
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
File: b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json)
Hash identifier: NpU0li4pxjSQ1QuJCIkcM2ligX2tsnQtwArP0ASpeEI=
Subject key identifier: FB:7E:D6:BD:E6:58:FF:87:CC:49:4D:A9:EF:F2:FA:9D:30:60:A2:4E
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019D25F13D0CAE586E0209E5D8C75BDDF37D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
Manifest number: 18C2
Signing time: Wed 25 Mar 2026 17:00:59 +0000
Manifest this update: Wed 25 Mar 2026 17:00:59 +0000
Manifest next update: Thu 26 Mar 2026 17:00:59 +0000
Files and hashes: 1: Bl7qLc9FykJGYpXpYNwQhUyoG74.roa (hash: W8SX4TsUCyntFAGgOTDaNHhl7cr4kTreCBySNi2bbWI=)
2: Dv8Xj573URhelnbmcJLlhmPDGD4.roa (hash: qlnvjr9BaLF0/kBmFp/g12eWnCcKOHwXVrBxaeJlhqI=)
3: GokOnLgcwEKBfp_sk2MIuuQ-_TY.roa (hash: zQRRa9NS4gIwYEiBt9K5iRhHmWoyu+BxEByrxS3tpEY=)
4: LvyPqPyFFN-1pBcoXn_N7wYhYsI.roa (hash: 7RYkLz7rm+gOi67pge0BfE5yBJYItLHKAHOteIJne9M=)
5: S-2u1gBJMJZerxMcphe152Mw_t4.roa (hash: zY+Kfzo1VDj/zBVAcDyYT3GL5KZN/lStcMsxxkbN2e8=)
6: V66mUyeO5X_O6JGUAL_LInwhpW0.roa (hash: WTpJ/+xyEsdWBV9e8DfdpDEOxLLOMxmk9zRPy8of4Nw=)
7: WAFGlC69-0ob11MbBQG2gcGKWnk.roa (hash: fs3/LEyDskuqCQv30OKbL6do/sufFAX29xlb3wrGuaA=)
8: b4JEVE3QPzkNygQLlI0iBGroxU0.roa (hash: GbTRuy5jkEUqjUNqE8oi/B2zDg7qLzkinV68BhIMhV0=)
9: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: 3wP3O6LoQxy5Ty2kyTwt2+yw1jb+uUQV4z2mOUImgQs=)
10: fX3KuGbBaSgozBC8VJSKif-SJWQ.roa (hash: YvJvbJ8D5DpHd4D9ZPHBQEllNbujWBnvbGsXVYfxrbQ=)
11: hS05mveN2aMKs32vgPN62OxZyU4.roa (hash: ppIsNge7NuGGbn+pU/a2PkG/ZsHka3x0Ag4o3/gijLY=)
12: iLauOm2qK9XnqY9ztUU9moKfnvg.roa (hash: MD/6ZVmSej56cLCXyFeTYzesox6xFljqFiihcyr2blE=)
13: mOIM-oZXOhPXcspDNu9QRUce9wI.roa (hash: TX23tkqgD+PXYsu3SvaWNxNHNfg0oQahFUpEkkPiqP0=)
14: maoDBiTq7OlnZavgCrqS2PNJzVg.roa (hash: 5lnUQuuOEn9crnGLrQz+sL2Asrk/3K0SqWLzxdWxHuc=)
15: nnaZA_UoDA_GsSj9AEkMSBFIT28.roa (hash: hf0b8TprwRdDFSmaoiM5KMZdx5WH9UrMc3oOOAhH8+E=)
16: rKU1mC3UrxRCEsXb-l25oaEBhJw.roa (hash: 4jepadulIWtRtacZBukRLsOXuyzRr5YeactatRKpnlE=)
17: uEioqsfjoD3Xl5Oou54cX2C0S34.roa (hash: go+HYucKqNseQJzP/5n7AMRia6twNmQH+kJ8P+JHx6A=)
18: w49hc9pt-rI9dE1aJPepq6cVJrc.roa (hash: XRnzI4j7+4a/orI2utUUHksc2DUd94oqWcO8QziYrqE=)
19: wCrdreEenBFJr40kfhAiXxXP4VE.roa (hash: 1w9FYdnTnijOy22xqaq4vC9r9i/Zq/2AJnQG0P3/L0g=)
