
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json)
Hash identifier: 4AG91SRtK1EyhN550sO+mcHYKCEw0UP26DB+79uTPaM=
Subject key identifier: EC:BE:2F:45:DF:3B:80:8A:74:69:0F:C0:13:49:28:6A:FC:36:C3:71
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 019F97A5BD9D8A5A0074A3D79C56CE9380A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
Manifest number: 1043
Signing time: Sat 25 Jul 2026 05:00:49 +0000
Manifest this update: Sat 25 Jul 2026 05:00:49 +0000
Manifest next update: Sun 26 Jul 2026 05:00:49 +0000
Files and hashes: 1: 0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa (hash: TfGSU8XCSgVMZOD41y1990e2kIyriSC3XmqU7n3kfvE=)
2: 1M4CR97G2KsXmA_zCbIkIXY9AHc.roa (hash: GDf20c7QMRCTOktQNho+ECo62hgqNJJUdQUlkUBsHZE=)
3: 53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa (hash: Rge2VTZzY9AJwofj3q/Q6jFmREW3CoHsGJkonCRjf/E=)
4: 54lg5Z3PwYcVlmy8U--OorXyIRU.roa (hash: p4H+ojtQvC4UXZDuYUx4ZnC8qPB6jzl83dV6d963YfA=)
5: 56x7RPvCFIkavkJq-b6E0Tp0YGM.roa (hash: MJmTuMsh03/hjb1Nv8Xb2bBkZIsz6aS9Hf9MlIMOLjI=)
6: A20W_5_G6C-OdgoqlsDfQ4OCw2M.roa (hash: FALYlcnA+YtKlalF7N3tNk7RIjxbvPOkk+v0cemQh20=)
7: BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa (hash: MVsrvMO39kJoc0mZmN7diOxB9EcjZr9Z1pn5l5VbIw0=)
8: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: v7O+pMIRSzU/GEHrRFhT00vIxz2AWzmmFewpjoUWR+c=)
9: FgNKNW5B9puTce7TwiHPk7LKkM8.roa (hash: vwSEzoXOmoqMUtBgzMgDVlO/tkSbCfgKY6cTiF3Xr7o=)
10: I0pwg9CZMHqLfBbOSZRcrUCAXac.roa (hash: ez3uTbsX5XWKgBxDLIribBBe6QXM1/Sf5/DyeWPZIME=)
11: P8CPGWFsawUMl03GCUpKnxbjjlE.roa (hash: GAHel1W64Z9n1z13wYSseROdcgB58qy+711XhLs0e+w=)
12: QJ1xM-I48uzO02IgPeNQyuOaUqA.roa (hash: 6rMIGe2ob2Y14JHRw4XfL4QGb3VCibvSBGXwMtcGqqg=)
13: VHCbgB2ATThahBAQ0_Wyxf0owhM.roa (hash: hCVwSy59RxrE+Tg9Np1iqXmZk/e5opFjdQ7TOzl8JOk=)
14: a1bxge9RaAQ4hUbIUGzCCu-i2F4.roa (hash: a1kP5I90YhkZZI2m2BFKJdlp4Oz3OlMvq6wsOXlcI4c=)
15: aASnsFjaGSv1507L70pG1D3Mylw.roa (hash: oa7lWKQuw6P6CITW8+9RNGq86p0mYNRQt2gm7DcEnkk=)
16: aE7dmxNnMqlbMvLqgzOsP-ooEsM.roa (hash: yRZuNFGwI8VBm9671WQ3wPUuTbQ9RDPs60a0RaW0q3g=)
17: cFgdjeeP9MpYfV_2AUL1U_5M24c.roa (hash: 7BBXQ8Fn1Y9T8QvfmXuLGCX/jZRN0auG1tMDaE9RoLs=)
18: huTbYgpqurqxYkSbrMBeRshoxjw.roa (hash: XOmUVP6KC3R9djF2wr37Vopd4+qc2j38WB+awNW8Kn4=)
19: njGiyS1riv8o5Tx4DTboEJsmuyA.roa (hash: Jvb2eyKp3aYHDbslRvWJdCfA9jI/WLkz3iYOmnC0IPo=)
