
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
File: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json)
Hash identifier: gtz7V2e6JJkuUaRFXYDD6If7MaTKDU34eDvVUzyJlCY=
Subject key identifier: 93:36:18:6E:8A:F9:E1:86:9F:FF:8B:C8:BA:EE:79:8A:17:91:74:9A
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 019F845646708783C051D0BCE734522C5120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
Manifest number: 141D
Signing time: Tue 21 Jul 2026 11:01:14 +0000
Manifest this update: Tue 21 Jul 2026 11:01:14 +0000
Manifest next update: Wed 22 Jul 2026 11:01:14 +0000
Files and hashes: 1: 19E50qchIIRYPEcBaHq7sGG5wI0.roa (hash: eE5229153hExm9zLLNjIVvIWU28fOYiSgL3s6vOhycw=)
2: 97SNWyMUYRiDeG9n1N95AncRQnk.roa (hash: nI2lxusT43e2HGHQlJ+OS4ZlLDLuDOW3fSKQ9vYde5w=)
3: ARsNkmXZICw7mVOEEqaeLzW0NS8.roa (hash: HGEzOhh+K3s8r+6AsZZdfpNC/GqHLS7ExwsdeMVtoJI=)
4: Bl0qB9IHm1JVOHIHzIJOmcHHLGw.roa (hash: 5Sm32JyDwrhWc3vyfBWLEKgqGMIQn0oSGZgkbi9R4Ng=)
5: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: KSyKDy8uLHLBsEhvsbXvJRng2pHwoRy/UWCPyWzj7cg=)
6: LkfXZqcx7G1RdcSSUX4VqE95iT0.roa (hash: J2g84l93sai+C1V8lXRu8vRKenlTXlmBdpYyXxL3Hmg=)
7: M4q9DG7_7tEtbxxsWBKXQtxGt7k.roa (hash: l1YoZfcF40wNjjNm0JW8TrQnl6c8teto/VumFdsbKYw=)
8: OdLu_HTcQvIodFBv5wrW_bitNt8.roa (hash: Lh3p2rmlivj/4TCynBLAARFyup/lYvxOvhDJIyFzt24=)
9: axcATIOsEbV9qEHFR_BgJI8InRc.roa (hash: nhsbsi/hDL4AYgein99xctG644QzrEf5lgLkARRpWaU=)
10: ek7FuUU5QqZtmW4c2a1Bh_Nvze0.roa (hash: fcj6iTqUPy26aGGnXwajRdM6fbwzNnBSUbT+6zg93yE=)
11: kz59O-9rHRK3If4NGher4WpZjHE.roa (hash: AakaTSLsPxjlp4i8uprsoV1LtGwgVY7VSh5IFGItGZA=)
12: pmvx0wgSZ-e6Csxblz8UNG8GLh4.roa (hash: HlDfShnHsELTO0EoU+/TscI7vJQLc2cGhli7/Qj3Qo0=)
13: r3dW9lAqMZzJ4q1ECWLy0uvljys.roa (hash: Ydp4ZLQaFBxEhvTauDjxFwFAUVvVLiZ8FUXZtyhH9lE=)
14: rHkDmoeEUk_UKkDPiPl2ZLunlP8.roa (hash: N4gR2twlyF+k4BziCYf7gyFcmHQBn89bTMP/4cwgXIQ=)
15: rjyccDgFllWxfeQb355Lp_fLXxk.roa (hash: tQCLpc6R3fwHVeq06ryeCzjgqeU2l9Z+qX3z3qLohNI=)
16: vndxFTa05fIa6-yUCZPvIBrR_Rc.roa (hash: yxkn5B4HUiA8jl1lZWZyV1zdTXR6L83beQGj3WTktO4=)
17: xiXQ7Ju7uKPaOZAIfjnaz5WFcMU.roa (hash: iBuZkqTWmF5qEyHqfDnsRPYzPSipq5gF9EuzoGnhAUE=)
