
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
File: C6yCgEcArTZTi_hvNMBz6XFDDaU.mft (raw, json)
Hash identifier: uKdurTl/Rp7P84D6pXbPchAtyYDnWOF/qfslHySsDF0=
Subject key identifier: 66:43:EF:E0:95:B2:90:97:9C:F3:71:FD:FA:BE:4E:C6:1F:85:6B:3E
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial: 019D2771F909220C49F120D507FC260D70A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
Manifest number: 1896
Signing time: Thu 26 Mar 2026 00:01:13 +0000
Manifest this update: Thu 26 Mar 2026 00:01:13 +0000
Manifest next update: Fri 27 Mar 2026 00:01:13 +0000
Files and hashes: 1: 3zbGyukfQlvWlz1rIu3MF0i9ZQA.roa (hash: C8VCXrjogu4GEXHN+4VlV1RhYCbxfqeG8eCfQQqvC/8=)
2: 4zWqGYcx90MSsSObTI71OMevGLI.roa (hash: 2KPRh6/VRnqwHzM72EcE6I/hpiMNrQvfbcobdTHvrp8=)
3: 7qF8DvtzC3jirhL3pV2eCHws_Sw.roa (hash: PlA0iR4i8nMPJDQi1dSKU0Vsn1Phg8l6qs5AKvbNobk=)
4: C6yCgEcArTZTi_hvNMBz6XFDDaU.crl (hash: EFkaZ0kl4bQpDG15OL45rpruA+wv4Ldv6S73BWS1bpg=)
5: TYL3fd3U3hdntx9HEZmBNJvIfy8.roa (hash: e+FavOHdj6PxW9K+YpaIIbMqrQ5M/B4rSbRg/GiLGdY=)
6: X36wvkpUD5ZEtmHolX5djkBU7G8.roa (hash: 1peSiVa6+f8j5mPTp+kwnGd3XE3ejw1Eh+Z8/AWETA0=)
7: f5RT_hHMbwUMnFt-JoJl9jk0aq8.roa (hash: R7CzcVcdr1m+4aUYrv9u7aRaRpqSiQ4h6Ml1XYdGdCM=)
8: jIq1ZwfYXAAqF6SypiZfEAegC9E.roa (hash: v2vJlBOD+C5w7yw+8XzyFUOoQGvh/5fPqoNiFmi6fEA=)
9: molvQvJ_lXsmLhzkv5IAyHx3jBE.roa (hash: ix0VFib2vtnH3hKp8PnHjw409S+kU6b3YPQlaCcVI/k=)
10: sE6ob5p7cvBS3YZqxyoPQMbjYxc.roa (hash: dhUKIHoGV1Pe+2e5vIvUmP73NR0v7KSZ4nk35w2qwfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f9:09:22:0c:49:f1:20:d5:07:fc:26:0d:70:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
Validity
Not Before: Mar 26 00:01:13 2026 GMT
Not After : Mar 27 00:01:13 2026 GMT
Subject: CN=6643efe095b290979cf371fdfabe4ec61f856b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5f:a4:9f:7f:21:b7:6a:e9:93:ce:a6:e5:2c:
56:80:5b:d7:7e:08:71:f9:bd:01:54:d4:83:fa:2e:
dc:78:32:e8:e0:2a:e6:dd:f0:28:72:ec:66:a5:00:
20:f6:85:50:41:87:15:61:85:04:2b:04:a2:22:25:
d3:b4:3d:5f:38:18:27:7c:23:14:0a:98:52:46:5d:
d1:e5:ed:1a:e5:19:1a:e9:57:e7:4f:0e:1c:33:05:
15:02:f3:ce:a6:5b:f5:9d:b2:2e:7b:6a:01:96:52:
31:59:a0:92:3d:27:04:c6:5b:6c:75:67:eb:d9:27:
f1:ca:1b:d9:23:84:33:d6:88:7b:85:29:74:a6:2b:
89:2f:db:09:87:36:dd:2a:fd:ca:ee:49:62:22:97:
65:11:f9:fd:67:e3:12:36:84:e5:fb:7e:33:5f:b7:
b2:f1:b1:e4:81:b3:a2:dd:6b:2b:38:5c:48:6e:03:
52:8f:4e:d5:31:dd:2b:9d:5f:d7:f0:e4:c0:f2:d0:
23:9b:c3:c8:0b:d4:61:a0:81:ed:a1:c3:bc:ac:9a:
f1:d6:f8:66:71:69:c5:ed:2e:0c:1c:08:7f:f7:97:
c3:d7:70:dc:35:de:e5:00:49:ad:11:49:fa:73:33:
71:75:4e:56:63:dc:6b:9b:9a:d4:b7:51:1f:83:0a:
38:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:43:EF:E0:95:B2:90:97:9C:F3:71:FD:FA:BE:4E:C6:1F:85:6B:3E
X509v3 Authority Key Identifier:
keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b8:a0:30:96:dc:99:54:e8:2e:10:7c:f6:b0:bf:55:6c:2b:
fe:8e:da:c8:45:d7:af:98:07:f3:bd:96:02:a5:60:ff:ea:e0:
03:62:dd:b6:ab:e4:63:d4:cb:e3:54:6d:51:aa:cf:14:3e:1a:
63:54:63:37:7e:e1:d6:40:b3:3d:66:56:ad:a0:95:52:59:a1:
46:dd:7c:f0:e3:e7:1f:6e:db:e6:7c:0e:a6:cd:42:22:3d:d5:
e4:f1:67:f1:cb:43:d6:55:8b:65:9d:2d:bf:1a:0c:fc:6a:7c:
64:4e:ec:4f:85:88:b5:03:a5:e4:28:3c:70:88:70:62:d6:fa:
f8:4b:c3:9c:4f:9c:7b:fd:a3:4b:00:e8:40:a3:f9:cf:72:74:
3e:90:a9:89:77:8e:c0:f2:48:aa:6f:ed:75:bf:be:29:2e:ef:
66:33:78:53:fd:33:8f:90:e7:73:93:af:e8:9e:ea:bc:98:be:
96:e2:a0:6f:8d:8a:45:da:e7:e3:c4:f9:b8:0b:5f:fe:c3:8e:
95:b2:b4:d6:4f:ff:65:2d:ee:c9:be:0d:a1:90:f1:17:fb:2a:
a1:47:39:3d:11:be:dc:99:c9:96:32:85:23:be:dc:fe:ec:82:
42:b0:04:bc:8a:19:08:09:4f:0c:26:d7:7b:73:0d:e4:49:88:
9f:7a:3f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:29 2026 by rpki-client