
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
File: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft (raw, json)
Hash identifier: zDgg+OdAxGhgIVvWJ1KhnEgp3gA6jG54z0a6hu2+9QM=
Subject key identifier: B7:11:7C:D1:6E:69:E3:22:A7:DF:E7:3D:91:D5:3E:77:C3:37:44:C5
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 019EB87CEA07513E877AFFA8AED3EF122F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
Manifest number: 197F
Signing time: Thu 11 Jun 2026 21:00:54 +0000
Manifest this update: Thu 11 Jun 2026 21:00:54 +0000
Manifest next update: Fri 12 Jun 2026 21:00:54 +0000
Files and hashes: 1: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl (hash: sKYi7mkP2McvTldccvtMKRVIbvoX3wEHNBZ+fosUVII=)
2: C49vSVt4dfdT17Z5kZxdlV_lY_Y.roa (hash: 6HfpvHUMJisoBNoMG7lySqZtsVK9Z40fSQ9YGkMMFF0=)
3: CYTlKlzSJSqB3jTzZOH673qv2os.roa (hash: nMYpBRNUUmqx48+xTuVDjH9QkSUeA9v7hDY4KWKCBCQ=)
4: DIVTK05T8Vdhwjp7g0z7MnF1TQQ.roa (hash: 6vlsDL0j8NnBvb9Ab/QGUCQui9hFjQ/teVqIFOEkwLQ=)
5: ENla5OgKBu9uunWqxWQAfu7kwx0.roa (hash: Fbmqrk8r0alDCgWyzCOzHqp7tHL/3UqhpNT6d1lPtlY=)
6: IamjYw1vikCzZIhDeU8H0NMAjHs.roa (hash: M+kmsNXkFSxnu0j1QJUyRMfdThsPZBpSXk2/kSsLWUY=)
7: Iyt7Ob_snKf1ZPop-eeEldXM0fQ.roa (hash: 9XeUKSaM919H72Lo2RzCdmjP30DLuCdA4txuvCcKAVk=)
8: ODquW4yfiTrN0BslpesyLROdhCU.roa (hash: LguXTTUIpUVmRso7Duo92XjODqxY0o7l3A4Aw6gkmmA=)
9: Q5HfXdIQnusnCwKJeNtcbaxYKRw.roa (hash: cgDqaBa5oL7jHKKM1uUVRVvnMYGroeNLDuSFwDAGhy8=)
10: _izOulmhuUBG3FatKk1kjhEzI5I.roa (hash: D2Y24n1qrh+NyvYt/hta8znqPyvAoiiYcPgWq6TG2zI=)
11: bAO9OihdfpmA-XpEMUum-i6NlvM.roa (hash: w9BYm30HDg7VDCHpAaP2FWEEPT1iEKkPQOttAF9gh5o=)
12: bnpbPX_ctt0kqkwx6ukV-j4WTGM.roa (hash: 730AnutRLa9Haz+ZMN+qGZx6PYPOqH6zu3NH8XC/47k=)
13: dbi31yJdjzH-gnfiJixAWom7O2Y.roa (hash: wv59+nx6Q7SMg8qYiivt/O65l/1UFWdvKThzkz1L+E8=)
14: gTyFz4o7qq-mz7kkyhI4YQAE3F8.roa (hash: ql1a+n9u4sT8twi+Ey5tWWvsl/zO/3fN4L8B2DWoXrk=)
15: h2mTI89G79vzZdTXcNgpiY_bSuE.roa (hash: qa2BzNyouPFY7/V6+HRcQ7umJPtaaWKwpg9jeFVJFSE=)
16: hhAxTUm-YLDfu5gnVbj74LIg_xE.roa (hash: 5lrRMZNGyqCPeI3ughaZF3pVN6T3OxbFiijuNyO2VPw=)
17: j8JXlUTEd1j_9VoERc0ZtsXM8O8.roa (hash: A11q2a+vMmn2Uc3d6mAqUut0tGh3JvhOP0a9hwmGjMs=)
18: lru0bK1pFWTdlNh3tSeVRy2RxB4.roa (hash: D3uDWSg2oVhHneIgFjvyT24SUbp4OtxjQr0JkAH/IGY=)
