
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
File: UFkuaIlccGi0ZVUIkXrVu929Cl8.mft (raw, json)
Hash identifier: z5aqWM1mLNMBYSIC3Vy3ixZu7xpaPW0vcgyD5iW24Lw=
Subject key identifier: 6D:A6:E4:61:45:98:FF:C0:4A:28:BA:AA:68:08:30:12:33:61:9A:EE
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 019D26966EB09CFEDF72C5217EA825EC8244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
Manifest number: 18C4
Signing time: Wed 25 Mar 2026 20:01:26 +0000
Manifest this update: Wed 25 Mar 2026 20:01:26 +0000
Manifest next update: Thu 26 Mar 2026 20:01:26 +0000
Files and hashes: 1: 6cPzePL8SbPhYxlEre30SLCYl-Y.roa (hash: bpE4jQ6I0nBPjXRqOCXt82xgQ0N1iRPYG2gk58BlGfE=)
2: 7qKC_f93I4x5vZAkFd7YPrFcC7k.roa (hash: Fej8whp10bdKNIubAsMMxHxf8nDoH0W086yoYql/4Y0=)
3: AglMX7mwwb3rspJEIopyVPwTx-E.roa (hash: S+AWhAQbQR4GQpkHiPCQOCsaczJj/pHTNHnGM4CmrlA=)
4: H02yV6HgXbkB7Sblo8iq_zMpEUA.roa (hash: wdaj1AYOG7ohn8sLP/a8ErBCpxjqgUG9MpQNoEmcpoE=)
5: MNvipI6k91242S53W3jqVcArQhc.roa (hash: 7sDpPYB99HElo2KA5xuF+lvuTcscLhsFKunpulQrN5o=)
6: MiUKM4-anjUIiLLo25o4aW1endE.roa (hash: 8GJk2lpNvqF8G6oHGKOgI8d2pjeWdDUhOm/xZPhFJK8=)
7: NFAuHU7LF_HyqchSKTj8EafONIY.roa (hash: 6n1a8gPcx7eZe6weWqKlrMFgR6RhTx10TMdXBJFAWF4=)
8: UFkuaIlccGi0ZVUIkXrVu929Cl8.crl (hash: p1fXfj4WEuTztFJFJcmoy4JaiJiNjc6kf+ey/g2Qdr0=)
9: WFdUi3XXatfTABnfBpngGAHzARo.roa (hash: kKjPRwwZCBaY9u1h1EFLYB9g9DPTFuUTOwPzWAxE6M4=)
10: Zpq31QxZEBIlYUReZR_zQ9fqz_s.roa (hash: kvahSoEODcR6XaCVi1n2GMeJPQJl3cEsFyNEhPCk3BY=)
11: bHuZc9mUYBcqpEDyA_8H3U2OWFM.roa (hash: LIqVQ9mxztvdOqUbAJcArQV2MAsX+TwnaJ0MIMH4BK4=)
12: dvCXrpuIgKHCZtQqB3diL4N4JNk.roa (hash: fvscbXWy0N/msqi2rtIwXgUHt2kq1AX6g+9LTX7Mfrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:6e:b0:9c:fe:df:72:c5:21:7e:a8:25:ec:82:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Mar 25 20:01:26 2026 GMT
Not After : Mar 26 20:01:26 2026 GMT
Subject: CN=6da6e4614598ffc04a28baaa6808301233619aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ca:e0:1d:c4:1e:43:be:c3:15:43:31:e1:04:
66:c2:43:f7:b5:40:a9:cf:f3:02:0d:9a:57:0d:a8:
e1:89:35:4e:18:3c:73:46:79:46:b0:a0:46:b8:dc:
3e:bb:83:19:dc:51:82:3a:61:1b:b6:85:ee:13:c9:
0c:c6:7e:f0:bf:63:79:7b:19:54:46:84:ad:f1:5a:
25:00:3e:1a:7b:5a:19:28:92:db:3d:35:f6:e0:4c:
11:32:a7:d6:84:b8:fa:68:dc:6e:01:25:6a:ee:03:
e5:67:fc:a6:0b:db:43:6c:c7:83:52:5e:8a:41:1a:
23:f8:45:67:59:ff:e3:ed:71:09:d5:24:6e:79:11:
cc:85:d9:06:bb:98:73:96:9c:ea:53:ec:44:d7:38:
d4:62:25:1b:c5:91:dd:9f:9e:85:39:11:e1:d6:15:
78:55:5e:51:35:5f:ab:38:5d:cc:9b:47:06:be:ac:
09:ac:0b:6f:b2:90:7b:94:69:7d:11:c6:0c:1d:b9:
c7:47:77:fd:54:c4:41:b1:5f:23:c6:e3:66:27:4b:
b2:2a:4b:bf:12:98:88:e2:34:98:a1:c0:71:5b:47:
ed:92:e6:38:09:ed:dd:de:fa:ce:2a:5a:8d:ac:37:
8d:10:95:fd:cf:bc:63:6e:d4:65:03:b2:7b:4a:a6:
e3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A6:E4:61:45:98:FF:C0:4A:28:BA:AA:68:08:30:12:33:61:9A:EE
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d4:ef:80:ed:d9:9b:58:fd:b5:bd:11:c9:97:b5:7c:12:0e:
21:9d:1c:30:d1:ae:f5:16:64:2f:bb:d9:43:6c:10:64:a5:15:
08:e5:90:2a:98:26:81:99:f6:23:48:41:75:d7:44:3e:7e:e0:
d9:4f:f0:b1:c2:1c:e2:e6:fc:ba:d8:24:5f:31:09:f1:5e:5a:
8d:d6:76:22:0a:4d:62:f2:f5:c1:37:ef:61:cd:08:aa:74:02:
0e:5e:53:50:9a:28:cc:26:21:ba:69:14:d0:f8:d9:74:48:7d:
23:a4:e4:ba:db:86:4b:f5:65:c0:05:3a:e5:b7:4c:06:45:a8:
e3:6b:d7:82:b5:74:8d:8a:6f:f7:7e:97:47:51:c1:ab:69:1e:
40:bf:23:6e:d7:15:a5:7c:42:cd:e8:25:25:21:67:f0:99:75:
01:ca:39:53:93:67:6b:ac:2a:a5:70:60:04:5d:c9:68:1b:97:
e6:c2:05:e0:c7:9e:72:a0:c9:e9:34:3f:28:78:c0:27:72:11:
f1:1a:cd:e6:73:28:a9:35:d8:2a:df:f3:3b:0f:f8:9e:90:37:
86:17:67:46:79:f3:84:cc:a2:bd:9f:4a:0f:5b:24:03:fb:9e:
3d:bb:5a:42:d3:a4:59:26:80:e3:30:c0:7b:99:08:e8:c0:b7:
d7:0f:96:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:40 2026 by rpki-client