18: zpnZiHFwy0LGsQziGTNhSdlz9Es.roa (hash: xFQHjKoar8tgV6VJF9byW8WcGGZiORzqntKof2KtHCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:56:46:70:87:83:c0:51:d0:bc:e7:34:52:2c:51:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jul 21 11:01:14 2026 GMT
Not After : Jul 22 11:01:14 2026 GMT
Subject: CN=9336186e8af9e1869fff8bc8baee798a1791749a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:c9:23:94:94:9c:ea:78:55:05:13:d0:c2:
a6:c2:63:bf:b5:89:78:41:7f:be:50:46:c7:4e:d9:
6c:6f:7b:5b:40:56:bd:1a:dd:75:95:e7:b0:5d:ac:
f4:64:bf:d7:6b:9b:a6:38:d5:67:9e:da:e7:38:ee:
2c:aa:1d:bb:4f:77:26:49:80:68:dd:2e:49:1c:e0:
80:f0:d5:7c:58:06:1c:91:56:84:d3:b9:c4:16:58:
a8:0b:97:c1:c3:cb:a0:b1:96:e9:d2:cc:71:fe:24:
6f:aa:11:89:0b:11:4c:71:89:cf:71:5b:d9:5b:dd:
13:17:bc:37:8d:f2:f9:63:73:53:40:3d:83:09:15:
51:f5:18:89:3d:6e:c1:53:0f:19:a9:50:b0:a9:52:
da:cb:b2:11:4e:1a:92:1e:bc:66:bc:86:d3:6f:00:
f3:80:ea:fa:f5:ee:a1:d6:92:13:85:db:61:53:9b:
fe:0f:13:c1:84:22:de:5d:a2:8d:c7:41:9b:4c:76:
68:94:07:49:e9:68:5b:32:84:ff:3d:4b:90:fc:d3:
d5:e9:dd:dc:33:b3:5a:6c:4d:8b:f4:d8:d0:c0:d2:
64:40:90:4b:1b:80:43:b5:18:6b:20:8b:33:8f:5c:
86:ab:02:b6:c8:3d:5b:c8:ae:e3:ae:b3:29:f0:3c:
82:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:36:18:6E:8A:F9:E1:86:9F:FF:8B:C8:BA:EE:79:8A:17:91:74:9A
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:da:12:0e:7c:f9:1d:9b:53:af:05:96:6d:54:0f:0b:f2:40:
61:1a:f4:f4:5f:84:26:65:db:b2:8a:89:e1:22:0c:e6:62:49:
8e:a8:c1:ea:89:93:7d:c7:06:d9:6e:55:5d:dd:84:d7:9a:d6:
9b:44:d1:47:4f:f8:0f:6f:5a:e7:04:78:8b:9e:fb:8c:f4:0f:
1f:1a:98:ab:40:49:11:c2:a0:13:85:93:34:d9:3a:f9:de:79:
b2:ed:e5:58:d4:ed:16:38:c3:fa:66:d7:95:0c:66:3b:8f:21:
3b:d6:ee:4f:ed:11:79:c2:09:50:16:f7:f1:f7:52:b2:3a:84:
a4:da:cd:8b:58:52:3d:d4:3e:df:f4:00:14:8a:5a:b8:6a:9b:
ef:bf:f1:94:b4:5f:a9:ec:84:59:8c:27:4f:60:7e:01:f2:f3:
b8:c8:ef:43:86:3b:d2:57:6c:95:70:85:b4:bf:ce:55:24:80:
32:cb:b8:93:02:f8:22:57:9a:0a:64:53:92:a1:e3:93:74:a8:
27:4f:b0:6f:d8:de:36:e6:5f:7f:1c:08:20:c4:a0:e8:f3:d4:
8a:77:9d:71:fb:19:ba:8e:74:5b:bb:7a:78:66:27:05:5a:0e:
bf:fc:3e:3c:ab:f6:db:6b:c1:d9:64:64:77:33:a1:22:ad:e9:
9d:66:b9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:09:39 2026 by rpki-client