19: x9kxYUUdYs3Vc1XQvx9EJnJhrDs.roa (hash: Xjj2UlUQT0tIyuN4wzeBBIdle7HnaFZ9oWTYHnJPnD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:ea:07:51:3e:87:7a:ff:a8:ae:d3:ef:12:2f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jun 11 21:00:54 2026 GMT
Not After : Jun 12 21:00:54 2026 GMT
Subject: CN=b7117cd16e69e322a7dfe73d91d53e77c33744c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ec:06:32:6d:20:ae:2c:61:b9:41:68:d7:e0:
95:62:09:5d:1f:8a:46:27:66:13:b5:8f:74:fb:7c:
31:c0:49:f2:30:6a:e6:c1:81:88:95:26:44:0c:5e:
e0:5a:1f:69:46:b5:5d:5f:ab:ce:7c:bd:67:c2:5c:
b2:ec:00:a2:07:0a:08:30:a3:d0:0e:fb:f8:1c:40:
a4:a0:9e:c3:3f:60:31:60:67:80:e2:9d:80:9c:50:
55:f9:3c:0a:e7:b7:47:95:f5:4f:b9:98:97:6a:d6:
61:32:ca:d2:db:09:ba:82:01:29:1a:c8:0c:fe:e0:
e3:78:2e:3c:60:de:d2:3e:48:b6:a4:18:fd:91:b7:
92:94:57:04:e0:eb:b2:6b:f6:ca:7f:9b:b3:5f:ff:
5f:1c:bf:d3:98:54:87:8c:0a:98:90:d3:77:09:f0:
19:db:79:23:f4:0c:23:0a:a2:ef:68:f9:a6:a7:a6:
57:ab:be:9c:6e:83:70:ad:19:fa:0c:2b:b4:b0:fc:
f3:29:b1:d7:2b:38:41:db:b1:66:e7:c7:e6:17:d2:
73:49:af:18:1a:7c:94:28:7c:31:e0:63:38:de:5c:
be:0f:8b:46:75:65:12:14:86:5b:78:64:44:58:c7:
f0:41:b7:0a:da:24:06:67:f1:18:bb:5c:0d:5a:7b:
8c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:11:7C:D1:6E:69:E3:22:A7:DF:E7:3D:91:D5:3E:77:C3:37:44:C5
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:16:2f:fc:96:be:5a:b3:5d:25:e2:f5:15:9f:9a:db:99:0e:
ca:4e:4e:0c:cd:be:e1:83:6c:13:ce:9e:b7:a4:ff:89:54:5e:
36:84:8e:26:2e:dd:c7:5a:cb:69:68:cc:f6:51:9f:57:18:2e:
b9:b2:60:f7:06:58:4d:f0:d2:ab:b5:c1:b1:8c:38:db:d4:04:
a4:55:63:7d:2c:8f:3c:da:32:38:e9:9c:6f:63:39:f9:52:49:
2c:92:dc:78:71:7c:55:89:73:21:8e:bc:28:a7:f5:25:df:f0:
98:c9:6d:a3:e4:3a:76:63:9d:44:e7:35:ee:d5:e0:ed:05:b9:
80:7f:04:a8:b4:d2:8e:c3:a3:5f:1a:57:b1:b1:81:78:fb:8f:
d6:f9:fe:3b:28:22:10:60:b9:c5:cb:d5:7d:3e:9d:1e:1e:02:
43:62:34:c4:0a:c3:51:0b:e6:c3:b6:33:39:f6:42:4a:18:3d:
87:1e:32:be:71:84:dd:4b:75:a8:9d:89:03:57:ee:9c:8b:13:
84:d4:60:50:3c:40:33:2f:d8:b0:c5:1e:e4:2c:0c:0b:e5:fd:
0c:82:57:aa:42:39:2f:94:17:a9:34:8c:48:27:a8:77:bb:c2:
24:40:22:de:a8:ef:8a:a1:3e:3d:01:ca:7b:cd:f4:c6:63:51:
13:12:61:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:26:07 2026 by rpki-client