
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json)
Hash identifier: r4tix6QTfdFjT3olxWgDHLs13IEuEmamMEzydZMRbZw=
Subject key identifier: 26:1C:25:16:52:A6:E0:C5:E3:F0:C5:73:84:A8:94:91:A7:FD:9C:98
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 019ECFE10DDB9CDD833E7D726A0912D50E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
Manifest number: 1180
Signing time: Tue 16 Jun 2026 10:01:33 +0000
Manifest this update: Tue 16 Jun 2026 10:01:33 +0000
Manifest next update: Wed 17 Jun 2026 10:01:33 +0000
Files and hashes: 1: 6JluXjhm_3nHCCaPoS3TfBvKy-U.roa (hash: o1cOjM+O0qiescaG0asYe3SHOLXy9bPb72S0RHPk1N0=)
2: 9UWbCEXqjRhjC5AwqWBCIFK_AT4.asa (hash: UFf7/mopkwyI/qLLTDxzlcrPF+4ju/94DUIEHv1Zj3E=)
3: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: 4jA+/5pc+uQP37iJTlWDSBlJ6suF9GR2g5Ha8o0MXGs=)
4: EXPtgF3pZHjNUJl2LJCVZFox4fI.roa (hash: eBmFuREOuZdP3B6dGKEKnHjrjSuhSyhM471vSjq0eBQ=)
5: EtFx9f4oiCywxFykUSR2QjU7eFQ.roa (hash: b2AfdRFwbg0njOLl9hGqSCvFbx4kUQActP2xft37G50=)
6: GDHsmxtHVdYa1bZaIWOH1_OImP0.roa (hash: 7pk8LdfcytaksybidRQnrYPauwLqusCRjPdg0+T84EQ=)
7: M_AsK8xtgHW--enKh1Fv-0yD_GQ.roa (hash: kvJW1SXagKB0pbzliKf7XR3LeE5GTsMSJYvmlREXthM=)
8: QojlrQ9a8Sf-3OscCFSF9lKZeL0.roa (hash: 5zZB8tcLmgJvpKxRcJyw89w0k3VioDwJSjfpHcGceEg=)
9: _DBibvy1y9JoyoGE-bKCjSoDWyc.roa (hash: tHTDVPFwK8Ocp3huDTizupo9HBbejkSKeT8H3qb/iR8=)
10: jFHWQVied9oZQfm4vhIvSC4eiV0.roa (hash: dr0KfgCKcAC1kV4SsWObX5dDQnEh0pKNGg0bXRatP4I=)
11: u21fpxmmOR9mlnHoRxP6iE7HrmQ.roa (hash: UB+VK364X+iu32GdfVjBn8r1mi4BDsfoTepchYMyQUY=)
12: w1zIh0CnKegnO0T7ra_SO9YilV8.roa (hash: KzpnZqdHE55q0MkGU3Ic0fB1a+0zqfLi5dqRW/lkoPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:e1:0d:db:9c:dd:83:3e:7d:72:6a:09:12:d5:0e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Jun 16 10:01:33 2026 GMT
Not After : Jun 17 10:01:33 2026 GMT
Subject: CN=261c251652a6e0c5e3f0c57384a89491a7fd9c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4d:e1:d5:fb:7c:90:58:90:58:b2:69:8e:2b:
79:00:b5:be:0c:74:d0:aa:88:0e:7b:3e:94:cc:20:
93:e7:05:72:c1:18:d3:91:2e:ca:b6:17:32:29:56:
45:37:91:b0:d0:c4:ba:64:af:c0:77:99:96:32:87:
b8:80:cc:1e:89:db:bd:a4:37:07:f5:5b:85:bf:e3:
e6:16:de:ee:ec:98:95:4f:45:5e:9f:8a:10:01:ac:
3d:9f:7c:fd:56:f3:e1:6c:a2:30:9d:4b:e3:fd:78:
98:15:6b:17:19:3d:4c:99:13:08:e9:bf:aa:fd:75:
b8:4b:88:d7:8b:80:ef:16:bc:75:bd:e2:54:f3:7a:
96:fb:60:9a:ca:f7:6f:59:87:92:ef:fe:6a:26:d1:
dc:50:bb:2c:27:b3:56:13:44:b8:f1:9c:de:bf:0e:
b5:61:43:ff:dd:2c:48:03:a1:6d:88:1b:0f:a7:b0:
7c:40:8d:77:22:ea:9b:6b:6e:b2:f4:ea:5c:5e:7f:
18:21:8e:93:7b:0c:cd:d4:3c:a0:cc:26:cd:f7:3e:
f4:3f:15:de:11:46:23:38:e6:80:85:af:24:97:82:
13:de:54:b6:eb:a7:b2:0d:3f:3e:bd:f2:e6:a7:55:
89:ca:05:44:5d:0d:04:26:40:79:b6:ab:05:ab:0d:
59:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1C:25:16:52:A6:E0:C5:E3:F0:C5:73:84:A8:94:91:A7:FD:9C:98
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:8f:b6:06:9a:03:8e:0f:65:b2:9e:02:5d:da:6c:26:37:c9:
ff:81:81:db:f9:40:96:df:0a:69:18:a3:f7:50:8f:d4:3f:ab:
76:80:47:cf:b6:9f:02:82:89:cd:c7:b8:ab:44:da:80:71:cc:
41:62:8f:6d:de:93:7c:ce:34:fa:cf:f8:e0:6b:82:7e:dc:32:
95:71:7c:d6:39:9f:16:8a:31:79:f8:3c:9e:9f:df:e3:2f:f4:
e5:28:98:b9:7e:71:ec:17:60:f6:cf:a6:0d:c8:e0:6d:8f:98:
ab:f5:a9:3c:e7:4b:0b:79:ae:ab:1a:47:d9:7e:6a:4e:d3:91:
21:3a:b7:a6:ed:37:df:d9:2f:a3:3b:35:b3:c8:b8:e9:7f:43:
3a:7e:a8:63:ae:ef:79:97:b8:ca:a4:54:3c:61:56:49:d9:86:
76:18:14:80:b7:d7:d3:49:f2:8d:6b:f4:f1:ff:fe:d3:35:8b:
b5:46:e8:7a:fa:f4:b4:52:b5:60:fb:ff:ce:02:73:8e:44:a0:
e4:3b:c7:11:ac:6c:9d:d2:69:27:bb:45:64:81:4c:81:85:6a:
0c:82:ab:84:4d:73:d3:09:c5:86:e3:23:06:d0:4d:9d:25:5a:
51:76:74:59:c0:81:a3:ea:4d:ad:b8:88:f4:e9:95:25:88:34:
43:32:f3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 19:42:40 2026 by rpki-client