
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
File: tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json)
Hash identifier: tfG0CCzUvEBBIsiauAnmSe3Z7WaikWUdizLMekrVkVw=
Subject key identifier: 90:9D:EB:83:55:39:2B:36:F0:65:DC:01:E0:7F:ED:FB:57:D3:CC:D8
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 019FA33C081C69D48FED304641931A9AA9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
Manifest number: 19DC
Signing time: Mon 27 Jul 2026 11:00:48 +0000
Manifest this update: Mon 27 Jul 2026 11:00:48 +0000
Manifest next update: Tue 28 Jul 2026 11:00:48 +0000
Files and hashes: 1: 7gdlonHkctidA_Jgo0e1sPluTfw.roa (hash: L7iWiH+YVCR3BgQWnot+ADKst5Rvum0Fp/JtCnJ65RY=)
2: DQ1yVesejJpDnZvd2JLWH_7gAEU.roa (hash: iuHd9st9MGEOE3UuhPG4vRJ6eBtZs6iPypxGkfqTQSM=)
3: MCv_Njd7Kt1jfUDJcMfP2Ew9zGA.roa (hash: 8slM4ZyNMUTgbPryNd+oyqvRv0X2KMYBpAbZ2g9V2+s=)
4: Pxzwfsnla9WCGgA_5yVN5NBVL14.roa (hash: dRusvivPw89AhWLw883YVx7O+/W5uw+jCzc5VJhBOks=)
5: dnlzr7T-KrzC8dTpRdaUUBCb42k.roa (hash: FlF41xrTHYEZQDWnwHhEl5bQr7qiicPhhj7kefuMDlI=)
6: h3NO-bNRnKL0h-LwaiCjswg7_nY.roa (hash: nge/dAbyC8BEKmPsWUQCbHBH18ANQj9ceVjvT5f7JS4=)
7: l8XwbbJw24-quxZEn6DNPzCPtQ8.roa (hash: X6CZp/lJQVG23+jPNOS99TJV1YAbrmzFBiz/CMHczr0=)
8: le7g6AeqMWo8tC4Pm6_9GuPpA9Y.roa (hash: M3GaptBPUtevgfpamZx3KC2EjkI+htg/GGtdiA7/WxU=)
9: o2KmTBSx7YAGDylX3itL6SdPUZE.roa (hash: lugrh1NUXlse4UYLEWT+hm10hbsF+hFuCCQ7+JOgu7c=)
10: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: C7lKJ8fMBEWgOMnnoY/9fJ404TsckOX4TCyZtgY3OeA=)
11: v9V5UdS7W7gv8Mt6_7V1IzHZAiM.roa (hash: oqxmALkOA6EG36s93nwvrqkYRgI5R7v2/8FaBvM3TLU=)
12: zMhciCUgU6J6shiNhaiwocMfw14.roa (hash: c8SQXIzHCbyAhdC6MEvd2MwYwyUckczcTmVUE35TvUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:08:1c:69:d4:8f:ed:30:46:41:93:1a:9a:a9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Jul 27 11:00:48 2026 GMT
Not After : Jul 28 11:00:48 2026 GMT
Subject: CN=909deb8355392b36f065dc01e07fedfb57d3ccd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:ed:28:38:67:e5:e9:46:b8:85:3e:47:df:
2f:83:69:db:c4:c5:49:da:8e:c7:a9:c0:24:f7:ea:
5b:ae:ad:26:fb:cd:5f:d2:e2:22:42:a2:bc:5a:9c:
ba:1e:9e:7d:ac:f2:40:be:71:01:ab:f8:69:c2:19:
1b:6b:f8:c4:46:c3:bc:84:77:91:aa:dc:c2:60:5a:
e7:b6:7c:d2:35:26:2f:78:c4:81:56:d6:b4:37:ad:
5b:a8:2f:17:5c:cc:2c:c5:1d:b1:19:be:cc:6e:89:
92:8e:77:3c:99:5e:f9:87:1e:48:f9:fe:33:6f:af:
f9:e5:46:92:db:50:61:e4:86:82:af:a5:9e:5c:8f:
86:cf:46:fc:d7:4f:56:55:be:41:57:d0:01:6c:dc:
b7:df:33:fb:b6:5c:89:57:4e:f7:ef:ff:38:37:bb:
0e:4f:1c:60:4a:90:5c:0c:f5:4e:d7:82:ce:6d:ed:
