
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
File: 7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json)
Hash identifier: HzPXJB9cGZqCS0cO5exfkfw+B0YzQmO2XHe1CtT7LEs=
Subject key identifier: 70:9C:6F:AC:B9:B6:D8:BE:DF:4D:DE:B1:E4:EF:1A:45:8A:B3:A9:10
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 019EBD6C8AF5AAE8B83DA1D4C1E4B6BD6644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
Manifest number: 0FC1
Signing time: Fri 12 Jun 2026 20:01:07 +0000
Manifest this update: Fri 12 Jun 2026 20:01:07 +0000
Manifest next update: Sat 13 Jun 2026 20:01:07 +0000
Files and hashes: 1: 112MUhV6Rq4vAZbzuW-obACCM54.roa (hash: bG/EpEeoydzJUldH4JoAmHs4InlJJW21+s36TR2C22g=)
2: 2wyh_QhMgMqC_O4n1IvcnhHRGBk.roa (hash: ao/nwpiJU1qsY5iD/g3xyfwFgyAPEV6fkSVForiTS1k=)
3: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: 9E+p4QvOUJRQphSOmC3RklE7YSCr0ToEL3T4NDqFf04=)
4: 9WKN0gCb48l5bHUNl8dV6tRmYSc.roa (hash: v965nXSnshTWQQghLNVOqzkDYtxXR/Xwp0hDztEcPr0=)
5: Cdey4x25Y71jAjsi-w5ror1Em9w.roa (hash: 9Nkc6pZ1LY8cZ4nIVazJu4RFkDfce5y0UNDPuC2XOUU=)
6: Fu5kT9TxojjMx5c9WVqjL4KHnHY.roa (hash: OkWCwFJEccvJXScWm+KM/QkYp8L4OehLKl/qIjl3hPk=)
7: LvnAY2pckzRLAzMxTjPE9zCN3Ag.roa (hash: woZLLhApCfVxkyZ50HpqXpM/zC7yGzb4mBQNzIbCauE=)
8: Q03PdSGrQJ1a3WGfZ-bc5I0qaws.roa (hash: 2OnqRPuaN0v+Zan9ND6ygbAA1lh/p4DcTNqdYBIoSGo=)
9: Q5C92tE2t37UtBMqw-zHumbPgxQ.roa (hash: tly3KYH+a59AiCAVIEHbNYFLpCPBaZXHr2/DBwumJlc=)
10: RUzsZjQOmWwABCIUkcshejkaol8.roa (hash: RBKNBE9V3LhFEz+JeieM4xs1FwZeU1f7a5C0ApeFYFE=)
11: U0sKMofxXdVOw-0XJTrnhs5_ivw.roa (hash: 2ArYsgltaFdadzwNfrDc7gLpkClQBPjzaHH3uLWf38s=)
12: WcBb746Ge3KAEF-yLyH5I6ZFE0E.roa (hash: QXm/UopRYCraXfnadtlxCqtDzUMyQNtipIGzmPAgbf4=)
13: XUImnZKdlu7MDc0FxppzhVw4AFU.roa (hash: owXiNqfnKaJDDUXdUHghHE0onKUOIoOQu55R09C97Zg=)
14: c-8fg39HEBoTazbtgLubPv-jdHk.roa (hash: JsFBjPvToocQ1g31FqB3aylJXDSNR8YaVIwtJ/bFd+o=)
15: dXpQm6W-fzeDoM6ANaDna4LeJJw.roa (hash: X+KL+RuBzuWO/Tf7EZrDXYxpoc28BH51yAUJezDMoh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:6c:8a:f5:aa:e8:b8:3d:a1:d4:c1:e4:b6:bd:66:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jun 12 20:01:07 2026 GMT
Not After : Jun 13 20:01:07 2026 GMT
Subject: CN=709c6facb9b6d8bedf4ddeb1e4ef1a458ab3a910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4c:a9:b0:98:5f:02:02:93:0e:7c:8d:12:67:
d6:d9:fd:0b:4b:51:eb:ef:bf:73:25:89:1d:23:25:
66:f0:51:27:ef:ef:5c:f2:cd:14:f9:3c:dd:9a:93:
ae:6d:e4:03:55:53:a4:b1:1d:60:fd:f7:d0:48:6d:
3a:26:c6:a7:6d:65:74:4a:98:0c:95:79:93:74:a7:
d4:53:42:0d:c2:50:41:83:b5:4f:0a:16:e6:d7:68:
1e:48:c1:e9:6a:1b:9c:68:bd:3e:cf:24:7d:81:25:
2a:03:48:38:77:8b:08:05:1c:14:e4:ea:d6:64:bb:
b8:9d:91:6c:4c:0d:13:d6:68:b7:28:d2:a8:ec:17:
9f:d7:bc:84:cf:7a:0e:01:f5:e5:be:69:6f:64:85:
18:18:05:02:61:33:e7:96:e9:90:61:7e:c9:a5:64:
cc:13:75:bf:f2:d2:d1:1f:1a:61:c2:89:0d:12:2b:
a2:c7:71:6f:03:cf:2f:ab:bc:70:f5:67:54:48:1d:
a0:aa:1b:00:e4:63:09:d8:ac:ac:83:b0:e2:28:91:
b3:c7:c4:08:e2:b0:aa:43:de:59:87:60:8c:cc:81:
ad:bd:d3:3e:ef:99:57:67:98:21:a8:8f:2a:11:09:
49:b4:1a:16:46:50:e6:5b:82:9b:18:4b:7b:7a:52:
8f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9C:6F:AC:B9:B6:D8:BE:DF:4D:DE:B1:E4:EF:1A:45:8A:B3:A9:10
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c8:c0:76:1b:7b:45:f6:08:bc:16:4d:e1:ad:35:99:e7:82:
94:2f:70:cf:5f:a7:12:a5:a3:d8:4c:f1:83:30:b8:fe:09:17:
dd:bd:66:92:fb:d3:ae:77:bf:5c:8f:da:8b:cd:d5:13:ce:a1:
f2:6e:2b:26:14:2a:a5:a4:51:a0:c6:0f:0e:dc:23:94:7d:32:
d7:6a:50:bf:71:0b:04:82:50:7b:79:49:71:fe:c1:d9:31:84:
69:d1:01:2f:e6:18:18:5c:1d:23:17:6e:2e:c4:18:cb:05:c9:
95:12:bc:ae:e9:f8:8e:29:3b:63:82:cd:82:c1:a8:4c:8b:8f:
34:61:89:fe:00:b7:13:df:66:66:77:fc:bc:9f:3f:ea:62:df:
0b:ce:cb:43:5b:22:e2:0f:e6:45:4f:7b:6f:fd:68:6a:07:49:
a5:2d:c4:62:58:1c:98:99:52:ad:95:db:0e:f2:2b:5d:68:5b:
92:14:ac:4c:9c:59:f9:08:a9:6e:0a:a7:40:94:ce:85:a8:17:
47:d7:1c:7f:84:4f:04:d0:bc:60:d9:27:d3:11:f0:47:09:4f:
29:2f:4d:ce:ac:b7:df:83:8b:5a:b1:47:f2:d6:1a:55:8e:b3:
2c:d5:a3:07:2d:22:6b:76:f0:84:6f:56:cf:22:36:1a:5a:7d:
a3:d0:59:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 02:21:31 2026 by rpki-client