
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
File: bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json)
Hash identifier: ZfMFHR7i7hUU9E+hQ4vPo9Mw3Xh7RGo30Dh8lnZ4sCk=
Subject key identifier: F7:EB:ED:5E:DE:A6:04:15:E5:1D:51:0F:B9:C3:38:D3:5C:C7:59:FA
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 019E9E4EB4644C8C6A0B7C488EF9D5188753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
Manifest number: 0CA2
Signing time: Sat 06 Jun 2026 19:00:18 +0000
Manifest this update: Sat 06 Jun 2026 19:00:18 +0000
Manifest next update: Sun 07 Jun 2026 19:00:18 +0000
Files and hashes: 1: 5FHJTMovIyafBSIoWEyalm3rI5M.roa (hash: 7pR5dvgxZrfBVlojZ8DgehqyTZVyIf8AxZ2O6MrCJ8c=)
2: 6E9LTAyzQt1FEPfr7FhyMtAFg2M.roa (hash: TGRGd7XnfyAu8YWaQ6cS2sAir5AhkX//ozfCRednwtk=)
3: 7hJafOPCpVSEdxOE76y6niPbYbg.roa (hash: W1rV0T1F6RwXszjsED1ynOIbEQcRvX19VVt3Nz1sIkc=)
4: BErn-fY5VBXxD2VyEYJN-JdQUW4.roa (hash: suKr1RNc8jf4yYkym4zmqDLZzivo3iXfr9FhGIfjNng=)
5: BUT1NMkorMdojGeQxT5hIJgs8Nc.roa (hash: yZ0THgxl4+lAG7xhsfPweM9P6nUbmimKZfn0DgScC+E=)
6: BfGhYoXLz-5I0FN0nL8DXjOx6EU.roa (hash: Ss4hP6Q3/Oalsvet7/zlDLfrMD1Bv1uUMHsdssewtYI=)
7: CUqBA3JOr-q_B7jhb4LuDWJBP-Y.roa (hash: gL6r+OfrUkmFBaQ7Fz+JI8GRS58TttvJ90zBO4jV1Wk=)
8: DA1lpibgFq5-y_Y3ZxUgcX7RgTo.roa (hash: jnR91XQH0HnolepDmgrXE13NqGBnutXBwTg3aasEMIc=)
9: GVUEDUnF5jUjS5nadTHF8d_a8jM.roa (hash: CNVQH1UrdXTDRK5lM23G9sOU0bUyYlN7wDHyKz8bSA4=)
10: HIFyOEF6o7Rsq5goVjW52OhadgI.roa (hash: k9ek9boUBYYEmOjPJ57YH83oUBsMeWYZC5hDknA/Hs4=)
11: IdbA3ga81eRnRIoyM9ZFsnJoq-0.roa (hash: X6pEz6Y9VtUR71wHETOjVXSfvkgFN13w55bg4lUbPVI=)
12: KlqwNeDSNI-6gcYLBNO5DzJcKIE.roa (hash: Qw0dDm30Ph7VrT6EudqSthxSPTm302Z+oCp8QJLF0jo=)
13: RbdrFxMpPdVSzRp_C-Rku8BRui4.roa (hash: i6eqmLVwiqXYOO52UX4iIvTthJpungIdi65hhhhuuR0=)
14: RuFU5d7ARVr5r4PY4vOdxriie6Y.roa (hash: yyiFBcac7vrMWH3pU/fo+ECKDfP8bGIkfxHEMC+At54=)
15: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: lNJLq6kMbNpwHQpwKsdy66Gz8tBnrfojzGuRr5Kv8qE=)
16: bVPAHIj80WWce7a3M1XCyh6YdoE.roa (hash: sdPf2Cf+3VFGeiSN/Ap92x67gRehKgw0gxPfYcFUmLA=)
17: lSC4RzevQeRkikifsAt3gR84fxY.roa (hash: CDC2+wQFTPEwC0Sq9Rnp++UpyacRzQctOXOPJvW93xc=)
18: qEbYFQoXre_OuLtdayPj8liTJCA.roa (hash: jvondzJ1t0alplZUpmymkMm3ArgabFjZkTrg9UVcZXU=)
19: rMHgLwq1dgxl2KpsUSthXs0MWBk.roa (hash: Yk8LFVOWtBI6Eap7t4JN9HPbcuGjrW1IcCeKsknRw5I=)
20: xrze8vo27kvzGHLArTlKKxLK6X8.roa (hash: 472z94Y4BGd5ZtO+s4jKvuHuf1XPqa3fnP1IMEj/HWY=)
21: zvxcn_GD8_hUJXGGJ7rjFFwAQB4.roa (hash: AG7WeXLfc9bch8+moQNIG4Gui1kugzTC1jXXmZYVyJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9e:4e:b4:64:4c:8c:6a:0b:7c:48:8e:f9:d5:18:87:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jun 6 19:00:18 2026 GMT
Not After : Jun 7 19:00:18 2026 GMT
Subject: CN=f7ebed5edea60415e51d510fb9c338d35cc759fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:3b:50:15:bf:00:b7:31:db:8e:f0:2f:cc:
01:e3:ea:ee:08:b5:77:f3:00:31:13:11:a7:0a:51:
95:0e:8f:13:e4:7e:96:43:32:95:09:4e:99:83:38:
