
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json)
Hash identifier: VlFw9FDkc0EhAjxgjXsBo6rJWC5Gwz3TzMXo+ozwqxg=
Subject key identifier: BF:B8:15:D5:F3:37:3E:22:B3:B1:36:8A:06:F2:7A:1A:4D:47:99:12
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 019EE10B6DBAD895969914DFFA3B8BCFEDD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
Manifest number: 0C89
Signing time: Fri 19 Jun 2026 18:01:23 +0000
Manifest this update: Fri 19 Jun 2026 18:01:23 +0000
Manifest next update: Sat 20 Jun 2026 18:01:23 +0000
Files and hashes: 1: 1-FaALXlMsFyTh9BoD33d67aHEeI.roa (hash: vrnFz1Kmq+5wOQAjBqsePEJkDcr2bnQe4L2j8uEu+qw=)
2: 1bCAUkvNoYD0zomW0iurtF9te8Q.roa (hash: Z9CJnEIWfCZlmGT2t+Vqj5cmYatgFLNVqvFiGcAhXS4=)
3: 2ZG1OxPA9lJyGthfBpRD7jHaL_Q.roa (hash: IHbK3thySVU9Np8f+PMKh3PQZI2WcY5GEAykoMyFvfA=)
4: 3PEJB7BEtrLxE4pQbBEXg2NJ0zM.roa (hash: z+UJ71RNNGVXWGUolTIwgBdwKGA2gX9wpBe2tOfMGEQ=)
5: 5s08qvtxu5kbTXtLwFi7v9aGHaY.roa (hash: BJGago2uFSQjoC1tJOqQgCqqprBXKW62J2ZndZct5iU=)
6: 7RoJ9VAFHyX-FagiKQIhkGQ_c-Q.roa (hash: HkhHBOyfDP+gjtdcVY9wa2Y21nfYECLjXeRT5/sYvk0=)
7: ADRzfCr8-nkR6lRMT7eQyQ5uz2c.roa (hash: Zz8uOoQc0hbIxPblxdT0hBouk0wTSjJNAtxlR56BcEk=)
8: DvkRhCAztowgp0lKvjLU3U09Xpg.roa (hash: 1t/9feUa5ol6uYHCvs+WcaENRu5/18p6uTEUH0Zu6wU=)
9: J2ZRrTftrtV0_TjbPrZlFNP6xjY.roa (hash: igNt9ILvZZAjjU9Sm+2kCOHSTe7FUif0MtylGZarlYg=)
10: Mmk6zLU_gv73BOtf2g3APw9lmyQ.roa (hash: qL0PMP9vArwRqpbzs+j1LZZAXvUbDkXbOFyqaLmsqDo=)
11: RjEWq6ih6-2kfI0plendbaS8Y6w.roa (hash: 2i+2TrldDE3Er0VIAbdcWVtXkE1ii9e0XPDWCNXu1QA=)
12: RxkQzIFpbR8h5Y7GlER0QvlZ_xo.roa (hash: QyQ3uZNSoqX601+GHgavM056pTz7tYKjCe54YFu8AJg=)
13: YcoX0FswwtJDNeSfLbzKnpX_Ncg.roa (hash: bSifOwZU31nSn4HWPxK/P+Uoua0/V7duu8jXadJB22w=)
14: _0fjxv0fjuqXsB_dEZmZt2gQyKo.roa (hash: jytC1G6IyWDZvWzadzg7tWo6vkVxU20E7eXcUSAboG0=)
15: abtquT29kdz8HKSwyxp8MDLf-rM.roa (hash: 9xlsXDDDbF8yj8g2zV/NUxjfsdOSQi7MgQZSbquwXwU=)
16: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: 661+jIJ2u8Oo4Q17WhdDlWXmu4f7tv7prqMrWd8+ULk=)
17: cagtjc8bDeRcNxkPpsNFtRSw4HA.roa (hash: aF1LQSDw1Bl5408F1vJ3i4//pV71kCpJdauO5OKZNZo=)
18: czj_PZMJsKJEUcCpGuFemJRiVXc.roa (hash: XIy6OGhmtMXoCJdKfW1aLecDFbIhje3cjpXyY92Ca30=)
19: dhgQMv5d9CMtFJpDdBdVdbTFSgs.roa (hash: b2TvzpSS1aAj+1tdL7elB6HMEo7lO6B9iw17wuzVv+k=)
20: dpKkGD2SgABNju9FzjICMh-bILM.roa (hash: eA7DrTniAuZ9y6HHMxZvWAMtE9cnaGhtY/mRIrHlXQg=)
21: jdeHBbAARHJbzNiwNCOXeI54EUg.roa (hash: th8vM6YWc/Ley5toEeaIWxyZTuv2x+5byblkSqcImLo=)
