
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
File: IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json)
Hash identifier: TO4wIpjbBlSeS8rBUlBfE9AyuSysdTvhIObBfJwC2iY=
Subject key identifier: 48:28:A6:71:38:25:DE:70:B3:4F:53:89:6B:BC:8A:56:62:3E:AB:71
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 019EB7D79EC1CA25FC563F1F74E2DF2A4D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
Manifest number: 1980
Signing time: Thu 11 Jun 2026 18:00:21 +0000
Manifest this update: Thu 11 Jun 2026 18:00:21 +0000
Manifest next update: Fri 12 Jun 2026 18:00:21 +0000
Files and hashes: 1: 1-kUP60QrhWAtAgy7hcGLRqDMZs0.roa (hash: Fu35/+YQg8Zu+dlavAtKg8JaD90oFzzH1onpdQ5Y6oY=)
2: 6Ov23BLHXZEo_g6Qvsh9lD8PAKA.roa (hash: 8GvbG6s3RPwfopIs9XgARrrF1rjC6XY19ETpAszLP8I=)
3: 9j9Cr3fnwmgjqkXx14urDbJasp0.roa (hash: KW0VD6lDdNbgIp4ZsL2MGrtyxm+1LW6cNcgokA6BqI8=)
4: D97R0f6wcJeezq7lLgqmu7BA_nc.roa (hash: A+f6qmQCetOSAsJLLeyROkHkp5iv9hWhVN2aKLzqLTE=)
5: FsC7j1ZnW9fvd_MhLsMo0F5wiDM.roa (hash: htFUuvTJdlK2gOgKs0gKKqW+9jnUAHhAceSH0KAekak=)
6: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: WjyEopLECMMvdvKQOPjp3RkteYNarlT6SiQMkRKWp18=)
7: K7e0_WclzsRxbDgQl0m2GyC0awM.roa (hash: vQbkQa9JX2Q86b4F0AezEHB0GMnTiQRSgXLPAgphUxE=)
8: LL4asLDw3271RX0UzOrcd8UQePQ.roa (hash: g9EWeVbWKxalUxSKi4YGS0KlwOF+b+mjphC2cg6OVVo=)
9: M2737Kt-OKT4cwZg4viZL0ezWHk.roa (hash: Xgsds8L8YcUZbYe9UXVPzU1lKNJSTQTeXad2hhRxl9I=)
10: MBkrOOhdhon2PhUZJgtjDAd8tOU.roa (hash: hW4AmvxmksvcWmVBpumWyTnm5KximR6PbhMb2CKistg=)
11: N3UnlwMOiCPor8fOEr__gAYIrSM.roa (hash: x/pwXlflb9SsnKG7wuuULMx75zKgSUqP9QAnUFoqRhs=)
12: NipgiA7nWo95KVHsFSO0BGsePIE.roa (hash: G+j2PLZUQhdVgxq/HyRkEd9NcDIecek/OBFAXQhHzkc=)
13: O7FrqaG5VsQ5KFOKmcfOEc5P57g.roa (hash: HTqDYC1nRE3LkJmUy9M4M3I587kOWgHXriuwbMluE8E=)
14: RipkiCpTN4mFL2FF9zHdpp9YCjk.roa (hash: OnPLwFbKkZSd7QY8QBHcfUOy4okcvY1rfsmoZKGmWi8=)
15: T1F3qk8LhawCDk9nTAf4naoGRg8.roa (hash: aQgPYoClwrq8NkswlVpVaf501J/wYiiEJsgo08XzB5k=)
16: Toi74ngMk8iMkETT7QmeelInLio.roa (hash: cdnyZv5QV1TwjMBRgbJCcQqcC2938hSblX1iGXnlsPg=)
17: W522yPrkm1ETf534dyGiRFmcWcU.roa (hash: ciBX1xa4glvJ/scnztG/cwNIztp6J0jz4XLKjig6bnM=)
18: YFhff6PieA-0R_-D6roOZogSJYw.roa (hash: uq54FImU4X4n4Q5wAXCqz42QpkCkIhO0GgHxJfUTPP8=)
19: aKfQ-5lMgYP0JI0A9n1qEYkxhDQ.roa (hash: r2Wo2GFq531NFIKM8VlPd5aTqIW84E3DIi1eqRZI5bQ=)
20: aPlZnQWtj-q04HWeqXabAKMT6h4.roa (hash: qMB7kiStIsp5/ItJSnoaHMSnB7QpqZcmeaPW1lPudSI=)
21: b3x9MgXvL3PTr4don27jJ7KcZ-U.roa (hash: og0sUIx4pVJgJgZExjSAsHZvgWsvBSypO6sOjz57nD0=)
22: cFL1EJyYNzSFvISJnQuX3ZkUY7U.roa (hash: wujKocfHMBpZH00dc6pNcl9yD87nGXF+SDw9jaWJwcU=)
23: fmNBy9Cj0U-HEAkPtnbUg0eIT-A.roa (hash: Qirqc0W+Lqc03wM+xcAN53u2usp9+4O2S+/ddNQhy1w=)
