
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json)
Hash identifier: gOH25WTrFjiVwB5Q1Aed4AWIx0GnC8zNFXk7JXe8qMU=
Subject key identifier: 9C:6E:EE:A5:20:1E:22:71:F8:75:3A:B3:9A:F3:76:EC:E5:44:9D:FB
Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Certificate serial: 019ED34FA9105626B89A39FBB715DF60DD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
Manifest number: 1982
Signing time: Wed 17 Jun 2026 02:01:13 +0000
Manifest this update: Wed 17 Jun 2026 02:01:13 +0000
Manifest next update: Thu 18 Jun 2026 02:01:13 +0000
Files and hashes: 1: 8Hj63DuSPA7Ht457MhBvt5rAzCo.roa (hash: /JX6zlbBh/f3Q4c+ifBYnU8yxbIOW6a8gYL/3LC86tc=)
2: 9DusrtcNuEKlX3-m9foPJH2szlI.roa (hash: b8raHEJQGNgJfwuoWcURy2P5Ad5oX4Bo6uvIPpzRudA=)
3: 9tcHbPB03Z8eEKZg676gB-TlqvI.roa (hash: 0EY6tBHpX7uJe3hmSPPM5eq+qwso1DAT1la3CCjjUOs=)
4: EO_HO_nFyWVTdx6SDz8m4wUOlnI.roa (hash: gFB+9g7cOaJTdIFNt34NfO0b7Xz0U9fpgCXRfQJDw48=)
5: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: U0L9OVqZUv//FRXKGIF/Mw8JWBuKN42rBRGyKxZ0oao=)
6: LcfjvM3VKxWMWMCxo2UYzOGhdNM.roa (hash: qwiD82k0GJBEu4EGgOxSBm88SaDWlnEZJMmEJL+CMw8=)
7: LgqwiddErCeqmONalEAccIe_9ZI.roa (hash: vUvF2iqoGKYdCngh26+3XZdI1nh5UcCaB/cJvH2Dedw=)
8: X_WvLqJE85_JLPG8u8QOORQ8vrY.roa (hash: 3lJYcwNuNWaK/TxwzxDQE8C+SHvEtkNNzsxVBp4XmNA=)
9: fNYW0E0mrdFedNKBb3zR-gEkNFA.roa (hash: nh3ZGXFkTGVxlA9H+fmw3V84hDZ1pU+3aDOZwNEcWRI=)
10: mzyrfk0_SKXJ4jm3l-g7rtem-Ng.roa (hash: 64Bq4BjaquUNa/q+gUB1JEszW2wTR9StXwwTroa+sNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 21:56:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:4f:a9:10:56:26:b8:9a:39:fb:b7:15:df:60:dd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Validity
Not Before: Jun 17 02:01:13 2026 GMT
Not After : Jun 18 02:01:13 2026 GMT
Subject: CN=9c6eeea5201e2271f8753ab39af376ece5449dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:fe:31:3b:64:73:f1:d1:02:9d:25:82:fa:
95:6a:bf:a1:15:59:11:2b:1b:d2:5e:fc:11:6e:49:
de:14:c7:d9:82:35:36:99:37:a8:2b:bb:70:1c:c7:
8e:0e:eb:b6:5f:9c:a9:08:c3:7d:2c:ef:cc:a2:b1:
ae:a2:60:ae:44:1a:20:0d:25:9c:42:a9:91:84:77:
21:ab:78:2d:9b:b7:de:cf:d3:aa:34:f8:3e:84:82:
75:3e:88:23:b2:23:dd:9f:8a:9d:57:9c:ad:6c:9c:
8f:3a:57:58:45:48:a9:83:0b:88:a3:74:dc:8b:ae:
3e:ba:95:53:bc:ce:74:44:f3:65:ba:4e:90:26:6c:
9c:34:f6:cf:38:72:04:92:d1:1c:d4:82:56:43:9e:
d8:82:8a:e7:33:a4:96:a9:f9:ef:a9:f5:88:2d:d7:
85:ea:30:9b:ff:9e:6c:d8:1b:7b:76:a1:06:c7:ba:
25:8c:10:db:5c:3c:7c:d9:75:1d:58:e1:2d:5e:8a:
39:26:a7:f6:43:46:f1:41:29:5b:18:cf:53:cb:ee:
30:5d:c7:78:5d:bb:91:2e:43:5a:8d:f9:c8:fe:f3:
a6:51:d6:9e:e6:de:99:c9:56:48:33:3d:5d:bc:9a:
da:fa:2f:5d:99:e9:99:53:77:21:d5:aa:15:7b:43:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6E:EE:A5:20:1E:22:71:F8:75:3A:B3:9A:F3:76:EC:E5:44:9D:FB
X509v3 Authority Key Identifier:
keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:78:ff:ef:84:25:31:b8:a9:01:e2:43:1d:29:82:66:38:ee:
a0:fe:c4:ed:32:7d:38:e8:0f:31:22:b3:bb:e0:35:ff:a7:8d:
bc:78:4e:53:5d:66:ae:8a:03:51:91:12:cd:3d:a9:b9:42:05:
ae:23:86:c0:43:8f:b3:fd:87:2c:28:d8:c1:0a:4a:82:90:f7:
e1:3c:8d:c2:26:89:2c:95:d8:09:93:c7:c1:76:f9:8f:9b:d0:
5d:6f:51:ac:b8:25:4f:7d:63:44:45:ab:ed:2f:69:6e:71:ed:
3d:67:f2:d3:c3:1c:bf:d9:8c:0f:a4:f7:50:fb:ac:a5:20:4f:
0e:d6:93:e7:11:bc:95:95:82:62:72:7f:85:22:d2:7d:c3:b4:
00:b0:05:6c:61:b8:b7:4a:e4:e0:c5:c1:17:b0:bf:32:9c:7f:
59:0b:9b:f6:3e:38:3d:df:90:2f:54:5d:d7:aa:e8:05:1b:1c:
21:e8:20:e6:fe:07:66:7e:64:53:1b:77:da:42:95:9f:44:ac:
e5:86:74:87:9e:8f:82:e2:72:b6:19:27:48:76:fa:0b:3f:a8:
78:76:f9:0f:9a:1c:4f:43:01:f9:4b:a7:f0:3a:2d:58:9c:10:
3c:89:3f:3f:44:65:11:96:50:7a:63:04:1a:93:3a:85:e3:14:
7d:61:b8:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TT6kQVia4mjn7txXfYN1FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy
ZjM5NzEwHhcNMjYwNjE3MDIwMTEzWhcNMjYwNjE4MDIwMTEzWjAzMTEwLwYDVQQD
Eyg5YzZlZWVhNTIwMWUyMjcxZjg3NTNhYjM5YWYzNzZlY2U1NDQ5ZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6T+MTtkc/HRAp0lgvqVar+hFVkR
KxvSXvwRbkneFMfZgjU2mTeoK7twHMeODuu2X5ypCMN9LO/MorGuomCuRBogDSWc
QqmRhHchq3gtm7fez9OqNPg+hIJ1PogjsiPdn4qdV5ytbJyPOldYRUipgwuIo3Tc
i64+upVTvM50RPNluk6QJmycNPbPOHIEktEc1IJWQ57YgornM6SWqfnvqfWILdeF
6jCb/55s2Bt7dqEGx7oljBDbXDx82XUdWOEtXoo5Jqf2Q0bxQSlbGM9Ty+4wXcd4
XbuRLkNajfnI/vOmUdae5t6ZyVZIMz1dvJra+i9dmemZU3ch1aoVe0NckQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxu7qUgHiJx+HU6s5rzduzlRJ37MB8GA1UdIwQY
MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt
NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2
LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXj/74Ql
MbipAeJDHSmCZjjuoP7E7TJ9OOgPMSKzu+A1/6eNvHhOU11mrooDUZESzT2puUIF
riOGwEOPs/2HLCjYwQpKgpD34TyNwiaJLJXYCZPHwXb5j5vQXW9RrLglT31jREWr
7S9pbnHtPWfy08Mcv9mMD6T3UPuspSBPDtaT5xG8lZWCYnJ/hSLSfcO0ALAFbGG4
t0rk4MXBF7C/Mpx/WQub9j44Pd+QL1Rd16roBRscIegg5v4HZn5kUxt32kKVn0Ss
5YZ0h56PguJythknSHb6Cz+oeHb5D5ocT0MB+Uun8DotWJwQPIk/P0RlEZZQemME
GpM6heMUfWG46g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 04:34:57 2026 by rpki-client