
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
File: F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json)
Hash identifier: ijw7N/TnlXQiLgDGWfEVweXIIHmoKA5YDxKmbtQjJBI=
Subject key identifier: AB:21:CD:51:38:B0:40:79:59:21:5A:BF:1C:F1:CB:5F:C1:5C:7D:81
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 019D27722CBF5D6FBBB9D5967BC1371B9E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
Manifest number: 11F9
Signing time: Thu 26 Mar 2026 00:01:27 +0000
Manifest this update: Thu 26 Mar 2026 00:01:27 +0000
Manifest next update: Fri 27 Mar 2026 00:01:27 +0000
Files and hashes: 1: AzmcY5nCIGmTzMnG9LruhHEGo00.roa (hash: cMtkfTcSbWrHSFsNQ7VLJqs4PAOGb+NkHqYcRF5Tw+M=)
2: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: 23d3XdA4Xpj0vyB3120RyZqRByBFMw0Eo97mRS7ofe4=)
3: QUqgtn-lJwbBGNQ7sOxUWfDggkQ.roa (hash: aehrgpL2xP2dBahqiFv4ISh/oHNM2DoxI6dhlxOiSWE=)
4: XtK9VzDXyv3sdwcTkwc5-Qya0DM.roa (hash: teUAHbuYhJZuEkE7pLbgFZIEibZ6lPWc/nTcJhJoJaQ=)
5: _9HboKByaSoMHnysqhZOYfqvY2c.roa (hash: Nl3Q+3ezv+N3KYuLNQGwihVhoKkWwwwu9DNF0BRDFQo=)
6: bfitLnMyeXOFCrvSzyZPQGVZpAM.roa (hash: LVos1+eHW85xt3iMWb/Qf02D4fJoID0MB/GuI/v1bVA=)
7: gWhgdmlB2lpWuOAIl6VpGFWYvj4.roa (hash: k99lMPnYxfRiGOs/iXJ3ma/L1zdsn4yoYB5uNClc8J8=)
8: jrOsijLSha6RECGlO0QB8BL6Ido.roa (hash: rgLT7tnIPQnMgoJlyDq0oW/MhZozoq4vvCs1tzNQUIo=)
9: nCoVQp-9GoVs3ADjl3g0gBazokM.roa (hash: lnGftBj6+HAUcV2587YKXP9gaJct0VpqL1P75Kb2wPs=)
10: vOpDb_RtDVytl5Ygs_Tb_D6twg8.roa (hash: 0yT29jGvPO8D24rMHIgvOXliv2Mpo0U2GR5aubiRoTA=)
11: yPF0loRCib-RBbqi2Jv4YOCUxA0.roa (hash: JdlBl0uHJZ27lQ7T6dMHN0yLNPKJ7KQjrbCgVKBWg7c=)
12: zXusYRLYwRAORttXPdckzwtPX9Q.roa (hash: LkaDbBqRpuuwa6zvdZYDfMixg8ARuKEupKYuwmwFLy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:2c:bf:5d:6f:bb:b9:d5:96:7b:c1:37:1b:9e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Mar 26 00:01:27 2026 GMT
Not After : Mar 27 00:01:27 2026 GMT
Subject: CN=ab21cd5138b0407959215abf1cf1cb5fc15c7d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:ec:d3:5b:e5:09:7b:e5:ea:25:88:90:c4:
43:be:ab:27:5b:03:46:aa:2e:fb:5b:c7:27:a7:f7:
6b:fc:ba:e0:07:54:bc:3e:3c:7f:95:31:f1:49:91:
2e:51:78:28:a6:1d:e9:f9:09:e4:ba:cd:b4:5e:18:
c6:fb:48:2f:60:f1:9f:09:cb:a3:fc:0c:7a:ec:78:
93:5d:33:0b:c6:86:2e:34:20:26:db:c1:d2:71:cc:
d2:50:0d:6e:40:bf:28:8e:4b:8b:03:66:4d:a6:5e:
2f:18:cb:ba:80:c8:a5:51:0b:a6:06:8e:7f:56:af:
54:09:bf:09:48:3c:e0:fb:6c:62:3d:3f:05:08:e2:
fe:78:a7:c8:ff:63:c1:2a:7b:ac:29:22:2d:df:0e:
ff:8a:89:ea:05:65:09:71:4a:68:4c:2a:5e:cb:13:
0c:20:89:58:b7:e9:4c:39:97:f3:b3:e7:b3:a1:2f:
84:f6:61:0a:db:2a:c5:50:9c:6f:a3:47:eb:a6:c0:
ed:b7:19:65:80:61:40:ed:f7:d1:f1:b1:fe:a1:cf:
2f:13:b5:24:01:93:4a:b7:fd:2a:e9:b9:50:d0:7e:
85:84:e3:b6:10:79:26:97:ab:d6:99:35:42:7a:40:
02:42:69:e4:61:ff:00:7f:f2:d2:18:12:11:42:d5:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:21:CD:51:38:B0:40:79:59:21:5A:BF:1C:F1:CB:5F:C1:5C:7D:81
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:92:98:be:33:61:51:48:46:38:47:ca:2f:22:e4:55:64:b5:
75:66:25:f5:63:70:64:b1:6a:16:b2:a5:78:86:16:12:9e:e3:
04:1d:aa:c4:d0:c8:45:7a:68:35:49:bf:df:4e:d1:46:76:2a:
e1:d6:cc:a2:24:20:7f:2a:0e:b7:a0:2a:4c:f0:9a:fb:dd:d0:
e7:6e:d0:ce:0c:be:44:ab:14:4c:a8:e7:34:0d:4c:a4:a4:5d:
68:2c:8e:e5:7e:0d:1b:a1:fe:d2:ee:4a:68:d5:58:5d:c1:b3:
14:42:cc:21:64:55:6d:e4:22:52:4a:35:47:bd:98:76:4e:63:
b3:5a:45:9c:b4:f3:e6:0b:33:85:16:3b:98:a0:64:30:2f:65:
44:0a:cf:aa:49:c4:08:af:96:b8:e3:ad:00:c4:e3:b6:72:1a:
70:45:61:2e:9e:0c:c0:31:f5:3d:f9:a5:61:5e:37:6b:f0:29:
a5:8f:b7:86:d7:b2:89:75:be:15:33:cb:b8:5d:85:38:68:1c:
d3:61:89:c2:38:b6:b1:cd:cd:fb:b0:5a:e1:9a:01:a8:1b:6d:
70:7d:05:76:ed:56:4e:49:50:50:47:e0:04:5a:9b:db:f7:b1:
46:17:36:37:d3:da:02:80:51:54:9f:c6:07:de:63:79:71:36:
4d:7d:09:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:55 2026 by rpki-client