
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
File: tFmZiZ920uLkzN_IF_mHnPrAa74.mft (raw, json)
Hash identifier: UAZfcIfGu4ewe5t2n7O+tQ2fnj9ECxK333A3IKXCYnQ=
Subject key identifier: 43:1E:C4:F2:DC:E5:4B:9D:28:A9:73:D2:F8:0D:58:01:D8:63:A1:25
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019F9DDEEFAC0B648C5CD8DEFD059897CFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
Manifest number: 1314
Signing time: Sun 26 Jul 2026 10:01:00 +0000
Manifest this update: Sun 26 Jul 2026 10:01:00 +0000
Manifest next update: Mon 27 Jul 2026 10:01:00 +0000
Files and hashes: 1: 00yjAHUjPi78LWd5NKw2W62obOE.roa (hash: fy76k6hktxmrp/33ybyKcOrtr3l2uBboJQ/aOUgHGR4=)
2: 0BgZTv7QXJlAZiTUHRagH3BQkp0.roa (hash: 1Mi6r34YcOgbA3mJxnRLp1QOHS59HC92Y/0BpqQFJkY=)
3: 2O9349WO0t6H0E9ZK0f1QWi3t0Q.roa (hash: 2RhFKguLdx/frIsqfhlZq+St14nwRLDsFvzdspSUCHs=)
4: 5yanEvaCNGmxYIoFSwD5iS2g81s.roa (hash: aMWaHQ8wF/Y1htK9oNbLHRQFbe1aIxUDLSAfigLBhqk=)
5: 7SmXzQd-nWaNe8t8rqOA7438J_s.roa (hash: RMY9iFIYUbgR/WmLppHu9PswGGc4qk7Roiy4Bmlgw3s=)
6: D7WZ4U1qEm7s7ojiU0DGq7f4zXk.roa (hash: KpStMvfGgVTFEiCM6FyPOYlWTDixlJh6LN27+Q9VRF0=)
7: DYT_PcLJKH9CJFsJVm0ZqIU_OGg.roa (hash: INeru24dQtWv6aaG7GCU8qjGuCXwfkgwswLcSE0c5rM=)
8: FerkNmRdMMqBAxxCWnxbdwDF0fM.roa (hash: X4J4aibstvyyZ1dw044vF6xHdgTuovNe6IxPq/bGSrQ=)
9: N_eH9tP8sKwGQPcNm7GNoBELV-M.roa (hash: u35SZW/814bffQ/2bUCoM6NNXgrCPwx/svz9dyeDXMM=)
10: P979fSRbZB2qJAsaRL-Un7UziRU.roa (hash: 8yhPFAaSS82QNaTgnE/13ZmLFiKivRIrhPw6xm3ENmI=)
11: QAhoslHofszADcmZui-eOUMvrKU.roa (hash: 1XMldMRsg874vTqcGiQzaQlXR7XcVR1ojHBp2U217Pg=)
12: QErVVtuOwcB_yB0LqZmmy9fn_ak.roa (hash: FDpvep+63kI4zULI0Sfg5/w/pD8+A58oJ0Hyf+jbagg=)
13: Tg3K248AqL7TdHDsnw7TmEvLAQ4.roa (hash: LC/otdFV7sxTd0BKKQkekKeoWRTU5X1nRWOWC62qdAw=)
14: XPqNLDSioTBbUphggaW_qiKHxQM.roa (hash: u77od1+BFXbLHFmFQ0ohdLmIQae78vCNTKOMpKBDO4A=)
15: ZTfFnlVPs0jqVtKhNY1W6REgVTo.roa (hash: DY4bo++5JP9csslzTNXD8o/1EwFJpWmc6JHBfz5aBOU=)
16: _sxN__19ZJD-wDLf4-2wxc5ndzI.roa (hash: cDLlnQNW3AtBhQs73FYFH7LRcTVmcIP6AmZwXbvRoBQ=)
17: b8rph-cr35APSGmIzjlav9x-ibM.roa (hash: ewv4AA8yj9deK9EvneGfkLw6HKhasqrB49rsY1tooVU=)
18: bsu95ghiIBpd9cfADiMIa9Yxj6Q.roa (hash: 16b5K9754SCIP/D165OSsKJafJ6ZtxK/WBHz3KMDFr0=)
19: g952-Dx8RPqZ9d7ZFrwiXxcz1Bs.roa (hash: m+xGgcoyjZzC8OaS+PwG/1kW4RfwvvedJMhkcRHvmJw=)
20: jg5M5k_6GKNZ9Y2rvZZltaFpNo4.roa (hash: SIMXAPgCs88kIDrWS92r3YG0rKy8dHX8r7UiSduHK9s=)
21: nJWPR3ijpZMRJhibKnA2bqIBU-0.roa (hash: hkrTvd6KUmz1EfV2glZ262Azwm8Xx7aPhY3VGefvZcM=)