20: q6AprXpiRcVl5ELQQP4HzyoPU1s.roa (hash: y1TzMFIAWDqXBEbPleIWHolHXjF7gfy6B7SVOuVhNiA=)
21: rJ1qNlWDYbi69BE2ZEKvQVltAts.roa (hash: 9qgzkGC4YfmPbthdBZ7B/utLfGFA/3aVgJMfSvBGTpc=)
22: t5l7KHAEWqvhTIwVkhIeMMidR-M.roa (hash: A1nvslLXHKOUrzLO45L1cBt57BRFdo4XXdQju80rlCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:a5:bd:9d:8a:5a:00:74:a3:d7:9c:56:ce:93:80:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jul 25 05:00:49 2026 GMT
Not After : Jul 26 05:00:49 2026 GMT
Subject: CN=ecbe2f45df3b808a74690fc01349286afc36c371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9a:c5:cc:63:dd:6d:48:04:f0:1d:36:0a:3c:
00:66:aa:c2:92:a4:17:2e:5d:db:f9:08:94:1b:0f:
8e:9f:35:48:69:89:32:8a:39:a8:0f:f5:be:af:ff:
02:c3:e8:22:55:a5:45:b1:a1:d0:73:ab:c8:20:27:
1c:b7:8b:2e:66:1a:f0:e8:da:5f:6d:ee:8a:35:16:
50:d0:cd:12:c5:09:a6:6c:1d:88:3f:cc:3c:b4:a3:
7a:fe:dd:2d:29:55:4f:8a:36:0b:09:98:d1:2e:8c:
24:ef:fb:29:6c:a2:ec:05:ee:2c:81:17:a9:cb:56:
38:64:8c:01:c8:36:ae:ec:f0:fd:b3:48:49:0b:ec:
0e:a7:1c:3b:a5:d1:61:9a:4e:bc:e6:a5:4f:f8:5b:
7e:1d:82:e8:f1:5e:79:a6:72:e4:c9:f3:9d:fb:5f:
f5:d8:0e:fe:b1:da:35:36:5b:67:f2:73:d0:6c:6a:
80:3b:29:fe:52:b0:2c:0f:f8:f9:e1:1d:84:74:13:
e2:00:3f:2d:53:cc:53:9f:e9:2b:ff:47:79:59:f0:
a7:b0:20:53:11:60:4c:d7:1e:a6:73:7c:b7:3b:3b:
35:ba:4c:c1:d7:ba:d4:78:60:a5:74:ec:84:e0:40:
f7:b5:22:6b:72:ac:11:46:8a:76:92:d0:7b:8c:57:
e8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BE:2F:45:DF:3B:80:8A:74:69:0F:C0:13:49:28:6A:FC:36:C3:71
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:04:62:a8:04:e8:37:e5:ba:46:7f:f6:0e:14:35:08:2c:c6:
d7:63:f5:0a:8c:f2:ab:9e:35:1c:84:0b:5e:d3:e6:a7:93:dd:
75:d2:8d:b2:60:d4:43:ea:a3:b3:ff:19:d6:b1:87:5b:33:72:
ba:43:05:07:cc:3f:22:59:ea:dc:64:a1:64:72:09:e6:d7:0b:
45:7a:c2:af:a9:7d:84:f3:c7:08:1d:1c:5d:48:e8:7e:17:85:
2a:3e:7a:5e:3b:13:b2:0d:ae:71:6c:ec:76:86:01:ed:f1:44:
be:08:61:f8:c5:1e:08:4a:23:a9:c3:c9:15:0b:39:de:c3:61:
9a:ae:3a:41:8e:4c:54:5e:bc:de:19:61:f8:ad:e0:71:13:a7:
6b:ca:ce:80:52:c4:5d:06:e0:1f:4d:71:83:10:44:ef:bb:66:
dc:ad:32:e7:1e:02:05:70:6d:3a:23:63:8b:86:7f:47:bd:f7:
e6:3a:8b:f5:19:ef:e4:cf:b6:b8:09:74:42:90:ab:77:19:54:
e0:29:52:50:11:86:79:d8:ac:1f:37:74:08:f2:ef:b1:7c:03:
cb:97:ae:b0:06:8a:f0:3a:04:cf:00:e7:2e:51:56:c0:32:63:
30:38:59:e5:4c:f9:97:96:e8:87:27:39:e0:ac:40:02:f1:57:
38:09:5e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 09:50:51 2026 by rpki-client