
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
File: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft (raw, json)
Hash identifier: feNW/6wHv4JLcEprQFxqS3yZK0WbAOvFaeBs0wtdFdI=
Subject key identifier: 11:8B:7E:DE:8E:BD:46:C0:6D:3A:6D:38:71:A5:34:F4:B7:8D:4F:17
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 019EB8EA523C5D4F57FBD74758D0D7384D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
Manifest number: 196B
Signing time: Thu 11 Jun 2026 23:00:24 +0000
Manifest this update: Thu 11 Jun 2026 23:00:24 +0000
Manifest next update: Fri 12 Jun 2026 23:00:24 +0000
Files and hashes: 1: 1--f8TOFOHJxy913_bnxbbB_I8Ps.roa (hash: wDKAE8eJy4a/Xju9oL+J32sQIgyfZxer9kQNnDKALh8=)
2: 1-jH0g_JDLp_7206NgV5uijHSTJE.roa (hash: LRjP11l8Yg7jbG4bbfhfNEvQDZIpDubQ+TvWhkwjrcQ=)
3: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl (hash: 3SyVEQce4Wg2/+zDwB7A6su+sxb4YEffFv+RyzrK3C4=)
4: 1-zOd1kumaIlRrXPMfMdhndo9duk.asa (hash: J313kMfLz/jeTLF4rt+b3BkZqWQAyhsRwo4qFMMY3+c=)
5: 3GG8eWEP0AsTR5hlJBndfjSVqXE.roa (hash: OqQ6t5k1StJuUPb2wymY353zmLAJ5m9iQ1cfSGHhatc=)
6: Ew6t29Ei1xqX6fCJJvzPjV0QQx8.roa (hash: JiMbHLWrOkAjKxV/HgN8hcqfDizA3AaG0pNVT8kgBVI=)
7: OS72UUjy1jIbO6SLm4_mGk1QjoA.roa (hash: JCjobLuVUg3x2yIR7Yj0jA3s02kdH2wYADkCYAZAm6M=)
8: hlYcdx1ybU4O_N_wWLe8kEQOPAA.roa (hash: g8sRkVv7AmG02gcDiKwncGvtRS2uuD1b8FmdkJIrmVQ=)
9: iY5E0iZ2YmwSRo1oZbuozkzcREs.roa (hash: XAB0LIhnvafntszSPTz4cfq/KAQxwohiu0F5a96UkOU=)
10: icspBYCC63q1vNy_EsXnZosS_IU.roa (hash: 3NUI/DqhsJ55TwYWG35Se4xjLYr3z+ZTAvaw34Ss74M=)
11: qWmrXkuHj_sWsoWUwUEWOmRpZO0.roa (hash: MHfvuh3eLEasmU8bZ+QtTWQpVIX8pvTM+Puzp/lNHV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:52:3c:5d:4f:57:fb:d7:47:58:d0:d7:38:4d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: Jun 11 23:00:24 2026 GMT
Not After : Jun 12 23:00:24 2026 GMT
Subject: CN=118b7ede8ebd46c06d3a6d3871a534f4b78d4f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5f:62:1d:a9:ed:23:ca:70:ed:6a:2b:8c:5d:
e9:05:2d:4b:a1:07:2f:31:dd:0a:0f:da:3f:41:37:
2a:1f:a3:71:05:49:a2:47:48:f1:33:ab:c6:30:da:
40:98:e8:80:85:f4:fe:5c:0b:1d:6c:9a:40:96:bd:
97:14:bd:10:cd:4c:ca:d2:3f:e9:83:32:38:dd:e9:
3a:5d:83:fa:2a:1f:47:2e:a7:cc:21:df:46:d8:32:
87:b4:c3:1a:f3:c7:00:d6:fd:71:6a:76:f6:1e:cc:
81:35:cb:a7:68:fd:e8:60:f7:42:b6:da:e1:09:fd:
0a:2e:cd:aa:1a:95:15:73:9f:6d:c8:70:e9:d3:6b:
22:f3:0e:46:d5:64:55:5d:66:41:e0:07:5e:1b:e2:
00:80:cd:1b:8a:65:56:15:4e:2f:24:b4:35:94:03:
e3:6d:ae:30:72:5e:c7:aa:ce:fa:60:67:80:c8:26:
4f:d6:dc:9c:6d:c1:b6:88:62:86:cb:74:71:98:8b:
96:8f:76:6a:cf:a2:1f:51:a6:4b:a6:31:4b:b8:f9:
77:40:99:f3:92:ca:91:6c:90:d5:da:ee:16:d3:90:
e7:b8:b7:42:9f:41:88:c1:ce:7d:4a:d9:57:fe:74:
