
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
File: X-U8C_w8j7VrgRkTFxREQ-DinSU.mft (raw, json)
Hash identifier: ztTTEAka9kDwbVMD/K3JDeKLPg5YUF7fOlG9YaWmzQ0=
Subject key identifier: 74:00:58:D5:93:60:1B:E3:9B:CD:CD:0A:86:76:DA:90:6D:EC:99:53
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019D26B6AC42BD6C3BB21871632E48CE00A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
Manifest number: D9
Signing time: Wed 25 Mar 2026 20:36:38 +0000
Manifest this update: Wed 25 Mar 2026 20:36:38 +0000
Manifest next update: Thu 26 Mar 2026 20:36:38 +0000
Files and hashes: 1: 0fI4wmdGOQ1kLuvv1qHiK0C--L8.roa (hash: Z+X5uR9flAhy3leFkC+AcvzMmGH3LvnP56qA4XdH7UM=)
2: 3VIMZ8DX4eUWXSvminbUlyeNEUw.roa (hash: SSpv+TbecMgtO944rstKTobME07WfytXg2M37HTXj78=)
3: 4o_2rckGb0lZykFjdgjM4uq91NM.roa (hash: ttRNQDcCTeyqvWO8DNEI6Ins9g9GZIFUUbB3iwA2QyE=)
4: F48haJ2H_k3DeYlChLBOz7cW17E.roa (hash: biY7BtRxv+gbBOGOV7n8I87u8jvEs3wti0HPY5wJoaU=)
5: HlmZWhQKKZe7LbyNd19F5rOhw9c.roa (hash: Jouu85rdzqcnP2F6Q7QfLS0eE3v/NY3xgKHeYPAUq20=)
6: HqnftrYyJ1yAgfQwEdd5tsHdCfE.roa (hash: jbicct1WtkpH6m3I8jzSkrKJ8f1H+aOQwTwlTyII9Ss=)
7: KdCMLhhg2r8eMBKwq8Ds2bmqX7Y.roa (hash: efAG/Ph6arJLhBGmrTyKEVKSnEt8hq/UMiJWsX3vnIE=)
8: QPDNMv8lX7bUt4nPdwHeA5HfnUQ.roa (hash: k6bNCAHfEq3x6Q2sathuq/6NaJan2lkjLan8SrtjCpQ=)
9: UvPg35Yq3xMNtEBqghSE5VE5mj8.roa (hash: 9QZpYhxGtro9euVy7VMeIu9Apq5BDEIjw+5OY/rh3BA=)
10: X-U8C_w8j7VrgRkTFxREQ-DinSU.crl (hash: aZ1UdbsBRfafzit3KhlogEB3puyHlGqFt7xXKnv7srY=)
11: XNxe3vKUfc2mnoWqox5hdUzD4Yo.roa (hash: HP4Xiz8TLDUV4ayqkQKwJotOB1HZtnv9lMiJdjw+vlA=)
12: ZfXj0Cs-w3tqd3nR2H1CQe4DSjk.roa (hash: R+MPHlzGGciK9ag+NGwWU+mFvTI8dUefoBQsCIk0KTk=)
13: _1Ym3DQxPSAkKurGfjBzXK9MOhQ.roa (hash: kfNgZpEzaJm8FQ0NeRkgxhzR9ojmXch13nfc7Vaxlfg=)
14: _k8DEzrDGMjX2okhJZaU2LT2oz8.roa (hash: iuLXJjc5QDiQTjCx5usBxr4B2lgrFRO7LDfUsbNnhrk=)
15: bgaW-821yLoSyNN-uIV8dLZ09Fk.roa (hash: cVScBzeCdeTPlvYnxP+yGRvQaD/vw3vWP67W4LQOLvo=)
16: g87odO6LKbYtUQhiItIdJuDDOv0.roa (hash: ablxnUHmYfcNIwf2Jd68koMELTWUoB6TggOKa1sqdjM=)
17: j0uoN5YBgi_2OLXJRM1IqthbMEQ.roa (hash: QPkEQUvlMIbZJ7e0t7t/pBbggGpASfcrKRBQTf261vE=)
18: lrweZiSjlgHqgBNyk5JF5iC3jsU.roa (hash: +2TCUIQ339e21cgXf4PNZFT2eloz8XQMUvYOW8cr1IU=)
19: m7L8GdBSJuHsneaCtMC9pI2g3BE.roa (hash: 3YAZliRjuOyVqU2J+wnklyVi5UbfdetsxH5GTzeE2T4=)
