
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json)
Hash identifier: nE6xXfXFQBGeB73za8NLkMPOQmgtHsOo2SOznogKM5k=
Subject key identifier: 37:25:0D:78:37:06:3F:6C:5B:B3:83:B4:EB:1C:1A:1D:C1:9A:20:07
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 019EE555E3846E9824DC13C18B20367F3D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
Manifest number: 101F
Signing time: Sat 20 Jun 2026 14:01:11 +0000
Manifest this update: Sat 20 Jun 2026 14:01:11 +0000
Manifest next update: Sun 21 Jun 2026 14:01:11 +0000
Files and hashes: 1: 8XyER-CzmO7sNmHUx2G8OSfYrTI.roa (hash: OJt/khgHG2iLFdlQeu/0cbi3laTKO6RHDtoh5R9RHJ0=)
2: GPrNUgOp-yFfntRAITK46bjxYx8.roa (hash: tp3Wm0E6OeEViiyRYXktB8FqE/SyfwJ6JfvXOHg6tpE=)
3: J0qqTAAsGkf6qiaeb382_RfBdXM.roa (hash: Y9ndLFyx75oY7FFN5334BUdA7IQC1ytDaM5DwK8SbB8=)
4: JpjcVvpsRev2p10C3LQaIJ0kCAk.roa (hash: olGjGjOs+cbpB3gRjJy05Z6fBuTN4aPpcrK5updhkf8=)
5: MEHkcgqEJz7YFYdGUGWIvg3-cls.roa (hash: 1BYxRX72gkHZBwUAz+wy4Xb3C0tFku26Sl04kGiXOpw=)
6: ZUJhUNmgGj_YHmbRa8-Vde0Gm6Y.roa (hash: W7TJ+QEiqoirOPiCGWDS+nKtWjHZnufX8l6Fd8kt268=)
7: n4oTLcY3Eost-Qe_enzL-hN3M14.roa (hash: yYjQpvvj0XOqhxeCs5tu9OzNnpM3sE241OTnw9VzGk0=)
8: nujuYw_3IDNNnf568BByX_04-sU.roa (hash: 60QrFQNmOREasWgP2EhaDowHIVvxXUEGB1moqh/EpGc=)
9: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: qFK51ch74RIX7Tg/jUripOXQ8Tj3xX/cunQYLOWtsNg=)
10: unsDtmwuVq6UnIoMMfgu4SomBNI.roa (hash: 42NQRABPwAdQZ7WOYRrg/k8mIJxEsdJlQLE5DRl74k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e5:55:e3:84:6e:98:24:dc:13:c1:8b:20:36:7f:3d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Jun 20 14:01:11 2026 GMT
Not After : Jun 21 14:01:11 2026 GMT
Subject: CN=37250d7837063f6c5bb383b4eb1c1a1dc19a2007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:3e:b6:b6:db:2c:8d:7c:5d:5f:20:96:25:
03:46:68:be:37:ff:19:df:64:a9:b3:f3:16:77:dd:
8c:44:3f:25:49:81:58:d6:8c:60:fc:05:45:f9:ca:
ce:ba:1a:40:85:ad:be:6a:31:b4:36:f1:50:d9:9b:
2a:35:ce:fb:29:23:58:b1:dc:02:1d:d1:0b:27:d1:
4b:05:55:ba:6e:54:93:73:d8:2f:44:05:c2:db:2d:
8f:da:c0:ec:3b:70:66:8d:f4:4a:e7:ab:ba:c8:e6:
47:df:b2:20:5a:08:0d:f4:3b:21:38:66:68:07:94:
9c:60:60:33:f4:8d:1a:37:ce:dd:7e:14:e9:2a:30:
a5:00:55:06:4d:d5:c0:8b:77:ee:1f:f8:92:17:42:
24:55:14:bf:c6:ab:2d:d3:d1:3a:09:97:f7:18:e0:
51:38:b8:e4:3e:4b:e6:3a:08:3c:bd:eb:c5:ba:70:
dc:90:7a:b7:a4:8d:fc:13:d4:79:81:3e:e6:4e:cd:
dd:11:79:5e:a3:0c:a2:46:14:0f:cc:df:04:24:ac:
dc:cb:c1:25:22:c8:4b:68:95:a5:42:5b:87:87:aa:
50:f9:45:88:80:25:d6:69:94:77:a3:42:81:72:dc:
8f:7d:8b:7a:8f:e2:b0:c1:ae:95:2f:ef:1e:d4:1b:
a7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:25:0D:78:37:06:3F:6C:5B:B3:83:B4:EB:1C:1A:1D:C1:9A:20:07
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:9b:48:33:96:dc:9c:7c:46:50:33:e1:61:19:bf:a9:32:8c:
f3:bd:6a:f1:0e:4d:92:6b:4d:16:61:ef:fc:7c:b1:90:ae:2b:
e8:9e:b1:29:c4:72:cd:fb:74:76:3a:41:e5:88:5c:35:34:a2:
52:38:50:c8:82:58:69:95:bb:0b:c2:b9:7c:dd:65:6d:f2:c5:
79:34:07:67:8e:c4:4f:9a:1d:89:fc:7c:82:94:fc:67:e0:66:
5e:27:34:b3:5b:ba:04:32:50:0f:d2:85:29:2f:b2:62:47:b2:
45:c4:72:61:9c:c5:c2:2f:a3:31:28:55:a9:91:92:0e:c6:52:
5e:69:be:93:c6:ff:c4:6f:dc:f0:1f:f8:98:90:33:6b:9d:90:
90:df:58:f8:f1:ab:27:e0:cb:b8:6f:01:e1:c8:67:67:ab:9d:
e8:1f:ba:97:0b:60:ba:76:cb:ee:db:33:35:31:32:9b:03:3a:
45:44:0d:01:e6:8e:bb:a2:08:11:ff:b6:99:f1:5c:a9:88:02:
93:5d:76:06:a6:44:03:78:3c:d2:3f:ba:a8:7e:34:09:69:a4:
d7:94:2b:fa:23:bb:9d:11:64:01:44:13:f2:38:52:af:a4:c5:
5c:97:92:c3:92:94:de:70:67:67:75:9f:6c:d2:a7:be:8d:47:
d0:1c:bd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 16:04:27 2026 by rpki-client