
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
File: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft (raw, json)
Hash identifier: Iv4QB3Y1qd/dO+RvebimIfditlWI1RGIN6u3Krw5R3Q=
Subject key identifier: B0:0F:9D:3B:75:6A:42:29:7B:AD:A0:45:3C:CA:DB:07:50:FE:1F:AA
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 019D284D53E40DA8008282D21DD94D2145C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
Manifest number: 18AB
Signing time: Thu 26 Mar 2026 04:00:49 +0000
Manifest this update: Thu 26 Mar 2026 04:00:49 +0000
Manifest next update: Fri 27 Mar 2026 04:00:49 +0000
Files and hashes: 1: 3QvNaBTxs1PjLqnE1VOIhI45V7c.roa (hash: WFmXAUAeTAg/52UhkkFJsciHEc280mGsBIoSVtzTk+c=)
2: 5ERvaJCjijofjZEEyshS2DN7G8w.roa (hash: L0qBBv8W1SeaQxwY+yM3qe9nhTQXTw1BhXzcHvSUW8A=)
3: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl (hash: KHFRczmsqgqqaWOkPYvYgMaXk5p1PhfXTvlQVbjH7ZY=)
4: 9FTrqsCyEAUkh4YPrtnvXY_X4l0.roa (hash: NsC3+Fupa1mo3BaWG6ctFYcneaqQ6slJ0dPljJ/QMXI=)
5: 9aKkqtdGa1ABukMG_yLakFtZfm8.roa (hash: KrI6Pr1fZmvsqfb7nSDh5Zvb9gr8g8QjzGikzHidhBA=)
6: AUmE2YbKzYGKohczr4jMETToilY.roa (hash: HU9CxUgtmqm30Tk4KPw7deDUwU0eCp+soz3LnSEevJY=)
7: D9ueYQAGeLx75Euk-RV6ER30CIk.roa (hash: UMB0udBkU8ic9PwtzEJZCPjDGJvIv61IcjNxyKBRmOM=)
8: Ewp2ty2AesH2Jd9VIJPXFtxGGxY.roa (hash: ZxzzP3F2j7XnslqpQi6FYUYx4xkKMdzCPqasRFAy5H4=)
9: Kg1pxmiChPV6fz5fVLcqDVZPGVA.roa (hash: SRNE2+sx9FNGp2a8VnJm35Y0pORouHxk0y7BXf1WH74=)
10: LD-3cK94EujojZ7ZiN9ZmU7leBA.roa (hash: cS7YGfmXGTnX+pBKgNWgV7kZw2s1r4jfbn1oYwmWhSE=)
11: LDB6M5jKAUAX0pW_Ow6Al3r3TVc.roa (hash: 0871MmeimwA3qa6fuNCLnFf75uwna79ZP/U6WsupA/A=)
12: N9SJly_iVwmkDpbj9fIuOkPtA8E.roa (hash: OOmuPWfaQlIoeFuc06EF+wS2RKHaEW6adcFSP2176rs=)
13: QwRlOQcYxSvdN2FJpOpcXHAZE5I.roa (hash: JFqMAVJTjeNtNUVkPs0ekqTe1vs1PCY+bp6cGNGb31A=)
14: RVyoE2mNMNeL3FMAr2YC6ZIeUpc.roa (hash: Mpj7iy2/6clWPzb2aVRARaYOeEI5SbFcnwOqd9+kHL4=)
15: Sjw15gl8TsiPxYWGxwle5yVmVpI.roa (hash: KyfTMSv87/ffxlDqBdVXEjJETz4cQjnD5+jWHw/lzng=)
16: UOozdgMWkk0RJwT79mq5mSwdurM.roa (hash: fJ4sYv6ZeyusyQL5urhnyr1YZ9IQ2Da9R2oWQOCYu0A=)
17: W80Mf4_ivkezZ0bshb3ksFAV6PY.roa (hash: GvDsjIe4MFxa+3NX/qnfQlgFppPBUAANoYbReZaXdUk=)
18: aWg21xYS3AUVunbtCCZYY0IE-qA.roa (hash: FfCb8eVmyUDpcRLrhqbLVf0Nu60pvL/vFuk4kk28e1o=)
19: eToy7Dy86gp6pNPMymfDqa4MdTI.roa (hash: dTIlaV1AqccCy+1JNiT8jHC2RbOVH0ledpyPTc9PFZo=)
20: gb92OyPtFV8ggf63vEi-KCDdf-s.roa (hash: +rhI/ux5CfxH5KWi60cOU2i3sB6AO/30yOzY/E/1xts=)
21: hCuigtGnGrmGxt4fb38OXAzWTfY.roa (hash: iil9Ij6qPFCaMYbGlEBHWiblDDvzQIMW27VYLojp5iU=)
22: hQ2GFL3dnEKzJSAPLs1axACh1nE.roa (hash: XfsYyUXshVaU5kesRq6m5zdn9J6jCqEigoDtxpwvnck=)