20: yX_yhv_jUUfVVPMPnlpzUI5cFxs.roa (hash: bg6ibEfMDVCBPduOQFB/gGWqEjD+qw8SCbixEdu1S7Q=)
21: zyjvREkWFF6X7pbwt-H3M-ZqZks.roa (hash: HtAgtb461giJt36H40FvVS9Xbx1kevgnUEyHwD9fYBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:3d:0c:ae:58:6e:02:09:e5:d8:c7:5b:dd:f3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Mar 25 17:00:59 2026 GMT
Not After : Mar 26 17:00:59 2026 GMT
Subject: CN=fb7ed6bde658ff87cc494da9eff2fa9d3060a24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:41:27:c6:7e:aa:84:b7:78:5b:ed:57:67:14:
e4:af:fa:32:b0:18:dc:53:32:39:23:56:b9:bd:62:
37:9f:23:d2:b5:ff:b0:82:90:40:e1:7b:5b:35:a3:
9a:a0:b4:21:8c:a5:17:6a:02:e2:25:c3:f4:3d:de:
13:db:e1:6f:30:2b:e2:7e:a7:7c:11:34:38:21:87:
2c:68:b4:3a:e4:89:cd:76:e6:58:1f:cd:19:21:53:
9c:5c:8c:cd:9b:31:c4:08:89:e1:bd:cb:62:8c:eb:
37:d0:ac:bf:d8:4a:c7:fe:93:1f:53:d8:a8:20:25:
30:0b:cd:b3:15:06:60:f2:01:bc:e3:82:2c:fb:3f:
49:39:87:ab:26:84:75:f8:c3:7b:43:22:15:35:16:
e5:b1:b4:15:f9:75:56:f8:69:5c:9f:c5:b8:77:bd:
3a:da:dc:dd:e5:c4:79:f0:96:3e:04:0a:1f:34:91:
b0:c9:90:05:18:ab:c7:64:b3:ef:ff:f0:0e:80:b6:
4f:7f:bf:3a:3c:4d:e9:e3:29:c9:41:8a:6c:32:b3:
be:50:40:67:48:75:9b:3e:0d:1b:67:24:a9:6f:c1:
97:6d:39:51:da:62:b6:68:e5:95:39:48:19:73:98:
85:74:3f:2f:7b:19:c9:47:b3:32:73:49:2f:02:e1:
b5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7E:D6:BD:E6:58:FF:87:CC:49:4D:A9:EF:F2:FA:9D:30:60:A2:4E
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:38:91:b6:15:29:02:2a:6a:63:b8:92:ef:15:50:54:a0:5c:
56:cb:f2:5e:ab:00:a6:c5:59:0d:e4:07:a7:ab:3d:73:fa:81:
f7:55:08:71:f3:b9:bb:2c:8d:a4:e4:d1:69:b3:ca:01:29:73:
d4:52:28:01:2d:98:21:65:d4:07:84:02:8b:20:0e:3e:3f:43:
2f:e7:eb:8d:61:90:96:77:f1:7c:67:f5:c3:9b:66:d9:4a:48:
8b:49:0f:e4:22:57:51:12:cd:52:5f:68:bb:82:85:21:37:17:
09:e9:6b:e9:2b:57:1d:0f:0b:6d:6c:e8:1d:a4:df:2a:9f:0f:
fb:c8:c3:9d:9b:06:5c:3c:88:0e:63:59:7a:cc:ea:79:e0:76:
42:43:25:52:28:46:55:d9:9f:18:5e:87:6a:53:0e:a0:a7:0b:
bf:19:51:04:40:8f:e9:b3:b4:1e:b5:38:13:fa:b6:14:b3:4f:
83:d0:d9:ec:b9:1e:23:b9:6d:f9:9a:6b:89:a6:96:d7:12:8b:
2d:2c:64:f1:9c:d5:a4:aa:79:56:60:99:28:24:36:48:8a:a0:
25:c3:92:4f:34:06:18:cd:b2:2d:e0:88:c2:7b:bc:be:ff:b4:
5e:cc:5b:e8:4c:b4:5a:e1:81:a3:9e:b8:7e:e0:19:ee:95:d3:
c7:3b:6c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:49:56 2026 by rpki-client