
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier: zoZtILehieUZUbuyfy2qWtrF1upC5u2LRzdBHWXlJ3s=
Subject key identifier: D0:D4:44:4B:18:9D:6B:93:CF:94:BB:C7:80:FE:24:A7:A6:13:97:E5
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 019FA2291F8EB7BAB199F8B92B1AD3C2083F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number: 0A1C
Signing time: Mon 27 Jul 2026 06:00:31 +0000
Manifest this update: Mon 27 Jul 2026 06:00:31 +0000
Manifest next update: Tue 28 Jul 2026 06:00:31 +0000
Files and hashes: 1: 42iMMMRyCj6t5Gb7iHxpdxdIZnw.roa (hash: oV05xJ3ianPj2d2p5u2rAJjPxzr+kZmbQ6SGxfEYdL0=)
2: 9skBFy-gVmDl-nkjxXAKgHcli-I.roa (hash: 7gSJ6zN5NW6BGUihBJnVoBFmgqEGP4fmTIDMGINspMU=)
3: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: nLwuTdjbxHAzH9sQm9SDGmGg37ulSsmAXlEJyU3pz6M=)
4: CYN-6kj2u9HIpYoQ3hmgvSsB35k.roa (hash: uoS5teZaIQEfymaaNdwi0VIQaDXV2jMrircb9XoayTE=)
5: Cn2XHyeB81WqaZSjg7QBfwHD8CU.roa (hash: +H1tXQmNkJ0PpJOqloukby4uXtryrpKFGs7NDZGKF+U=)
6: Eh1zKu3hD9M9mfNTxR_zbWN_UoY.roa (hash: LmM/Lacelv6UENbWxP7rIgedmTwgXdIq3BTIdVtbP+c=)
7: GXpP16JP0Mjym_u_vszjldIXucM.roa (hash: 0GFGujZKcR3Ga+pFC/exC5L1CnjeKo6DgEs39y2hAc4=)
8: GpC8kKK46MldSup1gVZrU7Mojzc.roa (hash: 6Lu5Oq012D9LKfKVQhXUujBxyGtMssHHbOSP5uQ8bhw=)
9: IzioJZxghFwgMTnVeVHHpMj-swI.roa (hash: wRkEhmwjz0Z3CuNMqban/3il9wF+W+3UoPcrnrnPUQI=)
10: NGpHbF0qELe-yypRyZG8QYDDkQ8.roa (hash: STZ8+oAAgWpB89YtrloGqm8ffW2z9KJfLq0rIu0hcT0=)
11: RHYHLfX7MZwqTOjtai1Px4dZdUk.roa (hash: 9gqUDjHutLNZlP+IlfjuYLEG7YjcoaY1UFU3hwr+l/I=)
12: SyWHbYOnHu_cvDaajuYM-To7M1w.roa (hash: YSRENKcj3fhKWRCWRTPdwxBLbJ6LeYaoc5YN/u+MBoM=)
13: U0T21bHsT2j1MueUQfzfVxTuFZQ.roa (hash: 8mdLmQ605wsI8HkkExAKeuL0NcxSn5gGLXOqg42+2n8=)
14: ZTRYP_xNQ-xHfjwU3V1iHE8I5Sk.roa (hash: 82wNZlZVa9PTuuaZD0iq9g3BjS5GghQ+K3v6FuHGgcA=)
15: eSvAFbt4I_ny3rlI1qsQVvR095k.roa (hash: ASQ/McMElv2jG1XUE+eDIGnRMZkt0bsbVgcxyB63q5k=)
16: fd8bJA8DM-0zr8RLGfMJuFRYj1U.roa (hash: AOSETmD6hQ/zex92QpyDr+KfP3AtnIbAXfSo/7qIWOQ=)
17: gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa (hash: YAjRepSXiV21hnlqtzGBka5AQsC2Q/c9dyI4/lADp+0=)
18: u5dp8n3I7jflzjFJbZJ5BPdSfSg.roa (hash: SdwZS8EmIER4C5RBFO+zi0xPjMT8sLGC4SKpUhZ0ViQ=)
19: xuhDpHE2bnYdJOoJ6yInvIa6YrE.roa (hash: ohBVT4HyJLZk/hzU7rkg4mhr642F6fJ3Kl5PbeKWAPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:1f:8e:b7:ba:b1:99:f8:b9:2b:1a:d3:c2:08:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jul 27 06:00:31 2026 GMT
Not After : Jul 28 06:00:31 2026 GMT
Subject: CN=d0d4444b189d6b93cf94bbc780fe24a7a61397e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:fc:ab:da:6e:de:de:04:b2:74:62:8c:b7:
88:50:0e:a1:d2:59:c4:60:c3:bd:7a:ac:5c:47:88:
5c:49:83:a5:49:41:7d:d4:db:d0:b9:cc:e6:9a:cc:
98:1b:7c:4d:8a:4a:c1:5a:57:1e:df:5b:29:85:a8:
83:9b:20:ba:61:ce:f9:78:fa:0d:86:d4:26:3c:8b:
50:50:f4:34:4f:0a:02:4a:52:1e:67:a6:4a:1d:eb:
d1:ed:58:3f:91:75:40:8b:68:a2:37:50:f0:33:4a:
16:8e:4b:45:25:27:18:f2:b5:30:e0:25:92:af:59:
ff:dc:29:9c:82:6d:c7:2c:83:29:12:45:5d:43:18:
94:13:4e:30:3b:42:40:04:72:5f:d5:68:5a:42:94:
c0:17:b3:cd:21:3b:52:a2:4c:01:3e:d0:da:9c:54:
a0:f8:83:ce:5f:33:5f:91:54:8e:ee:50:7f:a4:cd:
69:e1:e0:59:ae:a1:6c:83:68:5d:7b:f3:6b:a3:1f:
7a:31:cd:be:8b:03:23:6a:37:ca:32:f9:df:4b:ac:
45:dd:5b:3d:98:78:56:46:90:9d:bb:d7:fb:97:8a:
20:90:b1:ba:99:14:75:77:e2:4f:3f:64:4d:92:58:
24:bc:c1:dd:5d:51:f2:2b:80:47:1a:57:4c:ad:ef:
c9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D4:44:4B:18:9D:6B:93:CF:94:BB:C7:80:FE:24:A7:A6:13:97:E5
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d8:8b:1b:54:35:04:91:7c:7d:10:dd:22:3a:16:57:c2:22:
9d:d3:96:3d:35:be:d8:07:4b:69:da:9e:37:50:ae:98:06:fe:
53:db:a1:50:af:b9:5b:d6:df:72:78:2c:f9:a9:a8:a2:6f:14:
c6:ba:ef:2d:b5:f4:f0:bc:d2:8f:bd:83:f3:71:c1:ca:06:40:
84:23:b0:25:0d:58:cd:4d:ae:a2:96:e6:5b:fa:2f:24:71:36:
df:5f:25:15:54:30:b2:58:e5:51:7f:58:c0:8a:67:9c:15:1d:
d7:c1:67:1a:c9:16:b8:46:32:68:49:69:1d:2c:b6:d8:6c:67:
a8:4a:8e:0d:1c:71:8f:a2:94:81:2f:8e:e1:79:d5:97:74:f6:
5a:35:43:bc:80:05:5a:44:60:fe:83:b5:09:b0:0c:e8:4f:19:
7e:4d:34:78:bd:93:ba:6f:8f:6f:e6:72:80:db:85:f6:ce:e5:
3d:bf:f7:5b:df:4d:c3:9e:dc:e3:46:6f:b5:e6:d4:25:e4:9a:
bb:4f:20:17:f1:ff:65:51:c8:f8:d7:7e:4a:ea:d1:12:80:59:
b6:06:13:ed:63:11:89:b3:6a:c3:cf:3d:76:98:ba:39:d2:4d:
99:85:3a:b8:ea:65:36:5e:1e:fc:4b:b5:82:4c:2c:03:39:5a:
29:1f:84:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iKR+Ot7qxmfi5KxrTwgg/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh
N2U1NjYwHhcNMjYwNzI3MDYwMDMxWhcNMjYwNzI4MDYwMDMxWjAzMTEwLwYDVQQD
EyhkMGQ0NDQ0YjE4OWQ2YjkzY2Y5NGJiYzc4MGZlMjRhN2E2MTM5N2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9D8q9pu3t4EsnRijLeIUA6h0lnE
YMO9eqxcR4hcSYOlSUF91NvQuczmmsyYG3xNikrBWlce31sphaiDmyC6Yc75ePoN
htQmPItQUPQ0TwoCSlIeZ6ZKHevR7Vg/kXVAi2iiN1DwM0oWjktFJScY8rUw4CWS
r1n/3Cmcgm3HLIMpEkVdQxiUE04wO0JABHJf1WhaQpTAF7PNITtSokwBPtDanFSg
+IPOXzNfkVSO7lB/pM1p4eBZrqFsg2hde/Nrox96Mc2+iwMjajfKMvnfS6xF3Vs9
mHhWRpCdu9f7l4ogkLG6mRR1d+JPP2RNklgkvMHdXVHyK4BHGldMre/JAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDUREsYnWuTz5S7x4D+JKemE5flMB8GA1UdIwQY
MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt
OTRlZmJmNWNlY2Q0LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0
LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtiLG1Q1
BJF8fRDdIjoWV8IindOWPTW+2AdLadqeN1CumAb+U9uhUK+5W9bfcngs+amoom8U
xrrvLbX08LzSj72D83HBygZAhCOwJQ1YzU2uopbmW/ovJHE2318lFVQwsljlUX9Y
wIpnnBUd18FnGskWuEYyaElpHSy22GxnqEqODRxxj6KUgS+O4XnVl3T2WjVDvIAF
WkRg/oO1CbAM6E8Zfk00eL2Tum+Pb+ZygNuF9s7lPb/3W99Nw57c40ZvtebUJeSa
u08gF/H/ZVHI+Nd+SurREoBZtgYT7WMRibNqw889dpi6OdJNmYU6uOplNl4e/Eu1
gkwsAzlaKR+Ecw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:37:39 2026 by rpki-client