
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
File: pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json)
Hash identifier: loIOwlbktkj7PRqnc+2X4rKQV2frkJn2upY/xaACIHc=
Subject key identifier: 9B:A1:DC:FD:58:59:B1:F7:1C:4D:A8:CF:53:97:3D:9F:69:6F:86:2B
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 019F1B324D518D153F5D264204487D9594CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
Manifest number: 120C
Signing time: Wed 01 Jul 2026 01:01:48 +0000
Manifest this update: Wed 01 Jul 2026 01:01:48 +0000
Manifest next update: Thu 02 Jul 2026 01:01:48 +0000
Files and hashes: 1: 0JgDt3i_Pnuh9krPjzNeMq8un4E.roa (hash: 8rurD+AjaAV28krVdAh9BeQ4Bjdsbjm+BdrFzIixPG4=)
2: 1itGHFvjoNbs5xoAGU32cy0ec1o.roa (hash: t9DoFpID6R0VUAuMrF0Dz11ojJdiar1HFSpo+0mx3N4=)
3: 4Ujn1cM40AuK7d3M8Vb_toVHYvc.roa (hash: boLdcfFoR2CjpOaduwRGVC1N1M0qA5GCcr4Mvx/naAo=)
4: 7cFFSltaTzKar_lekHqmoQLmOjY.roa (hash: qmBTDHWY1/L+M5j3+Gq1o691+G2ktSyrcJHxvmERmfA=)
5: A0L_daKBfMV7nYJH9utldIZIYsg.roa (hash: c+FA8gvn4grDiZWDzp4xkA96h3MUDZQgiyzCt836SH4=)
6: BbqP_agnvXa4OJUdOK9QaQVVfQE.roa (hash: BytDPBfW+z3MMKn/T3Ezt+s/7on4WxSdnNftScXHcMg=)
7: FRwF0B0Gco4ROslaw5WQ_fteoU8.roa (hash: iwJlFs9CAGbFjQwYdduqrf+rBjoBjoUCcq+hhgbfg/Y=)
8: I5X54DPx7uauNQUcDefAh5kZut0.roa (hash: 8TsQWHSq4ji09j4n0lKP6UovicqKlcYG3YyDhHypqMc=)
9: ISp9QWuwBFWNWpTGWXKpOjrISzM.roa (hash: Z0OOUOdiG9qXCPvPHz7h4VNlbk+VhRmjlt/+Mjs7gCw=)
10: Io_4XzUPcXRxIinpmHUjhwf3fnw.roa (hash: PhYzR0IaxGgGRS8zLIaSr+Golc4Rgs3HH095CF1z0oY=)
11: MDJT-FAiPn_9DLYknk3j3rwfX9Y.roa (hash: t+GUu3cNGl4VMAwSsB6UVCGA1fy1PDPTWxWQhD0/oiI=)
12: Png3Vrdf7Rwvr6R60_UAOFstFhs.roa (hash: OwWHd5ARDEN0zJZ49iwTOpMY+6vycAIPXKZOSrVAHwU=)
13: QODPrlG-VFZOgZAxUGIjQpc2hgs.roa (hash: XwW86R5AwanY37CTPsNgWsJGKeOgg+VqgPHo62gPeX8=)
14: RaUqydxuVYMlyGD1qIP3Rz1-fCg.roa (hash: gWHNmFjPVrWp2UD6ztHPa+UHuG00aGXzZkvk8ZPWwWk=)
15: RgulTuZMFpRPKFFFd9iPrWv4ijY.roa (hash: H4zGvEX4msDBOcT88fZZX2ZMTrjk6+XMq/KcjDj8npU=)
16: RwWAdM2GIRIcYQbBPUmWVwH1U3o.roa (hash: X1u1g1/pf3uA5ljDrjqZKp/m+4xP9A3tl5fJOBJfvoY=)
17: U7Xzbmk0KKfocvxydq8VmFd5g0g.roa (hash: pPelJCCZZvo1A7j45CGl9+CiBnagu4yj9KWZxHJJWkc=)
18: V9DWrwihcQ7ZFKupThtMHNHamdQ.roa (hash: TolCTYmtZTtv2APrLqNfZtHWCxAsjiE7k18nwycldeA=)
19: V_VULBThI1SWyMzlduk_v5YT_-M.roa (hash: 4K3qqngjQDm7OwkvFF4NbH9BZck83XCd1/K8P6OeAw4=)
20: YrMngOCV1qYUZ2G5L0RXdbOK7Ls.roa (hash: hRmDSB2XVzgwKx2/p0YzSDUPDkJ5hlG/bnoU+nNpOPU=)
21: ZbOlnPA6eBi7lfnx-bMIDhnPlTs.roa (hash: 5nftwGk/Uz83q8GaAtwNqws3YmEvcE0dicM0TAYf3go=)
22: aG716DD0CIzYw_sjaqN49_ZDCFo.roa (hash: coSqlgZMR/vBDqAtbIH3D2F3cwarBnvEjPRCTKgXYS8=)
23: cA5JMvfVav4vIZItfGqaNwh9e5o.roa (hash: yR2XFmEbZmO4CBX8f4QWlsjNhSh6G9A18+yJWj3nzH0=)
24: cMVR_b_QBDVweUJSfI-BhE8BMHo.roa (hash: 5OkF4JXRoQO4/NuG+eaOEGFi4SIzgJACKazez2e+UPI=)
25: c_Y24ajzoAD5RlfqVgA3exca5lg.roa (hash: IFM8k/a5xafsnTSxH9J3BD1nHcUW3xulixu5BnLcwXY=)
26: cu6MjtszrBqCo3h_SmtsNHkmMvE.roa (hash: 7i5XYcZRSc2pl6AvojBH/+hEi/ppPd1TZtrZ8yaqsXk=)
27: hqCozSBIFrgOnfBvc04cLMGl6jo.roa (hash: hM1gf3lHt2gai6o5rvakzA9ssqT47EQ0Thnp6IIUJ6I=)
