
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
File: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json)
Hash identifier: Q5MBGK4yqWAfxRSoufo7y6Xpd4DbCas+vFgKPsAwYPw=
Subject key identifier: 60:B1:BD:A1:03:32:DF:8D:63:C3:2D:BB:B9:EC:69:C0:47:B5:FD:D0
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 019D2816F243697E12882B651537E8E7F4CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
Manifest number: 18A7
Signing time: Thu 26 Mar 2026 03:01:25 +0000
Manifest this update: Thu 26 Mar 2026 03:01:25 +0000
Manifest next update: Fri 27 Mar 2026 03:01:25 +0000
Files and hashes: 1: 1bmjaNGaI2UWie6zoQTb39HFS_s.roa (hash: +AxNVqmR9VnywOpnEpWpK60msZlPvTmRqEnJ2TvVddQ=)
2: 2UTsdBqwcGY6WLPGQu2AQnmmQaw.roa (hash: N0cgvop2VFVQVWMu1UTzJj1ZcUJzTX91lueVGv/YOHc=)
3: ByKSk6_PCk0jKVqec0OJjbAcRcU.roa (hash: t1f1S4C1okYWwtKH8np/6yMDAc9jaCyFzuNOyR5oQYc=)
4: E102IN0_Ach777PDZCjDRyGfr5s.roa (hash: P+fFTKuiYJQ7KTnCl15w1gtiWXSxbhhwZtpqSiAeOhM=)
5: KWyOaYXmmuGpMkmFhWfxqNZLpEQ.roa (hash: 6Db2CprWj64Ewe8dVzSinC3cNdAaSLoS6Dq+erianYM=)
6: LEiLLq9r1VO5_Ov5I6DYkNeJuIQ.roa (hash: mWIOH513v2gZLS9HWDfHNsxzxtZFG4eZXAkIgOJaQVg=)
7: N0ib0MGeP5d7uD5SMGNzR5xRzaA.roa (hash: wX5k06wd7UCg24rImU3sW3f/cm2llInrYc9+0zZZkLU=)
8: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: pNuJtxCEneKc9jJrDD59ob5wSBVEOpxNgg0cDzAq2xM=)
9: TM5VkZiuCQFhlCTuTDiqt2hHOiI.roa (hash: Uj+s0ytc6HH2YJFkDxTD9d5q1+tOjVsh1FxTZk6i+wg=)
10: WqZxU21CXk9II8O2lF6Y-ketCJI.roa (hash: JoRrtKwoZC20Q/QLA/mOv68NwCQSWJ+6cWt4rKxvqxY=)
11: YUKRTZrZKbMQuj1koHZDnPDdKkc.roa (hash: 5JLtSmX5xrQ29vGLGR8NuSK/OU2HfwUbgSXICbmnR28=)
12: aiZn6kgS43qbYGzLkAmQKdo6gA4.roa (hash: G/KuL+VXWSSvavjd4cxqh2acdQDd5A1ry4sWQqi5S1E=)
13: cbo9ZPmxQz5ojNzo3NLp3qPAq5U.roa (hash: WhZWAza+BOUN2V/ul+PIwoOcyAHFyg4fNWTLRfkjfEQ=)
14: falskHkEzmFDpE1q8O1AQezFfTs.roa (hash: ZJ3mncJicjqu8JmD6aJ/BH6oEnyHrxSao3V9TboLsMI=)
15: k3ayP4DiWUp9a1MNUSDdf93Vz8M.roa (hash: QfCyKwRzJHu3kJc4+Hlfq/pjF8bZH2qQwXvmpvH6rS4=)
16: lIy9zQMHNpi1v4RKAbwfpcq16JY.roa (hash: GuxM6yqJlPjVIDlbR8g1Fv5lkMvj//jwJnCdhjFyz9M=)
17: pEACykvZyRBjnuYUwUstZ7_jCVk.roa (hash: G94UHZh9tGtYRGHSoldyBITvAVDdXDRBRDBjeMrYPmE=)
18: pQE_sWOxAXv4LzF_hnEEzRVKjkU.roa (hash: r8BJ41cxYxyL7WV91ylso2pXKBwYsMCQMjQeRq8IwbI=)
19: rVyXgVyYp5rnr4oV3loTRO-57j0.roa (hash: U1gvzfizC5IaJxRnfZJGhEooOdvqsMkE+qdUPQBcx04=)
