FE:A5:F6:18:4A:B8:BF:BD:0E:9B:16:3B:F9:76:AF:8F
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 019D2960ABE9FD8C263E6066B2F604B90545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
Manifest number: 1899
Signing time: Thu 26 Mar 2026 09:01:34 +0000
Manifest this update: Thu 26 Mar 2026 09:01:34 +0000
Manifest next update: Fri 27 Mar 2026 09:01:34 +0000
Files and hashes: 1: 1-hrB_4i445lAPatm9pXp75UPr1I.roa (hash: YEzNTLD9wfX8VjD6MK1Rs1n5S4HzUgswhciPZWTMqSc=)
2: 1BGrxMBGirKJHqrK26DcA3eTb9U.crl (hash: XOh9agsD2131uWjb+Y+nlndk/POauX1CPzgJEXdlBBw=)
3: 1OiPrxPQn3lkIhfte5yQ-6wFTA8.roa (hash: z9/vDo3XxLBhdAOAkVfQRjghVloHXSHSVsc9PHpJpsk=)
4: 359PtD2aT4lYVKLtb8GpHiwDpSM.roa (hash: +hV5lfZcoxfXxvE4zajqvEY/eOPBG4IbY8Wpf+1cu3I=)
5: 3TVHsbS8DDbS5jFNHXliJUV-vt0.roa (hash: VNMhI1DbQRZPhe0DLvYfFvfWzVgThx5w3CClRDwW+eI=)
6: 3x1Z8euWyQ8oU2eTqmH2oNYDUlg.roa (hash: hzh/xwb8heLsOXwzZrTck/MAmVN9avO1bZxPN2Q3Qc4=)
7: 6zpsdnIXKDCxVFEhevxRA4_zSCs.roa (hash: OPbPEb2Sk8Js+TBK52PtXkK2BFw7aQaLU/bCQ0DpgQ0=)
8: CjqRUuv68PFiU7765GT5HXOx8Bw.roa (hash: PvucfJQmBJoQyaNYzAVmEi/q9uSQDhp1g2JhGdUwoW0=)
9: EtSMAsHbVT4Pxm9MD2bBL5Zv5fA.roa (hash: pwqZR3sLomznVe36SGqzsoCNYDQVFyLcuDqHZembszU=)
10: I7Gi0c9R1I2nkTBa_FilFRmrh1A.roa (hash: rgMw3gFLvDe2bJ2gkzdn82gcIPRZuH5eYyiNhuqG2wY=)
11: IUnxJCEXGpjb9x8O-AKLChbdKH4.roa (hash: ngyGAWfnTLrenQ1MiPj1AnwG2yKMniipm+cR6MK1lC0=)
12: MMG6kAYHdbSTZ5cmO-QHmBxivT4.roa (hash: gTpV76Ww0BCzvfD9wYqWRlnMaGyxOQ5bU1mc1SqNJxs=)
13: _0yShHb3_Lvo8oOIhf1dP9etifM.roa (hash: C5c+j5BtUc+Edi1FogFMem4oHE95WUZxlK525NIu8Uk=)
14: bYA_hDz-uHsDwzycumiOlbXWrtA.roa (hash: Yl9BNnwj6zQSqqxSRXXKmcquJUlgVyqLxCnPkLZIOXw=)
15: beBz1EHSK0ejZhV2Z5PmcoiuBnM.roa (hash: mDHGqDcF8EKgwMgysUIVSZ+OvPwZjW1FW23RjIyMX4g=)
16: g0RaLD65-oQgpyqHw6Rb1clt6Us.roa (hash: MBY8mcPfd1xDaI5XexA7xmIlVnR5RWaKP5T2lgf3SaQ=)
17: idbIVY02MqkT2W1Sz2Hn6vm7Wgc.roa (hash: iSNlVvk976S8zGXNaqHMWJhFzSvDbSMz0/sY5GUQxFg=)
18: jPMCixDvfVo9glBXbNMOz86F-rU.roa (hash: yq4kSM4l08bAj6xNIMbu+OFNBQBF0qIIeLACLieVs2o=)
19: keMt9GC91bHZXuQ0h87FQe-gBaY.roa (hash: W4gS8hqr2Jgdapo27zgTBxXWuHg7t03Y6FgU8O4hTKw=)
20: mPZY1GYZYbQ6yjTCuTRg1ZzMsqw.roa (hash: BLYdcZ3Gbdmq0apl8BQS+jPj3Rqpg+Sj0dliHzXdyWM=)
21: okpxkpXVkTuoxcjFPQV6FQoe0Gg.roa (hash: hH8YmXQn5X8TblBZy3b0UzoPWUDgyN7U0BO4gNmqkZc=)
22: rdklJtnIsRPpCMnxSS1GGHIWCtI.roa (hash: i2J/w0/vFTIyr+KWAGpYaVRFjg90ISDIds54aojdKiA=)
23: xrEslglVuEnnQ0vF9Dsq9qhfjps.roa (hash: Qjzp64QTM1xn969UZDkr+b0btpansANNv6kwoq7jiQo=)
24: zX07X_H3K2-11ztBe_0TWCV6UDU.roa (hash: m7+UubbmMpsAyslPYtLacfeBJL7t5bWeQmDZDfKFeeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:ab:e9:fd:8c:26:3e:60:66:b2:f6:04:b9:05:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Mar 26 09:01:34 2026 GMT
Not After : Mar 27 09:01:34 2026 GMT
Subject: CN=d6b8a86afea5f6184ab8bfbd0e9b163bf976af8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:79:11:d0:87:09:42:e4:8d:f6:c2:74:35:d3:
21:d9:4d:02:8b:76:2b:2f:07:19:aa:86:54:3a:62:
84:d0:f0:d2:f9:d0:5d:c4:df:58:dc:ae:2d:d9:5c:
f9:59:a6:bd:5b:43:31:77:da:81:ea:62:70:f4:7b:
02:e0:71:cc:ca:ae:7a:7f:16:70:55:1b:a1:1f:c8:
0c:48:66:a2:5c:30:22:98:70:8a:db:8c:d4:66:fc:
fe:a6:80:df:75:02:c0:a0:dc:97:0c:ce:ad:de:4b:
c5:78:ed:8b:7f:49:f8:88:56:6f:e5:89:be:dd:d0:
5b:15:fe:7d:77:d6:4b:e9:f2:a6:ee:e3:b1:d2:32:
79:24:b3:9a:da:12:22:ee:16:fe:39:0f:28:13:df:
ef:0e:a3:00:0b:7c:56:a7:ea:a7:56:e2:cd:10:a3:
70:b9:4a:c5:7a:2a:20:01:ac:37:fc:e6:56:6e:f8:
27:93:be:99:5d:2e:e8:4f:70:c5:23:6f:78:e7:25:
6c:a1:f7:9d:41:2d:cc:78:e3:d3:a9:d3:be:0a:88:
4c:69:fd:53:5d:59:ed:f5:3a:e1:7a:11:82:4f:a1:
b0:7b:34:22:0e:87:e7:82:a1:a9:2e:98:47:b7:76:
e3:8e:db:aa:5f:73:2d:d8:0b:d3:3a:ed:78:7b:87:
f1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B8:A8:6A:FE:A5:F6:18:4A:B8:BF:BD:0E:9B:16:3B:F9:76:AF:8F
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:72:c6:68:fb:ba:48:e2:75:01:3b:9a:b2:34:08:41:8c:b3:
0d:de:7c:f0:8a:90:c5:83:51:4a:25:0a:d0:5f:e0:db:0b:e2:
2a:8c:02:62:85:e8:5b:40:c9:ce:bd:12:93:75:d0:63:6c:77:
51:42:e9:ab:14:79:89:5b:8f:b6:53:92:12:b2:c1:e1:c2:59:
a2:dd:77:50:90:a4:7e:e3:44:b7:40:8d:2d:1a:71:4b:c7:5a:
6d:13:7b:7c:49:b5:ec:a1:e1:05:58:8a:d7:9c:f6:2e:1d:cf:
85:af:fe:da:a5:a4:a9:a0:3f:f8:fb:92:d0:57:01:9b:b1:0a:
0c:5e:90:9b:28:18:1f:43:4d:19:8b:a1:2f:34:f3:1c:00:ef:
34:8a:43:6e:b2:3a:8d:96:cc:42:f2:95:73:3c:61:4c:41:94:
fd:6b:89:c4:90:0f:55:dd:8f:04:70:fb:7e:88:8b:78:c4:62:
8f:50:da:85:30:11:90:0c:07:14:dd:cf:4d:d6:e5:ec:4f:d2:
06:d0:91:7e:ed:cf:44:b7:b9:22:5e:fb:8f:d1:4e:5c:6c:84:
2f:19:fa:19:b2:53:a9:25:e3:9b:91:c0:93:38:20:1f:df:35:
6e:52:e8:e9:4c:9b:27:d2:e5:0b:bc:77:44:1d:77:79:91:e7:
ae:da:85:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYKvp/YwmPmBmsvYEuQVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5
MzZmZDUwHhcNMjYwMzI2MDkwMTM0WhcNMjYwMzI3MDkwMTM0WjAzMTEwLwYDVQQD
EyhkNmI4YTg2YWZlYTVmNjE4NGFiOGJmYmQwZTliMTYzYmY5NzZhZjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnkR0IcJQuSN9sJ0NdMh2U0Ci3Yr
LwcZqoZUOmKE0PDS+dBdxN9Y3K4t2Vz5Waa9W0Mxd9qB6mJw9HsC4HHMyq56fxZw
VRuhH8gMSGaiXDAimHCK24zUZvz+poDfdQLAoNyXDM6t3kvFeO2Lf0n4iFZv5Ym+
3dBbFf59d9ZL6fKm7uOx0jJ5JLOa2hIi7hb+OQ8oE9/vDqMAC3xWp+qnVuLNEKNw
uUrFeiogAaw3/OZWbvgnk76ZXS7oT3DFI2945yVsofedQS3MeOPTqdO+CohMaf1T
XVnt9TrhehGCT6GwezQiDofngqGpLphHt3bjjtuqX3Mt2AvTOu14e4fxwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNa4qGr+pfYYSri/vQ6bFjv5dq+PMB8GA1UdIwQY
MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt
YjBmNGI5YzM3ZTQ5LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5
LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3LGaPu6
SOJ1ATuasjQIQYyzDd588IqQxYNRSiUK0F/g2wviKowCYoXoW0DJzr0Sk3XQY2x3
UULpqxR5iVuPtlOSErLB4cJZot13UJCkfuNEt0CNLRpxS8dabRN7fEm17KHhBViK
15z2Lh3Pha/+2qWkqaA/+PuS0FcBm7EKDF6QmygYH0NNGYuhLzTzHADvNIpDbrI6
jZbMQvKVczxhTEGU/WuJxJAPVd2PBHD7foiLeMRij1DahTARkAwHFN3PTdbl7E/S
BtCRfu3PRLe5Il77j9FOXGyELxn6GbJTqSXjm5HAkzggH981blLo6UybJ9LlC7x3
RB13eZHnrtqFrw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:39 2026 by rpki-client