
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json)
Hash identifier: Clnz44ipT3j1RxhCUjzb2sow3o1YcOAQrK7pmSF38sk=
Subject key identifier: D6:6D:D3:69:22:15:55:90:B6:F4:24:72:93:8E:1D:C3:2D:6D:C4:23
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 019FA0E131BA0807B49B3ED71BD1C35956FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
Manifest number: 19E0
Signing time: Mon 27 Jul 2026 00:02:20 +0000
Manifest this update: Mon 27 Jul 2026 00:02:20 +0000
Manifest next update: Tue 28 Jul 2026 00:02:20 +0000
Files and hashes: 1: 0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa (hash: VbJf/zpJU+nEIQciqPz/B0PK4md21WWEaGREZ1xeby8=)
2: 1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa (hash: EoOuCir1JdYOzVmD9C+0aCRnn0E0kdYzw6esRGPxmMQ=)
3: 53-Empt8fqhopJ7cOY61y1UNXLc.roa (hash: YjL+5qe2020D+DOQyVjhX1FTLXsdUT9QvCPVPeb6WkY=)
4: 6fl2PyZRjLFdwSBx3r61hkXya8k.roa (hash: D61QyHJ6S5T1IxCuN2yRBjSfJTg/+aLEQXnYgmdlUDs=)
5: ANtitpMQT-uK7LHD0X0IbBsKjWM.roa (hash: 5c2CNK7pBthzGV4Sg561qpwP1GJzRFFkA4PDWmW+aSg=)
6: Df8h7qloFeTHYGavNQ4pJHpP5CU.roa (hash: 3kk9LrOCm1NH+leIgX8QEU4SIoLjtl1E1AbkJm7CLGc=)
7: IDuIILf-M7RgIDs4AJSYtPxrGic.roa (hash: Nv2s82WUeiBOVGtaFJF3rHfW4CDw9k2CQ7WS0TmM93s=)
8: ITKErq6hul380zQefCl7nGu5iiw.roa (hash: ThIKSMsSMV9/7c4Wu+9DRro9qpNPtMCBXl8IA6+T3z0=)
9: N3LKuwLRuVKYuFWiGYpHH9iTJDU.roa (hash: +3GE+YLKYRUGq2ir////J+cfvpEdtk9nror7A4YJdrQ=)
10: R-8E5zauBsFTDGfod6Tef2eLm4M.roa (hash: ClvLXgh4oJn2dvcbOHZrF6o7ap5IhqsfDX14XxeUfO0=)
11: a149HuY71oYMfosTA9HCL8g-pdI.roa (hash: FHyu/0R9GDUP3gmfU9JfTLPTviTJTT8eGmQ8uq/ZlfA=)
12: bTookxgPSxSd_gnM8XNiIJ3mpr8.roa (hash: qaTVa3H72kXabxQBE9N2TN7e2tyXH6RWDJSNci8VjEs=)
13: blYq_pKFV_IJYUCGIJ3ZWpeEWIs.roa (hash: aV35UJJhFzqPJKc16YBKA5F2EyafDubx6D6p0nLFPAk=)
14: dh0HxZTX0gUx4atQo9tXgidUMLc.roa (hash: C/NbxOhBDbuOgCOrG7xkr9yc1xlWN7ZS9mwZEOk3C7w=)
15: ehRbssTu-uCbiOQmcMxAxNH82GI.roa (hash: aYjSWmwkop/Ic11eCu/RIPvn387xQFE72I0LsyWzzf0=)
16: fD0zMeFpTdbjlyII0WXNlsdWjwg.roa (hash: 1nJ8LKFZY40ZGZ9fyCE9tTFmLCEjP6khJLvEfhwNXts=)
17: hYygt2D_2n1pYi_NTrG2nkmeaiI.roa (hash: dQrBwFPxwSf58rNos8WFJkrSXg3GQyoC4p0wWkx0CkU=)
18: khIatClzzDAzsXKofHk3CzFjNwQ.roa (hash: VqTvtGjsJjhyzOsm3Z+fa0f8w1YFBA58VD7S9gC+DFg=)
