
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
File: aZHFbxGnFxxhUyOXafVXvroQGC0.mft (raw, json)
Hash identifier: 4WcRnzDXzv3zgwci/DwL3JTN1j8oYhjJ/fEkDi12dAo=
Subject key identifier: 7A:9B:F0:05:3A:64:05:7F:42:0A:32:F2:E4:F4:31:60:32:08:CE:83
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019E1F1116607E6988949A667396D24D4BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
Manifest number: 0C91
Signing time: Wed 13 May 2026 02:01:13 +0000
Manifest this update: Wed 13 May 2026 02:01:13 +0000
Manifest next update: Thu 14 May 2026 02:01:13 +0000
Files and hashes: 1: 0detsVv3VnmYHeQurxCIjBtID8c.roa (hash: 0pX6b3eXTKL9E1Fk4JhvGHfk6VrtSr0roszLfXSq758=)
2: 0z8pTI41iPuVrCQVQ1wuJedcLng.roa (hash: e+SXHoPepQrK1mT7vZuMdVv/Sb/mCHdwtmRTk5f2KY0=)
3: 1-1lvKVidMjz9SqtbPt81s0r7r0I.roa (hash: ZlBElaLY1A20NV3b70L3QV0eyy9Ku8m61r7maErkkKY=)
4: 2_-FI-AoJnOM9FRj9JIZ87TxIGU.roa (hash: fYqLfLAgXXv2j6Hlh2bmzcVErlr45q7qc3mJo6wcwjY=)
5: 38r2X0leHHTAmJ6zVJSwuzoD2E0.roa (hash: uyTAZ2GgNW9/wIH0EkQGQyRV3AY/RO2eHsNraGcFPPk=)
6: 3PUBNkz9FwV2NNGvr5c1xPHsrKs.roa (hash: Iue6j8hQXBufFHKI47UYN7vcS1Nx2fj3o4JuzfixAMQ=)
7: 7rTnCYh3ccijqtDYhIONfakeNR8.roa (hash: woFm2gn7FuVMAeShemzXKVcohH1CrzUdYLzQudjlSh8=)
8: AJ3MwDklWh6RGcZWO3B6VDqJAJY.roa (hash: Yuib442tbLdb8BWpxFaa8rNZZob81Q5G+L93ljA7GLg=)
9: BK8IgDa2YWfH15KeQoypNaZ7M18.roa (hash: 6BpUvOIxTW0cg027WM/QNtn7tQ+zM4t80RnLiUv7sIs=)
10: CZCLA3Cj6YYp_k_a7y0b2rbgyzo.roa (hash: SaDoVmzs9e3hbWzh+uCnOLVQP2mnuXiNzqqPyyTBq2o=)
11: F0KEI4lW7Epb_3eoekIpwBqbc2E.roa (hash: UC+E/xpST3sk4LrjHrlkIcP31YMZn/3d6DZdEgG8Rdg=)
12: FQ6e3qLq07N7c6vb8xSdMPOMvJc.roa (hash: jL7hfr1fG9q8Db+UI2ObK7nG/hXNzIiR02v0n72Zs0Y=)
13: JrpsDD8G_9HrVRADrUGdVzpQ0GM.roa (hash: PfSJmHGRfRFt+GOTf/z8aUHtcRQ35VQoUt2Ubm4KDs4=)
14: Latg5HfFxVV45cY_wXpQ9M7y2UM.roa (hash: AMl3v5ozRzV/5w1KglWOLAOe0okRBu64taR6MmvtD44=)
15: N0sDm-EFGV2amFYWHwErrX3Dbus.roa (hash: Xmo1dvVrCIWSNTaeVoMmKU+6tNLC/YtQosQjQwiD/3c=)
16: UypHuJtN1zmqt0Zba9DljNJ2WgY.roa (hash: PFDshKDp/mzgsdaZsjSV8dCLT3xJ6p+HUpwQxcGrMuI=)
17: X3BpdcrulpgtepJF9zuahb_VK1Q.roa (hash: taCCefT+4dHHdbGpdMXNmS+leAtxYaJiPmPLHRNTSgE=)
18: _opU9Zflr19Qgw9wxcT5CzBzFeE.roa (hash: hVBzTOs1aH7AxZYfWOOyLBurJardjc8RPMc3Hjjv5+g=)
19: aZHFbxGnFxxhUyOXafVXvroQGC0.crl (hash: zfGK6XcNzy2duLH8UTb8TzOaBVaZCfSDC8qsAyh+SKE=)
20: enYE37jQOciNrH4vp2_3FdUT0io.roa (hash: PoAlpwtftho9gluuF95P6FYOuD1hDRKv7R9Nta21XGo=)
