
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
File: IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json)
Hash identifier: /l1ue1cf5N8h8mM1fq1PFLBV9dq7tFiISHrn/f5dWFU=
Subject key identifier: 1E:8F:A7:41:86:FE:F4:8B:37:85:45:15:FF:DD:96:6B:DF:29:D5:BD
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 019FA14DA960EBABA72C7CA3926E6865C40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
Manifest number: 19F9
Signing time: Mon 27 Jul 2026 02:00:49 +0000
Manifest this update: Mon 27 Jul 2026 02:00:49 +0000
Manifest next update: Tue 28 Jul 2026 02:00:49 +0000
Files and hashes: 1: 1-kUP60QrhWAtAgy7hcGLRqDMZs0.roa (hash: Fu35/+YQg8Zu+dlavAtKg8JaD90oFzzH1onpdQ5Y6oY=)
2: 6Ov23BLHXZEo_g6Qvsh9lD8PAKA.roa (hash: 8GvbG6s3RPwfopIs9XgARrrF1rjC6XY19ETpAszLP8I=)
3: 9j9Cr3fnwmgjqkXx14urDbJasp0.roa (hash: KW0VD6lDdNbgIp4ZsL2MGrtyxm+1LW6cNcgokA6BqI8=)
4: D97R0f6wcJeezq7lLgqmu7BA_nc.roa (hash: A+f6qmQCetOSAsJLLeyROkHkp5iv9hWhVN2aKLzqLTE=)
5: FsC7j1ZnW9fvd_MhLsMo0F5wiDM.roa (hash: htFUuvTJdlK2gOgKs0gKKqW+9jnUAHhAceSH0KAekak=)
6: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: TODNp4ipGPapQwfFETTzWvmd9IE5ymwSylifox6nFJ0=)
7: K7e0_WclzsRxbDgQl0m2GyC0awM.roa (hash: vQbkQa9JX2Q86b4F0AezEHB0GMnTiQRSgXLPAgphUxE=)
8: LL4asLDw3271RX0UzOrcd8UQePQ.roa (hash: g9EWeVbWKxalUxSKi4YGS0KlwOF+b+mjphC2cg6OVVo=)
9: M2737Kt-OKT4cwZg4viZL0ezWHk.roa (hash: Xgsds8L8YcUZbYe9UXVPzU1lKNJSTQTeXad2hhRxl9I=)
10: MBkrOOhdhon2PhUZJgtjDAd8tOU.roa (hash: hW4AmvxmksvcWmVBpumWyTnm5KximR6PbhMb2CKistg=)
11: N3UnlwMOiCPor8fOEr__gAYIrSM.roa (hash: x/pwXlflb9SsnKG7wuuULMx75zKgSUqP9QAnUFoqRhs=)
12: NipgiA7nWo95KVHsFSO0BGsePIE.roa (hash: G+j2PLZUQhdVgxq/HyRkEd9NcDIecek/OBFAXQhHzkc=)
13: O7FrqaG5VsQ5KFOKmcfOEc5P57g.roa (hash: HTqDYC1nRE3LkJmUy9M4M3I587kOWgHXriuwbMluE8E=)
14: RipkiCpTN4mFL2FF9zHdpp9YCjk.roa (hash: OnPLwFbKkZSd7QY8QBHcfUOy4okcvY1rfsmoZKGmWi8=)
15: T1F3qk8LhawCDk9nTAf4naoGRg8.roa (hash: aQgPYoClwrq8NkswlVpVaf501J/wYiiEJsgo08XzB5k=)
16: Toi74ngMk8iMkETT7QmeelInLio.roa (hash: cdnyZv5QV1TwjMBRgbJCcQqcC2938hSblX1iGXnlsPg=)
17: W522yPrkm1ETf534dyGiRFmcWcU.roa (hash: ciBX1xa4glvJ/scnztG/cwNIztp6J0jz4XLKjig6bnM=)
18: YFhff6PieA-0R_-D6roOZogSJYw.roa (hash: uq54FImU4X4n4Q5wAXCqz42QpkCkIhO0GgHxJfUTPP8=)
19: aKfQ-5lMgYP0JI0A9n1qEYkxhDQ.roa (hash: r2Wo2GFq531NFIKM8VlPd5aTqIW84E3DIi1eqRZI5bQ=)
20: aPlZnQWtj-q04HWeqXabAKMT6h4.roa (hash: qMB7kiStIsp5/ItJSnoaHMSnB7QpqZcmeaPW1lPudSI=)
21: b3x9MgXvL3PTr4don27jJ7KcZ-U.roa (hash: og0sUIx4pVJgJgZExjSAsHZvgWsvBSypO6sOjz57nD0=)
22: cFL1EJyYNzSFvISJnQuX3ZkUY7U.roa (hash: wujKocfHMBpZH00dc6pNcl9yD87nGXF+SDw9jaWJwcU=)
23: fmNBy9Cj0U-HEAkPtnbUg0eIT-A.roa (hash: Qirqc0W+Lqc03wM+xcAN53u2usp9+4O2S+/ddNQhy1w=)
24: imL0Bv9oNo72HfaP6hi7wxQ6gP4.roa (hash: khbN/ig9hlglazApKQX+gYGTDa2dWuU+YgpXL3Ov0Cg=)
