
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json)
Hash identifier: dS6neh0NiLn+pYOXPuaducSy8vffxugOPTfZGs6Mt1E=
Subject key identifier: 59:C0:E2:C9:25:2B:2D:50:02:CF:FF:B8:66:7C:5C:48:D5:85:3F:7C
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019D27047821348151D4053CD8A2CA75413C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
Manifest number: 1528
Signing time: Wed 25 Mar 2026 22:01:37 +0000
Manifest this update: Wed 25 Mar 2026 22:01:37 +0000
Manifest next update: Thu 26 Mar 2026 22:01:37 +0000
Files and hashes: 1: 4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa (hash: 1+Dj9DjkqqJBKSFukY3ZLUFpE2kBLC6OJYlV3ZzlDHE=)
2: 51RV5bLUK5swpjii_ClMr0Z0LK4.roa (hash: eaEFcr3Fzwqgey9xkzHTc526Wfs17vHkTkKlWZDr6V4=)
3: 7Gfdl5k6T4Nt-xZrQUmYT2Wb0Q4.roa (hash: praaG5V4IjeUDRh2H9CpWs4rx+iMgs/zDPv4j89TbtU=)
4: 7meu7s1H44zdKfP25MFBcQbtGHI.roa (hash: WvFf3T5R9dDcoqBxFhAiq7tVRoIpj2LekmR2mNGzL1E=)
5: 9sk7o3-J1zppXpr20oFx7pS_U0c.roa (hash: pBXnQfzjUWzJ2ZBcFMKN6xODjJ4zYHByfhzLBkNvrdQ=)
6: BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa (hash: Q2q3HL2ikSVxapYF8tEqUbGc2dsp+tUqOuJvpkTfgSw=)
7: DpYS7lRrillfu9K51nCIniTqNmY.roa (hash: UkQwWYpXy7K/OwHNGaKai/nAfoWeLWXYqtRRe4F8mQE=)
8: EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa (hash: ZEu9nOF1kbSjWSpE4NcC/VjSw7SsIRZ4h2G/ZSkfcXA=)
9: HxGP4RyCdmbtsC_X7rEOMPaadGs.roa (hash: E1pPUcXW5mPkpSrQhelqafY4OsK2tjQxSmKWda1vbOE=)
10: MZUJ_YtPrARksG8JiNeh9h5bxjU.roa (hash: gULv6+Niu5hf2ZuzY/CCoAvGjaEsELBZ6B3Mi+f8gPo=)
11: NNB2avyCldcIMCL0f0MRWjsmPGg.roa (hash: DEfqSuvzloP85jcJKk7ZgGBFiOXRfF0MqFeO19BqKn0=)
12: OvQCPbU7xaexN6KNG98gTxBlPZ8.roa (hash: B+7vMRgtRKWIYiyObWJnR9TPAurOqhLva4J/rVDJQSQ=)
13: QLLq3_7q5uUt7ipkpQL0iFrZcwE.roa (hash: ix8UNlXwntzVUKkNrdwMiCBgS77GVr+qjV/KIZeeGps=)
14: RSlrMSXsYQqD5_X3qdeusHBjTV8.roa (hash: rm68bm8MwPNoLfEzVKTjK5KhGKZaNdAMKVt15UbeVB8=)
15: TPy7bsrR3rHmdRPQWHmTxdaMWS8.roa (hash: vNjacqkelBMEtJwLV0kyf/dqQ/70VUAoh9Tq8bIaihg=)
16: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: oRG1+VYFpoSe05y0kjrpECCq1xbc7jPUVzCiFO5oDZA=)
17: WXitulZE6XZAWLN9EH7AUrKlJFA.roa (hash: WUGgSZ27pj+bCnK3yWkRpPdHgH/Lrga3crrfT495xGI=)
