
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json)
Hash identifier: HR/1AK/v52Mxp9N7QrcJBvqb3/Pjq2mDZCDNFeu3QXo=
Subject key identifier: FB:20:FF:AF:B6:70:B5:0A:74:3B:1F:11:6B:FD:D7:E0:06:09:EF:4F
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial: 019EB9587F0B63C9A8FC8FC1F7263A508EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
Manifest number: 1966
Signing time: Fri 12 Jun 2026 01:00:45 +0000
Manifest this update: Fri 12 Jun 2026 01:00:45 +0000
Manifest next update: Sat 13 Jun 2026 01:00:45 +0000
Files and hashes: 1: 3Wnyz1QTSGCfnbdCaxBn0wvUFQE.roa (hash: 2t4MdegjvS7rP/iU7Hj7aColKHs5vThbvVnxW3FHn4E=)
2: 7Me5WXJix6bhmJacUAumrmlySgk.roa (hash: YrS81rUpK2c6Zib9l6JvC9RAlucS71SZij2OkYz09Wc=)
3: E_JIFXCdpHTYansz7Uag7XJbSgA.roa (hash: vrXsyINww9wzdu3W3f7WUvYM3ATh6Z+TuuA6xY/MZdM=)
4: ItZWQRkmls0VdU1nZishuLkd2eA.roa (hash: MAZ2gdn6yEjn53jWafviOI61qsnSQITSXZRf/tbFFMA=)
5: Rf1IRr7ln3MYijmbQD8SHel_MDs.roa (hash: +BoNoFKi0FqndtLU0znTacn8SBNepPAZnhdtF4/C/xc=)
6: b05E_Vve2D3HEly9RuClmeKIrnc.roa (hash: jAiLiRN3aJpdKIHHJepD10dCfO/MTNxTxutiEjOu3JM=)
7: hRvNf4cAxilQC-NZ8WqkxMmFzZw.roa (hash: aS2aTaLKTapOqcPpZtmi37UtMDJpwWKs703ZEIp9zRU=)
8: liK1oYSYzTAoS7kAatnii2Wzx_E.roa (hash: gb2CbqJOVrEPYPGiLKPKwSB2WKz26ugg+uzkt83v7JE=)
9: sr7WacAmmZWiXvAsDGzYF2vtdAU.roa (hash: w9eNa2MvhIGo2u1BISjxj71+HEaSC/goxWqp1PF6zLU=)
10: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: 2pwkFSSK28hVPUWAA5iy9BCJXn+n3j0v+afanZAiEmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:7f:0b:63:c9:a8:fc:8f:c1:f7:26:3a:50:8e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Validity
Not Before: Jun 12 01:00:45 2026 GMT
Not After : Jun 13 01:00:45 2026 GMT
Subject: CN=fb20ffafb670b50a743b1f116bfdd7e00609ef4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:27:c8:84:31:3c:95:1e:0a:b0:d9:45:15:
ee:80:eb:fb:3f:c0:b6:5e:53:cb:c6:71:cb:e4:b5:
de:48:32:d0:40:53:17:69:47:37:10:09:3a:d3:53:
38:16:f9:15:0f:99:d7:71:32:d0:b6:49:c1:d0:4d:
cd:8c:36:ce:e9:d7:bf:46:d4:30:34:59:05:e1:89:
8e:43:29:ff:6e:a5:c2:f6:f4:f5:f7:db:5b:47:5f:
b0:8d:49:49:b0:e2:c2:34:5a:43:26:01:ab:8a:d2:
0b:80:bd:09:e5:df:b1:a8:89:88:54:da:97:0a:43:
31:1a:7f:8f:98:2f:98:94:fe:0d:67:3d:bd:69:60:
a9:6c:6c:15:45:51:41:f2:cc:43:28:e4:06:7e:51:
92:6a:82:d7:b5:81:e4:88:27:8b:ed:5d:30:7a:32:
f1:0d:56:5e:ec:a0:d0:11:69:46:7f:d2:97:c7:a1:
21:16:0c:d0:10:ba:59:74:68:0c:b3:73:40:47:94:
95:49:6b:b3:0b:50:76:fb:c2:c7:c5:c1:fe:a2:f2:
48:b7:d0:b1:00:1a:01:06:9b:c7:c0:47:8b:8f:d8:
d8:d8:a6:12:f0:72:54:8f:02:1b:6e:13:f9:6c:25:
88:57:6b:d0:d7:2b:2a:b6:c5:06:1b:83:84:0f:d8:
c4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:20:FF:AF:B6:70:B5:0A:74:3B:1F:11:6B:FD:D7:E0:06:09:EF:4F
X509v3 Authority Key Identifier:
keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ae:46:0a:0e:75:13:ac:b8:06:bb:2e:15:d8:87:0f:cd:19:
ef:7b:2f:32:7d:fc:3a:84:4f:6e:11:c5:e9:a2:ce:ad:66:ca:
d0:30:de:43:7a:b6:62:07:e3:10:ac:b1:8f:57:0f:4a:a1:46:
df:c1:57:8f:0b:56:1c:98:45:1f:3a:31:e2:9f:00:47:09:16:
f7:b8:2a:3e:61:c5:12:8c:eb:99:90:5d:ab:48:2b:28:00:86:
2a:e4:b8:66:6b:71:67:5a:65:00:54:f1:6d:50:3f:d9:20:59:
ce:b0:2f:7d:5d:78:e2:0e:61:34:6b:eb:d3:10:43:8b:14:c6:
61:1b:c6:f6:75:07:3d:b3:32:6f:4d:58:f2:11:b1:55:4c:9e:
2b:14:2d:f1:0b:0e:bd:23:3e:12:33:51:75:5a:12:e6:7d:c7:
16:24:8e:d0:98:21:31:4d:5f:26:27:2c:48:f2:3b:a5:38:6a:
2f:94:ab:67:b4:d3:a0:76:fe:c4:7c:96:f3:c4:09:ae:e6:ea:
ed:ef:14:b8:ad:e8:c1:85:85:87:f2:14:55:42:29:96:e2:56:
14:6c:5e:00:0c:09:4e:5a:80:f8:21:74:c7:e6:26:0f:4c:f0:
6b:dc:0e:b9:13:1e:13:f9:d8:03:c5:29:1a:8b:9d:0b:41:7c:
53:c6:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:54:16 2026 by rpki-client