
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json)
Hash identifier: exiwyLC6sH358Q/mHBuq4Q10N3rSIbK6ps7vfxIPjSo=
Subject key identifier: 3B:34:82:04:55:B5:26:CD:2F:87:67:F1:9D:A0:05:CF:27:3F:4B:DA
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial: 019F11529378F2A2EC569E9D3A169CFF9308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
Manifest number: 12A6
Signing time: Mon 29 Jun 2026 03:00:52 +0000
Manifest this update: Mon 29 Jun 2026 03:00:52 +0000
Manifest next update: Tue 30 Jun 2026 03:00:52 +0000
Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=)
2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=)
3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=)
4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=)
5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: sCFQwSqB4HfkWLY9XQ3CPZULSUyoww0AIM0stHFMc5U=)
6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=)
7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=)
8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=)
9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=)
10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=)
11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=)
12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=)
13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=)
14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=)
15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=)
16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=)
17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=)
18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=)
19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:93:78:f2:a2:ec:56:9e:9d:3a:16:9c:ff:93:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Validity
Not Before: Jun 29 03:00:52 2026 GMT
Not After : Jun 30 03:00:52 2026 GMT
Subject: CN=3b34820455b526cd2f8767f19da005cf273f4bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:67:87:0d:41:5b:57:fd:71:81:5b:fc:fb:6d:
1d:db:c9:67:ce:39:93:72:c6:00:20:39:5e:de:0f:
74:52:90:e8:3d:56:f0:0c:95:d4:79:d3:87:69:93:
e2:d1:d3:c9:e4:de:f2:9d:bd:48:3b:f7:6f:ea:b6:
f4:ef:49:ea:ca:c6:88:ce:fd:4a:f4:c5:c7:56:2e:
be:de:aa:d6:d2:c2:9d:10:68:35:8f:0c:f9:ca:ad:
00:5e:3e:3e:aa:f8:b8:45:5a:cd:ed:d1:f5:a5:b1:
19:5b:bf:21:6e:27:51:7a:6f:7e:72:05:2c:a0:85:
6b:54:41:24:75:4d:7a:4f:64:8a:54:e2:f6:fe:1f:
7a:76:be:80:99:f8:68:7d:67:a3:56:a8:b8:e2:1e:
03:71:05:ee:c8:7b:fa:76:95:2d:86:7e:de:d3:c2:
c4:93:1e:27:84:25:45:7a:38:8e:7a:a4:2b:a5:74:
dc:84:e2:a8:7e:f2:41:53:31:bd:04:b9:09:18:78:
67:6a:64:c0:ba:28:51:97:3d:45:db:a8:ac:0a:62:
ae:61:d3:6e:88:2e:a2:f2:41:11:cf:d0:7e:07:40:
d2:e3:53:8e:ad:ea:6f:bc:2c:11:7c:fa:f7:0d:7f:
55:39:10:fd:c6:3d:c6:7d:0e:7d:53:34:f5:cf:71:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:34:82:04:55:B5:26:CD:2F:87:67:F1:9D:A0:05:CF:27:3F:4B:DA
X509v3 Authority Key Identifier:
keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a4:b7:1e:1f:68:a4:c5:64:52:88:7f:9f:5a:87:58:13:79:
f9:78:03:71:7a:15:9b:9d:58:f4:bb:1a:9d:e0:95:e7:63:72:
cc:b7:f4:0d:8a:93:e7:3f:07:3f:33:66:27:bf:20:19:92:32:
6c:14:64:4c:ab:06:3c:d4:b1:7e:b2:de:c9:50:71:fe:ca:77:
6c:01:86:cb:f6:ca:43:54:c2:cf:6d:b8:ff:96:e7:3d:ac:5e:
ef:58:68:ec:9b:f2:89:50:17:09:24:ef:71:6e:53:65:87:74:
50:a8:c7:9f:7a:11:37:74:57:3c:de:f2:c9:6a:43:95:75:33:
a0:b3:03:68:bc:45:8b:16:9f:f1:f1:fe:91:37:28:f1:47:2f:
e8:54:0a:7d:3e:34:00:24:d9:15:5f:28:c7:ac:93:c8:36:a7:
ac:a1:68:94:67:fc:07:ef:57:f6:c7:00:3c:73:4c:34:3c:87:
52:4e:82:c1:69:60:49:30:77:fb:5c:5b:09:26:ce:55:71:c4:
04:82:82:0c:03:46:04:f6:0b:5f:99:40:54:27:cc:18:93:17:
46:c3:db:e6:ec:59:74:3a:73:b4:b6:2a:2a:e4:6f:c6:8c:64:
59:b3:71:65:ef:83:0c:64:e3:96:b5:49:dc:3b:1f:4e:71:5a:
d6:89:15:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:49:30 2026 by rpki-client