
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
File: bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json)
Hash identifier: pI1FYk5hEs1xSw2OX5Emsn/8TwzSdFPlmya+Iys5k6o=
Subject key identifier: 10:76:BC:97:B3:F4:21:82:FE:C3:3F:19:30:D2:D6:B8:C7:1A:6D:92
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019E9B181483AA2B22ACFDA975308DCE46D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
Manifest number: 1861
Signing time: Sat 06 Jun 2026 04:01:46 +0000
Manifest this update: Sat 06 Jun 2026 04:01:46 +0000
Manifest next update: Sun 07 Jun 2026 04:01:46 +0000
Files and hashes: 1: 9xgiRaoDHZpfEWCuWGLVozZH1gk.roa (hash: v8wEhG7uE5X+Pic34dsR8NNSQFk/2P4s8T0Y6bprmWQ=)
2: Aq5wESOUolAkTosvnE7ETStDfyU.roa (hash: yfEBzyPkUQCnnTcx22tGTzIIsK+Ma5c/+X+c6Yry/fU=)
3: B3ZlbL4gU6mGNdfE7GNgbCqsduM.roa (hash: 0PhXlz7OHulz176DWbBx9T4BxrFfJgZd9rJZ8KuMZgo=)
4: BGTIebFN8Np0NsQtF_avGDoUny4.roa (hash: NPCQmuapy/fWkxHdwPSPdnEK1QY4KGIX45+Q8l7yby0=)
5: BVAbby4n4nfVJfXWrR5Zl8eKCNw.roa (hash: 9h5dLOvIi1c2+opBBUG4urPF6XN2qAHfeKjpbM4tCxM=)
6: Dbdu-sAYIxR5QPvvVrRAhYH105w.roa (hash: fWwOPydmpUe+IsyFRDNgiL4cigw5qNtOrAk6xHxF7LI=)
7: EfWuRA4xuDAvflS5tv0JhzSei28.roa (hash: SAzMnIbvWnao7wpDdbRqrdkwbQWMAO6Jj0G8Oc5qkbI=)
8: HeSSKy0hpbFZwXpL4wRARD7sBKI.roa (hash: QjJUiqYDK9L1FM50J7fBEzbh41rsVg1rLGSgPBSUCpc=)
9: MJgiLKofa3--UVTFUoDMYpkd14E.roa (hash: H6wYuGz0ahIxYTCSRji68dw9L5rj0iVmY7ULRmePIqo=)
10: OGG1AN9r1K7fCCBDdkuKp2YurRc.roa (hash: uKPYBtL6H7NRJR1/TrQfck1LuVNFXIVWB3lTB8Q9nkM=)
11: SXe4L80C6NNAi8_Z_r_OzYlFJMc.roa (hash: rvAKW+Jnjq6JcXJuZTuezh3N37RsgK/dxB2hqkABN5g=)
12: Yi_0sb2Cd1tYZiiWIymmt_L8-nc.roa (hash: ZfN0GVzt124vq1vIJ26ojNWgsCUqMSJ0wE5cCnsN3gQ=)
13: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: 67DkOaWysPw0+wcjvPlGlKFhNjVp6LhJqkPHWQqxxXs=)
14: bYiLveRsDlX78OsxGY3h5GANwkU.roa (hash: 7RIU6dRlDTBOGvkvNbaGxFh//l+X7XqnppaYQdzpO8E=)
15: lQ5I1RQhBLo7oEEMwItGQL1D4co.roa (hash: JsbTSCE7CBEzvAaKOwDU8edPgIOKQAAWgiGQC/UlKpg=)
16: tXOl2ubuLkmi5Hms7cr2oOrONy4.roa (hash: /mpuqbpXTMSqEVxHEhqKLpXW3WVDEqBZMvkdGp9RQuk=)
17: uPXsHfVse8rlnzUbj2UoRMWOq8g.roa (hash: SCLabx4GN4AnmWRb1f32gO5dZZyqhDCGfjhfHlPlGlM=)
18: u_DOEx2r_J3BkCywvogfeZZkNpA.roa (hash: oEGf5LtDawHz/AlzF45DhMZpwO1j9J3oHupUypQDU5Q=)
