
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json)
Hash identifier: PWRVVxm8D5NtWNvr7yFCEWPE+DCqp1yXw6LCgUrxOUM=
Subject key identifier: 80:3D:25:7D:2B:72:6B:54:03:A4:74:C4:31:B5:1F:63:57:58:7C:BA
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 019E1FB561E4DB89277ED0E656F8AD0634AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
Manifest number: 05AF
Signing time: Wed 13 May 2026 05:00:41 +0000
Manifest this update: Wed 13 May 2026 05:00:41 +0000
Manifest next update: Thu 14 May 2026 05:00:41 +0000
Files and hashes: 1: 1-BlSXqYyBKUdfU94NGff_PAPul4.roa (hash: 5sWUhwz5Gcq5/MhNhTcOvD2uhQ0tuUa+W9GIH9V8OaQ=)
2: 1fRolkRjd-APCzNnG-5bwuoOqNg.roa (hash: uECN6gUKiv+lFioLhpnkI4G1xAlKUZVG1VCjkCRQOjI=)
3: 2F897qCWvfh11SUzKWZ5JUV2vMs.roa (hash: BDm7sSnQsdMShImHFreyfB5QnyPZWja62eMfrLC52Z0=)
4: 2ecqjdvwwVeADzgAXi31Tj-9uMY.roa (hash: PYkuLmF1i/LptCyvK8hoFYIwFZUAA+w8WWm3Jdteb0o=)
5: 3DigKmaWxP-qw4TMo5nSEFFHNlw.roa (hash: SFQibSW8pDXFPKPG5MbvdKYY13AwQ4A4xl349zx1iCA=)
6: 91LDPauwCWQ9godr-xheoc62kZY.roa (hash: pLiJYVDF484K9mWtl+JKcTe0VgA4TfPZgkN8+ZrNjMs=)
7: 9XRLK1OdgukwixTDk2AKzFzTzbs.roa (hash: GCjLjdeI8luwyn1PGNY8s6Ygk/m/2VfxU7ui9AQ53ww=)
8: 9ohNILRN251EJCEOaFSvlOoDNJg.roa (hash: 2WRd0d2oEyTbSuOnacVQb9zr84nnPee4Alvgcj+3gVU=)
9: GrLjV0K1rg-_e4Na2PiEv2R8YXk.roa (hash: 9wH2XPtuxgQ1BMZZEBYsg16k1bgpNYguMty8atBuYf4=)
10: H9OemdXyC7tAgnmNPQ8cKr4kXek.roa (hash: Y6oksDUVORVjfAcT/DowbWJFqVZVzW3cfm1/KNkAcoU=)
11: Jt1l3PmmzdbcYP2rfmhzsDtcPhI.roa (hash: zt/605nd1EgOMLhSVE8EHytRNsfa1q/ziCZNE0ebjzg=)
12: PTZMdAT0hDazMuAsVI3CEFaCfvE.roa (hash: Z9gyi8MZGuuvG1z3xCSCxfacu9FwpO6Pum1TmCZXgaA=)
13: RH_HIlkMBo61W-LSnPnGJ5s3Jos.roa (hash: 7jSM+R7ontglcAC1koxA8s1vIKZN1w9IqBWxZkjEi38=)
14: UCw29YjY3cKmFjpAxHmvqF-bUCI.roa (hash: K5I6bkFEX1PYMGH5TucPKknBQXRBL1MadI7utz2hd/A=)
15: Y8GAhpOcUIyfO0CyQe49bNXAI8k.roa (hash: 49fIprccRJUVDzFPqcsAmiCiqNfTbqtbpr/g64iaVzQ=)
16: avrcnfB12N6L1uAItV4pxr4ZeBk.roa (hash: UCrkK/t7tVltSG/GoHf/iVcJnaXfqtG/1ac64yo7m4E=)
17: hMoYvytTC8MSE72GcaOmUQp55TM.roa (hash: QNj9222JszfBwsXWHLHqGbqHpk9emhsVOXPVoX1Flpc=)
18: ipercfJU5O8E0XasUBHV6tWGchQ.roa (hash: HApdigE0Ka0edSDTXKLYJ8nXJSrgF6YaO6XyN4xCAg0=)
19: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: 0Wn8Mi1DSDg2bRzl7KGnev3D5ScL+pgjr1+cG7Iwm+I=)
20: jC80DyZfd08kqUPQfGLYtFSpqeA.roa (hash: QkkRAI+hrNUAThXm4mIodhuWyIPzbk15zdb1sYevpvs=)
21: pU_XrlPF8BXSflHv1k6RicQ4hQQ.roa (hash: Zwjahs4SIZZ7mXWd1Naf3bCGTp7nVeEdZf7T1NQzjwE=)
22: r6qKV9nEirBUwP3KmuLyUTNtefg.roa (hash: iWqKDpTKfBVdyUC9r9QWpqk9OSg69kGIRh/unEHarFg=)