25: kxJnezzNDEUiqIwrMrS9hJJJeag.roa (hash: zz7Ieb04C6jhC5Jd17Xzul9nQQzF2s391XrM6eqtYg8=)
26: lyUxPH3p1gyRR8v9TM54AekVNQY.roa (hash: P4j9D2TQV05hcP6DYizsgQ0f8usXVytikc5NgAea7u8=)
27: oy3fD75BcrDNS6I3ezq0y8VLuRQ.roa (hash: oHOFp9TL81c7KtMVFWQ9DGRuGttBJhr1ayJ1ZSxs8Lw=)
28: p9QObIf1OeGL35dA6XPq_krw2hU.roa (hash: j+Grnpqo/obd2JzfzoB1ui5FPqoBL910Sxe8EfKjVvM=)
29: rSklrKM9yUBRtmcTZ3JrpV-pbF8.roa (hash: IeInj6Ips0Ggz3WNulyuE5o9Jct1XuzppTnW6FpL1E0=)
30: sv5SB3k_6Vm6Bm0wKrn2MBynhrM.roa (hash: opJzNV6FEUtzmIuV3nD2tt4j7hDOk/PqNpj2ykTZfgU=)
31: xc_O8fJNKB9MZ99docy925NUS6M.roa (hash: YAI+l3E+qbq82kgBXviylGXScO5+u/jTMIel+5Z3CL0=)
32: xzpWx6VUIpGcmh-1iUpPlYZppMU.roa (hash: UNWYOyMIvw/ynQuOswCka5zDXJh3HAZAPdJ+HWke4dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:a9:60:eb:ab:a7:2c:7c:a3:92:6e:68:65:c4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jul 27 02:00:49 2026 GMT
Not After : Jul 28 02:00:49 2026 GMT
Subject: CN=1e8fa74186fef48b37854515ffdd966bdf29d5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dd:7f:eb:29:cc:cb:cc:32:59:84:ad:47:ac:
1f:4d:80:86:7a:cf:65:cf:f0:43:01:2e:a7:41:d2:
73:4b:aa:3e:56:62:39:0c:89:9e:34:ba:87:f0:e7:
b1:78:7e:81:1c:72:39:5c:51:90:18:85:ad:af:01:
4a:dc:ec:e4:9f:ba:d6:ef:36:c9:b7:62:7a:87:ae:
d4:58:c4:da:11:55:4f:aa:6c:f2:c9:4a:32:56:2e:
3d:f0:0a:e0:a1:4a:4e:d8:d0:ce:a7:41:a7:50:cd:
19:d2:b7:dc:df:59:8b:d8:50:dc:fa:1b:d3:7c:03:
96:3d:d0:ea:99:c6:04:fe:08:b5:a5:a0:60:6d:65:
1f:ee:95:74:d8:39:ce:3b:be:fa:2d:73:29:74:21:
86:b8:37:4e:80:70:a4:63:f4:d3:00:c0:e0:8e:aa:
0b:c6:6b:0a:5a:1a:dc:22:06:10:01:d6:24:7e:24:
d5:14:8a:fa:d5:f9:ff:70:10:7a:cf:18:a9:7b:1d:
6e:e8:4e:bf:bb:8d:5f:e3:48:0f:84:5d:16:cf:40:
b4:ad:91:b9:5f:2e:f2:94:b0:3b:5b:21:ed:cc:4d:
e7:0c:93:ae:e7:80:10:65:83:3d:48:f2:a6:64:56:
7a:c7:1c:96:38:2d:fb:e7:af:b4:01:b7:46:f1:a2:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8F:A7:41:86:FE:F4:8B:37:85:45:15:FF:DD:96:6B:DF:29:D5:BD
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ab:72:73:95:fe:ce:10:2b:23:00:b1:88:a6:5c:2b:3a:72:
29:92:0b:bd:cc:4a:e3:91:b0:22:ba:58:a7:36:99:2c:c1:08:
28:4e:b6:14:7d:73:05:59:eb:7d:75:30:93:09:29:b3:29:eb:
cd:36:7f:08:65:f7:44:16:a8:66:70:16:b0:1a:ce:38:0e:8d:
ff:09:56:31:d9:77:ab:6b:30:6c:c1:f9:b4:24:78:42:d2:64:
bb:30:2e:24:42:30:fd:bf:23:e9:64:d6:5b:1d:9a:db:0b:09:
5d:77:80:83:5d:8f:c4:63:b3:15:fe:ee:91:85:9d:f7:7f:d3:
d0:d9:d4:be:fc:8e:d4:b1:91:dd:1e:46:4d:07:d7:23:e0:13:
ec:e0:f4:88:d3:55:1b:03:9b:a4:bb:e5:59:d9:d2:be:f7:14:
b5:58:f9:4f:aa:95:25:15:74:0d:95:f9:2f:cc:3e:7b:bc:96:
5a:ab:18:5b:9b:cc:de:f4:39:d8:62:40:8b:26:91:5b:b4:5a:
14:d8:04:3b:51:99:95:5e:7f:2a:cb:76:eb:3a:39:7d:7d:eb:
79:4e:b2:1c:26:f0:e0:92:3e:1e:6b:8c:40:f8:0b:29:6e:81:
77:ca:b2:a2:91:68:94:40:44:0e:5a:7f:c5:d4:7a:50:41:ac:
e3:9b:70:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:50:44 2026 by rpki-client