
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json)
Hash identifier: 0gyrp6wQ8pxcurl5kP/9shK0i35vfrR8H4qD/KnS0RI=
Subject key identifier: 3F:64:CD:08:65:BB:92:E8:9E:00:3E:A2:9E:80:9A:1F:EE:9F:4C:87
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 019FA3AA5783C4A704E6AD0C22A37BC71341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
Manifest number: 19EE
Signing time: Mon 27 Jul 2026 13:01:17 +0000
Manifest this update: Mon 27 Jul 2026 13:01:17 +0000
Manifest next update: Tue 28 Jul 2026 13:01:17 +0000
Files and hashes: 1: 0kNz9-JWERt3abzlaJOUE4NTJO4.roa (hash: 67hyPCPSnaEobnQIj1pQT7pIpy62/SUOtS+52kq/tjI=)
2: 4TKo4hpIgeOaUC4msoLXj79brZw.roa (hash: nEKkT5nayoB6X5C9mnM1stExdpwEue5SpN4elNaZnJg=)
3: HIrm6sRoTksRGtSnmk5VERHaRBI.roa (hash: 5kYVCcz0PvuIcAwPfpXwqKs3H5+iF2EWwV43kAN9Zh8=)
4: Lc1GuVjjApGSdMl5cDRvuL9C63E.roa (hash: j2ZLFcBgyK8+6PD7sIFfqmq1q2LME6wfEuotMkEwgLw=)
5: TBbb52loGUfoyqY4IjSCSNt13F8.roa (hash: 7gXhXE88Dz/LUX1AsHHfFQZ/lUsqoBgQIbupC+dBqCA=)
6: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: 2eCDzkvIYF1H1HwQ7hk0guqa8t1h5Z1mEg3nQWiPmqI=)
7: bwp5bXEghgHr7EYl0KNAFE7mc20.roa (hash: 7u7Zj5oFaGyCqot4J3MzTBt5vDDbem5Ae4vFNHbppfk=)
8: jKcEmRIDilRbegMXDvNfe4imvAk.roa (hash: Z/j4k2QApdwbYRv/hX0sWoy2nITxJs8LZ19RK808A/E=)
9: kAV42zy5ItGrvvbv1krId_7HV5A.roa (hash: yhIVNCh19TC+CSc7taPbV70ViFKCn6sP5Y0H3vfQEDc=)
10: nntHTPnh88EzY_e3kkkRQsK5w7M.roa (hash: aZV+AItfqgNQSbmNx8IbkbUfKGk65poULNn0lqPwxbM=)
11: sZoONX-atX44GreUxrMqc6C9sFQ.roa (hash: OXwYQmgqP66zyYHOv7k9Apd3i8xq7uri5BBqPLyj09A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:aa:57:83:c4:a7:04:e6:ad:0c:22:a3:7b:c7:13:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jul 27 13:01:17 2026 GMT
Not After : Jul 28 13:01:17 2026 GMT
Subject: CN=3f64cd0865bb92e89e003ea29e809a1fee9f4c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:72:27:7f:06:7f:eb:87:e0:54:7d:38:5e:
b2:b9:a9:85:db:04:43:11:bf:36:f4:dd:55:2d:02:
a2:50:a0:da:d8:de:64:0e:16:19:46:1b:63:59:cc:
f3:41:b6:74:f2:7a:ea:23:5e:88:72:84:68:56:13:
be:45:6a:48:52:46:09:97:28:bc:8c:17:cf:50:e3:
bb:fa:21:ca:6b:4d:09:ed:cd:f4:a0:64:b3:79:43:
03:3f:d1:05:ce:e4:4f:10:2a:e6:ea:c4:a7:01:9e:
d2:74:da:bd:d9:56:27:fa:70:15:63:02:9d:38:6c:
b7:17:3e:20:9d:52:94:06:b7:38:a7:8a:0f:3d:38:
a1:8b:78:76:7d:38:ce:b3:db:95:aa:6e:ba:fb:22:
37:ce:5d:ec:62:5a:35:40:0f:76:76:ec:d0:c0:67:
10:a3:29:9a:ea:31:28:d5:80:8d:b9:0c:96:f9:c3:
59:3c:89:be:62:45:fb:76:b1:a0:4c:9d:4f:7a:0e:
3d:9b:24:75:e2:85:82:39:a5:59:3d:af:ee:c9:00:
f1:5f:ad:bc:3e:02:fc:c4:b0:b9:53:9f:d9:eb:dc:
86:b0:4c:1d:93:6c:d2:65:80:89:b7:ba:d7:55:0c:
c2:a0:62:de:3f:88:67:35:ca:aa:29:26:15:48:9c:
1e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:64:CD:08:65:BB:92:E8:9E:00:3E:A2:9E:80:9A:1F:EE:9F:4C:87
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:78:5e:9f:20:98:31:6a:8d:2d:01:ee:10:6b:48:2e:65:3c:
6c:2b:06:a7:03:f0:dc:69:6a:4d:90:23:e0:bd:2d:81:8b:69:
e7:0e:cb:71:19:8a:49:b0:56:c5:c9:a8:d5:02:0f:4d:e6:4e:
d2:4f:f7:29:be:e6:40:db:fd:36:d1:11:b7:a1:eb:59:e9:e2:
56:12:2b:0d:fd:88:08:25:38:33:00:65:e2:b9:94:2c:26:96:
18:48:99:dd:7e:94:b0:47:da:aa:3c:5f:30:39:da:f5:b7:47:
c7:78:94:fe:e5:75:69:3e:01:63:68:6a:a9:ae:15:3d:51:2e:
58:29:98:9f:1e:f5:3a:91:8d:40:34:fb:c4:46:b4:ed:d2:fa:
50:11:cf:02:14:80:d8:8e:e1:74:3f:18:15:68:2f:05:ab:56:
00:15:bb:d2:7a:9a:d3:a9:c1:dc:82:f5:68:a5:04:63:65:c8:
c0:00:55:a9:56:db:7e:36:38:1d:02:19:1b:0b:69:08:2c:74:
e5:c7:af:68:13:a7:aa:81:da:a6:12:e4:cf:6d:be:d1:75:6e:
66:c3:f1:05:47:f9:fd:1d:01:d6:40:9b:c6:3f:a4:52:1c:92:
9a:b1:3d:2b:ff:e4:04:5c:ef:b5:21:33:fc:f4:4d:78:0e:9b:
f3:6d:8e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:52:08 2026 by rpki-client