
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json)
Hash identifier: DqO8oW6Xx7BLlbO6bISq88+tTOckZIH4uSi+PZPzRS0=
Subject key identifier: 14:ED:B6:95:FB:DA:AF:78:FF:B1:03:72:05:A0:6E:C3:C0:D7:67:DB
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial: 019F837A381407BFFD6A25E967A4AB7DB9D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
Manifest number: 19C7
Signing time: Tue 21 Jul 2026 07:00:52 +0000
Manifest this update: Tue 21 Jul 2026 07:00:52 +0000
Manifest next update: Wed 22 Jul 2026 07:00:52 +0000
Files and hashes: 1: 2uP2P6fTf1qo4PWRRqgeE7TTacE.roa (hash: 9eSLYCb2FWzNsHTSZC1SEnCMNPegGVcyv6j21qK1mw8=)
2: 5rakYdNxKMjh5JNPex8iKzp_gtA.roa (hash: 6LspddKmtQtuac9ZuOl1VnhHP0Iq5oFWoFzvEG8ERXE=)
3: 814WTzXBXOIciV517t_FSJpheFU.roa (hash: 3rVBxA84Q0GQ5WcUB0js4QFJ7jGwBh1Rh823C6IzdeE=)
4: AogunF2vY6jwFQqloSaO1hbzpk8.roa (hash: it2LBzN2gPXG+ZsVF9U3YkMRcRGbDQsz+oO4JZZUzeg=)
5: PQhkPKvFMO7XAZJCK0yg6JOYn-Q.roa (hash: GclksRKdEgrXLLR1LhQTLSvorV7LCPoO0w2Ir6KfZ4M=)
6: Qi3PbQnrdw7q8NtmLcDOyzuEuok.roa (hash: Ene2M6hdbbKNY0YIKXvUxR9PygRHkyqGW28j+nRBH9E=)
7: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: ekcGpIHPyyCZWD4ZOyYAej18YvPdJJUizb52FhR1YGs=)
8: UKQMI_1tAdL7QkXpECyLkKgiFXw.roa (hash: xCvizHfY/xMnYQ9a7uuh91R0ms1D7ktEV/mIEaRjfJ8=)
9: iB6K871-MTgrHCKR-pl3wKEY8VE.roa (hash: evrLdA7V1aTPB0+S9RwUtMXPCQscLGRKXxGpKmpY5Z4=)
10: of6LgZjZn377OWe4qW9VxsrXlzU.roa (hash: mzM/Cns9/j03lTiA+9ZfDQNcGWtBmHN0WQWYMBfi0eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:7a:38:14:07:bf:fd:6a:25:e9:67:a4:ab:7d:b9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
Validity
Not Before: Jul 21 07:00:52 2026 GMT
Not After : Jul 22 07:00:52 2026 GMT
Subject: CN=14edb695fbdaaf78ffb1037205a06ec3c0d767db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3d:6b:a7:49:fc:98:de:9e:1e:11:75:4a:49:
6e:ea:15:89:22:f9:5e:65:2d:ed:35:9f:e8:60:56:
19:2c:b6:57:ee:85:25:01:00:b6:3e:ac:b0:0c:3e:
3c:2b:2b:bc:61:54:37:93:c3:93:9e:49:e3:03:c1:
9b:3e:a3:97:f4:0e:7f:6d:bb:72:07:63:e5:32:0e:
3e:cc:9a:7f:14:49:9c:38:95:bd:0b:aa:b1:cf:58:
3c:dd:48:06:37:be:30:2a:a7:f6:f7:d3:18:b9:3d:
eb:bc:23:03:3c:6e:ca:9b:a2:8c:80:e6:04:06:ee:
0b:9d:44:10:e3:61:cf:22:64:3f:fc:f1:f3:7f:36:
74:39:f9:f3:fc:cd:51:8e:d8:67:c1:e9:58:c4:52:
0b:18:3d:6d:87:3f:2b:f2:89:cf:67:3f:4b:c3:1e:
76:d1:e5:5c:02:65:f4:f7:1d:13:ed:04:61:23:ff:
65:0b:d6:67:98:ad:e2:f8:00:a1:6c:e9:72:1a:b8:
50:46:15:06:26:cc:04:d7:fc:42:7c:aa:9c:c3:ea:
c2:5a:40:f3:64:a2:5b:30:4d:b0:43:5f:fe:46:ea:
1a:b8:99:3b:22:9f:a5:4e:c6:77:5e:fd:6f:3a:c1:
b4:2f:03:a5:28:f6:78:92:60:bd:38:06:88:c1:49:
fa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:ED:B6:95:FB:DA:AF:78:FF:B1:03:72:05:A0:6E:C3:C0:D7:67:DB
X509v3 Authority Key Identifier:
keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ec:88:c7:81:66:3e:e5:7e:cd:b2:76:01:a8:48:fe:03:15:
56:31:ab:d4:67:4b:d8:1b:7b:9f:13:ba:6b:37:97:eb:8b:37:
be:cc:8f:ff:14:dd:b5:4d:a7:d6:b9:fd:07:25:0f:2f:af:69:
68:3f:4f:08:a8:ed:40:68:d9:73:dd:b5:f3:35:82:66:d2:14:
de:b8:89:1e:26:7c:ba:ff:f7:2e:93:24:e6:e7:fa:59:e2:89:
30:f9:29:37:a1:b3:b0:d3:51:4c:89:ab:f0:b6:76:63:ee:d3:
99:09:eb:50:57:28:de:d9:76:89:16:03:3e:ab:81:fc:78:55:
03:34:04:5f:f1:83:24:3c:9f:04:c7:49:06:f0:53:f9:0e:a4:
51:02:1a:5b:e7:96:1b:62:6c:34:92:5b:0d:f6:3b:df:68:29:
65:56:3f:42:06:ec:96:18:8e:a8:3c:e6:1d:49:0f:8c:18:ef:
f6:57:a4:49:5a:b0:b4:ba:f2:f5:51:23:d4:47:6a:6a:0f:0e:
9f:85:df:1c:8d:78:18:63:e9:f9:52:22:a2:03:39:37:80:40:
ca:e9:ec:a6:8a:5a:3d:e1:94:94:63:cb:6a:a4:2a:b9:bf:1e:
b2:e4:85:7b:39:3b:2b:b9:37:94:72:c2:52:2d:e5:bd:80:00:
f6:42:f8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:21:18 2026 by rpki-client