22: l6g5cRLwfzGSk8db5JuW24EySDI.roa (hash: vgdCsDG7+TIHFOHJjv7u8i4m1Io6EEjzSnBPC2bEVVY=)
23: tCiyGtakbmS-hkNH0HW8_YohxbE.roa (hash: 0kbqzbmcamtnxXVE6dSXdUJzJrO80eC7C3aPFLP4CRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 18:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:0b:6d:ba:d8:95:96:99:14:df:fa:3b:8b:cf:ed:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Jun 19 18:01:23 2026 GMT
Not After : Jun 20 18:01:23 2026 GMT
Subject: CN=bfb815d5f3373e22b3b1368a06f27a1a4d479912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:11:cd:6b:b8:3c:16:e2:a4:54:22:d7:fd:40:
6e:c0:ae:50:a1:cd:93:dd:85:88:a9:d3:95:50:72:
e2:bd:d2:8d:fc:10:29:b1:88:67:e8:e8:d3:a6:ed:
54:7f:86:04:68:f4:08:b4:48:8a:6a:61:2d:e2:61:
09:54:38:27:5e:60:9f:73:f7:a1:97:12:71:f3:56:
ef:5e:3b:b6:9a:90:6a:f0:c5:50:76:d0:98:70:33:
c0:1e:74:0a:9b:e3:1d:d3:1b:aa:ce:8b:6a:18:ab:
e4:b3:92:91:d2:33:f7:d0:39:e9:1d:45:a5:8a:68:
fb:7b:59:93:8f:42:d7:99:40:a9:9d:7b:ba:fc:67:
c9:84:e4:bf:14:a5:28:db:24:c6:8d:b2:ae:21:13:
f5:89:d3:27:db:29:33:d7:8a:06:0a:02:d9:b0:fd:
59:e5:8f:47:e5:56:66:cf:af:2a:69:98:22:7d:44:
54:3e:b8:80:1f:a8:72:23:68:22:76:a9:18:89:63:
31:9e:26:8e:82:c9:c6:b5:d7:50:9d:a9:a1:37:96:
77:ab:64:c0:83:e0:f4:2a:87:dc:45:19:fe:a7:68:
2c:5f:4c:8e:d2:29:8b:b3:89:05:34:79:12:f3:79:
70:07:b9:c5:6a:e3:0b:2c:22:a6:b9:fe:b3:e7:da:
1b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B8:15:D5:F3:37:3E:22:B3:B1:36:8A:06:F2:7A:1A:4D:47:99:12
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7d:34:ab:37:0c:8f:4f:c4:10:4b:f6:82:e0:f1:26:c9:f8:
00:a9:dd:78:65:40:aa:9a:6c:48:5d:f1:96:85:0f:08:ad:ff:
a7:b3:b9:8f:58:89:99:a7:54:95:e1:44:be:f8:b2:3b:90:20:
a3:30:5a:90:4a:cb:2d:c5:c8:79:b0:5e:fa:59:24:a5:40:d2:
6d:51:66:0a:fa:b3:c6:77:ac:6f:12:62:1f:7f:f4:55:66:1c:
0b:b0:a0:d3:53:50:2a:73:e7:30:54:51:e7:cf:fd:be:0f:d4:
68:b4:93:b3:b7:52:d5:be:7d:4c:14:4f:86:e7:5c:b5:e8:8f:
01:70:6b:32:60:50:15:d0:95:59:ab:f6:b3:0d:3b:2e:b7:aa:
29:3c:30:af:53:43:df:fa:9d:03:08:8c:d6:fd:0d:78:e2:3b:
6e:bc:67:d5:58:ff:a3:a8:87:1e:57:10:3d:17:9b:22:ab:ab:
b3:e5:1e:7f:f0:f1:a6:6f:20:c8:aa:4e:d4:cd:95:62:35:56:
60:03:7f:3e:11:e9:35:1e:cc:2a:74:27:03:d7:44:1f:bf:72:
da:f8:ac:b0:05:73:27:ba:3f:4b:b8:e4:2c:b1:bb:7c:e7:c4:
73:85:2c:09:ce:a5:04:1c:13:2a:e8:28:7c:cc:fe:08:aa:90:
0b:4d:ab:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 03:13:18 2026 by rpki-client