
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
File: sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft (raw, json)
Hash identifier: 5Vf1NXGiwN0v0RZkJUjzMjSYop+ev+ZkWTuUoYZ5Ppg=
Subject key identifier: 52:0A:7A:50:FA:8B:2B:90:32:0B:EE:E2:2B:7B:5F:66:04:21:30:A3
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 019D273B0D1DAC740CD30E6F80BE7CA05CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
Manifest number: 18FA
Signing time: Wed 25 Mar 2026 23:01:14 +0000
Manifest this update: Wed 25 Mar 2026 23:01:14 +0000
Manifest next update: Thu 26 Mar 2026 23:01:14 +0000
Files and hashes: 1: 0NoIA4B1o_RwUOm9ByU8OFq-7hk.roa (hash: r1a5OydsBxO6MEl6yChWRAdGUgqH3oCyJLH5bIwTve8=)
2: 0QgAlgZPZqrv19rDzeh3eHUVUjI.roa (hash: /jOhKcUSCUKeMR6n8Ebwwi0KkeTixMIdUhS75UG1AFs=)
3: 0geZMvmwvZ4SsgUxE-raaM8yExg.roa (hash: wGsmWUUx+InKH/pHEB+22Iwd2em8rXE3d7MMVtqDdGg=)
4: 1-NOCLZoHctFRxLM-r5gF2XNKmN4.roa (hash: 8iv62DOUTXS1sb7lp8Qzp9Cwkm97PeNUgrv/Ly0R5Ww=)
5: 5qOLrCet16wYK8yjm6p9aPX1OW8.roa (hash: aLONT4uYmvdAHS5doL36LjtRsNGUktugfKwJ4Vmavww=)
6: 7OrrjRSIohhlOzDy5iCgiFkZ-w8.roa (hash: gq+NhZWA4AcO6EA3K0PZqbNfho/ij3J0dzti2DxF2II=)
7: 88OxeMyclDuCM-XGy1vyZJ0MjVI.roa (hash: NrH1CK+Qlg4Jb0s5eAUMievQdVKIQaKIT+Afju3AdMA=)
8: 8hVYPel1lCj54Itf-JZ0swg4NDU.roa (hash: 8vXpZvSQqRcIJBkv6M0oSSAAy8ttmBeMTFPoznBxM14=)
9: B9eEu8e4yIdtPqrh_iA5W7OUpOQ.roa (hash: 8CVCh5ZQ80XsLZZ+eaWcwJcJBHEenQUirqskEgN4w2A=)
10: BPyJKL2LEjqnxrjcu1EWzSfZjCI.roa (hash: IW2t1m5gIiuXHedBDTfnG+PcIt6emdN2QigirAHjYwY=)
11: GjZ1JpvrKQS1iLcDNvLVb2T5EBI.roa (hash: d0OoK7akyC1bmNgU+wnwXuN9qnkRWPDQso9AjYii7HI=)
12: H-2qY4a7c8MlesaJzQyd4k8aP5w.roa (hash: zxe6qu6AhRtbkeK3hWiyERWLP3LHCnSy6HKCWXJfa78=)
13: I8Iy4_ziF9l-jO-WdRwMy8_bW0A.roa (hash: mpJX+t/0+wMiXhav0ZYODkUjhmBnFQ5EDp/Bv/DB4Fc=)
14: J68_9Qnogqu4jKJivniTi4srlPw.roa (hash: ByPXDVPbgAkUrv0lsY2eYA3GFGZu05MRA9WYa9fH2qw=)
15: JP09kOOoDIPck9bP_vL_59ocq9I.roa (hash: y6UcXCGlAhYpDHZzGmM1JK8hUvLWF5EeltfmarDuJwQ=)
16: KUICOncS7D3aHrthtZYJyWJb3so.roa (hash: Z4YgeJXr9hd8vt3s+AhagMsktbm/uNe90ZBrA2ghNV4=)
17: RGqCvj9uTQazu4yVrY0uHX8imBc.roa (hash: xBw16ZaoKz3+2dPg6gUCa4pN1RDhHcc1C4AmW+IOCt0=)
