
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier: jdD4gERfnSfZg4UT5sk7W6TWy3WbIm5m0uWL09+iIUM=
Subject key identifier: 5F:E6:0E:77:AE:53:43:8E:43:C0:39:98:2B:4C:AF:79:E7:20:E4:6E
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019E905C9A49FFABFD7FA5AD64E31CCCB2AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number: 195C
Signing time: Thu 04 Jun 2026 02:00:48 +0000
Manifest this update: Thu 04 Jun 2026 02:00:48 +0000
Manifest next update: Fri 05 Jun 2026 02:00:48 +0000
Files and hashes: 1: 2VV3UfnItu_52uvF-k4DMpk1zjA.roa (hash: yurroUcvCQ0iRkkkr4yuxcK5LcAIk00+8chFnaavckE=)
2: 9hQpwIm1DZAst51hiEl_2tmCsXI.roa (hash: +NIpZnYNyfdjDsWB36dEl0YRtLioEvnM5GHzLPvZkhI=)
3: CEkYTmNqh4ud0nioNMk1K4djUfo.roa (hash: bhH9nZDHYzzeKrmVjURmPT3vNUIoH+wcuXxEhHTEVU8=)
4: HhO3fYlasNlXuWCWma8olPA14I8.roa (hash: an4Zb60vA9s3r5vXjNARMkYhW6HY9Hr3vQtUZ9SJwt4=)
5: KJmZuOF3Vv9jk_kFVP7YDH4cHgI.roa (hash: AtauxquVGMfNWT+OwoqixJIcGDXl6Ybqcwqx4c3ybJQ=)
6: Lm1nnFYkUsiu098gCvYjKS5-l4g.roa (hash: 1RaZfLGyq0c5ZD0BFswNZ5s2IFMTrcMOt76tyg+sqUg=)
7: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: vt1jKu3PGCa3HjBHWk0MB8EjaNR9S2Z7qlyeNG1ctbE=)
8: SELAkj7y_jr_HiZRyQnazDtoXIs.roa (hash: YIble+z1sK0lKNMgOA3cU9xF8L12qHo0kNEA6b7HNQc=)
9: Th2adTOkopjhlJ25wcwyktd57wk.roa (hash: GpWnYTzTf7hBP6TDOkmn8+2X3RqmvubL/IyFk+5BLKw=)
10: YaZXtt4CBX_dPogFy216OZ32jZ8.roa (hash: MMlcUYaXZ5PcPwOs7IfmUuTH4RAjSxkjD0El5fES9Mc=)
11: lGPXWQo_7ubaGtUyGMqkGbwI4_M.roa (hash: YRpw+FIVlTh7o6DIYneOFKU0uNqBsWrzdPPNLu7NTFI=)
12: yNufAMlvFzr-y3RpF4kWqix80FU.roa (hash: ItOzxiAoZvT23VSZbnaQrDyl7pYFaBGpsulhtwB6Wpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:5c:9a:49:ff:ab:fd:7f:a5:ad:64:e3:1c:cc:b2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Jun 4 02:00:48 2026 GMT
Not After : Jun 5 02:00:48 2026 GMT
Subject: CN=5fe60e77ae53438e43c039982b4caf79e720e46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:f4:28:71:57:61:ce:ee:52:68:a1:2b:4f:
3c:f3:23:97:5d:16:09:89:2f:58:b5:a2:1b:a8:5b:
23:a6:e3:09:75:ec:44:d2:c5:ef:93:66:d4:8b:13:
ae:d8:a9:fc:ce:e7:c1:54:48:35:46:57:81:ba:e1:
85:6e:c2:25:2f:54:a0:8c:c8:1a:f7:96:ed:cd:4b:
05:2f:9c:c7:41:69:37:99:c3:84:25:42:ef:e9:68:
55:a3:dd:4f:02:18:d8:48:de:d1:23:aa:b5:c1:e9:
33:76:b7:d4:53:c2:fb:c5:ab:5a:44:51:d9:67:46:
a8:36:af:43:e3:f8:c1:fb:67:06:18:f5:01:95:79:
30:0b:2a:b4:28:9d:db:82:ea:19:7e:aa:1c:6c:30:
20:2e:bd:48:aa:1f:2f:ee:fc:07:58:36:9e:04:59:
34:4b:01:94:f9:2a:a3:fa:25:e2:24:e9:1c:27:12:
41:0a:9c:60:2b:69:9e:4b:99:32:c6:2c:5d:81:3a:
39:e6:2e:8d:db:fe:6b:95:b2:6e:da:5a:b1:65:ca:
2f:4c:ff:71:44:19:95:e6:cc:cb:c0:87:cd:b5:d2:
ae:7c:56:a4:9e:2f:ad:9d:08:4c:ef:4c:4d:d2:be:
fe:26:13:c5:79:20:0d:67:41:61:54:14:07:67:a7:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E6:0E:77:AE:53:43:8E:43:C0:39:98:2B:4C:AF:79:E7:20:E4:6E
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b0:44:23:4d:ac:5f:ff:a6:e8:51:3b:42:25:6c:cf:93:6b:
7d:9a:5c:e0:fc:a5:3a:56:74:8c:d7:98:4c:c6:00:0c:e7:e2:
d5:79:96:7e:3f:2d:4a:3a:10:57:3f:92:95:bb:b7:38:22:ea:
93:d5:32:84:f9:b1:73:04:ba:1a:8f:c7:ce:05:61:01:41:ce:
0a:55:fc:0e:14:cd:c4:73:a0:3c:cf:53:d2:c7:5a:df:70:ed:
13:e9:fd:b4:75:ca:38:99:f6:fd:8b:9a:f3:6d:51:14:07:1e:
1e:8f:4a:76:df:6b:8d:fb:4b:a3:fe:29:d5:49:b1:c2:48:37:
1d:c1:99:38:ae:8e:4f:58:b2:20:5d:49:a8:47:b4:0c:44:0b:
e5:6e:f9:d0:f8:7f:21:56:0c:e1:8a:f7:8c:16:12:42:54:65:
95:dd:5e:73:59:90:fb:b4:eb:a8:88:d8:ec:16:85:d3:7b:e4:
8f:6d:e1:db:a4:ff:6c:74:66:9d:0f:32:c5:ea:38:8b:d7:88:
f4:d6:51:e7:ce:05:14:3c:3f:5e:1a:ee:4d:cb:09:46:04:c9:
08:0a:68:2a:15:92:1b:af:81:e4:d7:99:1e:55:ce:3f:52:d5:
95:32:ef:22:c2:46:06:ba:21:f8:4e:46:df:89:dd:19:52:59:
d7:c1:26:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:24:50 2026 by rpki-client