20: sUzc4i-qF-Qw6c5EDaaa0l-fnQI.roa (hash: SGebinu36YaRTF6AF3Dm3RGfWPUH9spaYcSgX0QinqQ=)
21: xsb80TsEg5gDhvG_dHnY_wiD7IU.roa (hash: U+IWtUZRr/JdO94gP5xDKETp0qxV29NQDKF3SavkJR4=)
22: yEq1d-Y9jhIC-ExVD8i3JnQfKWI.roa (hash: v/lSe2YGn/r4aMCpDUpUTQFRfYfqsJBd8pftAtwMWz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f2:43:69:7e:12:88:2b:65:15:37:e8:e7:f4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Mar 26 03:01:25 2026 GMT
Not After : Mar 27 03:01:25 2026 GMT
Subject: CN=60b1bda10332df8d63c32dbbb9ec69c047b5fdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:17:1e:b3:e1:8d:38:53:c2:7a:7c:4c:63:8d:
f7:7f:58:5b:0e:89:39:9d:aa:8a:83:73:ba:f7:fa:
cd:1d:05:ec:37:b3:db:db:a5:b5:c6:b9:f1:9a:d4:
fc:c9:8f:ad:42:8a:42:e1:d4:11:73:55:ae:08:13:
93:f6:dd:bf:0e:67:4b:9a:ac:1c:ff:a2:01:a5:94:
28:c9:45:01:65:7c:3b:6b:57:55:95:7d:bf:a5:aa:
a0:c4:e4:44:f7:37:03:58:8c:38:07:01:0d:7c:1b:
9f:31:a6:38:f5:d0:55:16:b7:6b:d4:a7:57:a6:f1:
01:6c:5a:44:1d:c2:47:1f:a5:5e:45:a3:86:37:76:
05:1b:94:33:c8:e9:9d:27:6f:34:32:a1:6e:ec:7a:
0e:d3:1a:40:8d:e8:04:31:1b:59:eb:d0:ea:94:48:
ca:d2:33:4e:c9:3e:38:24:2c:44:2a:d3:a9:ba:be:
4e:a8:fd:5b:ec:45:0c:60:31:f9:6e:76:87:5e:06:
27:2a:fe:27:7b:54:f6:88:cc:eb:89:26:a7:f1:d5:
37:16:ab:30:1c:6d:40:ac:d7:31:94:ec:a4:44:66:
ba:8b:90:0c:6f:a0:d2:7d:bc:a8:47:fe:d0:a3:07:
6d:38:8c:c5:0c:f6:cc:83:2a:00:50:6b:e6:92:e8:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B1:BD:A1:03:32:DF:8D:63:C3:2D:BB:B9:EC:69:C0:47:B5:FD:D0
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:24:fa:f8:f6:3e:17:72:52:21:a2:9c:f0:bd:2f:37:6f:df:
ea:c1:b9:86:3f:fc:81:48:8f:32:83:af:6d:3c:64:c6:93:c5:
2d:9b:26:55:79:64:7d:79:f7:c7:dc:da:99:10:72:ca:a0:49:
8f:25:03:da:12:a4:e2:41:53:dd:f7:06:32:f4:78:78:ad:59:
49:db:70:07:37:72:5c:fa:3b:91:8f:d5:f5:d0:91:d0:76:35:
32:82:56:85:50:91:a0:d5:b0:be:0c:4f:8e:dc:13:44:4b:5f:
9e:89:67:3e:b1:9e:ef:29:83:72:76:80:86:ee:66:8b:9b:f6:
f1:07:37:db:a6:a3:21:7f:e1:5b:d8:d2:6e:4c:2f:0d:eb:9d:
9a:b3:71:7a:3c:6d:eb:68:d2:dc:6a:80:ef:b4:5f:b2:b4:ef:
50:76:fd:7b:1d:cf:a2:ae:b3:db:05:b0:7d:fc:97:21:b5:7e:
9a:06:f0:63:00:d6:ad:2b:28:18:04:67:e0:bf:f3:2b:7e:ea:
0b:9e:7f:9b:00:33:dd:e1:90:78:f2:e6:5c:9e:72:da:fb:41:
25:78:15:d1:f1:a6:bd:78:e2:cf:d3:f4:a4:e4:66:10:50:a2:
a7:c4:8f:55:4d:ac:3e:8a:f7:a4:c6:56:95:e0:0b:83:61:fb:
c0:ea:b7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:45:32 2026 by rpki-client