
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: imcHA/PTuMkbzH0crc7eh0XJpopEMYuFBA9HQlbDYLQ=
Subject key identifier: B1:CC:E9:07:9F:E6:E6:99:A8:A2:07:83:9B:58:B3:6C:95:91:13:6F
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019EE1E781E9BA864B1D123CD40708CF92AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 1362
Signing time: Fri 19 Jun 2026 22:01:46 +0000
Manifest this update: Fri 19 Jun 2026 22:01:46 +0000
Manifest next update: Sat 20 Jun 2026 22:01:46 +0000
Files and hashes: 1: 04nGKAyUF6nGSn-0CbpqToB-ADg.roa (hash: 5gfuIT6ilGajdYOxkLDaRN30dyX80t2LoUgmLovbsIk=)
2: 2_M3hjSd7CTsmWcIflPRCb5WQkA.roa (hash: lb+AroYfcHpsLjtLQUflH3VlWHXn0bD5oDoLv70oXjU=)
3: 2fjRCs8xlK3pQaPk8rOIDSYlcxw.roa (hash: I2k2KEupu6w+ziyxDip54GCFZn2g6M1lsanI8ZV5WcQ=)
4: 5O6pftiG-0snfMNxyv3fwtZN7Ek.roa (hash: tFgNvGVMrkhJ1O1ibM19VvRSpEWTVzMxrgiAaCWJHjQ=)
5: GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa (hash: 2tMBvhTBaG9FOblLPHKcO+h2HyVM2AobojKlvW5vzV0=)
6: J3vzcKMRFcvugofD01F-WNUda7g.roa (hash: tBjEDKKlNdNNr7PYENGOctFjWK7OCe+09gFHwhf+c+U=)
7: NV2elJY5GbLtF-8XlJluZMFiLE4.roa (hash: NuN931tACouEZPBHD68kuj2kgkRWx5yBVRTsgr/PC0M=)
8: S_cMNHwGmO53SbTaPSTvEUZSyO4.roa (hash: VJ2mNoR51FwtQFNmuZTNPyshVFI+sQ6fyBXwc1Q4lR4=)
9: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: BXDbeF6Myhh+x3UxhCeyemVoXP2aUJ2AMNMZ09a0Mco=)
10: dwc98g5fGUgPAWxFG8AQgkdTGUE.roa (hash: r33CVUyGl3+7P6ErqgK1Pc1v2YLarpkrErbsExQx0So=)
11: ocHcLPqIiXs39TMNmLocr_HH0to.roa (hash: 2m7W1dsOxKOHHVh+M6gzZPsYBZCOmqgU0+hBomALNJM=)
12: qxh4ePvu5bsopWasfzDeFkJpzFU.roa (hash: Pag+HQMgvFAsKkQpY1mX2vKDLGA3ZEYBRUSYskRKFgw=)
13: r2wp15RalYZ-BpL4xsNnngK0594.roa (hash: NNjjTsbzbTB3BJf0ScAIqlbHnQQtN/B+x9X2kssrtLQ=)
14: tiWoclLyoubi_eH2eBTEmg_nRPQ.roa (hash: v7vNaiqbe+aP8/SaLVbx8mliFyA9s414yzNmBa2a+SI=)
15: uuy6ECeKU5zPxhagn8FIr283yKQ.roa (hash: OOKXwwUyMmEuY99QE9mTnSKY0ij2Tkkt4XqvRj4K6hc=)
16: yrbB1vsBIjdbUaylEPRfMMB-k3g.roa (hash: uUmid3sXY3uL8GFqpHsIlPFVeU82iqmCl12sBdQU42s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:e7:81:e9:ba:86:4b:1d:12:3c:d4:07:08:cf:92:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jun 19 22:01:46 2026 GMT
Not After : Jun 20 22:01:46 2026 GMT
Subject: CN=b1cce9079fe6e699a8a207839b58b36c9591136f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:e0:8d:0e:7c:47:ca:4c:88:33:f8:1c:27:
f9:28:bc:d7:9e:ce:79:b1:72:ee:75:c0:6d:81:a9:
b4:12:ee:fa:3f:f9:10:03:76:3b:8a:37:eb:9a:98:
d7:c6:df:33:0f:14:58:5f:06:71:be:58:d2:96:0f:
9a:90:44:1a:f8:c4:53:c4:d9:61:11:d9:99:87:2e:
b0:52:65:b3:f4:74:4e:bc:2b:99:6c:72:99:ca:56:
aa:69:59:24:0d:98:71:8e:06:38:ab:96:c1:41:8b:
73:41:6c:50:4e:3f:97:bc:07:2e:8a:50:04:8c:ed:
ca:2c:6e:ce:de:b0:d0:25:dc:72:1e:a9:5e:60:6f:
3e:c2:c4:99:fd:40:38:ef:f5:e2:8b:d8:a1:ff:6b:
f3:1d:2b:3a:7a:e4:59:72:53:23:06:15:bb:b3:ca:
04:02:c4:3a:1d:ac:a8:5e:1d:66:57:a7:f2:8e:20:
84:a4:f0:d4:95:78:71:36:43:cb:b5:57:77:c8:1c:
25:1c:62:14:6a:71:39:af:0d:4a:28:49:31:80:7e:
09:5b:41:f6:f2:d9:ca:8e:f2:b3:b6:b9:a3:56:f4:
56:fe:7a:11:70:3a:b3:d7:bc:e9:30:9e:90:7b:7a:
1f:04:07:82:aa:59:f9:66:19:20:fc:16:f4:fc:3a:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CC:E9:07:9F:E6:E6:99:A8:A2:07:83:9B:58:B3:6C:95:91:13:6F
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:20:c9:c1:12:0f:5b:4a:f6:99:57:2d:b3:6f:86:64:8d:d5:
01:1c:4d:01:8b:b1:5a:5e:8e:9b:92:db:62:e2:c3:48:ef:20:
1c:75:0b:5e:c3:36:72:7d:0f:64:65:c2:c0:b8:0d:fe:ac:00:
ae:8a:a2:71:f1:91:e5:ea:ef:fc:04:81:35:e1:eb:78:b8:45:
47:3d:07:a5:e8:87:0c:e2:ad:cb:df:d7:c2:8b:c6:d3:2e:e6:
93:4d:13:16:d6:39:69:c3:81:5e:61:2e:21:9a:d4:a1:f1:82:
4f:ae:ba:e4:44:ad:0b:01:66:9a:0b:9f:b9:1f:c5:b9:73:be:
fd:93:84:2a:3c:8f:23:59:08:ea:75:99:d4:24:e0:d0:31:92:
43:06:58:96:6f:35:f4:c3:e6:da:72:0d:cd:92:63:ad:60:91:
2e:b7:c6:9c:85:5b:0b:69:12:6a:9a:33:bb:91:0a:c3:3a:1e:
06:7a:9d:f4:5c:43:4e:b0:61:36:49:e4:a7:94:a4:b0:9b:97:
fd:e4:91:ad:cc:6d:b3:d2:9a:39:d8:6f:b4:f8:77:9d:34:ee:
09:3c:3f:c2:8b:30:53:1e:e3:e0:2f:01:d7:1b:64:e5:61:3d:
5a:f6:fb:1d:ec:4f:38:f9:64:f5:a0:61:6c:9a:9a:fd:71:b0:
06:71:33:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 03:13:57 2026 by rpki-client