21: fzJn3KF8bcdzSxxYVGgg9WhSu_Q.roa (hash: F8Y+icGMTI8B4xLO/6DQSh7tnQktMHf3JcYVYNoK3Qo=)
22: j6F5nKl7VxhTCPP7Z6aypppg1qg.roa (hash: b/KmdMBh7vGAQW3XZYIqLqb1iW1YZRpjzYx/XN6MR5Y=)
23: jyvaLm1-JBzFljrC8_Pb4f2rr4g.roa (hash: ED9eP9++ZKN93T06UmXrcQZgNRabnKbGllXuzLNPqM8=)
24: l7FVy9qV9r7TJi_Vr2KpMSypfts.roa (hash: BO7WgU3AlrlmLiXeaJCpacGRr3Q1uOzmvzOfD3QKH6s=)
25: ol5o-VeacDxR8G56FJbb2bssCJU.roa (hash: HWf9NNfp469bQ5Wf7jn4TMJbz+S/ZW2Aq8n1tyLEU+8=)
26: qBWm7A0WS3zBN-JGFS-9sK_Eh6w.roa (hash: 4LBBNQp4gDvDBqUejc/thQ1e9DZu2ZKGjdRJpeYildA=)
27: qJ6pc4FQIOGrKblUrmzqpKhY1W8.roa (hash: h1N79r6IwikpSxLGbvCodpvdgy0jF1MGCYu94qAhjf4=)
28: rMgOJ88XbhiPYGzsRStVGI5NH64.roa (hash: 6JK6wqTEVHHzKJFjULh6/7bms/veYid22s3prarQ2wQ=)
29: sDlXdZDu1orv91IpZDPEuqp1DX0.roa (hash: TcyOoNpXI7p/qfK91VU6zu8UKYoWj+zgwXX+FpfeRKk=)
30: t9VfVoic7D0Eb12yRbnLassyYY8.roa (hash: OIvXTMlAaBLVGYWH+/8UMptxQ45gYDbOsCNpVMjE62A=)
31: tEnzcmF181z_Fz4dFzQyfZ882o4.roa (hash: RBYNG12SzCTfXGwx/F5qbQVTQCBmyDYwNw6MWUM/ecc=)
32: txBk-VXH5xe4UoDume1p4XjQxe8.roa (hash: fvggVxYxk2NuJg8YSSyrCKqxJryG0wPDwlaCqOHmZFc=)
33: uBIYg6HBl9Jf8Kf0_1APF11RXj4.roa (hash: Cy62Nntc/tzkP5N8nJbuKZSP38j9mL0EAGyc0aabhl4=)
34: vDwD98yktnvAwmcDkgoxzIt5lCc.roa (hash: 47O3EM7Fv1PyIlfL1Ust6IBoybNxBv0++K0mVFDHqdc=)
35: wTgQ6fCMDPpS81pwpnjiyHzyTpc.roa (hash: ixnoZEKtVyJai2PVSvQa52pLsUnTfY2h9ItkAule9hg=)
36: y6XyUstS_SjZUuRcmwKI2O2hK4g.roa (hash: 6KaNgtch9hdulImqbKsvBI0tlfN0LaRnEF0phbzSwYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:16:60:7e:69:88:94:9a:66:73:96:d2:4d:4b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: May 13 02:01:13 2026 GMT
Not After : May 14 02:01:13 2026 GMT
Subject: CN=7a9bf0053a64057f420a32f2e4f431603208ce83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:e5:6f:6c:2c:26:52:15:75:3f:ff:30:bd:
da:be:c2:ed:17:47:5f:a9:f2:16:f6:a8:ab:2e:c5:
72:e8:65:e9:f2:5b:59:55:55:e4:13:75:fa:37:dc:
21:71:ab:81:54:39:a1:2c:ff:41:b9:09:2e:fb:e7:
70:b1:86:7e:3c:5a:4e:8c:28:d3:74:57:18:82:f5:
13:d1:7f:70:12:f3:30:00:83:bb:e1:34:f3:f2:1f:
a9:2c:ca:d8:1f:fd:47:07:d6:92:25:1b:2d:06:03:
e3:5f:77:30:3f:4d:70:0f:61:82:4b:4a:81:f4:dd:
0d:b6:de:04:8f:5e:31:87:31:7f:3d:be:a8:a6:30:
85:70:f0:92:fa:55:cb:38:dd:27:91:57:1d:28:46:
45:78:64:80:8d:2b:0c:29:70:83:c5:e3:5c:eb:e0:
b6:65:b8:d5:0b:a6:77:a8:80:f0:f4:16:9c:6b:f9:
58:df:f3:30:28:a1:94:9f:ae:42:b4:4a:df:50:51:
ad:d5:09:cb:cc:a0:23:5e:ff:8e:5a:89:17:70:25:
79:bd:a1:b3:5d:93:d3:86:ed:04:a3:9f:01:d1:b5:
