
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
File: Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json)
Hash identifier: DzRJ4vPCBPSdLqK4C5xoXikkIGNJIECiVDL8TEPgHQw=
Subject key identifier: 77:00:AE:E6:53:45:B5:2E:9C:9D:3E:64:B7:7F:71:32:E8:DC:B3:06
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019E9AE07DAE2ABEF8BE7C8ACEB29BEAC3D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
Manifest number: 0CAC
Signing time: Sat 06 Jun 2026 03:01:03 +0000
Manifest this update: Sat 06 Jun 2026 03:01:03 +0000
Manifest next update: Sun 07 Jun 2026 03:01:03 +0000
Files and hashes: 1: 0op4kBn3nhJDS2c-3qkz2b-MpN8.roa (hash: p0a4okV6J9l4+O2oGkvx7QwdvUvDDySRezt3gBKNWXg=)
2: 1vbf4idXUPCWVm0PjanUNDzo3LM.roa (hash: /Im6rBlfP/hqnXVPz/7A/iNYH4vUpjF3xS/bQj/oQ5Q=)
3: 2KGI0ncnRfDhkkE_GeDt4kg9A6A.roa (hash: D03oFEIOCPyMTFkWyGOuVN6dyHDgUfDh2sP45/yVk0M=)
4: 99pLW5NSdSWyy1K_KuBziUqycLU.roa (hash: iIMALiQte4M3j2/lLwOQNkJ4eCV7WxTe0kTN8g67L1E=)
5: BVH6b7o32zruo819dGQ7RJqUDl8.roa (hash: xnWOB/u8pFkczKp6SQPwHh+agMf57JcMqkeEhSQno3k=)
6: CFRA8brf5sE4J0Vi_mv81svugxI.roa (hash: uvljp7f/z0E6aDzdRUCbiXg1uxB0BXMPXZAh/OfcnR8=)
7: GDpxYSLxVItp_NOPYubGX5UYZok.roa (hash: VWyhjhW15PBvlxYZCfYoqEw7FI0WMEXJbvw8jcCf0xQ=)
8: O95FYcJt2MJqQBJC_AIOSexxhY0.roa (hash: 0fj+Bm1xvWakTGbe1RmNsauUNwiHSCe1QzuuMJQvQKI=)
9: R2Xs7XqXEclO85JXT59oGHv2UUY.roa (hash: nIFGF9nru9tSwOgFOZOY266TEUqFgtMmSxtUiekx1us=)
10: SRu3Oj_JR0Aqw1_pXOqCkyqZiNM.roa (hash: OXGfPj6oOrbejLX45mK4NILgwBe4FcCaUI2RA3UNsvQ=)
11: UGOdZFnWOaDTUW1gBJTVRUvwwsg.roa (hash: 31f0c90jHRTJFbEadEWirIAL83TgIDaQVunpcdqq/Lc=)
12: WBXZwfjVQMhyPd0wAfSbxYfJifA.roa (hash: 7Zi1rF/rVFpFWu59NAjvAspfxDVu7Q9niDEtiwGb2YM=)
13: YnEzVxxydocNJgTIMFRXPna0zB4.roa (hash: ZgavJWzGoXn3e/0BfVR/irboVRcmVNTc0rTuF6DBaG8=)
14: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: DN1RGD3+ntXzgjkarkAop/3vmrBZZZEkdpVhR+6u2co=)
15: fja8EDLSj-GXWp-ja1-kSk00taQ.roa (hash: fV9XPVZHv5y/fbzPwaa+4kN4atFK0nZgUPlx8b1imXU=)
16: gsmCnA76vdhDq9dif9c47tNoCP0.roa (hash: o88w+8Cu4eCNZRdY8N1qV0mPGf5pJuEUO6irzSThghA=)
17: qUJVzkvCS28CT-LmqvhYZclQCzE.roa (hash: BntXpT1OhjVzTBdajvz/YjJOLIAqWeZhu5LfIQJSn34=)
