
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json)
Hash identifier: WKSSq/2GqNZTQWpqbvEbNHOj18rUUyIEWX0vfDlKn6U=
Subject key identifier: 16:D5:9C:22:A6:74:A7:DF:35:90:AA:93:52:02:6E:AA:89:E3:63:AC
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Certificate serial: 019EE1B04C5989C3126517F22172B19161D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
Manifest number: 182A
Signing time: Fri 19 Jun 2026 21:01:27 +0000
Manifest this update: Fri 19 Jun 2026 21:01:27 +0000
Manifest next update: Sat 20 Jun 2026 21:01:27 +0000
Files and hashes: 1: 1-YByaiMeGaD1s6w4s77GCgHnrXY.roa (hash: S1szHNMiYggU2bXWCJ0y5Z9O0Xe6ogWq7kcI9RRHPZA=)
2: CPZG4XxfF0vIUqKLlml-DnAhI78.roa (hash: yghX+xOCfCSz2UxV0M4ErScOYQQ+0s+V03bXtP9h8Jg=)
3: ItbVNmV7D7Xz58HIXd8OUA10ZIk.roa (hash: 60qPs4eG3CJz9Jr0RllpZz1JwhEoHqZ3z8/Wkwni7OI=)
4: J0cgNdbp82xwSAhTcid--cSnvw8.roa (hash: NnNH2xB6swJJVG31LQ5vR+z5/IV/mvlmseViZQ49RZ0=)
5: N1eNUoekf98MkfeCq0d0_JdTGoc.roa (hash: nz2HilLDytUZJAVqDqHSq82uJ9Gp52F9hu+UGahbmAM=)
6: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: I8hkyumNjc4vuWBhp0fB/mn8uYoLxvZCzs8cfhBv16E=)
7: YIodQuf58n6NPD3S4ZwYWU4G05Q.roa (hash: hAnlQcSr3iSrVyOVrTtnTihoMBTYOjvFhdRAdMoSe+c=)
8: fg2QbP6_NHroFLcB4VqlEsdsL78.asa (hash: c+f7ud2GD/XnZWo7d+BVUUMg4a2Tuu0iakas2CyyTF0=)
9: htEsk8is-3HwvISfO35xc7PdVM0.roa (hash: uHKztBgJ/wsTm8pbbSDKTc7meGtHJJGVbbj9VG266W0=)
10: j3hTOTMf81Nkcr0TsIH3WU1Dvd4.roa (hash: QfmXcXNN1Wd563NtKkGqTEqV9zXIuZBoL2/KRKrrmGo=)
11: r1wL1w6v-FmiJM6wTPegvCqzZVs.roa (hash: PHGHhjoRjtnu5vlNwMrqr/W1vzuZLgPWKcRcTuuiLy4=)
12: rbHMZH-yOzDb95f5uZ_DwfVDX-g.roa (hash: hyrGoGmheB3UHC4U69Q9VZBQns7Aig366oUvSyshDX8=)
13: uBecXrloW4prw2ylSn0_Ivng2VY.roa (hash: yFhPh9rE6yKyFP6xCMVODHQKX7tLrcXL5wGXXwvK1tU=)
14: vvun3eikZcpW6UjAhYfVCVsm-AI.roa (hash: U39ycL4LLB92O8NzJ38ORyHzqu/08gaa/sDm7/jkQGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:b0:4c:59:89:c3:12:65:17:f2:21:72:b1:91:61:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Validity
Not Before: Jun 19 21:01:27 2026 GMT
Not After : Jun 20 21:01:27 2026 GMT
Subject: CN=16d59c22a674a7df3590aa9352026eaa89e363ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:0c:b8:26:67:43:d4:95:94:e4:7a:02:61:
9b:33:09:7c:13:62:12:f9:11:92:88:aa:09:7b:c0:
f0:8b:52:e6:28:34:fb:e1:97:0b:e6:ea:e0:89:55:
2c:fd:bf:97:a9:8f:69:a7:5e:e2:8c:ed:d2:6c:9a:
d6:29:d8:7e:c9:ab:50:47:67:5f:39:7b:eb:eb:41:
49:50:55:85:1d:32:57:03:4f:f3:17:3d:af:ce:5a:
06:3c:aa:cb:26:9c:23:0f:4b:d0:87:c9:58:a0:2a:
a3:d6:ed:c6:23:bb:48:1e:db:bb:b2:50:29:d6:ea:
57:56:e4:a1:18:11:3f:bc:b1:c9:69:ca:8c:a0:5a:
e2:e1:f6:3d:9e:87:c4:5c:cd:e7:b0:87:1d:22:bf:
2e:67:90:99:b2:42:c5:6f:3a:65:3c:1e:6a:ed:05:
81:fe:f3:91:a0:7e:17:69:06:e8:8f:f9:67:37:60:
a3:93:5f:a7:8f:5d:7e:98:80:52:16:5e:58:e2:17:
12:ee:d7:5c:08:e8:99:12:c6:6c:55:cf:98:11:57:
fa:ae:80:a0:36:a5:e3:cd:f1:e8:4c:80:58:3f:d0:
b0:62:60:32:57:ee:84:dc:3b:30:d0:10:aa:f0:03:
3e:3b:9a:80:1b:2c:60:10:ab:e2:8c:0b:3c:f3:79:
58:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D5:9C:22:A6:74:A7:DF:35:90:AA:93:52:02:6E:AA:89:E3:63:AC
X509v3 Authority Key Identifier:
keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:09:5a:c4:2f:6a:8a:2d:52:42:58:0e:6e:77:58:96:e1:d8:
0c:b3:05:8b:a0:07:4c:8b:2b:57:04:24:c2:0b:0d:7e:2f:63:
a6:62:3a:30:c5:f8:1a:b7:aa:39:54:60:99:5f:9d:53:4a:a3:
8a:71:b6:7a:d8:06:fd:53:a6:85:64:6d:b8:53:91:ff:38:9f:
af:7a:0e:c0:ed:48:83:9b:5a:03:49:cf:a7:3b:12:84:78:56:
57:b3:3d:2e:e5:d2:0d:3f:f2:d1:a9:63:e1:fb:95:e2:ee:fa:
13:24:be:ca:2c:8f:53:85:ae:f9:87:76:7c:3a:c0:02:be:0e:
e8:25:61:9f:0d:2e:4f:f3:22:c0:35:e7:fe:d0:77:07:58:7c:
1a:a8:e0:08:5f:e8:5f:c2:13:90:77:db:cc:a1:73:86:b8:eb:
d0:85:61:4e:34:0e:b0:48:22:7d:61:cd:fe:91:59:b0:5b:60:
14:4b:1b:9c:ee:5b:a2:d5:5a:39:cb:28:5a:5e:ce:8f:70:de:
64:fb:c7:18:63:1a:7b:79:75:92:c7:b3:d8:ea:25:e1:7b:87:
a9:ae:7c:70:7c:97:fe:a1:da:28:94:ea:1e:9c:1d:96:ab:ba:
70:a3:83:56:60:5c:a6:56:b4:e3:e9:2b:b5:c7:05:d2:02:1a:
50:d4:e1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 03:13:27 2026 by rpki-client