
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json)
Hash identifier: V6BmnIoiYdyHWtMURMdSJzG7gdR7v2TjeczyJdAxCi0=
Subject key identifier: ED:CC:0C:D5:FA:EC:1F:6A:82:F8:DC:BC:E9:99:81:E9:D6:D1:0A:94
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019D24DED809EDDACE07F73E56F8D8540135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
Manifest number: 1834
Signing time: Wed 25 Mar 2026 12:01:17 +0000
Manifest this update: Wed 25 Mar 2026 12:01:17 +0000
Manifest next update: Thu 26 Mar 2026 12:01:17 +0000
Files and hashes: 1: 0x0JagMZAzLM1n-zWoG_bQ6CViE.roa (hash: SfuDR/8twfPwPJhc0obOew7t3fLekN2kbCMW8MltBXw=)
2: 1VWiLulxOxhHgQKw7IEXoo5ATg8.roa (hash: x6H4n3WYeW4YeYZUn/i7tLDaV8onmgp0QC27YOXzSKw=)
3: 3k_DXo4ofAXcZYPDcNLzBletpVk.roa (hash: ziaq+fvQdyZn6u+jlF4Bvlh3Rp/2kXUfv41qFJFnMKU=)
4: 6fueTwx89YJUS6Dpp5Y2h_u_XrU.roa (hash: lzYvahX3CMPBOibhapx+4QK+QwG3tziddPkBj6Q8iy8=)
5: JHXRcwdGLV-x0tFgIpk_GdvVv9E.roa (hash: 3yZYckxEFNC5HpjyWQ7bKTfulKrPrYVmR0yC4V1+t6Q=)
6: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: LSL0huDh9mG0pgotTdCNS8039N1ZUFyiJ2QB6vY1sz8=)
7: MzS0a-if8StAwGvSc_KLQZwctYA.roa (hash: Ih3ENOBKFmZrJm9qAmqbuLfexG64Qa2fws7qqr9UsAE=)
8: PMzy_qV1UY_0ZKB9kdOVuYWTmmc.roa (hash: TRI6XfkqHbFEpL8yBzCDgc2XJwsdsYj0moGkucrDeNs=)
9: SH8U9jyhwwnj6O-2MB6B9qfPeoA.roa (hash: KH6Pob4zCHmHkEXL85meTE0xHiRhBhf5Dz/U5ppUn7Y=)
10: SSmgAsy_v63G0x0CvniY0MZUVuY.roa (hash: yFieREh4VfCuVFIsv/snCcSsUAs9Ly0mjz5HTDRs6PQ=)
11: XZUSFN0ZQkh0yG6wsRasNCZb2js.roa (hash: OaqV+U26+yY0PDCrzwfVUjcWYp2r9NJh3b1AqBq7znM=)
12: c7t6wQUV-ONFA6vcvfwHnvEUxNk.roa (hash: 716daOJ6FBCxynQboT89eYOdyvqH+pTwI+F2BmxRbnA=)
13: dpYsR9k4RUPazfVjUT6YL3wkh6Y.roa (hash: LtFziGiCB6ZSk0IFD9YNBjwpbHldhOQjU/Bt2FiebEA=)
14: ifM73hFNDS-HrpzAXJZiRxf-Neo.roa (hash: k9cUGDKroPZ+BsMFJtunA+HgnGfK8aKvAASRzcpd1hE=)
15: ijRESvjuFsPkeA-Kyvc-Amtbhmw.roa (hash: vfx7UefHLR8jxOzWuroODVBFFWPo5JW3hdLXsh9WZmo=)
16: l6-PD9HcCpjzNNsh2YLpldybhf8.roa (hash: h+KJG4uCLzHaHPNy4HAUdZ3/RNK56Gvggg1f3IUneAA=)
17: m9gc2-3kvu1ECXe8zpu0Ico1Ebo.roa (hash: 1h9SEvwGU1RX/xwx1Rkt4nh0FAFsqK4wE3FVRKxswsI=)
18: oiFnJz8OW03WCWtsMHubcwWCEnU.roa (hash: NGNeywVT/9a30EqHXW3cwLcQm7wpXQ63rm74pTj5fag=)
19: r-29DfcBFqtrQoxy43Ck9AGvEJA.roa (hash: Vf08Uzf29by4OovXTt6InS//E1CSQstRVYxDVQ9TYww=)
