
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
File: 2fwL7GDQus4YiWd72buQGQzE_SI.mft (raw, json)
Hash identifier: TTn6plePsj5tNdOX3hk1O9Rlj9znA/qU7yBk4CookJM=
Subject key identifier: 92:D7:C7:1E:77:7A:CF:C5:BC:05:58:5B:84:0B:25:08:F7:EF:D4:18
Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Certificate serial: 019F860CEDE2FE3EF3E6F5E8A6E11B21F808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
Manifest number: 19C9
Signing time: Tue 21 Jul 2026 19:00:22 +0000
Manifest this update: Tue 21 Jul 2026 19:00:22 +0000
Manifest next update: Wed 22 Jul 2026 19:00:22 +0000
Files and hashes: 1: 0EOOKZ73EuVKb6azhsikToGYTJ4.roa (hash: tOeqHdzaa5uQmGPeE+9GIo5atcoydPGRdU/daaN1H/s=)
2: 2fwL7GDQus4YiWd72buQGQzE_SI.crl (hash: IkizLREhrj9cdotM0HAianGtsnGqEQ14+LlD0/3GJoo=)
3: EUeWkU0aryB-YkR2M3TsErGD9Is.roa (hash: gK62/o9yO+OyvLt7cRE+ehw4Ouq7VrrbTSmr3DLojOI=)
4: MGhj0X-R9sE8_bxGpuMofPiVOac.asa (hash: DvQwv9R87PLKWjVN3/wl/o55noyjeNHEbII9CUCtA+0=)
5: SpICVub50OICM4yiQk6ulqnyBsU.roa (hash: 1SZAmfW+sJIqJsSkqCTN19QGqChFmDq0AZE9eacMzAI=)
6: W9lGuLlyK3oCTZXvmQuqTo4C2yg.roa (hash: G4w7b1CN5DpM/EZuMWQLQvxT+EVuYLv3nYfxDAbKhDk=)
7: jUElcf1JFP10uCVqAsvtMStO4o0.roa (hash: xrxSdpsBwKaZISPc2IK2Gw1lDuUsBX/PpqeA4Z3a8cs=)
8: o09lL4OudMDTh_jmHHeTIRn2L5s.roa (hash: ctwy00D7K53oO1gqUQQpnsVurkNSXddz4U1vX79+KpM=)
9: yn6euPUsjq8bRXFpjTNGPdRM13Y.roa (hash: IGe548/q8hO5ei6AedK5a51FhkUkqFo8BXPppwB9Vlw=)
10: znNyesTwbEHb5GdVovxJsLLM9KQ.roa (hash: WbfDTvPg/i+BiVxKsZsH5gFpX+Sz+6FiIPk4KG/O+AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0c:ed:e2:fe:3e:f3:e6:f5:e8:a6:e1:1b:21:f8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Validity
Not Before: Jul 21 19:00:22 2026 GMT
Not After : Jul 22 19:00:22 2026 GMT
Subject: CN=92d7c71e777acfc5bc05585b840b2508f7efd418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:5a:3e:d1:78:8d:b1:32:03:bc:ab:81:bc:
b3:d7:70:2d:12:f7:e4:18:b9:f7:be:6e:cd:00:af:
37:14:74:1b:b6:95:47:ed:14:cb:56:df:83:8e:f2:
8d:f8:f7:70:b7:c2:4a:2a:19:dc:91:32:25:a4:d9:
bd:1e:a3:86:ce:83:ef:e5:6f:7a:44:cf:a6:f2:1e:
0e:23:fa:72:2d:fd:04:8f:d5:98:8e:9b:ac:7f:42:
0e:38:6e:73:4d:c4:3f:77:d4:90:90:a0:d7:9e:ea:
20:72:fb:fd:72:c8:a7:41:ad:7f:a2:22:1d:19:3d:
b1:52:f6:f4:60:c5:55:ff:70:fb:a0:96:4d:00:10:
a1:e5:f3:c7:5e:3e:a5:c5:98:87:ed:0a:b3:b3:49:
5b:89:bb:3b:4e:c3:0b:ed:4c:94:1d:52:e5:dc:25:
28:fb:6c:70:43:99:aa:a2:80:e2:dd:7f:05:04:9d:
52:7f:74:1e:8e:12:20:0b:75:70:31:91:1e:2e:87:
e6:36:d5:c0:92:7c:e0:e8:3d:06:46:95:3b:e1:f9:
fd:4d:0c:23:9c:79:ba:ea:3e:14:a3:59:06:75:69:
dd:89:38:f9:31:ac:aa:48:4a:f6:e0:e2:d5:b7:dc:
9d:d5:5d:b4:6e:5c:b4:0c:77:ea:c3:08:f8:61:c8:
7c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D7:C7:1E:77:7A:CF:C5:BC:05:58:5B:84:0B:25:08:F7:EF:D4:18
X509v3 Authority Key Identifier:
keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:33:93:0b:63:f8:8b:7c:6c:7a:dd:3d:9f:b9:55:ac:6c:d0:
a4:5b:f2:c4:9e:d1:a3:56:8d:c9:5c:cd:90:ef:f7:d1:bd:c9:
08:ec:13:21:96:20:a8:0d:ed:e0:f8:c1:48:3f:f0:3f:f6:26:
4b:27:e9:81:89:c7:07:45:c6:6e:2b:a5:2d:c0:7c:72:c0:40:
cf:21:be:67:33:44:cd:87:c2:1f:79:76:ab:3a:70:1d:02:65:
22:6e:46:08:62:bb:09:95:6e:ca:61:d9:9a:8e:2a:59:d5:12:
30:d0:73:b3:ae:13:93:d2:be:9a:15:32:aa:3b:be:06:d3:a4:
2b:27:52:a5:d5:e3:74:52:25:a3:8a:e6:e2:17:99:65:90:1f:
ce:01:15:34:b0:51:b1:4b:8b:b2:fc:00:4b:b9:e5:c1:2b:b8:
b5:52:ca:83:aa:36:30:cf:8f:e8:28:07:11:df:b4:ff:76:bd:
40:f4:81:92:3d:cb:bd:dd:dc:b2:b9:04:d5:71:71:54:02:fe:
ca:5f:b5:3b:8e:9e:af:5a:e2:65:81:55:bc:8f:89:d1:60:f8:
8f:ed:23:60:b1:33:f0:24:77:ea:21:bf:10:ab:2c:cb:43:a2:
ed:14:69:2b:05:32:0f:9e:da:25:cc:89:ac:99:19:09:55:86:
02:6b:42:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:27:38 2026 by rpki-client