
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json)
Hash identifier: cfsrSHP6nx30sMUpGAeOwqtU6R4/LVH+doR3xzhOTpQ=
Subject key identifier: 9C:D7:49:CC:D8:DA:D0:D7:5A:11:29:E5:B3:BF:31:0D:6F:A3:58:12
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 019F197A38C4AA4026F64D7E5646AFF7AE8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
Manifest number: 175A
Signing time: Tue 30 Jun 2026 17:01:07 +0000
Manifest this update: Tue 30 Jun 2026 17:01:07 +0000
Manifest next update: Wed 01 Jul 2026 17:01:07 +0000
Files and hashes: 1: 1meLaYKO2Tl3bhYSsOjqpf-iDLo.roa (hash: aO+cgckrFpHbMOnuICmuB1xPZYgfmGDfrFdfNUo8hwg=)
2: 5GG9Ao4ScwCTaqCwAi8GnKy-uIk.roa (hash: BbSg6kfepD5G3rCNp1AAX9gRiwipTBnqXkjrl5sWhEU=)
3: BN0rBq-tNCIxQPqmFjFDV44qYpk.roa (hash: jKAg3bTdZuNi/EJCwdlUsNQtwlFvyoL5tw2t5y9MU1I=)
4: HO2U7d5NcmWKb9JFFOS4xst6Ap0.roa (hash: jIkU93mIxfPKkS6ZV5Em7YZjODmsWtP1r4eJlBEyOBI=)
5: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: Jl3KBybZOVbtwEeAp09DqGqru6tMO1uR6L/Tm1VR7xk=)
6: MPhp410gGVKP5mkd7p544bUnjxA.roa (hash: QAd6nrSjBEFE5oh4hmKUtP3RiDgmKVq2ERPv15zMcC4=)
7: PWFCC016ViMQwsbajGFaPsVXWpU.roa (hash: XU7EaVjH4kPpzpd1I6Ws6W/k6BLYUdpZHPYkfznROSU=)
8: R5nQRJbnGIfuNPFQmSy5KyUN1Ng.roa (hash: S8J2YibhrFYHi+05w7dwd4Hy2ZPqL9ZfsTP/e0tcqoA=)
9: SR_Oqw4W1f3U3vok1BVIM_3prOQ.roa (hash: xZRfZAtOOEJIXE0XPSwwSTYi/tKeXWXICqEFbpdqCLE=)
10: Uvaa9lbnqHEUoncxKg-RipHuWoI.roa (hash: D8PxV6mfO3QDVLMAPM0ON4yh1dbS4DF73T3Is0Auul8=)
11: gu8Xb0EdAj5QQiEbcZUHWSiqy4o.roa (hash: Qu77EoHxyeTpqNbgaiHUpPIuYcauYq9nmWOzOey7QMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:38:c4:aa:40:26:f6:4d:7e:56:46:af:f7:ae:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jun 30 17:01:07 2026 GMT
Not After : Jul 1 17:01:07 2026 GMT
Subject: CN=9cd749ccd8dad0d75a1129e5b3bf310d6fa35812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:52:59:bc:e9:37:ad:34:ed:9f:73:e6:04:
dd:e0:e1:2b:4c:21:b9:21:90:8e:fe:42:d5:de:10:
d8:dd:e3:92:55:38:f6:de:1f:a6:e9:24:9f:47:d1:
a7:26:b4:90:23:a4:b3:5e:46:c3:ea:8f:f5:6c:0f:
91:4b:12:d8:7c:eb:f1:e6:13:c9:92:35:0c:d3:82:
0c:0f:ba:1f:fb:a5:e9:68:a8:18:c8:73:23:e0:54:
a8:05:d5:85:b9:75:17:d5:50:ab:8f:c8:72:bf:ee:
00:22:4c:9e:6d:22:b9:b0:f0:27:68:46:1e:99:6d:
41:77:61:fd:e5:86:00:46:b4:84:a3:dd:f7:68:16:
33:8d:69:5f:43:94:e5:14:4e:2a:8c:9f:88:d9:2a:
4f:40:2e:b3:31:d6:2b:b0:e6:86:65:85:63:d2:02:
84:5d:a1:f0:61:f8:ab:41:cb:d4:5b:88:6f:98:f2:
d8:41:b5:7b:0c:9b:07:d2:ad:67:89:05:03:d6:97:
77:9a:e1:22:da:de:6a:fd:0f:ce:f2:ee:44:8d:5d:
4f:09:5c:b7:6f:e3:52:08:75:66:69:db:c6:3b:40:
b8:3d:7e:33:34:9a:03:38:60:51:9f:44:89:a2:a5:
b4:f9:37:c3:22:9b:bf:5f:b5:99:46:fb:f9:9c:64:
ca:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D7:49:CC:D8:DA:D0:D7:5A:11:29:E5:B3:BF:31:0D:6F:A3:58:12
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fd:be:2e:d1:35:8a:f0:07:0e:d4:c6:51:87:7d:47:20:7c:
b8:6a:2c:fe:ba:a3:91:81:c3:9b:c8:a8:c7:1f:da:05:b6:52:
45:39:b9:7a:95:10:cc:dd:38:24:76:26:dd:f0:d5:59:a0:f9:
99:a6:8a:92:f9:69:0c:72:88:b0:b5:8b:fc:f0:6a:f7:f6:be:
31:45:c6:8b:e1:24:ec:78:95:15:91:64:d2:15:51:de:cf:bf:
bb:0a:2d:a6:f1:2f:d6:f1:4b:97:ca:e4:a2:ec:c7:78:2c:7d:
98:ee:95:6b:04:23:e4:d4:55:9a:94:4a:ba:ee:8d:52:4e:53:
14:a2:a9:7e:4c:39:de:41:6b:83:80:51:54:81:46:27:7c:05:
f0:13:9e:7f:3d:78:2d:a1:18:dd:db:1b:fd:fc:2e:1d:2e:d9:
8d:5e:8b:75:5d:66:cb:98:9b:db:f4:25:68:0b:4f:b4:e8:ac:
19:4c:b3:63:bb:6e:e9:41:6b:d9:5f:6e:ce:a5:b5:f5:6a:1e:
5e:7a:8b:73:a4:68:94:b8:89:87:af:23:c6:77:de:88:3f:81:
15:8c:d7:7c:50:17:e1:f6:2a:da:9c:e5:df:50:26:4d:33:cc:
7e:a2:b2:70:96:56:02:9f:e5:af:dd:1b:7b:3b:c0:13:4a:9e:
92:46:c7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:39:18 2026 by rpki-client