19: ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa (hash: O3k8tfSgOWL0eFoLFOr80zr8e1hwzB6oN6psmB5jVbw=)
20: l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa (hash: 0ZLcxVq4SbMJb/Tzs+R0ez5dGHPb27PKXrdMSol7/iI=)
21: lh0U2VbssLYHQuI_GeDtu-78fs8.roa (hash: argvv+35DPV6sAk39FUkOQj04x5r0LiO2lKQbHUbgZU=)
22: o2CtVQw5GkFX89PhUjlW0skEA5w.roa (hash: m4/K5u0ohrJNEPA+u5iCk/BUETlDCODb4D0JMGKGkg4=)
23: oy53UV29ZxGHyA7mlLseXZBnge8.roa (hash: zmREFQtkqLZ8wJLGEuvGnLyo+ZygeKXKKyJIbyBcMM4=)
24: qSnbVpCUTBo3CbEFeEaAeBg12KU.roa (hash: lUFBwmvXAt5o1tXZm7PlCC3E71TOjkaQgtMQg6Erswc=)
25: uhWP65iIcvZTsGSiBTIcefinHZQ.roa (hash: RDsU+on83wZCchaROnKt/rVWQYfzxwy4j90xxJ6pfyg=)
26: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: NaISTn6Bo5Z8F4AI7BMJ4v8nss+SNsv7MfdZHauNMQY=)
27: vuod5WTfo-bMzWgcehLtUNsV8iQ.roa (hash: S3lLxKRzTk1ObgBCNRSt9Y3FAylgCuMuERfb8CAqXtY=)
28: xSEYJ36rS-kznLQUl3DFtM3R1jM.roa (hash: 3mFKbERmZQc21I9KRtXeu1S3oH9xaIQQ0cmDzkgXhUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e1:31:ba:08:07:b4:9b:3e:d7:1b:d1:c3:59:56:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jul 27 00:02:20 2026 GMT
Not After : Jul 28 00:02:20 2026 GMT
Subject: CN=d66dd36922155590b6f42472938e1dc32d6dc423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e7:d0:06:23:9a:d8:e5:48:0d:be:a6:2a:ad:
b5:28:81:ca:24:63:4f:f1:98:f2:e7:2e:34:14:01:
f7:97:fd:2f:0d:4c:7f:9b:cc:bf:86:7c:94:ea:41:
b2:d9:2e:8b:ca:96:c2:be:85:65:c2:cd:51:71:3f:
3d:ed:44:3d:48:2d:98:2d:cd:73:41:12:d5:18:85:
be:c1:ab:28:49:b6:89:3f:09:df:86:96:cd:6f:f2:
96:d9:20:90:c6:1d:9d:32:b5:67:03:ea:33:c7:51:
2d:bd:e4:9f:fb:a7:04:21:09:eb:b2:fb:97:2f:61:
dd:89:67:1a:2d:1b:f6:85:65:b6:7a:e6:c2:71:4b:
9f:23:21:f8:da:7f:7f:36:d1:b7:af:f4:49:f8:db:
df:eb:d8:36:85:47:8e:64:9d:7e:cf:dd:3d:dc:11:
c9:1a:3d:06:4e:ab:73:bf:c6:2e:3a:ca:95:43:f4:
e9:c2:18:2b:f0:f5:7c:5e:02:76:05:a4:5a:a0:70:
24:60:4b:22:4c:e2:16:9f:61:94:d2:59:b6:bf:4c:
18:0d:a6:4b:d3:9d:ac:9d:5c:89:bd:2c:ab:6a:e8:
4f:fc:0f:ed:8d:1d:ea:b1:aa:45:16:dc:98:84:4c:
e7:5d:48:06:e9:a0:ff:af:48:df:c2:de:a5:e7:40:
ef:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6D:D3:69:22:15:55:90:B6:F4:24:72:93:8E:1D:C3:2D:6D:C4:23
