
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier: bQ2FbPkWU5rF5QeJ5xYY/rMty+Q/yET75rSS9iZgbP8=
Subject key identifier: 56:21:9B:1B:AC:7E:46:AE:66:85:A3:13:BC:9F:E8:62:42:ED:80:29
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 019EB7A11E09C972642078885E121B99BDCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number: 09A1
Signing time: Thu 11 Jun 2026 17:00:49 +0000
Manifest this update: Thu 11 Jun 2026 17:00:49 +0000
Manifest next update: Fri 12 Jun 2026 17:00:49 +0000
Files and hashes: 1: 42iMMMRyCj6t5Gb7iHxpdxdIZnw.roa (hash: oV05xJ3ianPj2d2p5u2rAJjPxzr+kZmbQ6SGxfEYdL0=)
2: 9skBFy-gVmDl-nkjxXAKgHcli-I.roa (hash: 7gSJ6zN5NW6BGUihBJnVoBFmgqEGP4fmTIDMGINspMU=)
3: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: 5ZkNvB3exxk5mP1tSp8xSwYCGdspR6HZVXYMlLV7Fo0=)
4: CYN-6kj2u9HIpYoQ3hmgvSsB35k.roa (hash: uoS5teZaIQEfymaaNdwi0VIQaDXV2jMrircb9XoayTE=)
5: Cn2XHyeB81WqaZSjg7QBfwHD8CU.roa (hash: +H1tXQmNkJ0PpJOqloukby4uXtryrpKFGs7NDZGKF+U=)
6: DC-2va12O2p4wJaztsxQYqxlteI.roa (hash: 8DuSeuFCejqmMZ/sp4dL3rLoQsC1vmmd0qUYceaaN1Y=)
7: Eh1zKu3hD9M9mfNTxR_zbWN_UoY.roa (hash: LmM/Lacelv6UENbWxP7rIgedmTwgXdIq3BTIdVtbP+c=)
8: GXpP16JP0Mjym_u_vszjldIXucM.roa (hash: 0GFGujZKcR3Ga+pFC/exC5L1CnjeKo6DgEs39y2hAc4=)
9: IzioJZxghFwgMTnVeVHHpMj-swI.roa (hash: wRkEhmwjz0Z3CuNMqban/3il9wF+W+3UoPcrnrnPUQI=)
10: QxRT0q4FzTnTcacN8tWvzsCAarc.roa (hash: XiEdwKLVvGeQdfVFaF47mebbaJXtp25EOB5RwY48keA=)
11: RHYHLfX7MZwqTOjtai1Px4dZdUk.roa (hash: 9gqUDjHutLNZlP+IlfjuYLEG7YjcoaY1UFU3hwr+l/I=)
12: SyWHbYOnHu_cvDaajuYM-To7M1w.roa (hash: YSRENKcj3fhKWRCWRTPdwxBLbJ6LeYaoc5YN/u+MBoM=)
13: U0T21bHsT2j1MueUQfzfVxTuFZQ.roa (hash: 8mdLmQ605wsI8HkkExAKeuL0NcxSn5gGLXOqg42+2n8=)
14: ZTRYP_xNQ-xHfjwU3V1iHE8I5Sk.roa (hash: 82wNZlZVa9PTuuaZD0iq9g3BjS5GghQ+K3v6FuHGgcA=)
15: _Hrgg9TwnO9PoE-2Cm9MNkAYl0w.roa (hash: bu/cyj5EwB3TDiwyIVSQeElzT+joOr0r21e4GEpp8jI=)
16: fd8bJA8DM-0zr8RLGfMJuFRYj1U.roa (hash: AOSETmD6hQ/zex92QpyDr+KfP3AtnIbAXfSo/7qIWOQ=)
17: gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa (hash: YAjRepSXiV21hnlqtzGBka5AQsC2Q/c9dyI4/lADp+0=)
18: u5dp8n3I7jflzjFJbZJ5BPdSfSg.roa (hash: SdwZS8EmIER4C5RBFO+zi0xPjMT8sLGC4SKpUhZ0ViQ=)