19: x4pQf17vDFkXV3GUtqmWbktS3Fo.roa (hash: TF4r3ErV+VPSElRBLhwHiJMcDMk0C1SKhfdxBMi4KUM=)
20: zw3H3DTpeUhcqqHWXtBf0WnIJoM.roa (hash: 6GByi9aIOsCybNHah1sj3rggT+SfOktCNujJlbLQbPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:18:14:83:aa:2b:22:ac:fd:a9:75:30:8d:ce:46:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jun 6 04:01:46 2026 GMT
Not After : Jun 7 04:01:46 2026 GMT
Subject: CN=1076bc97b3f42182fec33f1930d2d6b8c71a6d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:21:41:c0:e4:2d:3e:a3:48:c8:e4:a9:a0:
c6:72:ae:d3:6a:c6:47:26:66:ac:8b:62:2c:12:a5:
1b:24:1f:c0:0a:06:bd:97:d2:86:ed:b0:8f:41:2a:
a8:cf:98:e7:06:98:19:bf:08:e2:ee:12:cc:65:08:
94:e2:14:15:40:d9:4e:fa:e6:5c:60:8b:19:1a:df:
b8:9e:69:8c:5d:93:8f:66:b8:56:b3:cd:af:df:29:
03:f8:3c:fa:f5:66:03:3f:89:32:1b:cd:10:56:cc:
08:e4:6a:b4:cd:c4:14:18:2d:46:1d:91:22:08:f8:
e2:f1:6d:26:42:bc:d5:18:a2:f1:38:d7:b1:f7:0a:
db:7e:d5:00:9b:a2:8c:fc:e0:cc:04:b9:f0:fe:81:
e3:d6:e7:5f:c7:e2:d4:6f:dc:fb:6a:03:c2:9d:92:
8f:56:e4:92:e2:c4:43:94:2e:51:52:49:87:bb:9b:
e5:86:06:a2:7f:6f:dd:55:e3:68:48:ba:20:6e:e5:
6c:f1:12:d3:e8:93:c0:fb:83:07:25:17:78:8f:4a:
b6:84:89:ff:b4:e3:e4:ad:cc:ed:cb:3a:e8:07:e3:
df:53:de:85:a0:4e:50:34:5b:9d:f6:ab:a8:9b:d1:
42:a8:5f:b2:e7:38:3d:99:10:b1:62:0f:09:c5:0c:
f4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:76:BC:97:B3:F4:21:82:FE:C3:3F:19:30:D2:D6:B8:C7:1A:6D:92
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:29:53:d6:66:4b:66:29:1c:e1:5b:14:6a:80:e8:12:16:37:
e2:0b:d6:4c:ca:fe:32:a8:2d:99:da:a2:8a:22:3e:36:e7:e4:
24:7c:1a:e6:4d:4c:6e:14:a0:e7:dc:46:49:17:a8:04:e7:bf:
a5:47:f0:f8:9b:f0:4a:f8:4e:c8:bf:f6:f8:25:78:2b:a7:b4:
4d:13:b7:c2:f6:70:f6:ed:3d:20:a3:d0:72:dc:a6:20:50:98:
84:78:14:ba:f0:5a:8c:d2:13:60:09:c5:8d:46:1c:ca:77:82:
ce:16:b9:76:96:27:65:18:c6:ce:a6:af:22:55:d4:c4:13:31:
c2:e3:47:d9:50:7d:36:e0:92:9d:f9:40:ef:4d:bb:e4:31:82:
84:3f:a0:68:96:df:1a:d8:b8:ac:eb:f1:6b:85:d8:88:87:1f:
3f:9c:b7:24:66:bb:c8:5a:24:22:9d:d0:8b:f2:0f:8b:d6:8a:
79:a8:85:9a:7f:55:6c:ff:80:65:ca:20:cf:3c:d6:c4:cd:ca:
5e:f3:99:46:54:5d:8e:c5:3d:d4:61:4f:6c:2e:64:5f:6c:43:
ea:05:49:2a:4a:13:3d:f0:22:f5:96:90:e5:08:1b:3d:4a:a3:
14:e9:04:89:9e:59:34:a6:da:1c:dd:e9:5a:a6:e0:66:4d:43:
86:d6:a2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:59:08 2026 by rpki-client