
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
File: zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json)
Hash identifier: zl8hgpAfAi1wghUzGmrpjbzxFrDlezJxpvzyz/zT0Yw=
Subject key identifier: E9:02:CB:23:24:47:10:88:BE:40:C5:E1:76:9C:C7:69:55:B2:CC:F6
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019D265ECEC814D81D61FC29767F41A69E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
Manifest number: 19EA
Signing time: Wed 25 Mar 2026 19:00:40 +0000
Manifest this update: Wed 25 Mar 2026 19:00:40 +0000
Manifest next update: Thu 26 Mar 2026 19:00:40 +0000
Files and hashes: 1: 5deMRBbWVqmht1sOWTPO9NesZX8.roa (hash: C1Nush/54sAAZxYCTt1+o50yyXszTnYgfSJMssdqdQs=)
2: A_mkzIEnEpz9WHJ6sBYtcPziHnM.roa (hash: IkCl1Un54u/G2EbgGGSpCdlDfdCqID7BmUK3v/PN75k=)
3: DDQuSRchUsTONQFDXN241i8makQ.roa (hash: 9Bakhxfn/ZSz8KdwGJaTawgcJWGxI/ZViAwYdC6JLp8=)
4: DZlCXtJccLP5CvH1IidVE75-VBU.roa (hash: GSRgLFliaDL+yaLYBTmTuTWDmh/1GTiBHJVvOOeVvME=)
5: FtjOuaGj6XuKQSprHYyjG7mq5BY.roa (hash: wmFztbGgVo+esEAQ1u/hISwsJhzp/aC8gT6aH5GO5u4=)
6: Hm5D_L_-X8N6Ngn0-sFiNZd3VnY.roa (hash: h/3w7HTeHzCXjM18AkUy2ZC4OLV5zp/8BEXLvTQ7pKs=)
7: IKMD8ag6jfyANNW_ZHHAmtoE8QU.roa (hash: 8g8dm3d3mbXQPnC1GQKn4g6IkfIUVku9Os+wN+fxyKI=)
8: J0hUsRCIsJxqBDRWowURVzD64X4.roa (hash: He+iX00zjq0nvLNeHU3AImzUnMzLPp3BFiM+8qRicMw=)
9: MsSlk3WQ80ETXzZv-_xFc70cB4o.roa (hash: UXtaZaFGO7Pek5r3b1Q7L+7LS6p3gDK8oAU7N1F6XHk=)
10: Nz-Qe8mnaPAmA7aeYjFa2RQZbi0.roa (hash: pgdQfCVii0tZJ2RyRo580T4O0JCC2mcRd1QEO6ECB2U=)
11: QLfh8QwO12RWWMJBR5QhVS6dgQQ.roa (hash: bXd6j/Agfn0Rdepo1CUkaCAq5JVFgCLN7MB9bLtEyjg=)
12: QPRoi0yT75-ubkX7PkD-gC3lgjQ.roa (hash: JLC6T3gloruu7glMw++YQSZ+CxmCxYVfu7O7HVXEONg=)
13: QkQat_PSicCGu8KQr65qaIs6Bek.roa (hash: q5fpggcrO0H1q8A29ksIPQ1SBgvNbMv81BZ6RhZHHN4=)
14: XVuJp7ALAXytVwSk0zaqxxzUAno.roa (hash: NqxrsMUQO+pc1G0DVIfP8opMJHuo3MUxN1e9ARpPw3E=)
15: XbZUxjF6er6AIYfuTf_SYoXj0T4.roa (hash: EU2xDMefpjL7XoPYAukKa0Xo42kHY6dXwLP+3AmR/q4=)
16: _dg99Pgu9sXy9n61V1SOyIAsz68.roa (hash: ljG6pKAy2VwHE3QsWNyoPRAh/FEzLDZlVIYW5TWBjuw=)
17: cmiAdI9ABY20r1DL-iK7mP_ABOQ.roa (hash: GVlILV9edBQcEnREaTXDYU83MwfyP0dZPoDbZHRuwLg=)