18: RRAu4Kf3uusLM_s-L7i8xC-lax8.roa (hash: /s6Jj47WwdoBoOMK3IGd2te/xhi4Nj/NKSQB5UNNjnE=)
19: Tx4nNjRtwFbSFmUyNe0g3ERtKlw.roa (hash: kCLOm6CnSZXutMZvLsHNUNkxlqUEdGOIfaDrL0BbKRI=)
20: UhGW6dl-ME2u7P68oZQR4ngjVTM.roa (hash: yHH1bOJVbDxIUnOJRWdM16USF7uKpZsUS8QEK6mDBRM=)
21: XFwhkREkiCuis-x8G3Sppv-Bqow.roa (hash: OLOGsI2X7RE16wC+U4hSm6vZWwQ0fXQvkhO0lzPvMig=)
22: bUpsiGX-aGb34WbdNOIw9DZiH4s.roa (hash: xl03C5kmFTt0TLdmB8hxX8SxfLM5FDJ9iWqRX+kYeCg=)
23: ficnaqwZz9Eh17Tv92zrRP5UQnc.roa (hash: 3WSz2U210ojYNjYboRvj8jx8Z0W1JYVkUfqakNPoQvo=)
24: gB1pX4BxgfU_EYAITWsbI-n7JYM.roa (hash: 9HJZFE7Q9DE0uz+hhoDcpQ1v4qVPN4Dd5bNQtWv7Amk=)
25: h-DVLaLD3fOk7-r7yygvP-7G82w.roa (hash: bSqucFKTvyfgzaeGNnQuczPNKsSuEyi+XX78lRREfAM=)
26: hTPkcwELxJZyDnpp_4uPjK6uTWk.roa (hash: dstDHLyzAWv51zrNJrSqvTpN7X8CLl+/BjDhR+EfQtQ=)
27: imYPU-rTgiLBfbGJuTyuhX4TUZQ.roa (hash: 6orNc0rnhJILmpahuHtYwHjk8ytv9c4LqO9tdEs0kIU=)
28: jlEQqU8_vmkBR6hGRkj_btgUHEU.roa (hash: oUDpi5fHOC9AehxlR0Gt+x3Ku/0yIOWr5eUkAw2h5UA=)
29: kNXSQnW7_P8ntSSXDnxRMraKaXM.roa (hash: +oQBr9RLzJ3lq6HjViqWYy3YdmDFC0LINq7kQQBGd/A=)
30: opvih5xxd1A3a7secRqTbCxccI4.roa (hash: JJj7osBgzvQYD1FDJBv3PuuwK/WNsWoujvTBrwDuoEU=)
31: rOXSxFVdlGz4p5dzWag5xGv4b-s.roa (hash: PVmZOOJojEPRoDhr9z8ZMA/VoX6FKNqWidv30DvvQcA=)
32: s4NM_hszI3NHoc-KUiwIxLtS-BE.roa (hash: hggXHUncC0nQtN6/Yxfqom6znMWdj3u4WYY/vXLUvws=)
33: sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl (hash: +eor4aoidVI03x5GOa+pvELDoJ17FueZ4iIgpHD6Lmw=)
34: sZNRmX5-TWMqt6EpnEWQ2z3JLLw.roa (hash: vs+YC5ijta6AkuKsZWovwWmRuOBXgPOrn33z33jIpW8=)
35: tE6zrDYdj3KiYaKvZZw-m5wUUEw.roa (hash: pkquP667+a+Kvcmf+y2tDteV7M1Wm88bqo9mUrnbncY=)
36: tMTuUNH0SbtFDSs2xFUw5nOZU9k.roa (hash: 4+Mq45Ayqs1X4gtbMXtaUmq2jveO0RDco7Qaees0X84=)
37: uBzvm71VAJIjS9oXOzzgbdAbwTQ.roa (hash: Km5VRE7tBd96n2M5uc47Oim9JP4lJW6hKMdElqTzBXs=)
38: uYot5tEJfj6hFOwNQEImMW--BM0.roa (hash: ecbB/eDwUVf9YE82kPBIYgrYl7TjhzTaHG92py1d/js=)
39: vWRrWwtAN_AuXjapNHLwhv1SIBo.roa (hash: fe7bV4O9Sg+YHMh3WE3GIDnP0xzL2AGZaC/cvFRSiHw=)
40: xAqWyuVJfTBU5sO6tZYwZQPSFtM.roa (hash: MWM191D6m++4D2OGJ0Gjx6X+AoLdVo9Xw0WCymZXSQ4=)
