
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json)
Hash identifier: K2p/qmxsi/aDevNQbI43cWCQXa2+L99je4XYtDhdz6g=
Subject key identifier: 74:D9:82:52:0A:C9:78:D3:D8:39:CF:48:E2:EA:92:69:93:2F:C3:66
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial: 019E1DFE7FB4F7E7CE8BA2A7352FF119663A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
Manifest number: 1228
Signing time: Tue 12 May 2026 21:01:18 +0000
Manifest this update: Tue 12 May 2026 21:01:18 +0000
Manifest next update: Wed 13 May 2026 21:01:18 +0000
Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=)
2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=)
3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=)
4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=)
5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: bLZiMnJld7h9pcGeI2mrf9/ufl2j7N7eHtIayaPR0vI=)
6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=)
7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=)
8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=)
9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=)
10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=)
11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=)
12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=)
13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=)
14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=)
15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=)
16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=)
17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=)
18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=)
19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:7f:b4:f7:e7:ce:8b:a2:a7:35:2f:f1:19:66:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Validity
Not Before: May 12 21:01:18 2026 GMT
Not After : May 13 21:01:18 2026 GMT
Subject: CN=74d982520ac978d3d839cf48e2ea9269932fc366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e6:72:5e:c4:33:45:d8:49:e7:35:74:5e:60:
e2:01:8c:43:a1:96:48:a8:d6:1d:60:af:7a:00:09:
7f:82:e7:1d:ae:56:8a:e3:a0:52:ce:c5:fd:fc:0e:
03:3e:54:7d:f0:15:ba:c6:73:a4:23:03:48:65:5d:
ff:4b:0c:59:d9:fb:62:ad:4d:99:20:ee:a6:cf:87:
3e:e7:1b:e9:cb:c3:79:cc:3d:3c:cb:0d:9d:54:62:
d0:46:f3:50:47:74:2b:91:19:d0:9b:6a:47:01:69:
49:40:6c:d0:ad:b2:58:5b:a5:fc:a1:b9:c8:8f:bc:
95:0b:fd:b2:91:d9:a2:04:a5:27:99:22:e4:50:40:
fa:df:68:2d:d1:b7:47:fe:a9:ff:97:7f:6b:c4:aa:
0e:3b:24:b4:00:9b:30:bd:f9:78:69:27:cf:a6:9e:
81:cd:35:50:e3:3d:2f:73:2f:25:84:6b:86:72:5c:
4b:22:1a:fc:90:de:2e:28:8d:30:49:7d:31:4e:74:
d2:33:20:44:21:37:a1:6f:49:cf:05:e7:a4:4b:64:
9e:14:1f:a9:92:6d:d3:14:83:e9:9b:38:a3:2e:1e:
a1:76:71:ae:64:d2:06:66:17:66:5e:a8:5c:e3:5a:
c1:15:f2:ed:07:37:b0:31:d5:c5:6e:d3:98:f2:a6:
b2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D9:82:52:0A:C9:78:D3:D8:39:CF:48:E2:EA:92:69:93:2F:C3:66
X509v3 Authority Key Identifier:
keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:69:05:35:0e:d6:43:c9:1f:27:7f:ec:fe:b2:32:40:f0:30:
d8:ed:83:4c:ff:34:91:74:7e:be:d1:f3:ba:80:8c:6e:37:92:
4f:b7:ec:c0:f8:fd:91:34:e9:ab:3c:5a:34:e0:2a:ea:01:df:
eb:31:61:48:78:05:2c:34:0b:b2:7d:f6:51:e0:9a:42:a5:b3:
15:7f:7b:f8:56:82:c0:ec:3c:70:60:08:8f:9e:cc:33:92:df:
30:15:bf:b3:9d:5c:0d:c1:13:aa:e9:a7:e7:06:10:bf:4f:c2:
44:c8:5d:53:fa:08:4b:9a:20:41:bb:ac:e1:94:75:b8:0b:0c:
08:c5:4b:99:0e:23:0f:34:16:f3:2f:64:03:fb:01:05:b6:71:
5b:cd:02:13:57:5d:7f:e9:19:a3:b0:3f:9e:86:ee:e7:51:5a:
27:34:25:35:44:48:cc:b0:a0:48:e8:7c:b7:98:69:5e:d5:01:
dd:e5:1a:6d:56:2d:29:03:ea:26:ff:d6:7a:5c:3d:43:a5:8f:
fc:aa:43:1f:09:26:bf:e8:d6:71:70:0a:ad:87:f1:11:15:72:
79:22:d9:0e:21:ad:3a:49:5e:1a:3a:99:df:91:62:48:08:56:
e6:71:2f:66:4a:22:70:6a:bf:f9:ec:59:ce:0b:8f:50:4b:b0:
c5:80:0e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:56 2026 by rpki-client