
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json)
Hash identifier: o/bvVI8bPjGyLE88GWevLzQRlPztCVP53pYdHbgVm/g=
Subject key identifier: 59:A9:38:CD:67:EC:26:84:70:61:68:9B:24:ED:4C:C2:B0:F6:D1:58
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019D28BBA041521606036742865CBE1A8885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
Manifest number: 1467
Signing time: Thu 26 Mar 2026 06:01:18 +0000
Manifest this update: Thu 26 Mar 2026 06:01:18 +0000
Manifest next update: Fri 27 Mar 2026 06:01:18 +0000
Files and hashes: 1: 6x8_lobLoVhuOkMPbJ37tyo730k.roa (hash: frU4mbSkgCyRaUyYfKiF6eXm6Dyg76kmIZLBN+kqhOQ=)
2: G6j6G54eI6PykBhSQs9rNNcS6hw.roa (hash: laEXgXrT36Ynj7L9LkdaNFFej1PJ+rq5ig2aomYZyl4=)
3: N2mIezuMwglH5z9Sw394yPABh_Y.roa (hash: yGQ16rD5VkDHl88O+y0XucdcYEVXoD+T2CoyV9LtCBE=)
4: RqXOnfuhgtOL3e2rdrVK_Ccn08A.roa (hash: gac1U5GhiAAvsADQW6zIs1K5OYBIIdxw6YN3Rmr6cdo=)
5: T4heRDKlYRou0MSfgEymplCs1fI.roa (hash: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg=)
6: WGwfm8cbVhTnz3acW_v7UxYOAWU.roa (hash: qj1x4HXcfbSo+Vlg5x+bKgQnTydN1BLn3gU6Y3DWQx8=)
7: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: Qc0yRLCeDpqrW3xuYJErmAcr75PhTxZsWLMuW5dAg5A=)
8: _Vz2AEmZ4dDgj8Ud8EDnRZzqDhg.roa (hash: a0HQa5htazrnK7Glu+swssGtSBkAyFnuHUYyfJ+ATNo=)
9: mdwMxB2i4JqGt_2u-3_ShCtSrqY.roa (hash: sXvWRa0cGZ0eH2CssCaF8CgkrXf1U+VjrI6hfvsrHmA=)
10: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=)
11: ofUllF-dWXHUPtc7vJnGioqPfCY.roa (hash: DKXn87ibX3uXQNhf8bxZ9LKgNiZi6MqVfnjhDNqP0fA=)
12: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (hash: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:a0:41:52:16:06:03:67:42:86:5c:be:1a:88:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Mar 26 06:01:18 2026 GMT
Not After : Mar 27 06:01:18 2026 GMT
Subject: CN=59a938cd67ec26847061689b24ed4cc2b0f6d158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a8:3f:e1:d2:75:63:1a:7c:a3:bc:8a:a9:3a:
b9:13:b8:96:56:1e:25:57:93:c2:5f:91:cd:47:57:
78:2d:61:a2:b8:ed:ff:ef:0a:40:c0:86:b5:6c:3c:
e9:8d:72:97:df:37:0f:90:23:29:98:16:9f:59:14:
92:d9:b1:d5:b4:87:fb:de:18:1a:cc:8c:ea:c6:5f:
e9:9a:23:ab:0b:a9:3d:0f:ba:cb:b9:35:6d:e0:81:
df:ef:80:42:34:7f:76:3f:fd:47:71:70:b0:c9:7d:
7a:41:51:b9:e1:83:51:da:54:85:6a:18:cc:b4:0d:
cf:2c:e9:6c:b9:95:68:ee:3d:4e:41:5a:59:b4:c0:
b9:1d:da:89:d6:36:36:17:7f:83:e5:4e:d4:8f:56:
12:88:93:24:f1:55:cb:47:65:e5:87:e8:f6:49:0d:
38:61:9f:8e:fa:ed:6f:7e:c3:fc:38:46:f9:fa:e2:
e4:bc:52:ab:6f:cc:a6:c4:b0:3a:de:1f:cf:43:56:
49:d4:6d:7b:92:12:a8:b7:ab:58:86:26:e7:15:6c:
b8:f0:b8:02:40:03:e4:41:59:e5:01:f1:af:c9:bf:
86:d1:25:a1:44:a8:3d:6a:73:40:95:94:75:26:4d:
7f:1c:83:d4:d7:9f:e1:11:20:32:d2:ad:e7:d3:0f:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A9:38:CD:67:EC:26:84:70:61:68:9B:24:ED:4C:C2:B0:F6:D1:58
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c4:1a:4d:63:03:92:03:16:5d:07:26:60:02:0b:35:78:a8:
17:e6:fd:e6:ad:e8:50:84:d3:3c:ee:20:25:d3:86:a6:5c:94:
be:4b:7c:ca:fe:4d:ee:b3:4c:03:74:ad:df:ab:0b:20:42:0f:
fe:d7:94:29:33:c8:10:bd:cb:8f:b7:cd:3c:6a:f1:44:0f:f2:
b3:02:e7:e8:e8:ec:98:51:26:bc:fa:66:70:8a:1f:db:89:8b:
c2:04:ec:c7:5b:e0:a1:1c:9a:32:cd:dd:00:48:80:db:d6:93:
06:0b:9b:b0:a0:9c:31:fe:51:c7:03:3d:23:99:7a:a5:ee:fb:
f7:ed:73:a8:e5:6a:e2:23:a2:85:6a:4d:c4:ca:18:7d:25:69:
06:61:ee:b9:10:8e:82:91:b7:d9:a7:da:f1:10:0a:93:6b:2c:
19:65:00:9c:d2:b2:31:78:fd:1b:4f:60:53:37:fb:d9:b0:a0:
02:8d:90:60:bd:33:e8:6b:3d:14:44:40:d7:6a:1d:a2:f1:2a:
7a:60:db:7c:f8:53:c1:c6:a0:3a:04:c1:b2:9b:af:97:ae:a4:
de:3d:2d:e0:7d:0b:b1:b6:03:e7:19:bc:61:4b:1a:86:4b:76:
82:da:89:65:fe:53:43:aa:21:a5:43:5c:5b:1c:d1:83:1d:4c:
16:1b:ec:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:01 2026 by rpki-client