18: fcMKvvIc-uKMyXaXItl6BhOvYAI.roa (hash: bWIhwQ/lkTMKHU5pAtIRLA+s+dpO6uWcSZa145VsykM=)
19: jiIhZii3j4Bqym72DQeyWI_m29Q.roa (hash: +SPdj+zBKoxWRkJS1U/YY6cllApr1BpaKaVGD0dmzRo=)
20: kIBDemKkLzXeU67JQ9zAxAjs0Qw.roa (hash: ZgKOQA+PHq9i2ji6e+ts+3wSCdikkWfp1S4fKo671JU=)
21: kUL_GvYXS_94QSofdFlMNZdISv4.roa (hash: Mxp3nUXiwwphpooQtwG7jgdbNv/OEx4oNKjtwZp8Mv8=)
22: p18QyzNAN5RUJPiJZuSELMEw3Ak.asa (hash: 9RZhItiZOf789G2xrmC/EQ9K4w2RGZGUazP0P1LuwbI=)
23: qmF9fRcumk7X2oJN5OkS-C8FSYI.roa (hash: kNN2YWGRgsIQUTPdz3mbK/nIsN9Wk7Pw3UUk2fdqFdo=)
24: rClGIIO13EpmdapGJJLWbhKvgxk.roa (hash: RZrN3iBPqEfE4qlggDEYCJgP0mBpmcurRx75k/eSElw=)
25: sfIFa_zvIWFeaikhlC8p9lzyiak.roa (hash: JmdJqAk29N9Jb2v4hQ9hbp/VRCQfMA8RIGy2N4vYuEA=)
26: tP-ezWKWhAkf4p1w49tg891CKc0.roa (hash: qn7gDz9gLjNXw/+mpQ3scMnhqsd9j8XgUWH/XG1i/XQ=)
27: ulNfXAbUCn0EIzzAH-fg_QLGm7I.roa (hash: qj6bZX/kfBz2h0JS13N+LxoFybMNI2V0ojpMRowCNJQ=)
28: yVrNXqNEpQPVCD5-s0QzcdjfSt0.roa (hash: MPF8hnJnGT4tCUF+yYI/sK+YJjujYjlpvRajTbmYFa4=)
29: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: KPlMo7us0wfCQnhcve+iBrazPpKBRq1s2lohWs3SdnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:ce:c8:14:d8:1d:61:fc:29:76:7f:41:a6:9e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Mar 25 19:00:40 2026 GMT
Not After : Mar 26 19:00:40 2026 GMT
Subject: CN=e902cb2324471088be40c5e1769cc76955b2ccf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:75:4c:3a:0e:82:a1:0a:82:59:20:f7:52:
62:af:58:f9:13:8d:91:9b:6c:06:ad:4a:57:59:79:
f2:c7:23:25:0d:26:f2:36:ad:72:c0:05:a7:56:d7:
ec:bd:bf:fa:a6:82:48:54:09:e1:b7:7f:8d:aa:86:
1d:c8:f2:2c:a1:51:4b:52:be:42:8b:53:d3:eb:22:
4e:d4:1b:28:70:63:e4:14:42:ae:56:81:b7:2d:f0:
a9:ba:84:04:1e:b6:ec:0f:84:e2:34:a5:7e:78:fa:
0c:f5:d0:1a:1c:e8:89:59:c6:be:35:40:3c:55:d9:
ee:b3:8e:c3:23:16:db:96:4f:6b:af:05:2c:51:b2:
b6:07:f3:f7:9b:ab:49:f0:ad:f2:a4:37:f9:31:71:
80:66:42:02:67:ef:e4:3b:4e:83:54:53:b5:e7:eb:
fa:5e:19:4e:3a:ef:cb:eb:36:21:e7:74:aa:28:9e:
5f:74:26:0c:d9:8b:e9:5a:89:d6:c6:01:69:33:36:
e1:80:bc:d8:db:78:1b:30:bb:00:68:da:2a:e1:83:
e1:b9:8f:fe:4c:ca:78:da:0b:2f:84:4f:62:e8:57:
03:f1:3e:1d:61:a0:d9:2f:91:e4:5c:55:8f:18:5f:
b3:a9:8e:70:9c:89:02:b0:c7:3d:ba:0f:25:8d:b9:
b5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:02:CB:23:24:47:10:88:BE:40:C5:E1:76:9C:C7:69:55:B2:CC:F6
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ca:7f:fb:42:a1:5e:03:82:f2:26:af:f1:51:3b:c9:5f:63:
77:21:ad:c7:fc:7a:7b:a9:ea:1d:67:2e:09:a2:c1:08:3f:b3:
67:61:85:f1:e2:b3:35:3d:86:0a:37:0e:78:64:aa:ab:63:8c:
02:8e:44:51:f9:39:f3:6c:c6:ae:03:91:5c:bb:ab:f9:ad:8a:
a5:94:b6:2e:af:54:24:f4:eb:59:90:cc:f9:f3:8c:f9:23:0f:
a8:54:7f:46:78:37:80:98:4f:a1:f5:11:a3:ff:7a:92:66:05:
9e:86:6d:39:7d:95:7d:a6:fb:92:ad:7b:85:dd:2f:64:45:84:
97:06:e1:cf:ea:61:0f:d4:0d:1a:f9:42:50:cc:1b:9a:b1:a9:
05:40:61:3e:35:8c:93:65:f8:b1:7e:e2:26:0a:36:c6:44:f3:
7b:f1:87:28:31:e7:de:9c:eb:b6:9a:4e:fb:7f:ca:89:97:d8:
3e:ea:7f:3c:de:6e:d5:2e:b7:6f:db:2d:16:c7:68:5d:46:70:
a9:c1:f7:91:9f:89:b9:7b:8d:63:ae:40:9e:98:c4:3d:ec:84:
63:f7:7b:68:ce:1f:2f:1c:95:1e:0a:f5:02:74:d6:a3:2d:41:
e1:ec:fa:3f:57:57:95:6a:cd:a2:25:d3:62:25:15:63:72:14:
35:21:9f:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXs7IFNgdYfwpdn9Bpp40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjYwMzI1MTkwMDQwWhcNMjYwMzI2MTkwMDQwWjAzMTEwLwYDVQQD
EyhlOTAyY2IyMzI0NDcxMDg4YmU0MGM1ZTE3NjljYzc2OTU1YjJjY2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnx1TDoOgqEKglkg91Jir1j5E42R
m2wGrUpXWXnyxyMlDSbyNq1ywAWnVtfsvb/6poJIVAnht3+NqoYdyPIsoVFLUr5C
i1PT6yJO1BsocGPkFEKuVoG3LfCpuoQEHrbsD4TiNKV+ePoM9dAaHOiJWca+NUA8
Vdnus47DIxbblk9rrwUsUbK2B/P3m6tJ8K3ypDf5MXGAZkICZ+/kO06DVFO15+v6
XhlOOu/L6zYh53SqKJ5fdCYM2YvpWonWxgFpMzbhgLzY23gbMLsAaNoq4YPhuY/+
TMp42gsvhE9i6FcD8T4dYaDZL5HkXFWPGF+zqY5wnIkCsMc9ug8ljbm1dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkCyyMkRxCIvkDF4Xacx2lVssz2MB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr8p/+0Kh
XgOC8iav8VE7yV9jdyGtx/x6e6nqHWcuCaLBCD+zZ2GF8eKzNT2GCjcOeGSqq2OM
Ao5EUfk582zGrgORXLur+a2KpZS2Lq9UJPTrWZDM+fOM+SMPqFR/Rng3gJhPofUR
o/96kmYFnoZtOX2Vfab7kq17hd0vZEWElwbhz+phD9QNGvlCUMwbmrGpBUBhPjWM
k2X4sX7iJgo2xkTze/GHKDHn3pzrtppO+3/KiZfYPup/PN5u1S63b9stFsdoXUZw
qcH3kZ+JuXuNY65AnpjEPeyEY/d7aM4fLxyVHgr1AnTWoy1B4ez6P1dXlWrNoiXT
YiUVY3IUNSGfOQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:54 2026 by rpki-client