
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier: s35mbOVF42PhC5nKPL/DZ2cg6C8/ojG6bHPLSv8T2fo=
Subject key identifier: 0A:0E:FC:2A:4A:56:D2:46:5C:05:76:64:8B:EC:82:2C:FB:99:2A:4A
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019F8B34566A792339E3FBDCA33E99127F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number: 16C7
Signing time: Wed 22 Jul 2026 19:01:30 +0000
Manifest this update: Wed 22 Jul 2026 19:01:30 +0000
Manifest next update: Thu 23 Jul 2026 19:01:30 +0000
Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
7: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
8: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
9: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
10: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
11: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: u+628jJpPRwbrIfbYjsNVienLQNPrrtjORk1RdCXppo=)
12: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
13: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
14: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
15: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
16: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=)
17: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
18: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
19: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
20: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
21: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
22: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
23: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:34:56:6a:79:23:39:e3:fb:dc:a3:3e:99:12:7f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jul 22 19:01:30 2026 GMT
Not After : Jul 23 19:01:30 2026 GMT
Subject: CN=0a0efc2a4a56d2465c0576648bec822cfb992a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:de:be:bb:ac:2a:ec:12:e9:da:ca:a8:4d:
3e:fc:23:2e:02:55:7b:26:ec:a3:5f:cf:4b:30:2f:
1f:fb:2c:c2:30:56:9a:71:be:a9:c9:70:3d:c8:1f:
60:14:d5:af:06:d7:20:0e:27:83:d8:db:6f:d6:83:
a1:5b:b0:0a:e5:6a:7c:03:7f:7f:06:ee:7f:e0:bd:
e6:a7:3e:e6:99:8b:7f:04:89:06:6f:a9:8f:9b:42:
84:df:6c:d1:c3:de:33:98:19:cd:94:6e:e7:34:d9:
66:cb:c8:69:b5:40:60:ee:eb:0d:76:b2:97:a4:8e:
b8:c2:cd:40:72:77:97:ba:3f:ac:f8:61:58:d7:df:
0d:01:68:01:ba:c4:49:6e:84:1c:b4:b9:2a:64:72:
ff:1e:1b:8a:72:0c:40:2d:fd:7c:94:99:3a:86:89:
be:00:14:2f:54:11:d7:a6:5f:e5:ae:67:13:c7:f4:
f2:23:5f:4c:90:14:2e:20:fc:c4:f0:0e:5a:c8:00:
14:e7:02:4f:41:57:9f:f7:9b:2a:09:54:51:ad:92:
91:51:0d:4e:1e:de:f8:4c:ad:05:c3:52:1b:b1:0e:
8c:6c:75:d6:93:24:f6:b4:8d:d1:f7:de:17:70:bc:
a2:4d:80:81:df:b8:39:8b:5e:0c:8f:af:9f:01:05:
41:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0E:FC:2A:4A:56:D2:46:5C:05:76:64:8B:EC:82:2C:FB:99:2A:4A
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:05:65:6a:fa:2d:c5:21:aa:89:16:b2:62:ad:1a:0f:39:5a:
ed:c6:8f:34:b0:06:02:e2:9d:e9:a1:3d:0d:55:0f:77:99:20:
c1:95:92:70:62:71:89:8a:97:ef:d1:f1:6c:b2:25:85:d9:13:
0a:47:2d:84:08:a9:d0:43:8d:ad:f8:39:6d:5e:10:a7:92:f5:
d3:90:19:3f:aa:39:09:df:b7:d6:4d:a9:47:00:0c:41:be:15:
7c:10:54:b0:b7:af:59:24:fa:c2:51:70:b4:a7:37:fc:96:9b:
6b:12:80:36:05:bf:24:df:95:02:59:80:a1:c5:fd:dd:7d:7f:
91:5c:34:b2:d4:20:ae:af:c9:ed:83:1f:32:a0:58:c4:3b:24:
ad:1f:5e:bc:5c:22:24:6c:f8:3e:10:01:7c:11:05:5e:29:dd:
16:3e:f0:73:e5:72:34:c2:96:10:42:cd:16:d7:df:ac:31:58:
cc:54:f6:9e:31:2c:35:d4:02:a8:5b:03:7a:e0:29:93:17:09:
bf:1a:07:e4:53:50:a2:95:fe:55:96:d0:81:98:aa:a4:06:37:
d4:be:90:ec:6a:98:da:3e:9d:46:1a:65:d8:5a:58:57:64:79:
04:b1:19:cf:34:d6:4f:49:f1:5f:85:f3:62:5a:e8:83:dd:a4:
af:dd:5d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 04:19:21 2026 by rpki-client