
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
File: 437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json)
Hash identifier: 2314y+oOFQYLdpKpSubSi4HrGeH8pQ1uwj0NtbA7JV4=
Subject key identifier: 98:E2:13:A8:28:B0:2A:4B:2F:45:6B:03:6E:5C:A6:25:49:D7:41:0B
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 019D26CD32784CAB3CD311AAFFC454A5E112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
Manifest number: 18B4
Signing time: Wed 25 Mar 2026 21:01:15 +0000
Manifest this update: Wed 25 Mar 2026 21:01:15 +0000
Manifest next update: Thu 26 Mar 2026 21:01:15 +0000
Files and hashes: 1: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: jzuN4iLoJgcED8hUlZDGi8k4duhwS0XDCQQBKYgW9po=)
2: 6wXcfaNHNIKPsPI9yxLfZE8Q_jQ.roa (hash: ECXhCTN51hl1ngcmROyprePwXkJAyAbxEBIgymRFGBA=)
3: 9Y15TiSyn2wNGdw4h-rBMbyFaAc.roa (hash: 72P6b2id8MZPAK23i1WaqWGaegThFlPqZ6DtT05Xwkc=)
4: 9qGo67yr4HRrxBkAO69NOfH1xyM.roa (hash: 9kV8qye+hDokGEdQvc6wx6xFhzWb+QDG85qAmFrrRNc=)
5: HBS5CYoNWOXobGPomOlaeFTG4h8.roa (hash: D7vH7TbSVaq4pp/oo4dyUnQisHAJ6z4gW2NLDiuh3AQ=)
6: IHMW0iOLCaPimXteCXKckZiuXok.roa (hash: eKTeqM0561BoLTc+G0Vfml+zBr4iHbl5NUyAYC+RQzM=)
7: TBEAu5KKSTnnuwJ2g_Z91zWbXKA.roa (hash: smnw3toc9NIJXiN4piIx54U4f4Mbs+Yue06OIF7Ed2g=)
8: ZAW9hLoDnVp80PJK59uzMqseMQg.roa (hash: zROFGa57szBUE/hPHlcNo31U/nC8cbg/ehhEeCGDUB4=)
9: fAkVmSuP4C8Tt3ysLgXTuPqL4JM.roa (hash: new7s/Zw+Z3LxE1g27Tl/cjYXZW77+lOLNDzxaXxgPs=)
10: gi6Xytn9Iu0GHoS2bz8-D2_xuYw.roa (hash: zRXOYl9PkTzrkMP8UCwOsXf5eAi2L1/FabDUe5aeP6I=)
11: nLhpxF_vYMtPztaP2Ob2bwrsO-c.roa (hash: X8qVQYMo7q02YZkTCY5KKMS/PXISC65xUOcTfDXBI/8=)
12: r9Onf1Z5MTGo6HQvvK-yrmEpNLw.roa (hash: MdZ3nuj2R7EYy2YZK3WtRbRVVeyc+IpvGV7gP3oPGfI=)
13: udGl8isNJxExRSIhiZ2jjvucC5s.roa (hash: 46OQaBoVhzlHfO3MZlMA5GIChgYIIijufkFgTDDBkM8=)
14: xR-uNlcwaXq95_WLOZVSHPtWfsg.roa (hash: wbICW+uS9aypVREci9aQAEMY15M6aAuzi/Y5YFPee8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:32:78:4c:ab:3c:d3:11:aa:ff:c4:54:a5:e1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Mar 25 21:01:15 2026 GMT
Not After : Mar 26 21:01:15 2026 GMT
Subject: CN=98e213a828b02a4b2f456b036e5ca62549d7410b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8b:0c:cb:48:85:d5:40:65:62:9c:2b:11:5b:
d2:72:ca:8c:b0:d5:e5:ec:d4:4f:e0:75:09:ab:16:
d4:df:47:55:43:64:e9:21:04:8d:50:f3:92:c4:1a:
b6:51:df:b6:d4:53:46:83:4a:6a:44:f1:77:ef:47:
40:a7:d9:88:ce:6a:df:11:a3:a0:54:47:f2:e4:02:
9a:12:2c:21:2c:58:4e:d6:d0:d0:d0:1e:9c:12:a5:
ac:18:b6:8f:98:c5:66:06:e6:5c:81:a5:0b:5d:49:
5c:a1:ca:0c:e0:f1:de:95:bd:ec:5e:0f:f1:c8:0f:
5a:18:e2:e6:12:c4:a6:25:51:2d:3c:7a:4b:65:4a:
7e:3d:fe:ed:28:eb:ec:b9:90:95:57:d9:6b:5f:24:
c2:64:c1:6e:11:e4:69:32:c3:04:5c:08:ab:63:f5:
3a:66:a5:bf:a5:42:43:04:6f:98:44:8a:4c:98:8a:
e1:2c:24:0e:41:42:47:1e:04:21:51:d9:6b:e9:4b:
a6:bf:f0:a6:20:b6:e8:f1:82:3d:ea:80:f5:30:fa:
fa:d0:20:03:37:e4:39:97:94:79:4b:07:4f:8f:ef:
d2:f2:d3:01:09:95:f6:f1:48:ce:7b:67:6f:31:24:
e6:04:57:cd:b0:78:fe:bf:a1:7e:81:29:96:a6:d4:
8b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E2:13:A8:28:B0:2A:4B:2F:45:6B:03:6E:5C:A6:25:49:D7:41:0B
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4c:4e:4a:35:43:87:6a:dd:28:b3:c1:a2:bb:d6:2f:59:d1:
c6:e4:14:93:d5:6a:ea:30:3d:6f:7c:fa:2e:d4:43:cd:95:87:
e3:b6:4d:b5:ee:da:38:68:70:f4:12:df:17:24:2f:4a:85:97:
76:4c:e2:76:9e:8f:b0:6e:0c:9d:66:ed:c7:33:90:4c:f5:e0:
30:fd:2d:14:0c:ca:e9:6a:27:44:cc:3d:3b:53:cc:99:ba:5e:
14:9a:99:d6:ba:f1:7d:5f:f7:da:bb:48:9d:06:04:78:b7:2f:
7c:6b:0d:20:fb:4a:dc:e2:a0:3f:4e:39:83:21:74:e3:7b:4a:
8c:e5:fa:49:d7:f9:ed:bb:98:ee:f3:36:f5:a2:62:66:7d:1f:
b7:d0:52:0b:99:6f:df:be:84:1e:03:b4:a8:ea:fc:40:bd:e6:
98:76:e0:6e:18:94:78:2c:a2:a6:94:a7:55:31:59:e7:42:74:
df:1f:bb:65:9e:ac:1d:bb:e1:d3:ac:de:45:46:b1:ad:59:08:
8b:e4:70:1c:da:a5:e2:83:aa:2f:c8:9f:43:b6:f2:ed:f4:20:
87:2c:55:ee:b8:bd:da:4a:07:fd:fd:ea:31:38:2b:fc:c2:58:
91:e1:ae:b9:60:e7:e4:9b:84:02:e3:39:60:8c:ad:6b:4a:f9:
c5:18:32:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:54 2026 by rpki-client