
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
File: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json)
Hash identifier: Q/mih3OrTdQH4KfDYLHHKRLY8U+gZjCUF9gPinF5gc8=
Subject key identifier: 12:1C:2B:A7:DD:F0:45:8C:C0:41:F4:8D:A5:72:E4:14:09:E9:90:8A
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 019E1F4826D127C6FFA33F3678FF3CB6A14A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
Manifest number: 1927
Signing time: Wed 13 May 2026 03:01:22 +0000
Manifest this update: Wed 13 May 2026 03:01:22 +0000
Manifest next update: Thu 14 May 2026 03:01:22 +0000
Files and hashes: 1: 1bmjaNGaI2UWie6zoQTb39HFS_s.roa (hash: +AxNVqmR9VnywOpnEpWpK60msZlPvTmRqEnJ2TvVddQ=)
2: 2UTsdBqwcGY6WLPGQu2AQnmmQaw.roa (hash: N0cgvop2VFVQVWMu1UTzJj1ZcUJzTX91lueVGv/YOHc=)
3: ByKSk6_PCk0jKVqec0OJjbAcRcU.roa (hash: t1f1S4C1okYWwtKH8np/6yMDAc9jaCyFzuNOyR5oQYc=)
4: E102IN0_Ach777PDZCjDRyGfr5s.roa (hash: P+fFTKuiYJQ7KTnCl15w1gtiWXSxbhhwZtpqSiAeOhM=)
5: KWyOaYXmmuGpMkmFhWfxqNZLpEQ.roa (hash: 6Db2CprWj64Ewe8dVzSinC3cNdAaSLoS6Dq+erianYM=)
6: LEiLLq9r1VO5_Ov5I6DYkNeJuIQ.roa (hash: mWIOH513v2gZLS9HWDfHNsxzxtZFG4eZXAkIgOJaQVg=)
7: N0ib0MGeP5d7uD5SMGNzR5xRzaA.roa (hash: wX5k06wd7UCg24rImU3sW3f/cm2llInrYc9+0zZZkLU=)
8: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: ORj6YMVukdsgOTwrrb0Hce6O4ueUF4GT+3aKDic1+zs=)
9: TM5VkZiuCQFhlCTuTDiqt2hHOiI.roa (hash: Uj+s0ytc6HH2YJFkDxTD9d5q1+tOjVsh1FxTZk6i+wg=)
10: WqZxU21CXk9II8O2lF6Y-ketCJI.roa (hash: JoRrtKwoZC20Q/QLA/mOv68NwCQSWJ+6cWt4rKxvqxY=)
11: YUKRTZrZKbMQuj1koHZDnPDdKkc.roa (hash: 5JLtSmX5xrQ29vGLGR8NuSK/OU2HfwUbgSXICbmnR28=)
12: aiZn6kgS43qbYGzLkAmQKdo6gA4.roa (hash: G/KuL+VXWSSvavjd4cxqh2acdQDd5A1ry4sWQqi5S1E=)
13: cbo9ZPmxQz5ojNzo3NLp3qPAq5U.roa (hash: WhZWAza+BOUN2V/ul+PIwoOcyAHFyg4fNWTLRfkjfEQ=)
14: falskHkEzmFDpE1q8O1AQezFfTs.roa (hash: ZJ3mncJicjqu8JmD6aJ/BH6oEnyHrxSao3V9TboLsMI=)
15: k3ayP4DiWUp9a1MNUSDdf93Vz8M.roa (hash: QfCyKwRzJHu3kJc4+Hlfq/pjF8bZH2qQwXvmpvH6rS4=)
16: lIy9zQMHNpi1v4RKAbwfpcq16JY.roa (hash: GuxM6yqJlPjVIDlbR8g1Fv5lkMvj//jwJnCdhjFyz9M=)
17: pEACykvZyRBjnuYUwUstZ7_jCVk.roa (hash: G94UHZh9tGtYRGHSoldyBITvAVDdXDRBRDBjeMrYPmE=)
18: pQE_sWOxAXv4LzF_hnEEzRVKjkU.roa (hash: r8BJ41cxYxyL7WV91ylso2pXKBwYsMCQMjQeRq8IwbI=)
19: rVyXgVyYp5rnr4oV3loTRO-57j0.roa (hash: U1gvzfizC5IaJxRnfZJGhEooOdvqsMkE+qdUPQBcx04=)
