
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
File: FjB9KfVUPyHqMAm5Uj_nG48Taco.mft (raw, json)
Hash identifier: JSbhgkbok6x5ewSVub2ubCfDozW5jonzu7v8EnFiyAE=
Subject key identifier: 52:F9:69:86:2F:C9:C3:99:FB:A0:83:C8:74:3C:04:46:86:4A:4C:89
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 019E1D9045199974CA5E642361857B80A123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
Manifest number: 193C
Signing time: Tue 12 May 2026 19:00:54 +0000
Manifest this update: Tue 12 May 2026 19:00:54 +0000
Manifest next update: Wed 13 May 2026 19:00:54 +0000
Files and hashes: 1: 43xKNj8d1J5ZbdUCB9huFf51dlY.roa (hash: 0C77rsfbABsBAgXhMhHrXliF4EtBR+zdrxbfWGDutkA=)
2: B8WZmrTIa2ia6GnyZAc3UYzn6nU.roa (hash: aDzq92qdJqLonxrkAlG+0ptE83HlOqTUO72kLOAz1Z0=)
3: FjB9KfVUPyHqMAm5Uj_nG48Taco.crl (hash: nc/Imn6zGxuiegZr87U9TzYpl2MRe10jywqy9x+09l8=)
4: IgfAmjFLqVW-uCkvUtRuUz3fQFI.asa (hash: 1m1DNwPZO7HOKfXGKGJtUoAVRSnQcqTWcdbAqBMwcJk=)
5: Mqx-zb562ywYV8pX6wNPPIxwnPA.roa (hash: OtbembzOi1Q67rhuvfY9lENyB3xApH7b2U9zu5YCpzg=)
6: NAB7jeRg8xs-PO6aq-mV0JJ8Kt8.roa (hash: BsmxkgNXTeP+5y0lVg3F5Vd5iIuPFhBIw5y8AiZA+lg=)
7: OFmVOiCQetrNkOtmu3zCnKSHdbQ.asa (hash: Hjgzl6kCFsNx4hG5pItQKTRXXfWNO1jZJVBkNf2hlCc=)
8: VsDKu8p7jOW_6XSjzPi6HRYFCeE.roa (hash: meHtFxM6jSoAy9Y7SaMHGYbPp+WrlG0Kpg1DeuyayZE=)
9: X01sfTguEZRlbViMsVbdLRhWtwM.asa (hash: ITEiwLtEtyei9oziGBBYKolA2UiS65//73HaFywy0cU=)
10: ZYc4R1ZUoLFLDb0ExiBMqNZo4PI.asa (hash: hLDXFm9fYXyP3hsrCVS9C7xEpV87H1Pnzgc7QhcK0xY=)
11: bFkaQMapJshDo2hgXls_q4kXpds.asa (hash: Sdg8D0zVBbo49fzIHdCt36EnpRZv3zi4DnsZ64hwpRw=)
12: dAyDeUp51SPbYS8fxmJNG0482Ng.asa (hash: 6/i5RS8ShUMSXbYzZlVqHGyL8kobjym9yxw0gdprH7E=)
13: oxOGLICEA4GzU1uD1B6su4tziyQ.roa (hash: TvZctkDtv5gSKLWgki0lkEZNOjTs1UPnuilELJQxzxc=)
14: plAxktASIb4YACIP-hXXxq1vBPQ.asa (hash: YS1t0iZi+tG5TRUgxqQhrFYuMkSCCdM92QwP+HVjJ7w=)
15: xTbA2Nqn_OGftZ3ziVysvYIrYsc.roa (hash: AKh2Xxbl7XMpoBpUm83TcjMuEMCZWE9rKYeV/5q4Gew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:45:19:99:74:ca:5e:64:23:61:85:7b:80:a1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: May 12 19:00:54 2026 GMT
Not After : May 13 19:00:54 2026 GMT
Subject: CN=52f969862fc9c399fba083c8743c0446864a4c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:69:e2:7a:cd:06:18:60:bf:0f:03:b9:91:
e1:ec:6b:84:13:d7:9d:12:ed:25:a1:60:4c:1f:b7:
34:9c:67:21:06:2c:0a:31:aa:f4:9f:0d:a8:38:52:
6b:c3:e8:6d:43:2f:cc:90:d8:94:89:ae:67:f1:fe:
c8:e7:90:09:ec:7f:c3:c1:91:3c:7d:6f:c7:cc:ef:
d7:1c:df:cd:62:59:43:42:29:92:93:3e:f8:5e:7d:
83:e9:a7:2c:e4:66:90:20:44:75:27:f8:40:e2:0e:
ec:52:8e:18:07:64:b6:00:26:8d:04:66:d4:3e:67:
93:0c:36:c2:3e:4b:b5:7a:68:b3:40:d3:84:fb:5b:
73:c5:7b:58:0b:a2:f8:04:4c:6d:e8:b4:03:df:74:
83:a8:37:f7:b4:8f:70:37:97:7a:7a:ce:04:dc:a0:
e8:5d:3c:58:f9:fd:a0:96:a0:54:b2:68:fe:74:1b:
3b:64:c4:e7:7c:fe:a5:35:fa:91:77:ec:c6:8b:1b:
57:a8:e7:53:3c:db:30:0a:b9:e9:57:f0:a8:61:d1:
6f:e3:2e:e2:62:9a:19:98:34:93:0f:a8:49:02:7c:
9d:15:eb:6b:02:2e:34:bf:42:bc:37:a8:fd:a4:57:
fc:ff:41:2d:1d:45:87:aa:4e:16:59:59:57:d8:93:
c0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F9:69:86:2F:C9:C3:99:FB:A0:83:C8:74:3C:04:46:86:4A:4C:89
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:28:f3:13:56:c0:e5:38:1b:6d:5b:78:32:28:9b:f7:b7:bc:
e5:ba:d1:0f:6c:78:7e:8a:b2:2f:57:1f:1d:73:fa:35:e3:1f:
56:87:5b:6e:df:d2:32:59:27:86:e5:c9:a1:bc:cd:6c:92:b7:
27:04:b2:ab:82:ff:b1:a3:b1:e1:da:1b:38:4a:b6:2b:a7:32:
c6:2a:bc:16:3a:de:a9:1d:fb:c3:e1:be:a7:9b:de:66:cc:af:
f9:da:92:02:0c:eb:74:47:ff:bc:c4:75:b6:59:5b:c5:88:69:
53:c4:3e:48:ff:7a:48:8f:3a:7a:cd:49:7e:7c:99:db:94:ef:
ae:04:aa:52:91:07:b1:d4:40:dd:af:2f:7e:d5:3d:38:ea:b4:
21:2e:3b:22:c7:1b:93:16:aa:8d:37:1a:21:4d:b5:0c:50:20:
66:ba:36:d1:7b:30:e7:35:c4:ff:07:be:5d:c6:d6:d3:6e:8c:
3e:0f:76:d6:3d:46:e7:b3:9a:56:2d:39:84:4d:e1:ff:90:a1:
f3:7d:48:33:28:4a:c8:b1:e2:7c:2f:58:ab:4a:59:32:13:e7:
11:65:40:91:03:94:21:34:1a:45:5b:bf:36:7d:c6:a7:2c:0f:
8e:7d:bd:c0:06:7f:cc:11:35:7d:9a:e8:6e:c2:51:fd:f1:73:
2c:62:67:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:08:04 2026 by rpki-client