
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
File: THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json)
Hash identifier: Bf0lvoscWzIW24tVvH4ExfeolBZEnniXY1MaLugHcY4=
Subject key identifier: 8D:6B:7E:E2:F8:7A:BD:3E:D6:7F:66:6B:7B:D9:DF:22:98:B8:13:B0
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial: 019EB733540B1C15DD523AAF9F20CD1C4DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
Manifest number: 1961
Signing time: Thu 11 Jun 2026 15:00:54 +0000
Manifest this update: Thu 11 Jun 2026 15:00:54 +0000
Manifest next update: Fri 12 Jun 2026 15:00:54 +0000
Files and hashes: 1: 5MRnKdBJRz0nCym_u2J_XuhbJV0.roa (hash: 0w7W5Douk0FpMsX6Dhx/ZXXVXbqTlMMWFq9w+rROgSg=)
2: BXXFKI13QIjnmOfPn-DjAJ-A154.roa (hash: urOCs6K6oSn1logMMcL9PFqOpqILrWbLQHv74ICPatk=)
3: CSF1WcnLJogzmtvTW4zbdxH149I.roa (hash: /BQ3atXgmkXNs08xQyzVGIUYihhzzloVi9gnBQ4fEf8=)
4: DBQk2xkzH8LUMKGSPsE6YRZwNgg.roa (hash: Ez/l5IHOm/GxqrY07w6s3W0W8MrW87S3E+gbSURGU2Y=)
5: GdXlIc5BP-3XOg-aqWkP_a52ndk.roa (hash: G0Pn5eObq0FpgcplWCouXfdtlhgx0MPfgPeSIk/PGOo=)
6: LfyLZbGl7b5gzJ9zSZ07MTcwQGc.roa (hash: JcRj9d8ulbmAc0W06IEWNBloWUue3HKweCBhCEYuEvs=)
7: Q8i1GCNM8MeAVWMzMN-VkOcL5cc.roa (hash: /F4wQ4+WNm083+DT8dsb+mkUzic0vz1naKYXmlneu4s=)
8: QFuike-stdBR2Qti952hl6TV8BU.roa (hash: 07OxG0G/dsZ56bfjY4mosLLZF6mhYFWxF2zJxp/iqzM=)
9: QMhXPeEiGbtOYJL0N3f4IXIT6ng.roa (hash: 0HWPj54I4hc1a9Dl1XhfG4dlUuFqco3Us2UXObXNoFY=)
10: Q_GDlNF7cK8B95qZojWcrc4afdU.roa (hash: LjEzjQgJhMLQIyhzGC77T1fGxckoIM3+ZyoGULP6VX0=)
11: SaP1nBFhXOE6FH3RW0G8tA8VQjM.roa (hash: cTn11+h/p3mDsKapImFbB/2zblLfIwW6K3OdsJp73RA=)
12: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: NpiGz0djHmhH0mjgSfe0TclJhyH1ZeE/tsdd0pLSGew=)
13: ZXr4IBxINp27c2uA9OArj4h7ywI.roa (hash: JD+M7Jzo6o0FuV4VqJtxKp+DhghFCIqIjWgxW5/ca+s=)
14: _3eACqWgcDV77Z5GJVk82wrfcAQ.roa (hash: zugyJ9au3EVgX9ZrQItHOQ/dgQnBWoZfW27IbF2rS7o=)
15: cgJUrA7zUIWAeZrM-A-gevZWhKE.roa (hash: E3FKka6J+aK+1x7zSPpnK2SU6NFTg+dv8eZSvTw7VeI=)
16: gJMtWq8wsHqrA-aMuJa4zlTGmHQ.roa (hash: ph6so/OLFpZPFLkaG9kVD8yzMdOCcTKa12b2RAynICM=)
17: gXb1y1F3U2XUAw7hK8QjhFzzPhI.roa (hash: Jzhqn78lmsa3hMGtIBekxLwEnu2AFc5tx6/m0IQS4VU=)
18: j3C7XhWqPqZZHvZkHu3yiqeeCcc.roa (hash: ZjpdDLmy3vgdZP6r/TUUOLjLthI6Y2QCHmwsaun5n3I=)
19: jH_DOyq4ZJejSSLKVID21lO__BA.roa (hash: kR/erK7JPMRLB0nP2bCrqOwwEEt7e8QRyTqOJC2JhM8=)
20: qFB2EJT-dRDHAj_TTnZeCHZ9Gcw.roa (hash: sFTYpyONZM4849OiQuWMraeanFpbFNLi3ztibzARdQc=)
21: tBlYFSzWvbFvxf9f-MzOzaib52c.roa (hash: +QoYpfs3CrNYgE/1grCeAjj1v6GUGqrmR7t3xV7iiic=)
22: ubRPeeTkxSUpNxitZEengxfbjho.roa (hash: fMSmAi5k6+uYv96mJ7QxgFHbu3bUfoKt8MD+l7YHLTM=)
