
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json)
Hash identifier: 0fnD36jyH758kMiyHjCWxWtvedU14z8zNIK7vkoB+Mk=
Subject key identifier: C7:F8:C3:87:37:66:B7:B8:23:D4:26:F5:46:E2:40:E4:20:C9:7C:83
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 019D29294C75DD39683BCDF8DC330637D3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
Manifest number: 1647
Signing time: Thu 26 Mar 2026 08:01:05 +0000
Manifest this update: Thu 26 Mar 2026 08:01:05 +0000
Manifest next update: Fri 27 Mar 2026 08:01:05 +0000
Files and hashes: 1: 5izoM-ae0viPYeMa8vG_OMdcCFM.roa (hash: TwuLhMgA2SHR4gXSc9/RCEg/7dBujziBPA56lp4yzpw=)
2: BKLkIdToQetqMN6t0fILb38dSDc.roa (hash: RhVkHdE+vukqBXIHV6N+0FaehH32ohYDLGAwN+SuRTk=)
3: CupzWU4aLHwacea9s2f26JgGU7w.roa (hash: YiVW0zn+2J0x+BF2Yslb930PEXt7HMZ5DbfmBNoWQKE=)
4: Hf9SE1c9_AO3kFICjo06WD1ExT4.roa (hash: Zcpcz8u2FNeH+3dXoD7WRhTdlszR9sgi9wm3DkRL4TU=)
5: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: GTXGb5YutohqDl+k6+DEKGACIu8NvhEUcFPSZgqPsoE=)
6: V6V_NlUP57LahAmPSdJLWOxrfrk.roa (hash: PQq468qMgQ7iMbphbUgZdzLfF9PWviyerqDZHzWerVE=)
7: a6tV42bT2z7X2lsjs8cvX8HIAIc.roa (hash: NDbBw26iXwsVl/ElEophDI0QYBlkmtkRinFz/9BOzMw=)
8: fObJjjriSFDg4fSQTq7ENWa9-zc.roa (hash: WGLV3VjdN5mD0f589CBjcyMgLQSoTV+NVe84m46+eBc=)
9: hcsvWgXQpRuMWY3WmGaGm9cGJ4A.roa (hash: dkGLaaklnk5lHe0yhu52I503lMVuY0bbx3ehGkFXyqY=)
10: i7574yuT4RZ2_MwlIM2VKqIIK2U.roa (hash: X+/UrliSCfToScMB/8/XDGdMggPWp6ennjed9G4uk1A=)
11: qJOi4zVPIJeiBz6kzCUQLpwMngk.roa (hash: vqduf5OrqJ9boER+M0PF82VqTnPYijX9elPDZEa03wo=)
12: qOIniIo2K3_zis3JibLadioBPRo.roa (hash: 5h4shskfhopVb9L7z02A78iAajdnh2sIBdf4Kss8RH8=)
13: vWKFpPFVl35hfIog_KoQjclWrmY.roa (hash: 7m8wK3gsN1166dBeFVQxAfE0K89nsZEcg+lnonfGv9Q=)
14: wWIoMzB39ahvaptJv9NhKUQr9Cw.roa (hash: 7GV/ae9yumSfYZH3dmuAGtWW+nlGHJx1A9VViiivwD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:4c:75:dd:39:68:3b:cd:f8:dc:33:06:37:d3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Mar 26 08:01:05 2026 GMT
Not After : Mar 27 08:01:05 2026 GMT
Subject: CN=c7f8c3873766b7b823d426f546e240e420c97c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:35:b5:30:94:25:84:f6:f4:ad:ac:14:d6:ae:
74:c2:21:ec:fb:e4:14:c6:d5:ea:4e:e8:17:78:68:
e3:44:4b:45:36:7a:63:87:c1:f9:55:ee:ad:a3:e8:
bb:21:f1:e6:9d:db:23:fe:97:cb:b3:ff:22:4e:72:
00:37:28:b7:60:5d:11:40:10:32:de:51:4c:38:6e:
db:21:5b:3e:8e:0c:a2:32:9a:08:9e:7b:ae:4d:2f:
e6:d6:fc:4f:d7:8f:db:46:58:da:a9:2a:ce:91:d1:
52:8d:12:2c:0b:2b:4c:e3:eb:80:a6:78:e2:d9:0b:
ec:c5:7a:e8:9f:b3:f8:ef:ca:7b:d0:41:45:c5:fc:
17:29:70:f7:5b:b9:6d:45:9f:29:db:dd:ff:b0:5b:
d8:6a:cc:53:8d:6d:49:14:23:4d:84:96:25:68:40:
26:22:91:ce:e0:a5:89:c7:96:2e:0a:36:db:0c:12:
0c:46:f6:21:fb:1f:49:b5:55:09:26:80:32:d3:ba:
78:e3:9b:36:cc:35:96:15:2d:74:e0:94:d5:5b:2c:
6d:ab:ba:20:05:76:97:3d:d3:01:84:93:fa:4d:61:
52:84:c4:bf:25:ac:27:c8:05:76:3c:d9:2b:70:bb:
3e:d2:34:ff:ad:b7:ff:18:a6:70:b4:83:0e:a0:c9:
31:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F8:C3:87:37:66:B7:B8:23:D4:26:F5:46:E2:40:E4:20:C9:7C:83
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f3:1d:72:64:de:3c:ff:1d:73:2e:02:3e:a8:47:14:70:02:
c4:b0:64:64:ab:bd:d4:a4:86:1e:f5:0a:47:1a:88:03:28:83:
e8:e9:27:b6:e9:10:d8:70:da:29:e0:25:f5:dc:5e:33:ba:3f:
96:e6:ef:e2:17:a7:f9:e1:a5:6c:92:69:98:21:f0:ed:2d:01:
5a:b9:ed:00:3c:0d:d7:19:d7:34:73:9c:b4:f8:1f:68:4a:0a:
60:f2:26:a9:9f:a6:d1:08:d2:3c:90:7f:4a:8a:27:a6:60:27:
90:ca:66:aa:28:51:f8:54:cc:3b:ba:31:27:1a:54:f0:da:83:
d8:b5:49:27:5c:06:ce:07:d4:3c:ee:85:b7:05:e7:0b:05:a6:
42:d1:e6:b1:43:b7:3a:d2:70:47:e1:fd:d2:cb:86:a7:87:e9:
d3:bc:c3:a8:81:41:0a:a8:ba:f7:92:65:1d:9a:71:c7:d0:6d:
db:c0:44:ab:c4:6c:40:35:f7:e7:aa:58:05:f1:80:29:21:f7:
29:12:66:01:d3:ad:03:a1:c1:52:2e:d1:6f:9a:fa:fb:5b:ff:
4c:02:01:09:ef:ad:52:bb:35:b8:a8:80:dd:c6:ae:e8:2a:69:
62:3b:bf:8b:e4:ce:c1:5c:61:c1:03:f5:67:e2:5c:9d:92:4c:
67:7e:04:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKUx13TloO8343DMGN9PKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx
ODQxMmMwHhcNMjYwMzI2MDgwMTA1WhcNMjYwMzI3MDgwMTA1WjAzMTEwLwYDVQQD
EyhjN2Y4YzM4NzM3NjZiN2I4MjNkNDI2ZjU0NmUyNDBlNDIwYzk3YzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTW1MJQlhPb0rawU1q50wiHs++QU
xtXqTugXeGjjREtFNnpjh8H5Ve6to+i7IfHmndsj/pfLs/8iTnIANyi3YF0RQBAy
3lFMOG7bIVs+jgyiMpoInnuuTS/m1vxP14/bRljaqSrOkdFSjRIsCytM4+uApnji
2QvsxXron7P478p70EFFxfwXKXD3W7ltRZ8p293/sFvYasxTjW1JFCNNhJYlaEAm
IpHO4KWJx5YuCjbbDBIMRvYh+x9JtVUJJoAy07p445s2zDWWFS104JTVWyxtq7og
BXaXPdMBhJP6TWFShMS/JawnyAV2PNkrcLs+0jT/rbf/GKZwtIMOoMkxnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMf4w4c3Zre4I9Qm9UbiQOQgyXyDMB8GA1UdIwQY
MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt
MjVjYzlkNmNmYmI5LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5
LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvMdcmTe
PP8dcy4CPqhHFHACxLBkZKu91KSGHvUKRxqIAyiD6OkntukQ2HDaKeAl9dxeM7o/
lubv4hen+eGlbJJpmCHw7S0BWrntADwN1xnXNHOctPgfaEoKYPImqZ+m0QjSPJB/
SoonpmAnkMpmqihR+FTMO7oxJxpU8NqD2LVJJ1wGzgfUPO6FtwXnCwWmQtHmsUO3
OtJwR+H90suGp4fp07zDqIFBCqi695JlHZpxx9Bt28BEq8RsQDX356pYBfGAKSH3
KRJmAdOtA6HBUi7Rb5r6+1v/TAIBCe+tUrs1uKiA3cau6CppYju/i+TOwVxhwQP1
Z+JcnZJMZ34EKw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:04:18 2026 by rpki-client