
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json)
Hash identifier: 4v3UKZ9UYikw02q9KKg3XUndjbXPW7prcXo1wuRX6s8=
Subject key identifier: BE:6B:DA:FC:52:73:6D:4E:02:66:F7:C7:0F:8E:71:BD:D6:8F:8F:83
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 019EDBE4D0A900142CEB3FC427B108BF3757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
Manifest number: 0826
Signing time: Thu 18 Jun 2026 18:01:06 +0000
Manifest this update: Thu 18 Jun 2026 18:01:06 +0000
Manifest next update: Fri 19 Jun 2026 18:01:06 +0000
Files and hashes: 1: 1zvdcEwkgDgymDIvdRNXraLRNH8.roa (hash: 91ImAvK9cIsr386Uw3vdRaUWjAcGr1Za2u1qM4Wcpbw=)
2: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: VOSWV8DJffDLZePZKDfu2nWVlMQYTe7iLCNbtgHb81w=)
3: AuuFpGckEdWDmpSli6J4EvnBEFA.roa (hash: UWwZYirMViLQ4FhWk6naRNb3lf/S07gxbtcPGiaea3M=)
4: B_2DlHPjFMc2OFdioV78P7kSKnk.roa (hash: l6A6lmViWSMPIZA6Jqw5d17N6Vzy1rMqG76RVXMx2Xs=)
5: QAQqyGViM6nC5i8XAnkTLj2Fjlw.roa (hash: C9pNA0dXzzng1peuC0V7+/A3P+D1i1wR3XipGNDFMzY=)
6: VJhfwBMpKYGf6ops4QG8W2D9K5Y.roa (hash: BYsR2fxa81FQHh1Dxyok1UJdkjHu0vH5dq3diC+m0iI=)
7: YhAgOfBxB36OmlW5J6iwNI4pf-A.roa (hash: YgJ931EB8K2m5BcoLz5t++aQe+CzOPxkeIACGG7/szQ=)
8: YqA5Nc1KA5rAJ78_5MFp3uqVEyo.roa (hash: /mX+AdWxuRgbJEYcF/jnfYMmQcOrnv5KIh/j9UyP9FA=)
9: _m7nbQwhxW5w0wbnoPwEGZq5xj4.roa (hash: 6vjyJskNxAqxaPWKjJV/dxJmRNdkP5LCRI9f1lfJEJQ=)
10: egsOE6bZvfKQiaDurlHql4l7FQo.roa (hash: BP8wlsBgKB6wKVje/kb04PbZKDtzqCLIojy+BbhlXD4=)
11: rB-GRWPvn3oAjav-7hoWPrGNxdU.roa (hash: rPdzZUH5HWNL3o+DGYQhE29ut122q+EzGXhwG7kfgHE=)
12: v8v2OaJG7Hdhmb6VYMUj66YcSY0.roa (hash: B7Lry8kdmTHVcZ/TVSfBhCUi/wQDju0yT/ymY52jHqM=)
13: z9ARo-p4RTVhYnYCwUeLQoHNI0c.roa (hash: h3CtyvykuY57x41IgLYTP2ID/rzbFX3Z2i6KoIYgMWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:e4:d0:a9:00:14:2c:eb:3f:c4:27:b1:08:bf:37:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: Jun 18 18:01:06 2026 GMT
Not After : Jun 19 18:01:06 2026 GMT
Subject: CN=be6bdafc52736d4e0266f7c70f8e71bdd68f8f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:bf:1d:1a:8a:da:91:72:80:bc:51:88:b6:
bf:31:35:f2:b6:5d:36:b5:fb:f2:71:0e:10:64:63:
b5:a1:de:8b:fd:6c:4c:15:76:cb:28:0d:78:f1:13:
09:e8:29:f6:cd:68:4a:2f:78:20:f9:45:40:db:fe:
5d:57:df:13:6b:85:a5:2e:50:23:76:9b:3e:31:5f:
da:2f:f0:99:31:b6:ab:ca:7e:ce:fc:53:cf:fe:fb:
53:07:fa:46:8b:6f:be:e5:3a:c8:99:0c:48:57:42:
f8:d7:6d:eb:0e:7a:a3:35:2c:d2:47:fc:d2:b7:3c:
31:dd:88:a4:07:44:12:be:86:1e:bf:60:3f:4c:c1:
a8:6b:c7:76:fc:7c:03:89:a3:f3:07:4a:66:98:e1:
6b:b4:03:08:cb:48:86:f8:d8:c6:14:34:d4:ff:d1:
7c:10:9d:52:c2:15:d9:3c:10:77:e8:3c:b9:c9:25:
b1:3a:d1:85:e4:4d:00:3d:1e:d2:f1:01:1f:26:07:
ad:aa:88:a3:07:ef:dd:96:c8:87:a7:12:29:34:e5:
9a:64:03:13:1c:d4:43:9c:d4:b3:bc:a5:fd:13:22:
84:10:8f:c2:18:fb:7f:dd:5c:b4:c6:1c:13:fa:47:
e6:b0:ce:8e:76:23:9f:ce:36:2d:ac:60:19:92:2b:
5b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6B:DA:FC:52:73:6D:4E:02:66:F7:C7:0F:8E:71:BD:D6:8F:8F:83
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a9:7e:22:85:6b:7b:4d:73:b4:7d:c4:b5:1e:bd:f5:51:72:
a4:81:46:2a:d4:20:19:7f:39:81:71:f5:3e:1e:78:25:f2:92:
95:58:35:ee:54:da:98:aa:bd:64:c5:4e:07:e1:67:3a:4d:1f:
c8:6c:f4:ca:bf:18:6b:e7:fc:6e:b8:48:df:ce:25:32:aa:9a:
17:50:83:3a:e9:31:e7:18:f5:b7:99:6d:8b:03:0e:b0:aa:10:
47:b7:6f:16:87:9f:0d:be:68:45:dd:de:47:5a:a7:18:92:b5:
d5:cb:59:b2:22:d3:43:34:15:9e:f3:25:98:18:d0:5d:ce:48:
1f:37:dd:95:0f:58:8f:34:98:e5:05:e2:f3:63:03:ab:a8:d1:
e5:70:b1:b9:53:07:43:7d:19:b9:ef:68:c9:07:fa:78:26:f1:
8c:7a:8e:be:a2:5a:cc:1a:ac:b3:2c:0a:a6:08:c6:23:62:f3:
77:42:b2:0e:8b:4a:fa:45:18:ac:bd:e9:24:7c:98:17:8c:f1:
f1:f9:ed:f4:e8:85:29:7e:32:74:ea:cf:db:ee:1a:74:b9:51:
85:58:97:69:63:82:3d:b8:76:c0:1b:3c:23:eb:fb:d7:cd:7b:
ee:79:07:62:fc:66:83:89:67:51:59:51:89:b1:64:88:86:f0:
89:7e:23:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 04:11:44 2026 by rpki-client