19: xuhDpHE2bnYdJOoJ6yInvIa6YrE.roa (hash: ohBVT4HyJLZk/hzU7rkg4mhr642F6fJ3Kl5PbeKWAPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:1e:09:c9:72:64:20:78:88:5e:12:1b:99:bd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jun 11 17:00:49 2026 GMT
Not After : Jun 12 17:00:49 2026 GMT
Subject: CN=56219b1bac7e46ae6685a313bc9fe86242ed8029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:fd:79:89:32:7f:82:31:2d:75:3f:9c:f5:
52:c0:43:e0:ef:fc:19:b7:92:05:cb:09:48:9c:d4:
b4:69:62:5d:bc:cb:48:3e:f7:c1:e3:69:1e:f4:da:
99:52:41:7c:1a:5c:4e:aa:d1:9f:d3:23:a9:cc:e9:
ec:09:1b:aa:8c:f6:24:ec:eb:75:87:28:55:29:0e:
25:67:11:84:6d:5e:d9:30:69:7a:34:77:de:88:35:
c7:8a:6b:c8:b6:05:f4:43:55:ba:3f:ba:5f:fd:28:
50:76:28:40:bf:42:f8:74:4d:a3:56:63:75:0d:b3:
ad:e9:18:3a:07:b0:3d:9f:7b:17:dd:29:07:13:cb:
66:f4:a6:6f:be:e9:1a:ba:6f:02:25:d0:8d:da:13:
2b:4f:bd:06:a8:11:b7:c3:17:1c:18:af:a5:9d:c4:
9b:21:3e:0e:82:63:4d:1b:6b:0c:a2:f7:b6:01:1c:
dd:b0:47:27:dc:2a:be:40:c9:9d:ac:73:79:34:5b:
12:62:28:7b:9a:bd:e3:36:8b:61:48:c1:93:e6:a5:
80:87:4f:ff:74:eb:b5:d6:eb:a4:8b:e3:5e:a9:d3:
b6:46:37:a4:91:40:3d:b8:f9:bf:0c:11:13:c3:6f:
e6:cb:15:87:d0:21:8c:77:4f:0a:9c:7e:37:a1:d4:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:21:9B:1B:AC:7E:46:AE:66:85:A3:13:BC:9F:E8:62:42:ED:80:29
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f6:7f:ed:a3:3c:e6:bf:86:6b:d8:8f:be:0e:00:a2:3b:e6:
63:c8:b0:ea:1a:49:2f:8c:17:c9:80:86:b8:90:9b:86:45:09:
cf:d0:b1:c6:50:81:cd:61:20:69:62:34:ce:0a:6e:04:24:ea:
0e:4a:8e:f5:11:10:61:72:10:3f:7b:79:8d:6f:ba:43:ac:0d:
9d:a9:bb:cd:2a:ca:2f:1f:da:1a:5f:4c:05:c1:fb:7b:66:ff:
46:dd:49:21:3f:17:27:f3:3b:8a:3a:03:37:61:cb:9c:f0:ca:
8b:98:61:51:9a:ea:d9:24:7a:77:19:a9:65:e5:b2:08:32:95:
88:76:3f:80:59:71:6f:12:69:a0:b4:c2:37:ee:94:dc:fb:17:
bb:4d:60:75:30:7d:06:95:9f:5e:70:ef:2d:d4:9c:43:cb:1b:
40:82:11:7f:b9:cb:db:b4:19:19:9f:bb:e6:af:34:a2:cd:13:
0d:90:87:66:48:28:7e:c0:0c:5e:91:19:8f:b0:a0:2e:56:56:
82:4a:d6:55:4b:18:67:11:16:f1:14:f1:de:b5:9a:e3:f5:0a:
85:7d:74:60:c4:cb:5b:de:ad:3c:76:52:0d:46:a9:50:3a:46:
24:ed:ed:9c:75:b1:b6:30:db:f2:12:74:d7:b7:3b:14:c2:c1:
22:6d:a6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:29:53 2026 by rpki-client