
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json)
Hash identifier: wPEgTFQJTuU0/PbG4zXUzBc6Ol1TugBibAZngljgFYw=
Subject key identifier: 01:D4:87:7B:E7:F3:D9:CB:A5:5A:FF:E7:96:4F:01:34:C2:4A:D9:24
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial: 019E39081BCCB0F7461A4F26F345D725BF76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
Manifest number: 1236
Signing time: Mon 18 May 2026 03:01:33 +0000
Manifest this update: Mon 18 May 2026 03:01:33 +0000
Manifest next update: Tue 19 May 2026 03:01:33 +0000
Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=)
2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=)
3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=)
4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=)
5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: v3UFwmkezqdtDZta9w867bzk034JnCLRJljzHauxNI8=)
6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=)
7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=)
8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=)
9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=)
10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=)
11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=)
12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=)
13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=)
14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=)
15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=)
16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=)
17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=)
18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=)
19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 19 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:39:08:1b:cc:b0:f7:46:1a:4f:26:f3:45:d7:25:bf:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Validity
Not Before: May 18 03:01:33 2026 GMT
Not After : May 19 03:01:33 2026 GMT
Subject: CN=01d4877be7f3d9cba55affe7964f0134c24ad924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:82:5c:93:0e:d2:4e:35:bd:c6:eb:32:f9:
b0:fa:6e:69:2e:3f:ec:0e:de:80:ba:00:69:53:72:
a7:25:b8:e1:2a:ef:07:c5:f2:f7:a3:6e:df:9f:fc:
76:69:e9:26:29:3a:39:89:6b:83:cb:a6:f8:83:c7:
0e:67:05:7a:61:37:04:81:6c:da:45:4d:08:fc:b5:
e3:5c:17:78:f6:98:b4:c8:5d:64:bf:ce:e0:a0:7a:
9d:b5:3e:05:a8:7b:ee:ad:43:88:eb:f7:6d:eb:ce:
05:b1:f3:92:3a:85:44:d7:f0:91:25:c2:53:c2:ea:
2f:ca:d2:05:04:8f:3e:e1:21:0d:98:f7:8f:af:00:
46:04:9c:3a:9e:18:46:63:63:ea:9c:c1:80:7f:bd:
ab:41:2c:6a:45:4f:dc:bd:8b:9d:a1:f3:85:59:49:
f8:b2:a0:eb:87:a0:59:e5:e0:c2:eb:1c:fb:81:01:
0c:e7:d2:e7:e3:31:27:da:59:6e:fa:88:e9:ac:94:
d7:cd:a0:6c:ae:4e:06:8b:83:c0:d3:19:ca:1f:4c:
2f:b5:f9:e1:07:7b:7e:94:52:b2:36:c5:b4:0c:b0:
2b:db:cc:75:b6:f7:5e:9d:1e:55:66:05:7f:3f:7a:
f4:a2:54:d3:7b:ab:1c:3d:32:52:ab:c6:bb:12:8d:
48:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D4:87:7B:E7:F3:D9:CB:A5:5A:FF:E7:96:4F:01:34:C2:4A:D9:24
X509v3 Authority Key Identifier:
keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d8:ce:f3:d0:0d:fc:80:da:5d:fb:a0:0f:82:b4:be:93:37:
aa:80:70:31:a1:9a:c7:f2:fd:83:e0:e5:46:f5:34:f4:0e:e1:
0b:96:d4:d0:41:58:28:90:40:f6:a5:e7:c9:2a:3c:fd:13:f0:
3e:69:c8:06:5d:93:cb:ec:e0:f5:98:29:97:fe:3c:81:9a:d0:
79:45:b1:bd:88:4a:e8:79:3d:9d:40:02:32:f3:9b:6e:56:a6:
8d:bc:08:4d:c1:b2:11:12:e1:ea:3a:ca:5c:f3:34:48:d8:f0:
8a:6e:a0:82:10:d7:b4:ea:75:c5:72:5f:2e:cc:19:1f:36:3e:
a9:0d:a4:d9:4c:9e:71:cc:66:4f:26:0a:9a:0d:a9:cf:d5:54:
31:0b:b5:22:49:4e:26:d5:f8:37:6c:58:75:62:da:e4:92:7c:
ca:44:10:c4:4f:59:44:30:ed:77:01:77:5d:ad:16:67:e4:9b:
92:a9:57:6f:9d:bc:32:28:62:03:a9:b2:f6:a7:78:ac:c9:fd:
7a:9a:f6:29:57:1c:e9:79:43:bb:86:b6:e0:78:ca:17:72:ca:
74:e4:90:bc:36:b5:0b:79:7d:0e:e4:ec:be:05:0a:de:77:7b:
ce:cd:34:9f:f9:0b:3c:5e:67:77:da:51:4e:95:56:0b:49:73:
8e:fa:b4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 18 08:18:50 2026 by rpki-client