
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
File: rtruqRF6HVzMMgIilVoJ-qB5j9k.mft (raw, json)
Hash identifier: 6G4QHrvE/KK3uOSvybEf2FJSRpFIjpKIF1dne+rXVzU=
Subject key identifier: FA:72:5F:53:B7:56:4E:F6:F9:4F:B4:5C:75:78:AE:7B:D9:44:9A:57
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 019D265F4200E4C26C3375B8C38BEB0A7557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
Manifest number: 1899
Signing time: Wed 25 Mar 2026 19:01:10 +0000
Manifest this update: Wed 25 Mar 2026 19:01:10 +0000
Manifest next update: Thu 26 Mar 2026 19:01:10 +0000
Files and hashes: 1: 0grhf2XqQS0PbS4vuPKgFUJ4CtY.roa (hash: CABCkAtRB5z7qM37KIh3THIotph2AI+4ndFJUzJYceA=)
2: 1NhMJ7iAKt1XNkcwpqjAtxDr1tg.roa (hash: EnRdzd4XuA4kPVdeCj63BslUTaDS51Ig0OU7ONlJnmA=)
3: 7TDWyr5P0SFkG_1wE_zPclx-LJY.roa (hash: mwM+t2AjMGEMAQqYQt7qupjhUbDte5jBQzS3pFunV5E=)
4: 8qGSgqlkHDr914hHEHKKhmYVXnE.roa (hash: frQT+RP9L9JKaXT7O/jbBEr9AzGG4KNbuIOuQ79wIgI=)
5: DY4whTo7KFMsapAbjbck9KXaN2Q.roa (hash: Z3/CUxyVCWOqALKEDmYApn9KMCw1qs9OcKyU5Z8f4RU=)
6: I7MkmQek9TX_IQqyz6tzXHWahHc.roa (hash: guTyQfwBcIAtfrQpROz3rqT3lhXR49lhfULYZRlg2k4=)
7: KSert21IyVLdzTzI3FZycKPooac.roa (hash: enNDLKMhC0/+6E/ssv2WFmJ1HNQhuj49stCcOOz9a3U=)
8: MmwxwXtvbBi5TfpYulx_NsdGK8I.roa (hash: CpEEnuPEEQ/Lt5U7MuRSDkJQEaOqlXnkUBi298BTux0=)
9: _EVIloZkNxmGZyYoucRtLycs2NM.roa (hash: hhnd4/lK0WaT0EX9/P9lh5SOkp9/hmkVwIYPiP2PidU=)
10: bCg7tEgKsGBlhvfXQ_p7fAinDt4.roa (hash: irzJrYBfyhTaJEK1r/bwWtkoGmHHDM2zuMWB3WPr1vw=)
11: fCGYEGlgfKRgTz2ikieXaOSbdRE.roa (hash: FYEv1aBWOrr2YMP+bkGoFPlLBNqhRh64fwSr9xKf+yc=)
12: i_8Ltd9wbcfD0mAu6VNm7MTQ_Ac.roa (hash: LXGue0t/sMA2Z7REoNuZF9MeZQKOuFmufuOtJTo72DU=)
13: l46NNfdll0CkF-GyTagj6nVywQA.roa (hash: Bz8PpZZscQ882ZYbIbT/ZfP7vpdnPTaRcDmY5jTgHws=)
14: nhzxopyxtZ3ZNpXqMYr4_bVPXYw.roa (hash: XWNHr6I19HMZl/NwLAbZ/QL51wNU0N0GDXtB6ekbpGI=)
15: qXx90FSqDeV2TFA5z5gkzjt5MT4.roa (hash: GIcu6RV+4oLEen2ihNm9iiU1rL+T3G8HifCPdddrGao=)
16: rtruqRF6HVzMMgIilVoJ-qB5j9k.crl (hash: fPHvGAAi7z+mTyEOEFredzv9LmN8ERoegzHY+8m9V6Y=)
17: vy_B141YrrWxhcrnlEIljoTLECk.roa (hash: xj/TtKRTGyOPxeeyCWIfxLPuFe3BEl/1ac8Kc9RexP0=)
18: w0RUzDJQ2sSi4lju4NoSu6IaZEM.roa (hash: jnFfoOHT3qsowloY5NEfrKxUN2Spb88yoOnFZYPFjK4=)