48:14:11:3f:d6:14:df:c2:98:56:c3:7b:9b:64:da:
1a:99:d7:f6:c6:91:4d:21:db:8a:6f:88:ad:c2:93:
54:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9B:F0:05:3A:64:05:7F:42:0A:32:F2:E4:F4:31:60:32:08:CE:83
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ba:2f:1f:a1:47:89:28:89:81:86:b4:6f:ce:e0:06:93:c0:
69:d5:37:10:c4:4b:90:e8:8f:27:cc:9d:bd:15:e8:7f:03:76:
b8:3a:af:99:e5:b4:f9:92:61:e8:b6:f4:62:ba:cc:83:49:75:
12:89:66:f6:13:fc:b4:23:48:b8:2e:06:4e:8f:08:c9:bc:37:
7d:97:5f:56:59:ce:85:03:a0:a1:42:25:e0:28:63:02:29:09:
37:7f:7c:cf:87:a5:9d:ad:72:fc:38:2b:49:be:be:c4:f5:bb:
fa:be:a3:e6:c1:45:ac:6b:87:ac:11:54:4e:f4:33:f6:8f:5d:
93:a5:77:e7:14:45:a9:1a:fb:71:29:7d:dc:c2:2f:c1:0d:72:
3f:3c:49:7a:d5:09:96:05:31:75:1b:2d:f9:7f:f6:cb:f7:16:
21:af:bf:0e:2a:8f:2c:80:13:83:95:97:48:e3:d1:d9:0b:e7:
40:90:04:60:f0:4d:93:71:85:07:ca:02:57:85:26:f3:b0:6a:
71:18:07:f0:a2:92:3a:57:b0:63:d5:03:7b:7f:8c:e7:94:fe:
1c:42:87:9b:8a:d3:bf:49:9c:37:bf:16:38:09:a1:c8:10:09:
99:39:8a:d3:50:51:aa:fa:35:19:1b:b6:06:3d:4c:c7:9f:da:
48:43:96:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fERZgfmmIlJpmc5bSTUu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx
MDE4MmQwHhcNMjYwNTEzMDIwMTEzWhcNMjYwNTE0MDIwMTEzWjAzMTEwLwYDVQQD
Eyg3YTliZjAwNTNhNjQwNTdmNDIwYTMyZjJlNGY0MzE2MDMyMDhjZTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUvlb2wsJlIVdT//ML3avsLtF0df
qfIW9qirLsVy6GXp8ltZVVXkE3X6N9whcauBVDmhLP9BuQku++dwsYZ+PFpOjCjT
dFcYgvUT0X9wEvMwAIO74TTz8h+pLMrYH/1HB9aSJRstBgPjX3cwP01wD2GCS0qB
9N0Ntt4Ej14xhzF/Pb6opjCFcPCS+lXLON0nkVcdKEZFeGSAjSsMKXCDxeNc6+C2
ZbjVC6Z3qIDw9Baca/lY3/MwKKGUn65CtErfUFGt1QnLzKAjXv+OWokXcCV5vaGz
XZPThu0Eo58B0bVIFBE/1hTfwphWw3ubZNoamdf2xpFNIduKb4itwpNUAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqb8AU6ZAV/Qgoy8uT0MWAyCM6DMB8GA1UdIwQY
MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt
NjVkMTU2NzM0MGZkLzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk
LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbovH6FH
iSiJgYa0b87gBpPAadU3EMRLkOiPJ8ydvRXofwN2uDqvmeW0+ZJh6Lb0YrrMg0l1
Eolm9hP8tCNIuC4GTo8Iybw3fZdfVlnOhQOgoUIl4ChjAikJN398z4elna1y/Dgr
Sb6+xPW7+r6j5sFFrGuHrBFUTvQz9o9dk6V35xRFqRr7cSl93MIvwQ1yPzxJetUJ
lgUxdRst+X/2y/cWIa+/DiqPLIATg5WXSOPR2QvnQJAEYPBNk3GFB8oCV4Um87Bq
cRgH8KKSOlewY9UDe3+M55T+HEKHm4rTv0mcN78WOAmhyBAJmTmK01BRqvo1GRu2
Bj1Mx5/aSEOWcw==
-----END CERTIFICATE-----
Generated at Wed May 13 11:44:44 2026 by rpki-client