22: tFmZiZ920uLkzN_IF_mHnPrAa74.crl (hash: 4s/6p/f8sS0bUm+ilDo1ZH5rf4sttN0xYVAU6ogc+C0=)
23: vYpCuwM7rWjLKY_sErODVzSuRPQ.roa (hash: cKiFxlCvXlppFUZycLfczFtZWOx0j+yYfF3GWyjfGtk=)
24: wHn4Idt9pbw0xNqo1xXnrZAME_c.roa (hash: 1V81c+Xq4YaFlhjRvvqZvgJ/aOSF31vxmGkYy8VJT/Q=)
25: xDSHSPDYqUST1yGDzj0hcab5JsA.roa (hash: ck+8f/Zhnhgy0hfrt8gda3b7LFRzqdXFoYHCpi0gwvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:de:ef:ac:0b:64:8c:5c:d8:de:fd:05:98:97:cf:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Jul 26 10:01:00 2026 GMT
Not After : Jul 27 10:01:00 2026 GMT
Subject: CN=431ec4f2dce54b9d28a973d2f80d5801d863a125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:19:55:a5:fe:94:79:9c:f7:c1:68:cd:b9:69:
5d:a9:28:54:3d:28:6f:03:2c:7e:41:91:33:07:6e:
bc:b7:3d:bc:15:ec:4b:6b:e2:69:9b:85:d1:aa:57:
3f:2e:1b:96:10:87:46:45:df:2b:46:f3:18:63:37:
e5:a9:02:eb:4d:f2:82:e5:79:36:65:53:8e:57:4a:
df:ad:f2:52:fc:9f:95:6e:0d:c3:16:96:3f:70:fd:
95:76:bf:37:0c:01:5d:9f:49:a2:fa:24:b4:b3:97:
8b:6e:74:bf:ba:15:ba:de:54:a3:76:95:65:3c:75:
35:98:f5:43:c7:b0:de:d0:60:ce:f5:e3:56:38:83:
42:37:af:e0:81:ec:2d:56:24:42:2d:3a:c3:97:bf:
9e:ff:13:8a:6e:52:66:0f:cb:ca:66:bf:5d:78:17:
23:6b:c0:28:84:29:2e:c9:ff:99:3a:cc:e2:e5:dd:
da:9e:6e:0d:0a:4e:e3:9b:fe:a4:2b:db:0c:a6:07:
f8:ea:cb:b4:a5:3d:2b:fc:a4:8d:d7:55:79:a7:a6:
db:86:61:8f:d1:b7:c4:59:6f:3b:bb:f9:fb:62:b5:
28:a2:46:dd:98:5c:87:f0:b4:d1:82:09:72:bd:e5:
5f:c5:f1:d0:be:34:a3:32:e5:7e:55:c0:a3:2f:5b:
ea:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1E:C4:F2:DC:E5:4B:9D:28:A9:73:D2:F8:0D:58:01:D8:63:A1:25
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:61:a5:09:f2:3c:03:17:46:52:de:c2:7c:d4:7f:2a:a7:8a:
c2:58:d5:b7:da:6f:02:34:9a:6f:89:de:19:26:17:02:1e:cd:
8b:2f:b4:1b:a1:8d:fb:bb:9d:de:5c:86:95:98:16:5f:06:73:
fd:ca:84:61:82:b4:89:5d:4c:1a:14:64:7a:15:51:0a:11:09:
13:d9:bf:37:4d:2a:c5:4f:ac:a6:e3:d3:bf:6d:1b:cd:98:2b:
9d:87:b6:e5:b6:a3:67:f6:95:5d:09:66:89:fc:24:36:d3:60:
9a:a4:96:75:d2:a2:d1:50:13:ae:83:9e:bf:2c:51:de:6d:2a:
4c:ab:85:22:66:0c:a8:27:0d:e1:13:dd:bf:9f:9a:77:f4:5b:
b6:f1:1b:df:7b:5b:af:87:d4:84:8b:35:0a:06:f4:b3:49:68:
b3:e4:4c:bc:7f:46:08:63:45:10:22:fc:f6:4c:de:9b:a1:b2:
fb:61:36:2f:48:9b:6f:03:62:b9:9d:50:e9:f8:85:87:66:44:
b5:f6:15:56:8c:5c:ce:fe:e8:b9:f9:4b:b9:0a:32:38:3a:0a:
36:36:5a:59:0e:6b:71:8f:f4:f1:0c:fa:29:25:37:6e:0f:78:
dd:6d:2f:f9:61:62:d1:e6:f7:6c:ac:a7:f0:b6:87:6b:4d:0d:
f3:81:97:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:52:41 2026 by rpki-client