
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json)
Hash identifier: Si7gb8OIhC9/xXy+e4TolJCfJ9m+WKuVO6p+cZoaRMs=
Subject key identifier: 60:82:C0:D8:E9:E2:7A:DC:ED:DC:19:C5:C9:06:B7:92:97:C8:A1:09
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial: 019E1F10E8261D852F3B0A30ECD10D25B051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
Manifest number: 18CF
Signing time: Wed 13 May 2026 02:01:02 +0000
Manifest this update: Wed 13 May 2026 02:01:02 +0000
Manifest next update: Thu 14 May 2026 02:01:02 +0000
Files and hashes: 1: EXzeT1cNVQGrjDsUzW2UlqVdii0.roa (hash: 2mlpTBow4YOyuDssqjl1WEJ92MzDwM1udN0xfPDqww0=)
2: KaSYpHw3cgGmrc-y_KSdFLRvQjg.roa (hash: ngPn6nZOVUPCBtCKw0ufmBalbahdWHN3HV67pN56iBs=)
3: Krcq7ZeGH2Lmub3dy5F_WRkHwYE.asa (hash: btWWldiqWlNfihUeJ1u/kiPDZiSycBx+qnGB18Pzzk0=)
4: OmEoVv1hXlPAq7CNGemEHtoyCq8.roa (hash: 6Oxl07RE77xSOspyGrQX/nCyx5aobEqs28whvRim2nM=)
5: S3iUaJCc_acwdYntYs5xpD57Hbs.roa (hash: tcMMYIuMQX8llmY4X5nBERI+tJvSh0Ywu4Hfd+8wVHo=)
6: XEuJUbSaH7V7TR9Hm3H838oW62M.roa (hash: 6F0LWMrDhYqS4VjPhiF+6R/mdAzINXaIxftWMKZVOpA=)
7: XSUEp2ewELHmYwH52rXsSNXdWOw.roa (hash: YFKsQwoEE2JksK5/us9CiKgJv/xGESxAM1454M2S6rE=)
8: Y4Ju69pl9WjiYV9lWp9audfApt8.roa (hash: Gl1GkwHB6Z8deSvqoRDw7UqcxI8zxJVnp+wWJEZz2jc=)
9: _bgOMIgl5YD22GLFhIayF5W0H98.roa (hash: YVz2Tfwx8C1mKqc7gEOvJyA8kHNkiPYcjmBTfZn3ppo=)
10: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: ddsL9CYxd5ezRmjNo6nVy6AXBGM/swf5Ffqd/FIIPto=)
11: gdXy00VXftWIDW180JVG0J7ko64.roa (hash: Mqi2FwypjABIeq2Jh4oC6KTGiPlkVF54aa5+tKkk1yo=)
12: i447kXV0W4Fpt-iPvHlJibEh4qE.roa (hash: rFvI0GyPBU1XtWp0i4L0CFa9xuzoPkzXxFcU9z+mJ4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:e8:26:1d:85:2f:3b:0a:30:ec:d1:0d:25:b0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Validity
Not Before: May 13 02:01:02 2026 GMT
Not After : May 14 02:01:02 2026 GMT
Subject: CN=6082c0d8e9e27adceddc19c5c906b79297c8a109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:0f:33:8b:6e:93:5c:93:3b:52:69:73:1c:
c9:67:ca:55:84:fe:f8:43:9f:fa:38:06:0a:c4:c9:
d7:06:f2:46:de:60:40:ed:7a:83:73:4a:92:1e:f0:
64:07:c0:df:44:13:82:b6:81:9e:aa:f4:28:71:c3:
65:09:f8:d4:58:1d:bd:8e:2e:08:69:e3:a2:9b:04:
27:91:ed:c3:b8:f0:93:6a:3a:06:11:bd:39:c8:65:
48:c6:54:c1:65:ef:63:f4:74:1c:0d:10:fe:40:0a:
4f:f0:b2:93:b7:90:45:16:a2:a2:26:32:1f:35:c1:
5e:8a:d2:d8:1a:c6:7d:b3:f6:66:3e:93:e8:77:a2:
a8:78:17:b1:95:23:67:83:57:cd:68:a3:46:b4:d8:
32:fa:56:d9:71:d8:ec:73:10:71:d0:b7:cb:1d:1f:
5c:28:81:88:29:73:af:6b:59:fb:4e:c0:4e:06:dc:
57:69:23:22:4b:5e:92:bc:48:84:42:69:2f:cd:ce:
ba:19:8a:ba:a3:3c:90:47:b3:f7:d7:fd:bf:1d:eb:
fc:b3:01:f4:3b:2c:7b:53:de:f2:5d:75:82:68:51:
aa:be:93:e5:01:25:26:34:02:cf:ad:74:62:56:c2:
21:46:04:26:19:6f:ad:b9:04:ad:56:35:5e:bd:8b:
46:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:82:C0:D8:E9:E2:7A:DC:ED:DC:19:C5:C9:06:B7:92:97:C8:A1:09
X509v3 Authority Key Identifier:
keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:42:23:c4:27:26:24:ff:c8:6f:3d:0d:16:dc:6b:88:6f:6b:
26:7a:fc:f0:44:56:41:fc:92:07:72:86:8f:22:b2:9f:80:72:
b8:19:c6:16:c2:40:35:5a:28:ff:e1:a4:ee:43:9b:e6:e7:ff:
10:39:8a:28:a6:f9:25:dd:0c:af:ec:c1:23:b7:db:55:ca:9d:
7b:cf:20:8c:3f:aa:41:08:d7:49:35:b3:9e:cc:3f:f8:16:e7:
12:18:3d:f6:83:a5:2f:a5:a1:ba:db:c0:42:71:c5:04:51:11:
81:0f:34:1f:06:5c:29:78:56:bc:14:ea:41:fe:e7:12:47:e2:
52:f9:90:2b:2c:44:1c:9f:97:10:a7:aa:2a:8c:1c:44:f6:d0:
df:d6:25:65:f3:12:3c:4d:11:51:28:55:3f:f9:a6:8a:d8:7b:
c4:3b:88:a8:96:c9:b6:5e:32:66:7e:13:a0:90:43:fc:48:f7:
99:c2:e7:6e:2b:1a:88:1a:88:59:04:e1:1b:47:ed:14:4d:21:
f2:32:fe:a7:ef:59:39:79:e9:50:7b:1b:19:de:57:74:42:f8:
58:9b:b6:a1:db:07:d4:b7:0f:d9:e4:13:b2:08:66:ba:57:52:
f4:25:58:df:cb:36:2c:be:00:ba:36:79:da:3c:13:86:46:01:
2e:37:c3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:08:37 2026 by rpki-client