18: ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa (hash: U8GSnZZoap+4gf9xVbyRxlPJkgOVmU3uHH07WIciOyM=)
19: aVDRpTPNwuZUFLmP8Hd-9EnZEwM.roa (hash: T3CAf9VBBjcTFILr38JUqxoN1EFrQgvBKQ2GH9nS60E=)
20: aaHpIpUNJCPLemmyB6IfQXXyPEE.roa (hash: OldkvNHI3e3Xq22g7tLXVjk3zVZxwtRnCQyVA3M2gx8=)
21: bP0DL2QAJVKBhisPOEKSCrb5P7I.roa (hash: SSq+LObEvTskeEChP41dHP/d10Dn6Nt47PhXiubra4Q=)
22: bToR6umJYInit4YmCjsW758Knfc.roa (hash: 37BGec+qdTp+UnRV0AER+V8DA3MB50nkwTf82xMXRJw=)
23: fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa (hash: JpN5XVDZY1IahuGnYijyyeq5BW4QE/s6DEijCb+GpS0=)
24: fbSoKsXWu3vMu37siMiY-wAiEWk.roa (hash: o2jpBV54JiENtAI5H5hS+86ge/vbtsQ6m03B1UpGa2w=)
25: j4qiTlmyE2UTELOd_dWPpgYgT7g.roa (hash: tL7gSkajUFv82zTjqwfcJA15HYbXtYeZkwl/AW0YDBU=)
26: nrPLRJPmPFUNnRKVYlt5xynJqbQ.roa (hash: I11fElTQunbRvyiT3+4v3tCdsssjfQCu5kwVzj1TuOs=)
27: sJIXiWgnO_YLcbm9d5KkX_aEu-I.roa (hash: gt1mMf+MLZIqWTtv7KLzXlMwi6R2PvDNAN4i2GwfTn0=)
28: waLcrNH7uHQklmGVHpfmCMZcL3o.roa (hash: G6P6bFBr2kZHKhtwrt4aC293o8D2o+Zw99eQaBr2bOo=)
29: wsRgR45KaT49poTA_W1Ls5MLbfs.roa (hash: ViM4U6kU9YALqeWbdS/cNkJpeVULZz246+oAFPxJ4Yc=)
30: zRZZ6UwPjjxw58VaB1rpkI5mlKo.roa (hash: n+9o/e8utiREiQm1EccaQwJdw3Xtg72tou+ySQuFAbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:78:21:34:81:51:d4:05:3c:d8:a2:ca:75:41:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Mar 25 22:01:37 2026 GMT
Not After : Mar 26 22:01:37 2026 GMT
Subject: CN=59c0e2c9252b2d5002cfffb8667c5c48d5853f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:e5:94:f8:85:68:01:b8:77:8c:a5:f8:52:
3d:07:96:17:1e:43:08:62:38:34:ae:1c:f3:f0:87:
e7:10:ac:98:37:e3:da:a2:45:a4:c1:19:ea:65:94:
f5:e7:25:96:48:7a:f1:a3:70:b4:9e:99:1d:a7:d2:
01:5b:ee:13:1a:ee:4f:ac:96:b5:f9:2b:fa:7d:99:
f8:3b:5e:66:9c:a9:5c:af:36:9c:ae:12:25:12:38:
fe:77:74:e1:fa:f2:32:e5:97:61:91:f5:18:64:c2:
03:da:9b:e4:1f:3d:ff:e5:e8:be:8b:63:a5:a2:4a:
fb:d4:7b:89:41:bb:1c:32:2a:17:3a:d7:74:ca:6d:
73:f8:5a:3b:67:ad:43:e2:c3:cc:b9:39:2b:dd:02:
ae:fd:69:98:ea:c9:9d:74:e9:ea:55:d5:a6:0f:00:
da:b2:71:31:5f:e3:9c:c9:5e:c7:6e:c9:b7:99:aa:
6d:1c:ae:fa:ad:ea:d0:41:28:d4:63:52:9c:f6:ac:
6d:21:88:79:22:66:66:a0:69:e8:ec:3c:c7:48:4e:
30:22:e9:95:e9:38:18:10:0e:14:6d:e5:4b:e1:56:
87:01:c6:d4:b4:bb:19:40:24:62:39:be:10:f1:42:
1f:c4:f0:89:e1:b6:77:37:34:4a:1c:23:5f:70:14:
2f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C0:E2:C9:25:2B:2D:50:02:CF:FF:B8:66:7C:5C:48:D5:85:3F:7C
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4b:e7:8d:68:61:84:48:7d:e6:52:fc:f9:9b:e4:b9:eb:56:
7c:57:0d:2b:76:65:eb:36:9a:99:f9:90:95:4f:29:42:08:b8:
13:49:49:d5:61:30:32:5d:a5:4c:7a:f5:1d:f1:66:5b:c2:d8:
0b:bf:67:32:4d:eb:12:62:4a:85:aa:ce:ce:d2:42:48:aa:a5:
3d:b1:cf:b8:4e:a7:42:f0:e3:0e:ae:6a:d5:ae:fb:b2:3b:0d:
1d:0d:b4:bf:dc:6b:29:6d:25:a4:d7:fa:59:21:4d:2a:54:b7:
3c:43:17:a8:8b:56:c3:77:70:f8:54:02:88:a3:ad:2c:aa:c7:
47:a6:26:32:0e:07:04:35:7e:00:9d:ec:e0:60:38:1d:6a:65:
7e:54:c4:81:26:cb:a8:8f:db:e2:9c:7a:d0:cd:28:01:4c:94:
58:3f:68:e3:6d:cf:9f:12:f6:39:54:f5:8a:05:b0:f7:0d:15:
9a:9a:1a:94:4b:de:cb:bc:af:08:a0:55:fd:58:5c:4d:2b:e6:
91:4b:8c:61:7c:f0:3f:d8:6f:1e:15:f1:06:46:1c:03:82:60:
7f:a4:10:01:5e:50:08:bf:ba:66:bc:7d:c1:47:6d:13:f0:ec:
01:bc:95:ac:31:9d:72:7a:dd:fb:3b:b3:7e:d8:57:1d:13:b1:
b7:a0:8b:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBHghNIFR1AU82KLKdUE8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjYwMzI1MjIwMTM3WhcNMjYwMzI2MjIwMTM3WjAzMTEwLwYDVQQD
Eyg1OWMwZTJjOTI1MmIyZDUwMDJjZmZmYjg2NjdjNWM0OGQ1ODUzZjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowbllPiFaAG4d4yl+FI9B5YXHkMI
Yjg0rhzz8IfnEKyYN+PaokWkwRnqZZT15yWWSHrxo3C0npkdp9IBW+4TGu5PrJa1
+Sv6fZn4O15mnKlcrzacrhIlEjj+d3Th+vIy5ZdhkfUYZMID2pvkHz3/5ei+i2Ol
okr71HuJQbscMioXOtd0ym1z+Fo7Z61D4sPMuTkr3QKu/WmY6smddOnqVdWmDwDa
snExX+OcyV7Hbsm3maptHK76rerQQSjUY1Kc9qxtIYh5ImZmoGno7DzHSE4wIumV
6TgYEA4UbeVL4VaHAcbUtLsZQCRiOb4Q8UIfxPCJ4bZ3NzRKHCNfcBQvmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnA4sklKy1QAs//uGZ8XEjVhT98MB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEvnjWhh
hEh95lL8+ZvkuetWfFcNK3Zl6zaamfmQlU8pQgi4E0lJ1WEwMl2lTHr1HfFmW8LY
C79nMk3rEmJKharOztJCSKqlPbHPuE6nQvDjDq5q1a77sjsNHQ20v9xrKW0lpNf6
WSFNKlS3PEMXqItWw3dw+FQCiKOtLKrHR6YmMg4HBDV+AJ3s4GA4HWplflTEgSbL
qI/b4px60M0oAUyUWD9o423PnxL2OVT1igWw9w0VmpoalEvey7yvCKBV/VhcTSvm
kUuMYXzwP9hvHhXxBkYcA4Jgf6QQAV5QCL+6Zrx9wUdtE/DsAbyVrDGdcnrd+zuz
fthXHROxt6CLXw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:30:17 2026 by rpki-client