20: zNK-oPXBuxp1H51GnlCM2lcNtzk.roa (hash: Vmb62CjMyELzaU8/TRy0Rr8Z0jw/kF2X0pLfeCoCANU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:d8:09:ed:da:ce:07:f7:3e:56:f8:d8:54:01:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Mar 25 12:01:17 2026 GMT
Not After : Mar 26 12:01:17 2026 GMT
Subject: CN=edcc0cd5faec1f6a82f8dcbce99981e9d6d10a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:67:9c:28:d3:65:b5:cd:d7:9a:b1:92:b7:
95:c8:81:5a:c5:34:6b:c0:89:63:3f:b0:5d:a4:f6:
af:7d:4b:b0:fc:69:01:b1:e1:2a:71:0a:d8:ac:aa:
c7:ef:88:5a:ed:69:58:9e:9c:ac:49:55:8e:3a:8b:
cd:44:c5:24:7e:b6:c6:79:0b:4a:ba:bf:cd:02:1f:
fb:bb:3b:0d:d2:56:9f:cc:4c:6d:fd:8a:bb:9f:10:
c8:f2:47:43:3a:f5:ad:15:37:72:88:34:97:82:57:
30:91:30:93:1b:71:01:4a:f0:88:0b:cf:10:b3:ee:
af:d9:4d:02:66:83:68:f2:9b:ec:b5:ae:c2:41:1e:
9b:41:4b:c3:e2:7e:41:f5:d0:83:2f:ae:ee:a7:6f:
d6:26:bc:ce:5c:e7:08:58:d2:c0:9a:cb:10:00:a6:
57:0a:b3:ac:bf:f6:f1:5d:8a:80:fb:16:0d:f3:9e:
a1:c3:52:d2:fc:96:07:e8:f7:57:98:8a:1a:ec:34:
79:87:d5:a8:3e:74:35:2e:1a:cf:48:17:7e:25:ff:
d3:b9:50:33:9f:a5:05:de:c3:f7:d2:ad:87:b0:5d:
2d:0d:9d:22:cd:cc:3e:ca:9b:65:02:17:43:da:a0:
12:d4:6c:b3:31:76:5c:2f:33:8a:9e:3e:77:fb:36:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CC:0C:D5:FA:EC:1F:6A:82:F8:DC:BC:E9:99:81:E9:D6:D1:0A:94
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:89:f0:3f:e3:8d:00:81:84:31:1a:bf:be:da:f5:9b:0d:55:
66:23:26:1a:6f:68:f1:2d:d6:95:f6:6e:85:62:42:6a:fd:1d:
ed:47:1f:6f:fd:52:6a:42:cf:75:2b:3a:60:f9:99:8f:9d:d5:
fc:55:1a:01:d2:90:f4:c4:19:a5:99:75:77:29:ec:fd:0f:47:
13:1d:76:6c:c1:d9:ab:21:b6:da:4a:57:4f:a3:63:2e:b0:6b:
6d:00:0f:90:b1:3d:fe:10:56:5b:3e:e9:36:52:94:cd:c1:d2:
17:65:74:7c:de:b3:f1:0b:2e:f7:f4:98:b5:42:72:b3:52:d2:
df:eb:ae:2c:8e:b2:53:93:92:4f:c7:a0:20:ef:67:b5:7c:bd:
f2:ea:ed:ca:a3:52:9d:44:a7:30:d8:99:b0:5f:5f:9b:6d:05:
8c:f0:e4:82:6e:e7:5e:61:b8:a7:6f:4e:6a:9e:4f:ef:af:1b:
96:f3:01:2e:c5:53:e7:e0:61:ca:1d:dd:a5:49:08:48:7d:93:
52:8f:2a:39:48:b5:44:d0:ab:c8:4b:4b:da:77:87:e2:c6:b0:
96:a5:b6:64:f6:38:e4:6a:9c:3b:50:92:90:62:d1:42:f8:a9:
fd:49:b2:70:43:dc:69:d1:f9:a3:d7:c4:24:83:c5:f4:46:5f:
b4:0a:3b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:25:29 2026 by rpki-client