
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
File: 52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json)
Hash identifier: Bke3w2nf1a0vIVUhpVBMHKLiUHQhHYLpcEj5jHATMIs=
Subject key identifier: 33:6E:7E:C9:5C:8A:45:D7:9D:A4:BD:B3:41:2D:83:5C:50:17:14:20
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 019E1CEC0DF18D00385110F03062B698DDF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
Manifest number: 1953
Signing time: Tue 12 May 2026 16:01:32 +0000
Manifest this update: Tue 12 May 2026 16:01:32 +0000
Manifest next update: Wed 13 May 2026 16:01:32 +0000
Files and hashes: 1: 0AHImsbMetIR9BMrmd3qpDL6OSc.roa (hash: DTeCz+/e8dz3wJQ9sOWTPFZL93bF/N1lUR+tm2DzoBc=)
2: 13WTNIS6A0dihpmd1UZATvnV9K4.roa (hash: KHlhyO/RASQzL4I4VsavXB94t3yBZq5r1Q6M/Qi/yyE=)
3: 2UdLvPX3YAq1cbjvbaFDJ94Q47o.roa (hash: CfFJBlNu8bngGenYW74kMkvKFLTo885Zt17Qhidzd/I=)
4: 4NasKMzTYIVVFp-ICFK_D4b8RHc.roa (hash: QS3B9ES6p11t5I186zFeNR/WrVazilsqPckCmSgVmek=)
5: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: 4CqXZ5KH1Wf9RDXKnXbxFgaWoCzhG1bUSRouEzwICg8=)
6: 53LrOjzoo4E_JjsRePn1B73fFtc.roa (hash: NrghBBUU3a/THjQg3AhmUAWYpxF5cPsuE6iPec4zb/o=)
7: 6VTW_McNM2gKUiEd9Bc3Gfwm0AE.roa (hash: K0b0iJpVzmEPNcexIYjgjDjmiNKN28rNQZIz8nCu1GU=)
8: BAXXlSV06uuaY8KhG2sNC8heH1s.roa (hash: ajZgoDJ8e9hLXYtp4Hn5DX0X8/kHLIPyvG3eppF2AQs=)
9: E6Wekcit-EQ3TZTNVUcjRu1lw6U.roa (hash: 2zO8BVKL4MFsWKURY5zzeGF0sEV2VJqOByilAEcD1Z0=)
10: G_gkubCq_7tYxAJOgwxm9_sjOcc.roa (hash: HTO/NujLkueszrKTl1jypitd1221vQx4YiPnzs/pQes=)
11: ODKfzqsOm3GYnHVgYihmwo3Lqyg.roa (hash: 3rOjqBfIhvTmF0AbgtiUHguUfUPEBFg5H4WMtyl2b1I=)
12: SqJOIStSbkS_sk9tOgXlq4DG9kU.roa (hash: ewVntvl+465lh5V5DV4NxkandQKCa7/BAmKlR+Vmpqw=)
13: X1Gmpx7ELtfrrjtvBfMJbDc_PDU.roa (hash: 3UVhYg8pgXN07FqWkvVyaQiJdCXbQoNnU+1Ji0Fdl18=)
14: YGUZmB5y9Pszxg9mTfxKcyU3wP0.roa (hash: 6EGPa2utleZno/C5hAqexr1JPSm93VrZZ+jL9Q+c4xU=)
15: lC16rIMMnqHHfbg9MNxvqn7mqxk.roa (hash: Mdn1l4dZ+NSM4dG4u4z56RyJO1WeprirQF3/FTo90cM=)
16: rOn4sIWHt6rCUNuLxoNvj-X5Ebc.roa (hash: YE/iZ6y3DFs2Aj9gfYd2A/ANh76BH41kT6FkdNGSzDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:0d:f1:8d:00:38:51:10:f0:30:62:b6:98:dd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: May 12 16:01:32 2026 GMT
Not After : May 13 16:01:32 2026 GMT
Subject: CN=336e7ec95c8a45d79da4bdb3412d835c50171420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f3:9e:90:31:4f:df:eb:7b:bd:26:3c:3f:a4:
40:94:45:87:53:10:6a:45:f0:33:a0:e8:f6:eb:fa:
7b:19:4d:69:4f:24:1c:4e:7d:5a:f6:c4:79:50:16:
c1:96:e8:5a:63:5f:a2:db:ff:ec:2b:a5:3a:6f:34:
8f:e6:fe:f7:56:17:98:15:52:fa:f4:8f:af:bb:2f:
c8:71:71:d8:1e:b4:3c:14:4e:ef:57:cb:4a:72:7e:
a5:34:eb:82:e1:98:81:1e:d2:0e:7d:db:99:35:a2:
a8:97:f5:b1:14:3e:9a:bd:e0:a4:48:49:7e:ab:57:
00:8d:54:8e:46:27:48:53:a4:1b:28:d5:f0:c1:ac:
aa:23:95:66:35:62:9d:97:2a:d1:97:9d:19:f9:41:
7d:b4:66:52:e7:85:d7:34:9d:f0:d8:74:9c:93:2d:
72:e6:16:1d:04:b0:aa:9f:b6:31:f1:97:ee:70:dc:
85:b4:03:99:43:59:b0:2e:fb:7d:e5:fc:6a:e6:cd:
11:30:4b:7f:15:e6:b4:97:50:bc:5c:a0:6d:4b:3f:
2b:92:87:32:53:6e:0e:68:b8:eb:46:49:72:80:a0:
0f:cc:8d:03:2b:ef:7a:80:88:5d:78:83:09:62:c7:
b7:46:77:a1:d5:27:d4:52:46:47:bb:c6:d6:57:14:
3e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6E:7E:C9:5C:8A:45:D7:9D:A4:BD:B3:41:2D:83:5C:50:17:14:20
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:62:12:5d:0a:d0:93:7b:0f:f5:72:9c:54:23:df:4a:bb:eb:
1e:33:b7:42:e1:9c:f6:1b:23:71:d8:89:2d:5c:fd:96:73:02:
64:b0:c6:ef:fe:5e:a9:13:1b:e7:36:78:f5:07:b4:41:5e:9b:
1f:38:1a:9f:67:b0:1d:fd:da:94:1a:da:5c:52:c5:a7:d0:aa:
80:89:e3:15:de:8f:0a:7a:fd:d6:cc:95:4f:38:63:91:7d:f3:
e7:b0:96:db:5e:a6:e8:1e:18:4b:e1:a9:00:76:01:53:11:61:
22:43:df:2d:13:c5:8e:41:f4:52:3e:02:b6:84:0f:e6:cf:a1:
82:b5:82:82:81:43:18:af:f7:21:31:7f:b4:b3:4b:af:3b:db:
b8:ee:d3:41:91:1e:ea:3b:f7:5a:9d:27:50:0b:03:fa:5f:d1:
d2:e8:52:6c:d1:ce:52:9f:d0:1e:6b:d1:34:44:4b:fa:d5:8c:
6d:4c:0f:c8:fc:9b:84:7a:26:fd:4c:e9:e9:b8:ae:86:c9:fc:
cf:ac:da:fa:8e:74:34:f7:2c:f1:05:07:d6:1d:fc:1a:f2:36:
0b:b7:88:b0:97:6e:c3:56:8e:0c:af:2c:b2:32:f1:65:6b:b9:
6e:19:0c:bf:5d:26:6f:44:39:e3:b4:ad:68:fb:6e:fa:eb:2f:
97:26:19:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:12 2026 by rpki-client