20: sUzc4i-qF-Qw6c5EDaaa0l-fnQI.roa (hash: SGebinu36YaRTF6AF3Dm3RGfWPUH9spaYcSgX0QinqQ=)
21: xsb80TsEg5gDhvG_dHnY_wiD7IU.roa (hash: U+IWtUZRr/JdO94gP5xDKETp0qxV29NQDKF3SavkJR4=)
22: yEq1d-Y9jhIC-ExVD8i3JnQfKWI.roa (hash: v/lSe2YGn/r4aMCpDUpUTQFRfYfqsJBd8pftAtwMWz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:26:d1:27:c6:ff:a3:3f:36:78:ff:3c:b6:a1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: May 13 03:01:22 2026 GMT
Not After : May 14 03:01:22 2026 GMT
Subject: CN=121c2ba7ddf0458cc041f48da572e41409e9908a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0a:77:cc:1d:30:27:0a:a8:02:ab:91:e8:a0:
2c:96:a4:26:8c:1d:a6:9e:5a:20:20:1f:bb:0b:de:
71:21:59:42:13:8e:ac:f9:81:48:b5:b4:f6:c5:78:
3c:1a:33:b0:e0:4f:f1:3f:c0:29:b5:0c:b5:40:ab:
89:11:6a:4c:0f:3a:9a:18:e7:45:98:4d:49:93:4d:
60:e3:90:61:53:07:4e:a8:b0:73:92:ac:5d:e3:b9:
c1:79:3e:1f:21:9d:c9:95:af:e7:2d:aa:fb:86:b9:
68:00:55:f4:44:81:24:a3:b3:e9:6e:18:c4:41:41:
1a:e4:e7:75:7d:94:8e:35:e8:c8:f6:83:b3:63:8f:
d8:59:6b:11:5a:82:1c:57:ce:30:a4:aa:6b:46:4e:
b4:2b:d4:c9:0c:99:c6:69:d6:c9:fe:22:21:70:93:
6d:52:f2:6f:9a:be:36:92:68:7c:c2:23:5e:72:f2:
5b:0b:42:b7:d3:6f:b2:ed:3b:34:43:43:30:b1:e8:
48:94:45:9a:13:d5:c2:26:72:ce:c1:e1:35:d4:49:
13:05:eb:26:24:70:0e:c4:13:4a:5f:32:d6:ce:d7:
65:b8:e0:21:45:35:d7:39:a5:b9:1c:37:8a:b3:dd:
32:e1:d7:30:77:ce:c1:d3:39:55:b2:8b:50:19:36:
60:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1C:2B:A7:DD:F0:45:8C:C0:41:F4:8D:A5:72:E4:14:09:E9:90:8A
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b6:56:71:58:03:1e:f0:b8:05:d0:b9:be:f7:7a:fe:e6:b9:
dc:e9:d5:97:42:1f:31:cd:b1:c8:f0:a8:f0:69:02:9a:8e:d3:
ec:48:d5:b7:55:85:50:40:87:57:11:c2:36:1e:d1:91:b8:2f:
e1:7a:b2:05:2d:26:ea:26:a3:4d:cb:b8:32:b1:0c:c6:6e:cd:
60:bf:71:f0:eb:dc:44:09:ab:4f:65:6b:2e:1c:85:de:22:65:
c7:31:59:cf:7a:50:06:8a:6c:10:6e:46:0e:68:ad:af:20:77:
6d:0e:27:c9:0b:24:74:68:60:d6:4e:38:3b:8b:54:75:10:86:
d3:fb:28:5e:3b:0e:29:a1:6a:50:58:e8:03:67:1a:75:ad:6f:
14:52:f8:1f:c5:9c:7a:a3:eb:58:3b:6d:e1:69:c0:0b:93:5c:
ce:86:d4:42:97:12:7f:66:6f:85:fe:cb:e0:ac:33:eb:65:3d:
ce:22:7f:57:bc:49:96:10:a7:e5:2e:bd:06:2c:77:fd:d5:8f:
53:e8:5d:4d:d7:c8:d7:af:15:13:5d:0e:c3:fe:ee:5b:12:fb:
f4:eb:ea:48:e1:27:cd:92:96:2d:27:e2:f0:15:67:20:57:86:
04:47:1b:c7:a9:46:e4:8f:75:d8:13:db:70:5a:03:fc:97:56:
19:4e:14:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:49:49 2026 by rpki-client