
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json)
Hash identifier: q2xI8qU92/e8XClGGgUHouhsNYZssjOYVUNpv1fcpEY=
Subject key identifier: 47:31:2C:30:B8:AE:20:BB:72:FC:6A:D5:06:36:9D:38:29:F8:F8:33
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 019D25F1FB95125C231589BE815C51A99B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
Manifest number: 188E
Signing time: Wed 25 Mar 2026 17:01:48 +0000
Manifest this update: Wed 25 Mar 2026 17:01:48 +0000
Manifest next update: Thu 26 Mar 2026 17:01:48 +0000
Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: L6VvZfUyHnY4lcWRARRsy+M7XFguOntt0afd3Bs2EpQ=)
2: 8cM6v3_NRAZ3FP_fGe0mwmajY0k.roa (hash: UZQldaFo6xwnQkumeQ30d5+3aDGt7jMCik6EMuRJupg=)
3: AA4leRD0fxCP27pMiyTWgt1l_rg.roa (hash: 7SvYjkQmEnHNW0Fizpa0BEm4+FNoAcLpGmBVskPF0pY=)
4: AnJCTd7AgRSldDmx71BvWIQlsjc.roa (hash: VFBhkSbr4RUTAOsdzP+CuaTF7y4EenVQsmWrwQQVwpM=)
5: D9vysDJ6akM7Z66wywlmqWF3jxM.roa (hash: +6sSHR1vJhbnSV1+bNKy86Yi96WvoRkEvwudcBXDAQg=)
6: ES-7aSo6ovYXFf1ggrOgufF4HXU.roa (hash: oBAEPOe3qVf8emRhcuSX1FU4S9ycxaYKQRzrtaIuUZQ=)
7: dBEozjZ87taP7CwFVSXV3w6pkxQ.roa (hash: Q0IadO2WrRqgDE01zeYb4r27Fa+c+ppGgdLscaUKNKk=)
8: kLGlFczsrbvI1LLNYABL3V31uw4.roa (hash: PyJOpPlpidMPg9tlr0wrxczB6f3WILsayIOfBgsOza4=)
9: lIxr1Y2g6tW4Go6HwrrCY4g1GhU.roa (hash: qocUAMn7M/1zyYPDlsc7BcT51RuGObx2kW5wM3NnVyE=)
10: rDXd_OZlN4Uiv52rfRn8xHDUy80.roa (hash: 91Ja2DiUDudi8VvOpGDDJuXajBkTzaFVadsjPhZfAy8=)
11: xVvAeAbjAnywjqQvLFjnqGabFzo.roa (hash: MHe3EjYa15PyEjrwN5cSdo1Ogd8ywELYCfO8/S46e2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:fb:95:12:5c:23:15:89:be:81:5c:51:a9:9b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Mar 25 17:01:48 2026 GMT
Not After : Mar 26 17:01:48 2026 GMT
Subject: CN=47312c30b8ae20bb72fc6ad506369d3829f8f833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:2a:85:21:e5:80:b6:3b:97:31:8e:c0:2b:
a4:4a:4b:cb:a0:27:7c:73:61:18:6e:52:93:f0:7b:
15:81:56:0c:44:72:17:e5:3b:e3:6c:6a:08:15:46:
b3:94:a4:a0:47:54:45:88:31:08:34:69:29:95:1c:
56:43:7f:ef:14:92:91:90:18:19:3b:23:1a:dd:07:
51:69:e5:3d:af:d6:61:c7:61:f0:bd:65:f3:99:63:
69:cb:62:cc:2d:8c:12:b8:6b:6a:64:de:a0:09:54:
b5:52:53:32:2b:5b:bd:11:ae:ef:77:45:05:7a:3f:
0c:70:c4:1a:27:a5:9b:4e:55:7a:ec:e9:e5:ec:15:
63:65:b8:4a:ff:84:dc:6a:c4:0a:ce:f3:29:75:e2:
9e:a2:14:f3:a0:10:8c:e1:19:85:af:ba:68:8d:52:
23:5b:d7:07:b3:34:a7:4d:71:12:b8:48:66:ec:4e:
91:47:d3:76:fa:1b:49:63:38:a1:44:ab:bb:63:65:
97:ab:b1:fc:d5:7d:6b:f5:58:76:aa:1a:99:da:22:
b4:1e:40:f8:3a:2c:23:93:e9:26:92:4a:09:43:53:
3e:b9:14:60:14:5c:d8:00:36:d5:92:cb:56:76:ac:
97:ce:68:f8:fe:a9:04:dd:12:d5:34:fc:7e:00:70:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:31:2C:30:B8:AE:20:BB:72:FC:6A:D5:06:36:9D:38:29:F8:F8:33
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4d:33:e5:a8:1a:67:74:58:3a:f4:5e:dc:8c:5d:5d:78:4e:
ff:5c:cf:63:eb:44:e8:9b:47:a2:86:7e:aa:1e:59:97:45:85:
a8:c2:01:af:c7:27:a6:85:c2:ac:b6:02:62:43:e5:4a:f0:d4:
f7:2f:0e:06:67:e2:68:c5:8a:1f:18:da:aa:dd:31:be:42:a1:
a2:0c:b3:9a:4b:10:0e:43:8f:81:68:34:9a:11:cb:84:83:1f:
30:a2:e0:8d:1a:74:dd:53:ec:d4:4a:40:44:c0:d5:a4:7b:01:
a2:e5:33:76:19:8f:a4:e8:19:9c:97:12:fa:40:96:43:dc:bd:
0e:a5:0c:9d:fb:58:f6:db:37:7e:0b:89:d0:24:07:4a:96:42:
c8:47:b3:1e:e7:80:f4:1f:e1:81:35:5c:c0:57:b2:88:cd:8e:
a4:3d:c8:e9:61:76:c4:7f:11:b2:a5:0e:ce:9f:e4:b6:d3:c6:
a9:83:28:e9:2f:ea:7c:a1:16:b6:9b:11:da:73:10:4d:ab:30:
6c:c5:4d:be:0d:27:72:8d:21:00:51:c3:64:56:4c:11:f4:4b:
c2:35:b1:3d:6a:6f:3a:1c:f6:cb:cf:98:6e:cc:7c:b2:44:6e:
a4:72:82:30:eb:7e:ec:2d:8a:69:2b:3f:82:04:93:76:84:52:
40:9f:8e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:06 2026 by rpki-client