e4:7a:72:31:79:be:78:c0:35:f4:74:4a:0e:79:88:
ed:fe:1e:5a:55:58:4f:34:fe:d0:59:57:0c:93:c3:
4a:57:17:1d:61:44:d6:f8:58:b1:41:a3:39:78:c0:
b7:5e:49:fd:dd:f9:2a:27:13:0c:2d:1c:95:b0:de:
27:1d:e5:f7:10:dd:16:cb:56:c5:be:24:02:51:3d:
08:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9D:EB:83:55:39:2B:36:F0:65:DC:01:E0:7F:ED:FB:57:D3:CC:D8
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1b:bc:8b:d5:3b:80:81:0b:23:2b:c5:29:0b:34:7d:ad:8e:
e6:a2:30:83:df:7d:dd:66:75:d8:66:90:f8:8b:79:13:7d:7e:
e5:7a:33:e7:4d:cb:e1:49:57:07:d5:ee:83:e5:1c:24:5d:0d:
47:91:65:27:e6:0e:6e:b6:c4:98:cc:67:35:5b:19:15:02:a3:
e9:92:fb:34:00:a7:52:8d:88:a5:f9:5d:b9:b0:97:51:cb:69:
b6:50:37:60:53:fe:43:74:a6:42:29:76:34:96:3c:53:05:ab:
93:25:c7:ba:28:cb:7e:02:19:02:07:75:c5:a2:e5:ae:81:86:
df:0d:9a:a6:6a:ed:ee:58:a8:4d:a8:1e:3c:f1:9e:fb:fd:5b:
4b:ae:58:a6:cb:83:3e:21:b1:e9:b2:a0:ef:5e:7a:bf:8c:b8:
f3:39:89:df:81:38:0e:b6:3f:87:d0:a7:7e:98:03:23:44:dd:
7c:ab:6b:98:1e:6b:cc:70:fb:17:78:bc:de:2a:b0:5c:84:57:
c7:5a:74:34:85:8e:35:1a:6e:cd:06:d4:c9:be:ed:c7:39:69:
6a:22:44:87:b6:dc:55:bd:4d:44:d2:60:2e:7e:60:6b:09:41:
c4:8a:4a:19:1c:6a:e7:74:8f:25:10:b8:9e:95:36:27:6a:af:
73:bf:96:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jPAgcadSP7TBGQZMamqntMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj
YTQzYzUwHhcNMjYwNzI3MTEwMDQ4WhcNMjYwNzI4MTEwMDQ4WjAzMTEwLwYDVQQD
Eyg5MDlkZWI4MzU1MzkyYjM2ZjA2NWRjMDFlMDdmZWRmYjU3ZDNjY2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaDtKDhn5elGuIU+R98vg2nbxMVJ
2o7HqcAk9+pbrq0m+81f0uIiQqK8Wpy6Hp59rPJAvnEBq/hpwhkba/jERsO8hHeR
qtzCYFrntnzSNSYveMSBVta0N61bqC8XXMwsxR2xGb7MbomSjnc8mV75hx5I+f4z
b6/55UaS21Bh5IaCr6WeXI+Gz0b8109WVb5BV9ABbNy33zP7tlyJV0737/84N7sO
TxxgSpBcDPVO14LObe3kenIxeb54wDX0dEoOeYjt/h5aVVhPNP7QWVcMk8NKVxcd
YUTW+FixQaM5eMC3Xkn93fkqJxMMLRyVsN4nHeX3EN0Wy1bFviQCUT0I4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCd64NVOSs28GXcAeB/7ftX08zYMB8GA1UdIwQY
MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt
YWNmYzNkMmMyNTIyLzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy
LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahu8i9U7
gIELIyvFKQs0fa2O5qIwg9993WZ12GaQ+It5E31+5Xoz503L4UlXB9Xug+UcJF0N
R5FlJ+YObrbEmMxnNVsZFQKj6ZL7NACnUo2IpfldubCXUctptlA3YFP+Q3SmQil2
NJY8UwWrkyXHuijLfgIZAgd1xaLlroGG3w2apmrt7lioTagePPGe+/1bS65YpsuD
PiGx6bKg7156v4y48zmJ34E4DrY/h9CnfpgDI0TdfKtrmB5rzHD7F3i83iqwXIRX
x1p0NIWONRpuzQbUyb7txzlpaiJEh7bcVb1NRNJgLn5gawlBxIpKGRxq53SPJRC4
npU2J2qvc7+WUw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:49:31 2026 by rpki-client