6f:99:f8:d8:ed:5b:5e:68:a4:d5:2d:89:8a:aa:9e:
66:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8B:7E:DE:8E:BD:46:C0:6D:3A:6D:38:71:A5:34:F4:B7:8D:4F:17
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6c:03:53:d3:f4:28:61:69:99:d7:e8:f6:08:98:e0:14:19:
fb:9d:05:ae:58:11:f0:28:97:a0:6e:85:40:a2:1b:34:e9:3a:
42:bd:ce:2d:80:d4:9e:28:89:6f:ed:80:b1:df:91:57:77:0d:
ad:d7:c8:9c:a1:eb:cd:b0:d4:97:87:41:83:36:77:ed:42:02:
be:c0:6f:82:aa:28:c5:f1:0d:07:5d:ef:56:05:86:62:a8:79:
bd:70:f4:3f:94:4e:93:fa:b6:f0:91:a4:0e:fb:9f:97:b0:f1:
41:55:32:31:5a:dc:34:01:ce:13:98:56:bc:a3:74:5c:45:df:
24:3e:16:b6:bd:3b:ec:f6:4c:3d:84:f8:e7:b7:b4:49:40:7a:
18:6a:99:09:92:95:30:99:3d:d6:c1:b5:b5:5f:a4:ff:33:d2:
96:39:ad:e4:05:5a:4d:69:82:1a:c4:4b:73:bc:8c:e8:e0:31:
90:15:9b:d8:f2:da:b0:01:e9:07:5d:83:40:8d:33:58:29:30:
70:2a:5f:45:8f:51:4c:61:13:df:fe:13:66:43:02:be:24:eb:
a6:e2:35:94:19:14:8e:97:9a:f3:52:05:55:84:0a:97:69:e4:
3d:6f:24:d6:10:14:32:43:aa:4f:23:ff:5a:36:84:d3:1a:0d:
b2:88:93:48
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ646lI8XU9X+9dHWNDXOE0TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZDcxMDBlNzdlZDkxMTlkNjZlMjMyMWJiNjcxMWQ3ZTc2
MDk4MmIwHhcNMjYwNjExMjMwMDI0WhcNMjYwNjEyMjMwMDI0WjAzMTEwLwYDVQQD
EygxMThiN2VkZThlYmQ0NmMwNmQzYTZkMzg3MWE1MzRmNGI3OGQ0ZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2V9iHantI8pw7WorjF3pBS1LoQcv
Md0KD9o/QTcqH6NxBUmiR0jxM6vGMNpAmOiAhfT+XAsdbJpAlr2XFL0QzUzK0j/p
gzI43ek6XYP6Kh9HLqfMId9G2DKHtMMa88cA1v1xanb2HsyBNcunaP3oYPdCttrh
Cf0KLs2qGpUVc59tyHDp02si8w5G1WRVXWZB4AdeG+IAgM0bimVWFU4vJLQ1lAPj
ba4wcl7Hqs76YGeAyCZP1tycbcG2iGKGy3RxmIuWj3Zqz6IfUaZLpjFLuPl3QJnz
ksqRbJDV2u4W05DnuLdCn0GIwc59StlX/nRvmfjY7VteaKTVLYmKqp5mHQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBGLft6OvUbAbTptOHGlNPS3jU8XMB8GA1UdIwQY
MBaAFPrXEA537ZEZ1m4jIbtnEdfnYJgrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10Y1FEbmZ0a1JuV2JpTWh1MmNSMS1kZ21Dcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUy
LTc2YjBkZGEyYmYzZS8xLzEtdGNRRG5mdGtSbldiaU1odTJjUjEtZGdtQ3MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNlLzAxZDQxMS1kOTE1LTQyNzctOGZlMi03NmIwZGRhMmJm
M2UvMS8xLXRjUURuZnRrUm5XYmlNaHUyY1IxLWRnbUNzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGwD
U9P0KGFpmdfo9giY4BQZ+50FrlgR8CiXoG6FQKIbNOk6Qr3OLYDUniiJb+2Asd+R
V3cNrdfInKHrzbDUl4dBgzZ37UICvsBvgqooxfENB13vVgWGYqh5vXD0P5ROk/q2
8JGkDvufl7DxQVUyMVrcNAHOE5hWvKN0XEXfJD4Wtr077PZMPYT457e0SUB6GGqZ
CZKVMJk91sG1tV+k/zPSljmt5AVaTWmCGsRLc7yM6OAxkBWb2PLasAHpB12DQI0z
WCkwcCpfRY9RTGET3/4TZkMCviTrpuI1lBkUjpea81IFVYQKl2nkPW8k1hAUMkOq
TyP/WjaE0xoNsoiTSA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:08:56 2026 by rpki-client