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9b:ff:4d:38:e0:98:32:e4:e6:4a:84:3a:e5:55:59:4f:65:
76:e6:b0:e5:41:45:ed:d1:48:a7:25:8a:9c:f0:23:8d:ed:9a:
fb:32:d1:49:4e:b4:d4:91:93:2f:c2:98:c7:ad:f1:86:d9:d8:
c2:14:8c:62:b8:7e:1a:37:8f:1e:cd:cc:36:e2:01:0c:44:f3:
73:4e:ac:3d:72:1f:1b:70:46:05:e0:a2:de:25:f6:66:70:0a:
81:53:c0:23:1b:27:fa:5c:6e:dd:61:a8:01:24:ca:a6:55:28:
ef:fc:fa:79:59:b2:47:1b:c9:18:86:d2:5c:53:d6:32:23:9c:
f5:0b:e3:e7:fe:ef:62:e3:a9:8d:79:4f:e2:7f:01:38:2e:86:
fb:72:4a:0d:39:71:4d:6f:5b:25:19:6e:59:a3:e3:36:c2:80:
61:bc:ee:37:5c:d3:be:80:15:52:0d:1f:f4:31:f8:5e:e1:ab:
48:d5:93:2f:c8:7b:fb:c6:85:7d:3e:19:d6:a5:97:5f:a8:5d:
54:b9:43:73:38:cf:3d:00:6e:01:80:93:4e:34:45:3e:4b:77:
8d:2c:f0:43:d3:75:1c:b5:36:18:c8:84:dd:4c:c4:d1:32:6b:
99:ea:65:9e:1c:9c:2a:06:73:af:2a:b9:1a:f7:2d:d6:2f:d9:
35:dd:ee:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4TG6CAe0mz7XG9HDWVb8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw
NGNlMmIwHhcNMjYwNzI3MDAwMjIwWhcNMjYwNzI4MDAwMjIwWjAzMTEwLwYDVQQD
EyhkNjZkZDM2OTIyMTU1NTkwYjZmNDI0NzI5MzhlMWRjMzJkNmRjNDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ufQBiOa2OVIDb6mKq21KIHKJGNP
8Zjy5y40FAH3l/0vDUx/m8y/hnyU6kGy2S6LypbCvoVlws1RcT897UQ9SC2YLc1z
QRLVGIW+wasoSbaJPwnfhpbNb/KW2SCQxh2dMrVnA+ozx1EtveSf+6cEIQnrsvuX
L2HdiWcaLRv2hWW2eubCcUufIyH42n9/NtG3r/RJ+Nvf69g2hUeOZJ1+z9093BHJ
Gj0GTqtzv8YuOsqVQ/Tpwhgr8PV8XgJ2BaRaoHAkYEsiTOIWn2GU0lm2v0wYDaZL
052snVyJvSyrauhP/A/tjR3qsapFFtyYhEznXUgG6aD/r0jfwt6l50Dv+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZt02kiFVWQtvQkcpOOHcMtbcQjMB8GA1UdIwQY
MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt
NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3
LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZv/TTjg
mDLk5kqEOuVVWU9lduaw5UFF7dFIpyWKnPAjje2a+zLRSU601JGTL8KYx63xhtnY
whSMYrh+GjePHs3MNuIBDETzc06sPXIfG3BGBeCi3iX2ZnAKgVPAIxsn+lxu3WGo
ASTKplUo7/z6eVmyRxvJGIbSXFPWMiOc9Qvj5/7vYuOpjXlP4n8BOC6G+3JKDTlx
TW9bJRluWaPjNsKAYbzuN1zTvoAVUg0f9DH4XuGrSNWTL8h7+8aFfT4Z1qWXX6hd
VLlDczjPPQBuAYCTTjRFPkt3jSzwQ9N1HLU2GMiE3UzE0TJrmeplnhycKgZzryq5
Gvct1i/ZNd3u8A==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:05:11 2026 by rpki-client