41: z2vW7tiYOyrD-jbrKE2AFi-xwqc.roa (hash: QRZcJvpK6Wvq3nCgJSFwXPW7yw+NhY5x3R0Yau7Lprw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:0d:1d:ac:74:0c:d3:0e:6f:80:be:7c:a0:5c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Mar 25 23:01:14 2026 GMT
Not After : Mar 26 23:01:14 2026 GMT
Subject: CN=520a7a50fa8b2b90320beee22b7b5f66042130a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:05:21:76:bf:0b:88:87:c2:12:84:b5:5f:
27:9c:08:43:57:78:c1:6a:d6:db:3a:09:34:39:c2:
17:87:e2:c4:c4:60:b1:a6:ff:be:f6:c0:31:9a:e8:
15:fd:fe:46:c9:83:de:33:43:15:b7:83:89:b0:62:
76:ff:d6:42:ac:2f:0d:e6:fe:0f:43:10:2b:a1:8f:
cc:c8:94:83:80:37:91:f1:b2:55:76:fb:50:b3:2c:
50:a5:a5:a8:3d:2c:ce:e1:c7:03:fa:45:ec:86:db:
bd:67:86:e4:39:c5:25:a4:56:c5:60:f7:23:64:7d:
c6:6c:0c:7b:b1:06:a4:45:d6:2c:0c:f2:db:ca:43:
a1:5d:4a:5d:8d:74:f9:e8:10:d4:a4:7a:1a:00:8c:
d7:bd:24:76:97:8b:0a:f8:56:cd:5a:b3:d4:06:b6:
34:d0:9d:9c:d5:01:eb:a4:9f:39:b7:33:61:2c:1d:
30:f6:33:92:dc:8b:24:b1:6b:33:66:f4:ab:10:7b:
48:c7:bf:ae:be:e3:e9:37:4f:56:e6:48:3a:b8:3d:
d5:73:d1:dd:1d:4e:a2:80:48:95:49:8c:86:cb:bf:
ee:17:57:98:86:a0:6a:38:18:fd:a3:0c:72:d3:88:
b4:a7:e4:90:a4:9d:a8:f6:06:f7:02:ad:f1:58:9b:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0A:7A:50:FA:8B:2B:90:32:0B:EE:E2:2B:7B:5F:66:04:21:30:A3
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4a:98:2c:1e:b6:2d:89:35:42:d3:c2:e0:1c:57:d5:fc:2a:
4b:50:28:d6:eb:53:97:ac:6c:f2:ee:33:20:32:a6:9e:43:9a:
30:98:46:eb:41:27:d4:6d:a6:24:37:bc:b5:e7:92:2c:ee:f2:
72:0e:2e:5c:31:a1:34:ad:8f:cd:fc:66:ab:28:5a:4b:93:3e:
28:75:2d:32:0d:22:0e:84:63:16:86:6b:cd:ae:bc:af:70:bc:
48:11:6a:b8:dc:dd:e4:19:21:c2:2d:ab:a3:e9:5a:92:c4:79:
04:97:7a:41:21:f9:cc:81:b1:96:09:8f:59:e5:a3:98:d0:2f:
b4:e3:dc:ed:64:a6:ce:23:6c:94:71:dd:85:dd:aa:38:d5:c7:
38:25:c1:7f:76:c2:cf:7b:a0:d5:d1:1a:21:99:44:45:13:d2:
a2:38:6d:0a:3b:f8:bd:37:bd:27:d6:90:65:0c:93:12:95:88:
23:05:e2:cb:36:63:78:5c:77:38:21:19:90:de:99:67:82:69:
f3:8a:0a:9b:68:75:b8:40:6e:fa:45:98:f8:12:7d:3e:26:bb:
0e:75:a5:fa:2f:18:46:e4:1d:25:c0:27:2e:a3:b0:69:f1:a3:
c8:3b:3b:9b:cc:cf:03:8e:ba:e9:8b:03:a8:7a:b0:f4:63:11:
03:ea:a3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:00 2026 by rpki-client