19: wJJlJoFiOUkrOpb9ptdc5xDpkt0.roa (hash: dmGJEO5REXkLJeMFm08GEDBzv38Ylu5Doyq2n0KUXjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:42:00:e4:c2:6c:33:75:b8:c3:8b:eb:0a:75:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Mar 25 19:01:10 2026 GMT
Not After : Mar 26 19:01:10 2026 GMT
Subject: CN=fa725f53b7564ef6f94fb45c7578ae7bd9449a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:53:4c:f4:cb:4a:1c:8e:de:38:20:0e:5f:
e9:25:15:3d:51:4e:06:3d:60:41:0c:e1:9c:19:f4:
35:c8:65:6e:89:bd:e2:f0:52:ef:b0:8c:e6:5c:f1:
ab:a5:9c:c1:b8:f7:55:88:e2:9e:a1:80:a4:17:11:
35:48:8f:57:77:d6:49:f3:57:0b:63:4b:5c:e8:ab:
46:06:a3:8d:44:fb:5f:b6:63:0f:ba:bd:cd:b0:99:
1b:f8:c9:be:f7:57:57:8b:97:10:93:1b:6a:08:5b:
79:fb:98:90:39:f4:8a:b8:69:05:73:06:e4:42:62:
db:0d:be:57:55:d8:c9:1c:c7:6d:cb:d5:c7:c7:f6:
1a:8d:d8:2c:fc:91:54:0b:93:c4:14:f3:15:c9:bb:
e2:f6:ae:cc:08:82:19:e9:8c:ec:60:fa:0e:89:fb:
fa:b1:d3:34:39:b8:e9:22:50:82:36:21:b7:38:9a:
dc:5d:5c:2f:cd:af:50:1b:2f:13:0e:81:3e:59:24:
cc:0a:7b:6e:41:38:4e:19:bd:d8:5b:42:07:9d:80:
9c:bc:d1:60:7b:3a:de:a8:ac:8b:4b:76:bc:b7:81:
e3:4c:9b:ad:51:11:67:7e:cf:00:da:51:27:55:ef:
9a:9c:b5:a8:6b:f2:99:8f:b7:b4:f8:e7:96:92:21:
3d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:72:5F:53:B7:56:4E:F6:F9:4F:B4:5C:75:78:AE:7B:D9:44:9A:57
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e9:34:2a:d9:23:c7:cf:fa:82:82:ce:e4:36:81:e4:ca:74:
dd:d5:23:62:f2:f7:1f:e1:ca:0f:47:e9:f0:ad:ff:b0:b9:c8:
55:ce:25:23:c5:14:b1:eb:7d:6f:b5:ba:e0:0b:c3:bb:e9:8f:
be:c2:2c:c2:16:82:28:aa:87:bc:b2:f6:05:15:11:8c:01:ac:
c2:07:da:8d:db:d0:dc:a4:5b:59:e4:d9:0a:0b:bc:48:de:f7:
61:90:0a:9a:7f:b9:d8:a0:1f:b3:52:02:ef:5a:4b:1d:b5:4f:
21:57:2e:c6:31:4c:0d:86:18:2e:0c:26:ef:96:67:af:37:1d:
47:61:93:83:8e:ff:13:d8:f8:34:ab:ae:f2:1f:7a:df:3c:f2:
f3:dc:0c:c4:d1:0d:43:a5:d4:92:1e:a1:dc:fb:ff:41:75:1e:
6c:26:b4:a1:ea:98:5c:b5:41:ce:a0:88:06:77:36:72:88:36:
e2:ae:33:f5:b1:e3:9b:87:86:ae:a4:6a:8e:b2:53:9f:e9:73:
f1:cd:65:b5:0c:c7:8d:ad:fb:0e:08:c2:18:d2:82:4c:c8:b1:
f6:c6:4f:68:8e:c7:21:f9:8b:a0:53:89:1f:cd:da:e8:a9:25:
21:af:e9:0f:38:ea:7a:28:12:7f:74:d9:60:ed:46:ab:41:19:
77:ac:57:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:03 2026 by rpki-client