23: xONZTPQjTNAnpv3LpXFk-hZHq58.roa (hash: fMb3Xyl3Jh1WZeQDP8MvYVbT2cKVoCMH4bX5aAbt1YQ=)
24: xxGXfRcmkhBAjROUfzE7wrifgME.roa (hash: TUwE+CjLZWVNW/bdlU4DKJBAW1GHbsJsmhsw/0YlJn0=)
25: yoQlk7EPLkqco8JH4jKypU6v23g.roa (hash: 621ThCmwWv6CPqAuQxvYAjiamlbk6ns+2i1sDVoPtJM=)
26: zjEP4Jlf2NPIUmce29FPyO-6Luo.roa (hash: STXLo8QB1Iuve+MzXt6e+SM6A4TtepvV7fG8YNcWSNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:54:0b:1c:15:dd:52:3a:af:9f:20:cd:1c:4d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
Validity
Not Before: Jun 11 15:00:54 2026 GMT
Not After : Jun 12 15:00:54 2026 GMT
Subject: CN=8d6b7ee2f87abd3ed67f666b7bd9df2298b813b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:35:d3:49:49:f6:2e:88:0f:05:b2:6a:3a:8f:
79:08:83:8c:62:5f:5f:3c:78:b1:a7:78:47:ef:1a:
af:6b:8e:ff:91:3f:1c:18:99:5b:97:d5:25:20:e1:
24:80:b1:42:20:c6:d9:64:44:b5:0f:fc:6e:97:b3:
26:bf:42:16:95:15:a2:2b:e8:9f:51:60:15:b3:6a:
19:ab:b4:ef:47:2f:81:2e:59:32:59:59:cf:91:9d:
87:28:a8:e7:cc:24:a5:fb:3d:33:44:6e:79:fc:d6:
95:c8:a4:79:95:4e:23:9d:50:17:8f:49:63:1d:92:
05:71:0b:cd:90:a8:a3:5c:42:3d:c4:b9:cd:e1:06:
c0:7b:82:45:08:b4:6c:c9:cc:a7:a9:37:14:be:d4:
c7:47:5b:74:80:33:66:f3:6f:05:b5:07:f7:27:71:
03:0d:0a:ea:50:e4:2b:c6:7d:26:27:dc:47:bc:4d:
ae:30:ad:ec:5d:e1:98:63:32:7b:f3:50:60:ab:ae:
75:35:44:a8:9b:89:1e:6c:78:b5:f0:e3:73:d2:62:
8f:32:d7:98:2f:10:d6:50:26:d2:9e:87:0e:12:e9:
7c:2e:bb:6c:88:1d:5e:01:82:ce:ba:6b:cb:58:0c:
bd:9e:3a:c4:cd:f3:05:ea:3e:8e:7c:a0:9e:b9:4e:
68:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6B:7E:E2:F8:7A:BD:3E:D6:7F:66:6B:7B:D9:DF:22:98:B8:13:B0
X509v3 Authority Key Identifier:
keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:7b:76:4b:21:6a:89:d1:4c:ab:af:d2:08:5f:84:fd:d6:05:
4c:6f:d9:64:da:8f:cb:22:ce:a7:48:9b:d3:17:1c:d6:ae:7c:
21:96:92:74:1e:b6:ba:a5:72:1f:75:23:73:49:5d:0c:46:be:
6d:a7:6f:75:f6:2f:96:38:74:59:90:f1:b7:1a:99:6c:63:4b:
2f:66:bc:32:7c:db:83:cb:e4:06:9b:33:7c:b6:13:7a:d1:2b:
b6:fe:29:a6:7e:3e:dc:a0:f7:7d:82:d8:7a:f5:36:db:88:64:
a1:7f:68:9a:f0:45:18:45:bb:a8:10:06:2a:27:6b:5f:d1:1a:
ef:ce:79:50:a7:cb:56:1e:91:ff:48:8c:4d:d9:dd:51:0e:24:
6f:11:21:79:8f:07:19:2f:58:02:af:50:27:8d:98:eb:c7:87:
7b:a7:3e:f2:86:42:42:a2:bc:85:1f:ab:8a:b1:be:fc:2e:13:
d4:78:42:45:49:d6:1f:1a:9b:8d:18:89:2d:fb:6c:19:5c:ea:
ac:d7:d6:93:66:87:5a:3e:99:be:ff:02:e0:0e:ca:dd:24:ec:
1b:8b:1d:84:19:d5:d2:a3:6e:ad:70:0d:84:a2:b1:c0:23:30:
58:d7:b1:3d:b0:0f:d0:9a:bb:25:62:93:56:75:c3:69:66:2a:
34:f5:fd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:01:11 2026 by rpki-client