28: jIR7D-Y-6T9frrNQ_jB8OH3dvBM.roa (hash: 55N/2/rlO8cGYdBy6UjnVeslx4/hwZ35mqqVL8TRjTA=)
29: kplCRBMvz5FDjN9xs4gY-4Of8uI.roa (hash: hjMts3DkdNISVUxYtlx0WSdzxZDEcJo7GF5tm01HxYk=)
30: nPz-o0NMmg3ZMjn3lPMLPMpeS14.roa (hash: +nCIzLIahMHCgAiHoBvORWwAy+FTcigMvBYOrLAV22U=)
31: nzlaOINlB5NKeARZuU4upJ4rUbo.roa (hash: wvp+ZL1hcpwpL9YZftKiuaMhKzGKmWKjnp5JIlUh38E=)
32: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: o7j/svZL5uXN2r4OycetuZ8wRa/ZFfQARlqlsmEjIDk=)
33: rUz6HCWdiJSjjuELK4f4q_4RBwc.roa (hash: uEA3pVSZxMGWGhwdpljknpzc1pOZ1ehqti0T1frlNo4=)
34: s-krzjzxlyWMOaQcgv5asypyFx0.roa (hash: u+SEy60rPDcFIkNaLxbLV2wMnuLL/3Dxezgfctkb+TY=)
35: uKkVWLDRYXWhA8sUpH0phWL72us.roa (hash: v5Do4C/r5p09LluvO5T2+dRXbWmKv56RqUrsJhNmJL0=)
36: udPHT3MAHWQfgnKd8mzuLRmrdow.roa (hash: R7o1ivace6EgMLJTJx+PqDPGE4a4R22iqkQzk7fDc0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:32:4d:51:8d:15:3f:5d:26:42:04:48:7d:95:94:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jul 1 01:01:48 2026 GMT
Not After : Jul 2 01:01:48 2026 GMT
Subject: CN=9ba1dcfd5859b1f71c4da8cf53973d9f696f862b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8c:3a:0e:76:a7:df:4f:5b:cd:bc:34:fc:7f:
16:87:eb:eb:c3:c6:b9:75:7c:bb:10:82:bd:8b:67:
7c:8d:dc:f9:e6:2e:6f:82:ba:4c:e4:e6:e4:3c:82:
f6:f4:f3:00:76:1c:89:4a:23:2f:9b:54:8f:99:d1:
fc:1e:ab:90:a2:80:f2:ef:06:b5:cb:15:71:e6:f6:
70:b1:4f:14:c1:3f:b6:47:82:54:5c:41:41:16:4c:
39:ee:49:01:be:86:47:25:de:94:bb:44:c3:a4:e8:
9e:83:b7:a8:5d:80:42:8b:64:3a:29:2a:b8:48:42:
67:17:4c:cb:3c:9c:74:fd:f4:3a:b0:59:6c:0f:24:
71:df:c6:5a:f3:63:ab:fb:cd:f5:bc:df:d9:11:e6:
27:7c:1a:05:9d:da:01:70:7d:de:6f:d0:23:1b:ef:
8d:67:88:b1:0c:b7:48:ed:8e:5f:26:05:bc:41:07:
7e:25:00:9d:8a:87:95:18:21:18:41:77:be:1a:0f:
e9:b5:87:b8:79:cf:06:9e:4b:ab:e9:b4:6a:96:b9:
c2:7a:d8:88:b8:c0:49:68:37:43:01:9a:4a:d6:9d:
cf:8a:3e:55:be:db:c5:c5:e4:b9:84:95:5f:c9:a9:
e4:a4:b9:91:62:d3:e9:f2:ca:ec:2f:ab:29:6a:a4:
96:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A1:DC:FD:58:59:B1:F7:1C:4D:A8:CF:53:97:3D:9F:69:6F:86:2B
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7c:b0:fc:2c:fe:d6:87:75:44:c9:47:e8:ef:8c:88:81:b9:
3b:86:b2:8a:1e:3c:b9:9b:ce:34:78:cb:e6:52:84:63:1f:9f:
68:ab:eb:af:5d:ea:aa:bf:70:41:09:7a:b7:87:31:66:d2:91:
e1:18:d8:08:d7:a0:f7:e7:b0:68:3b:06:0c:18:a8:d0:3c:e3:
6f:68:26:6d:40:48:ad:e5:f3:e4:d9:2a:32:9e:22:a8:6b:80:
d5:f0:68:98:d0:77:f4:e3:04:50:18:c4:cc:37:1a:40:b5:95:
13:72:1e:ec:7e:91:d5:d0:06:ab:05:93:2a:4f:97:ab:dd:b4:
91:d2:72:49:9a:2d:e1:9d:69:26:65:3d:e7:a5:62:71:a9:86:
41:00:b0:f1:70:82:37:d4:df:c9:2a:ae:2e:7a:2a:72:95:f2:
63:55:04:73:7e:95:d8:34:0b:b2:f5:47:9d:c3:bd:78:35:10:
b6:b5:2e:d2:33:5b:63:dc:2e:39:9c:03:aa:94:0b:20:c6:3c:
42:14:c1:13:e7:41:fa:c7:12:94:2a:1e:af:55:28:c3:ed:b9:
a8:86:c1:f0:5b:a1:c3:33:3f:80:42:34:36:28:b9:32:d9:72:
7d:3b:e4:23:48:24:a1:17:f2:42:45:58:a4:a0:64:b3:22:83:
5a:d7:76:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 05:26:17 2026 by rpki-client