23: iHwdh7RQbqHYXi1tV5PT6-9KMZc.roa (hash: Vt5thfBB9WwucwEL2pJBtrKMfJA6iF3TBVYycl0yvI0=)
24: m5mX7hMQbCWq-GlbxcSu3T6pYEk.roa (hash: iTzlGtzNibw71SECgWWAtWLsGGjMg9WIxNFV2xfi6y4=)
25: mdu1Exn0vcwhf2D-oUz3A06rLz0.roa (hash: dkzkWhkhgt5FRBH7GshJAC2Twq+nZCCBlUCXlmzP+Ks=)
26: nVYscJl5lSrsIHBCJc12P0YYc1I.roa (hash: Qaq790oVJnBvnSmkP1Q9R1yIhbQhRqgrmHzuuPyL64c=)
27: quu8bKvWsrapvb9agdJWOzx8vCU.roa (hash: GuhXE2SWFgsGNwW07uZU74XAQZgfH3lzNUDa1zFBJKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:53:e4:0d:a8:00:82:82:d2:1d:d9:4d:21:45:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Mar 26 04:00:49 2026 GMT
Not After : Mar 27 04:00:49 2026 GMT
Subject: CN=b00f9d3b756a42297bada0453ccadb0750fe1faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:60:a5:8a:bb:1d:11:3d:83:1f:6b:bb:a1:
42:2b:69:f4:4d:66:f1:31:ea:9d:e8:84:40:82:29:
60:7b:58:f8:12:83:43:19:6b:bb:21:7b:d8:fe:aa:
76:e4:37:1d:74:5c:1f:0e:1b:8c:27:c1:c5:18:3c:
5d:ff:3d:31:6b:d0:d5:d5:bd:3c:0d:65:a1:22:a6:
cc:b2:04:99:d1:c2:9b:cd:0a:b8:50:7c:77:c8:78:
98:22:53:cc:30:23:a7:88:f3:1d:ec:4d:c3:da:c7:
17:f1:b8:84:07:52:da:88:8a:94:0e:71:cc:84:20:
07:b6:16:47:0e:b5:53:92:7a:07:ff:58:92:83:a3:
13:f7:c6:88:38:51:ce:ed:b4:4e:69:49:d1:91:1b:
ea:41:0c:bf:ab:06:2c:92:ba:fb:94:4a:e3:a4:6a:
9b:c9:9f:55:a4:5b:cf:e9:4d:3c:94:32:da:93:4d:
2e:aa:ef:f3:8c:00:e8:19:2b:cd:5f:31:0a:db:b9:
66:1a:dd:82:63:e8:b8:14:a2:41:49:d3:5f:77:ce:
5a:82:1f:03:78:02:b0:3b:b7:21:2c:1c:c5:2f:b4:
03:79:5a:9b:d0:a8:e1:9d:8d:1f:23:37:7f:dd:13:
76:b7:e2:f5:5f:fc:1a:b3:d8:4a:ad:5c:3e:a0:58:
92:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0F:9D:3B:75:6A:42:29:7B:AD:A0:45:3C:CA:DB:07:50:FE:1F:AA
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2f:ce:5c:42:13:50:d1:f8:ed:b9:21:72:cd:8a:19:5f:55:
b3:e9:9b:5f:8b:71:36:7a:4c:44:69:21:02:21:6e:a9:c3:64:
fe:4d:5a:16:8b:a1:d0:83:33:27:c7:23:70:80:cd:b3:c0:45:
f4:7f:37:a5:14:2a:ef:e7:27:ea:b4:a9:f6:17:21:d6:dd:46:
c6:e6:1e:5b:d6:bb:8f:07:41:01:ed:6e:15:0d:c3:96:3e:d7:
4a:e5:e7:39:c3:33:6f:d3:13:f5:58:6f:04:e3:9a:50:42:06:
cc:65:25:8f:b0:73:a2:57:52:b2:fc:51:b1:e4:01:fa:c2:e9:
67:65:3c:77:90:f2:f0:fb:75:2c:a0:4f:05:03:9f:c6:55:76:
50:4f:62:b0:4d:91:ee:f1:33:14:d7:49:1d:20:a4:00:4e:56:
bd:8d:b1:85:9c:31:c7:94:df:32:79:d8:43:2b:90:ba:86:52:
ed:b0:ce:63:b5:4e:7d:c3:6f:a8:d5:6a:df:5e:70:b9:00:85:
38:6d:17:a5:a9:e3:4b:ca:ca:26:67:e6:b2:54:d2:f1:a2:b4:
c8:2e:85:38:70:6a:69:9c:fc:1f:e4:00:c0:8a:68:b4:09:27:
fb:7f:85:e5:28:df:cf:62:5d:95:f4:46:44:68:85:65:66:4c:
f7:90:74:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:56 2026 by rpki-client