
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
File: Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft (raw, json)
Hash identifier: pAgvO8RdaDEBZwfcgJfH7BTiTx3hXFQLRwmqdViuGgo=
Subject key identifier: 21:2D:C9:DD:CE:DD:34:0A:DD:58:50:84:B5:78:93:BB:93:17:D9:AD
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 01A06D95D8282DE09AD601EFB1CDA60EE2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
Manifest number: 1771
Signing time: Fri 04 Sep 2026 18:02:11 +0000
Manifest this update: Fri 04 Sep 2026 18:02:11 +0000
Manifest next update: Sat 05 Sep 2026 18:02:11 +0000
Files and hashes: 1: 0BfNXiDldo_liimaTypuMTcMOSA.roa (hash: qvgGIW8CiOWBIcpNa0moqJ+GSYLQ2vJbJF4fgORjC18=)
2: 0vetEjyw1WQWmCXUTx8290wF-5A.roa (hash: MRRpw2B7+36LyQgMqkGBs8Q1n0WozbWhLmzocDU6qn0=)
3: 1-DJULH3ZwYfARcWJFOAy7L08L0o.roa (hash: uzSvKMA/ek9jjzwiFTQKtBUiZnp+CdlB8u/4bLmjAWk=)
4: 2aBOuFf59wEBwbLziedpbp6FKYk.roa (hash: ZSpI5dlzWjQXy3Cna9NEiVVPFJtukMRorD24Z+VlJdk=)
5: 5ThevNNgZHzDF50h6krEfv1b2To.roa (hash: CbU07lcvi4HJ1brlMc0otrEIMctgZ4JB+I2bCfPEqZk=)
6: MqZHWBmMNelEjKHD9rL777ZFFPQ.roa (hash: JT8l5waJdgBD+v5IZbCIxziinVIIlhSs3+boP+bJ1mw=)
7: Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl (hash: GfAr5MCjRAS3wG3XIXMU9crUI630g34QY+2OJUoOfbU=)
8: aL6bUGTHkpcHHWs-Po3_bkcw8N0.roa (hash: ri9rtr5v6mxkEnUcDShGl6eVFOsXr78RXTrqI9KwgSM=)
9: jVIXwWQgWKZwGuSur5EA3NGOqW0.roa (hash: TF50UjRhC15wTuIUutY/LAyF28bPXMS3BlWJSGn8Kts=)
10: qivEJ1m8OXaZrLdVa5B-D4Lq4Tc.roa (hash: ohCD8OmMg+2pYrzqMLQR/f066MDBc9Qpw07iNGnx7cY=)
11: uTfCplkKF4NNKr9z0oAQOp5Z6bQ.roa (hash: lIrYsFTfLPn7qzWjWmqg9roRmjTFishbKowqgCzglJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:d8:28:2d:e0:9a:d6:01:ef:b1:cd:a6:0e:e2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Sep 4 18:02:11 2026 GMT
Not After : Sep 5 18:02:11 2026 GMT
Subject: CN=212dc9ddcedd340add585084b57893bb9317d9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:46:fe:d6:a5:0f:07:31:3d:82:59:e0:f3:7f:
c4:11:90:70:c8:d0:5c:eb:21:45:99:6d:2b:0b:e8:
ed:58:42:be:5d:0f:d9:67:bb:cc:2a:a7:74:67:32:
00:0b:e9:d2:58:ca:e7:92:da:b7:64:7c:d4:cc:76:
07:ca:b9:1b:91:9f:99:8f:c9:31:c3:42:30:ce:e2:
ee:47:f0:6a:cf:a7:c8:2f:ff:5a:c8:07:b0:e6:30:
c6:e3:e9:36:38:15:c3:fe:a1:0f:26:07:80:b4:f1:
48:5e:8a:7e:ed:48:4b:6c:ac:26:9f:a5:96:c4:a1:
bd:0a:96:54:5d:2b:ea:3d:89:49:ad:7b:f9:8f:3d:
37:c1:a6:c3:16:9a:e2:c8:07:7a:ad:d5:03:91:56:
25:24:35:be:2c:9b:c3:fb:86:6d:cf:27:aa:68:36:
5e:0a:3e:6a:dd:2f:8b:2b:c0:e1:fb:a1:ae:d0:47:
13:f7:23:ae:be:af:0f:77:0c:d7:ac:5e:7a:bb:01:
c5:e2:1a:38:a0:86:68:25:32:14:be:fd:bd:82:cc:
a1:0e:8c:78:4c:99:6b:b0:12:c2:7b:65:3a:f8:aa:
3d:08:7e:9d:f1:fa:36:e7:7f:97:0f:75:32:11:60:
f1:3f:0a:46:2f:b0:ea:e2:80:48:9f:9c:77:b8:17:
23:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2D:C9:DD:CE:DD:34:0A:DD:58:50:84:B5:78:93:BB:93:17:D9:AD
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:03:a3:27:f6:97:dc:e0:86:d3:fd:b9:76:6e:31:c3:14:fd:
29:17:d0:23:b7:a3:eb:0a:7d:c0:71:e2:06:6e:b6:c6:16:16:
38:e6:2e:e9:71:e7:d5:85:c1:58:d3:e2:ca:cf:ab:bc:91:ef:
6a:a4:d8:39:fa:b2:6d:be:71:03:0d:ed:f0:e8:96:ad:25:f2:
31:39:08:83:de:3c:9a:11:cd:fc:ef:a7:e7:41:62:7a:2a:fe:
0f:fc:86:93:a1:f6:93:59:d5:d2:b0:c0:6c:dd:03:91:c2:e7:
31:ce:a5:40:40:cd:6d:d9:60:1f:0b:e2:07:7a:c1:a7:9a:7e:
8d:aa:8c:23:45:ae:e0:f4:d4:e6:5b:79:c7:9a:50:b3:72:25:
18:7c:26:12:73:a6:f2:bc:33:11:8d:f3:45:91:a3:fc:b6:73:
1c:c2:e4:11:c1:32:c0:38:76:8a:71:ad:2e:1a:ef:dd:96:a1:
a7:75:cb:76:07:88:0c:91:8b:09:70:43:8f:21:56:b3:60:8b:
23:91:67:c2:e5:41:d8:cb:49:4a:64:10:00:32:c9:ee:25:1f:
7e:22:1d:b3:91:71:f5:3b:88:8d:5d:ff:1d:0d:3b:83:4e:81:
f8:6a:8b:87:c8:e5:3e:60:2f:db:11:b9:ed:f1:42:60:60:e3:
7b:94:4b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:56:36 2026 by rpki-client