23: xJkF66cCvGxEcbXW72kYSvCe9pc.roa (hash: 8ukNpwANOCXSCFQousC6/SlMGWqDu4dvIjSPXAjmXlo=)
24: xQPVpv6oDfVejRnWElQGbmYJcaY.roa (hash: y3RHPAzs8tten2VXnVg+llQRjecqqHar32AXcJuIcWg=)
25: xg0VuiXqoXiww-GJ9D2_ljEA2vs.roa (hash: uA7hO9E7hUzauisNryngMo6HASraVHp6A2BgzZx4YIE=)
26: y78xNtcYu21c47h3KufgEPgZVnE.roa (hash: MwiDwZITS/z04aTqMBZZx2J7qe1RkzKld+egFNWQZro=)
27: ycFTntx4cs4onGaGpj0o47JW98Y.roa (hash: Ttb49ZN4wbdVcFXW70bm/uwe/p5I14QSBI+L4GbrQys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:61:e4:db:89:27:7e:d0:e6:56:f8:ad:06:34:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: May 13 05:00:41 2026 GMT
Not After : May 14 05:00:41 2026 GMT
Subject: CN=803d257d2b726b5403a474c431b51f6357587cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:45:41:30:15:a1:c5:5f:fb:68:78:c3:4d:
9d:78:b9:14:3e:32:07:4e:d3:b6:2a:21:e3:3c:ac:
58:6d:02:59:35:e3:ca:9b:65:95:02:f5:c0:c0:35:
bd:56:1f:5a:22:35:0e:b1:82:3b:e1:fe:8a:41:45:
1d:c5:b0:30:7d:47:f6:f1:b3:a6:56:61:25:0a:44:
24:0a:52:f7:ff:78:dc:1d:d3:20:85:ad:a3:3e:d5:
95:db:7a:43:4f:f5:2b:ff:1a:d3:c9:45:9b:51:92:
16:ff:0d:95:54:c1:e8:ab:d6:d4:3c:1f:00:f3:d3:
14:79:35:c4:c5:c7:fb:02:75:a5:1d:5d:73:fa:2e:
78:52:55:bd:7a:64:89:ae:95:c3:bf:22:21:c5:ea:
9c:b4:67:fa:31:37:ad:70:e5:ff:1e:0e:bd:1b:3e:
c9:a1:0d:21:c6:82:f7:a2:23:51:f4:8b:df:3d:90:
ac:ee:96:16:a8:cc:25:09:2b:75:29:a2:f5:95:bd:
fa:b0:a2:13:79:c8:2d:6d:67:d3:ad:4a:ef:68:c0:
a4:30:41:e7:2c:3f:5a:d1:6c:9a:9b:dc:7a:05:6f:
c4:55:30:5d:d6:99:22:63:1d:3c:5b:3a:db:ab:59:
49:7b:83:a4:cd:10:ab:f6:8f:d2:57:d6:80:04:f8:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3D:25:7D:2B:72:6B:54:03:A4:74:C4:31:B5:1F:63:57:58:7C:BA
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a5:5a:ee:4b:43:f0:5d:60:c7:3f:83:e1:55:5c:5f:c4:5a:
76:4e:e3:8d:78:32:d1:63:34:04:c0:49:c0:83:91:47:6c:7c:
b8:a4:8f:3d:d0:51:e5:3c:15:9b:08:48:2c:6c:d7:7b:b3:d1:
c0:ac:67:9d:f4:92:90:9f:05:21:70:f1:f6:d2:28:f6:e9:e2:
0a:35:12:26:1c:2e:d1:35:16:49:c7:e7:19:dc:5b:53:0c:2c:
73:bd:89:fc:df:f5:08:97:d5:ae:94:a5:dd:cf:56:90:4b:7c:
20:4c:86:43:26:6e:e5:10:a0:32:bc:4d:15:9b:97:33:48:21:
71:6a:9a:55:40:83:ac:95:8f:83:89:2d:30:f9:bc:f0:bd:37:
58:32:4d:94:33:2b:03:bd:96:7c:66:e8:d1:9e:6d:18:06:54:
3a:68:75:4b:b0:84:d8:2d:7d:a4:99:59:68:e3:f1:15:d6:65:
d5:ae:08:00:3e:3e:73:f5:06:db:4f:72:7c:bf:08:68:d2:37:
1f:44:e4:c3:e8:7e:2f:92:1b:a8:d9:40:46:92:3d:43:03:2c:
8d:7a:dc:b6:e7:91:ae:d7:9f:ae:17:53:80:df:41:e5:e1:ab:
c4:34:29:64:0a:7f:f0:c6:21:d6:02:c2:e5:54:06:9d:bf:1b:
38:a7:79:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:25:23 2026 by rpki-client