18: ulmVQiOp1gOs49EtEkyImPsqtd0.roa (hash: f351U+o3k5FK4942+J3BTuz1lhxg1e9CRMaV4iDlrp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:e0:7d:ae:2a:be:f8:be:7c:8a:ce:b2:9b:ea:c3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jun 6 03:01:03 2026 GMT
Not After : Jun 7 03:01:03 2026 GMT
Subject: CN=7700aee65345b52e9c9d3e64b77f7132e8dcb306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:5a:22:31:11:8d:80:4e:f0:de:0f:fd:0f:
3e:6e:da:50:47:89:ec:1d:70:bf:e6:a6:49:c4:52:
72:1b:57:03:59:d0:d7:32:22:80:81:cd:01:a7:e9:
f7:97:c9:f8:32:25:52:61:25:55:10:53:af:86:54:
52:8e:f4:23:4a:50:7c:81:71:9c:c3:dd:e6:1e:a2:
2c:43:d2:b6:7f:16:65:d7:7c:57:3e:64:1d:4c:fa:
a0:49:10:7e:63:ea:39:e3:4c:8c:96:2c:01:49:59:
ce:63:3e:e3:26:86:9d:4e:27:b9:f9:b1:04:bd:17:
bb:30:6a:28:04:2d:19:51:0f:e6:c8:70:6d:af:55:
93:e5:b8:82:fc:01:26:a3:ab:6c:a0:fd:d6:1e:56:
55:b3:63:57:7b:89:91:69:91:f4:ee:f2:9c:24:5f:
17:c1:b2:6b:9b:85:35:04:6b:3f:98:71:12:8e:64:
cf:7a:e6:1c:8b:55:c9:d8:b3:55:a1:fb:59:61:fb:
c3:4b:de:c2:d3:31:a3:15:43:6b:29:e0:3c:01:8f:
8e:68:18:4c:f9:c0:ba:94:da:d9:0b:19:5f:b2:0b:
b8:65:30:48:4f:ca:78:bf:b7:35:36:8b:5e:6f:be:
8d:07:6e:ba:a3:e4:b9:a8:ff:2b:38:ed:f5:41:ab:
c6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:00:AE:E6:53:45:B5:2E:9C:9D:3E:64:B7:7F:71:32:E8:DC:B3:06
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d8:82:62:17:a5:1d:02:0f:68:9f:f3:3d:04:31:80:b6:0b:
9c:5d:a8:71:0e:9a:cf:11:9c:53:3d:18:b2:d3:90:a1:3c:6a:
5d:12:da:42:17:cd:7e:91:61:ea:f8:0e:44:11:b4:2c:70:35:
30:07:44:65:4b:cc:4c:16:3b:f9:59:52:44:ec:9e:a2:da:f0:
9e:0f:64:4a:94:32:d7:d2:2d:65:49:cc:8e:71:ff:62:ac:60:
f5:c2:4d:98:d4:d1:01:13:39:5f:cf:2f:45:45:86:04:9e:d5:
ed:0c:27:fd:72:1d:53:4f:93:12:3d:d1:8c:a2:eb:09:a5:9a:
48:24:84:4c:00:99:c7:e6:ad:e8:17:c6:63:53:f2:db:f5:51:
b6:35:01:e6:c4:d3:68:b7:9a:f2:0d:22:2e:81:98:19:bf:74:
09:76:ac:f0:6e:87:59:72:93:79:b5:09:de:c4:30:08:8e:52:
80:d7:a5:af:4a:aa:a2:ce:84:5f:a3:7c:5e:75:52:46:dd:6d:
f0:37:6f:e9:73:1a:82:f1:bc:aa:a3:8a:25:96:15:6b:76:a9:
25:1f:9b:f1:55:b2:a0:5c:c7:32:d5:74:90:2b:0a:68:13:44:
a1:b1:b0:a0:3d:78:b6:54:77:9e:ce:0d:fa:9d:9c:0d:01:50:
f1:38:39:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:20:58 2026 by rpki-client