40:13:41:88:5a:bd:cf:67:4e:71:f3:cd:a8:46:33:
66:00:45:d5:a6:4f:02:15:bf:e8:ab:f5:e4:54:f2:
2c:04:cf:af:11:bd:d7:21:a6:d2:48:f2:6b:3c:fa:
58:1f:0e:4e:d0:94:74:de:66:d4:18:07:89:37:06:
0f:ed:56:34:f4:43:f0:f2:33:f9:3d:08:7a:6c:ac:
22:70:2c:38:cf:b0:95:14:5a:d8:2d:9a:c5:f1:73:
a3:32:28:3b:14:65:3a:3b:56:e8:c4:b0:f1:07:d6:
20:04:5a:1f:7d:4c:0b:0a:51:78:b6:42:a0:16:78:
2f:4a:5e:81:1d:4f:db:8b:4f:05:84:44:b5:ad:1a:
7a:da:df:40:20:da:5a:ed:e0:d8:22:f2:48:ec:ad:
d4:f0:ac:c1:1f:bf:e2:0e:14:fe:5c:76:fb:b5:f4:
fe:7d:09:f2:68:5f:f1:ee:aa:f5:cf:b2:64:90:db:
71:e2:6d:2e:ec:93:72:8d:35:1f:45:f7:80:5c:76:
6e:7f:f0:42:d5:30:a2:48:b4:2b:82:b2:87:9f:77:
a8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EB:ED:5E:DE:A6:04:15:E5:1D:51:0F:B9:C3:38:D3:5C:C7:59:FA
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:cc:eb:0a:4e:e9:b1:75:b3:f4:39:79:20:aa:d5:60:ed:ad:
1d:61:eb:f6:2f:a9:d6:98:2d:74:8f:79:30:b6:7e:64:b5:56:
6b:10:79:14:6c:27:3d:78:ef:53:1d:a0:e8:99:97:f6:f9:96:
cd:75:be:66:02:82:fe:f6:1c:93:3f:d1:b1:21:b6:02:cc:eb:
58:4f:21:2a:cf:13:55:1d:b7:f3:b7:4d:3b:d7:f5:49:9c:1f:
66:6b:bf:2c:95:0a:df:b0:b2:71:0e:e6:65:71:8f:49:79:fd:
5a:3c:c7:3f:bd:02:03:47:f1:a0:53:84:a8:0e:7c:2e:f9:d7:
d6:95:77:b1:ac:55:90:fd:9a:cd:c5:84:35:3c:c7:c6:23:64:
d6:e8:20:f7:8f:e0:3c:4b:b1:72:68:ce:72:aa:1f:f2:c3:5b:
06:ee:56:9e:dc:f2:70:b8:6b:d3:e0:51:ad:eb:a5:89:78:7f:
78:3e:76:56:0e:f0:b5:d2:c2:0c:c8:c0:2d:23:77:9a:91:2f:
e2:75:cb:27:44:bf:2b:66:67:12:79:18:5f:85:69:b7:36:96:
1f:3e:47:1a:02:8d:1b:7f:3e:82:2b:85:51:3e:10:32:5b:6b:
14:f3:ac:1f:af:f9:16:f1:02:c8:cb:9e:77:60:f1:6f:75:c1:
fe:95:6d:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6eTrRkTIxqC3xIjvnVGIdTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh
NWQzODQwHhcNMjYwNjA2MTkwMDE4WhcNMjYwNjA3MTkwMDE4WjAzMTEwLwYDVQQD
EyhmN2ViZWQ1ZWRlYTYwNDE1ZTUxZDUxMGZiOWMzMzhkMzVjYzc1OWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmM7UBW/ALcx247wL8wB4+ruCLV3
8wAxExGnClGVDo8T5H6WQzKVCU6ZgzhAE0GIWr3PZ05x882oRjNmAEXVpk8CFb/o
q/XkVPIsBM+vEb3XIabSSPJrPPpYHw5O0JR03mbUGAeJNwYP7VY09EPw8jP5PQh6
bKwicCw4z7CVFFrYLZrF8XOjMig7FGU6O1boxLDxB9YgBFoffUwLClF4tkKgFngv
Sl6BHU/bi08FhES1rRp62t9AINpa7eDYIvJI7K3U8KzBH7/iDhT+XHb7tfT+fQny
aF/x7qr1z7JkkNtx4m0u7JNyjTUfRfeAXHZuf/BC1TCiSLQrgrKHn3eoVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfr7V7epgQV5R1RD7nDONNcx1n6MB8GA1UdIwQY
MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt
ZDZhNTk1MGNhZGYyLzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy
LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMzrCk7p
sXWz9Dl5IKrVYO2tHWHr9i+p1pgtdI95MLZ+ZLVWaxB5FGwnPXjvUx2g6JmX9vmW
zXW+ZgKC/vYckz/RsSG2AszrWE8hKs8TVR2387dNO9f1SZwfZmu/LJUK37CycQ7m
ZXGPSXn9WjzHP70CA0fxoFOEqA58LvnX1pV3saxVkP2azcWENTzHxiNk1ugg94/g
PEuxcmjOcqof8sNbBu5WntzycLhr0+BRreuliXh/eD52Vg7wtdLCDMjALSN3mpEv
4nXLJ0S/K2ZnEnkYX4VptzaWHz5HGgKNG38+giuFUT4QMltrFPOsH6/5FvECyMue
d2Dxb3XB/pVtng==
-----END CERTIFICATE-----
Generated at Sun Jun 7 04:59:21 2026 by rpki-client