20: xYl79rBUbdELQ6AMKSEtQnCQIN8.roa (hash: vQsd/qfiOWnQHHvOpAt49QM2u+39QxYO3Pw3tI/6McE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:b6:ac:42:bd:6c:3b:b2:18:71:63:2e:48:ce:00:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Mar 25 20:36:38 2026 GMT
Not After : Mar 26 20:36:38 2026 GMT
Subject: CN=740058d593601be39bcdcd0a8676da906dec9953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:f5:84:c5:93:fc:e3:71:b9:b5:41:bf:55:
9a:a5:6d:79:5b:a9:7a:5d:3f:0c:49:08:69:84:73:
9b:85:ce:e6:c3:68:44:52:a3:69:1a:a9:64:d9:42:
2c:18:26:1a:71:30:79:c5:f4:35:5b:9a:d7:a6:17:
aa:b2:24:fb:91:3b:16:08:33:88:df:f1:2b:cb:96:
aa:95:ce:95:fb:6e:ec:6d:cf:66:17:a9:49:6e:4c:
3d:1c:4e:17:36:ed:3b:55:8e:12:ae:ec:44:2e:62:
26:24:b0:31:90:2d:47:f0:4b:1e:91:a3:8f:f7:44:
db:e4:41:54:35:17:5b:c0:22:08:cc:3d:3b:02:c5:
0a:a2:6e:cb:df:c5:e2:30:35:53:f9:36:cc:f7:16:
15:13:5e:41:1d:0e:f2:62:16:de:26:7a:d0:86:5e:
60:e6:b0:72:82:62:fd:79:83:62:60:d9:82:35:84:
05:1b:61:b9:21:ca:31:5c:5a:fa:ff:ba:42:b4:44:
54:42:4d:40:f6:b3:95:76:1d:4c:83:93:26:73:3d:
40:f6:d5:ff:16:91:18:e2:d8:7a:de:8d:d5:12:0c:
04:b5:81:59:8c:c3:b4:1e:a2:41:a4:de:49:2f:22:
90:09:e5:17:03:19:a9:b5:64:c5:c3:de:15:ee:88:
bb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:00:58:D5:93:60:1B:E3:9B:CD:CD:0A:86:76:DA:90:6D:EC:99:53
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ff:ae:54:75:da:79:d2:a2:0d:79:87:cf:de:f2:b2:ea:a9:
9b:0a:bf:47:19:83:c1:96:ac:5b:71:6d:32:ed:f1:61:c0:65:
2e:67:ca:7f:4f:0e:14:5d:f7:d1:fd:06:0c:2c:30:6c:22:a9:
f7:f3:bd:94:19:4f:ba:f6:1e:07:18:c3:20:e1:28:f7:b2:20:
65:2e:74:a3:a1:96:93:51:ea:4d:51:ce:1d:f2:84:53:fa:a3:
f6:b6:d6:7f:5a:fd:df:bc:ca:69:3a:db:1d:35:6a:d9:d3:15:
83:97:c0:73:ee:2d:92:8a:1a:ed:2b:cb:ae:2c:77:95:9e:ad:
84:43:6b:e9:f5:7a:84:16:49:2e:3d:79:3b:70:97:53:67:3c:
8f:ba:2c:c1:63:44:58:e7:c3:dd:71:5f:f3:b2:6b:79:b4:5c:
53:1b:50:18:e2:ad:b8:c7:12:f6:9d:12:bb:ed:99:4b:6b:91:
b6:02:8b:1c:45:ce:74:7c:71:48:74:71:53:fe:a0:44:14:29:
3d:b2:bf:9f:e0:9b:44:d1:04:aa:ef:69:7d:81:55:c7:05:c1:
8d:d3:8b:d7:86:02:0f:d0:58:b4:ad:2c:81:1a:8a:01:7c:f1:
d3:07:35:b9:39:06:06:9d:3a:8b:e8:91:71:4f:34:9f:23:54:
f2:35:a9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:05:12 2026 by rpki-client