24: kxJnezzNDEUiqIwrMrS9hJJJeag.roa (hash: zz7Ieb04C6jhC5Jd17Xzul9nQQzF2s391XrM6eqtYg8=)
25: lyUxPH3p1gyRR8v9TM54AekVNQY.roa (hash: P4j9D2TQV05hcP6DYizsgQ0f8usXVytikc5NgAea7u8=)
26: oy3fD75BcrDNS6I3ezq0y8VLuRQ.roa (hash: oHOFp9TL81c7KtMVFWQ9DGRuGttBJhr1ayJ1ZSxs8Lw=)
27: p9QObIf1OeGL35dA6XPq_krw2hU.roa (hash: j+Grnpqo/obd2JzfzoB1ui5FPqoBL910Sxe8EfKjVvM=)
28: rSklrKM9yUBRtmcTZ3JrpV-pbF8.roa (hash: IeInj6Ips0Ggz3WNulyuE5o9Jct1XuzppTnW6FpL1E0=)
29: sv5SB3k_6Vm6Bm0wKrn2MBynhrM.roa (hash: opJzNV6FEUtzmIuV3nD2tt4j7hDOk/PqNpj2ykTZfgU=)
30: xc_O8fJNKB9MZ99docy925NUS6M.roa (hash: YAI+l3E+qbq82kgBXviylGXScO5+u/jTMIel+5Z3CL0=)
31: xzpWx6VUIpGcmh-1iUpPlYZppMU.roa (hash: UNWYOyMIvw/ynQuOswCka5zDXJh3HAZAPdJ+HWke4dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:9e:c1:ca:25:fc:56:3f:1f:74:e2:df:2a:4d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jun 11 18:00:21 2026 GMT
Not After : Jun 12 18:00:21 2026 GMT
Subject: CN=4828a6713825de70b34f53896bbc8a56623eab71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:da:09:bb:b5:e1:14:d4:5b:56:13:c5:83:
de:f4:e3:38:df:6e:c4:24:14:f3:fc:f5:59:69:78:
72:95:65:14:7a:38:64:fa:f7:1e:87:56:db:ec:fa:
91:64:a2:3f:e9:ee:ed:f6:6c:7e:44:5f:f0:af:e2:
7e:09:62:7f:ba:08:7e:18:4b:92:26:73:da:1d:dc:
c5:71:f8:c6:8e:b7:be:58:dc:e3:08:74:01:57:f5:
e3:5b:4e:c0:fb:97:00:17:41:b9:c3:7c:80:62:fd:
25:9c:6e:f4:bb:47:74:90:9e:55:c3:6e:e8:66:e9:
0e:c6:d7:56:07:51:44:25:13:a0:f9:63:7a:bb:27:
07:32:37:2c:57:81:1d:1b:24:07:54:5a:2a:ab:a3:
96:08:ae:2e:dd:63:9a:4b:02:ef:7b:d3:eb:fa:c1:
c3:63:33:c5:90:85:06:54:32:d5:18:67:60:9a:5d:
f2:ed:e7:94:bd:29:f5:d6:66:10:eb:65:e3:f8:e2:
97:9d:ae:c1:ed:0b:6b:6e:70:4a:73:52:76:ab:2a:
ec:e8:19:41:54:2b:f0:75:12:10:cd:ca:aa:40:5b:
ad:bd:cc:b8:58:eb:b1:1e:09:c6:27:7a:2b:16:02:
69:df:cc:d9:76:92:90:19:9d:a5:47:9d:23:38:b1:
bf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:28:A6:71:38:25:DE:70:B3:4F:53:89:6B:BC:8A:56:62:3E:AB:71
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6c:d7:02:26:3e:2d:6b:20:e9:8d:8b:a2:3a:37:5f:7d:35:
86:a8:37:69:af:41:49:7e:f7:0d:48:5e:b8:6f:47:f4:22:91:
3b:9d:e9:d1:a8:6b:a2:d4:0c:3d:71:7a:1d:27:18:92:a3:48:
1a:31:03:72:43:67:f7:2d:a4:15:6f:8d:5b:c7:c1:5d:0e:e2:
0e:9a:e1:f4:38:7d:96:4b:d5:09:57:76:a8:73:97:c3:ad:90:
c4:8d:c1:f7:b8:08:51:fa:d5:43:15:72:f6:ff:b5:16:97:06:
07:ea:85:72:3e:69:28:e5:6a:ae:57:8a:c4:08:8b:af:36:20:
69:c8:ff:97:91:4a:17:36:b7:1e:2f:56:b3:96:c8:00:5e:d1:
69:6a:96:bf:89:e6:ff:fc:3f:30:87:75:ed:80:09:05:d1:e9:
f9:a6:1f:0c:79:9a:61:5a:a3:c7:77:06:ae:26:16:76:37:d9:
24:01:a7:ac:8e:7f:69:ca:87:78:dc:ee:68:2d:2e:95:b6:78:
5f:34:26:42:41:40:5c:37:7a:8f:17:77:1c:1f:35:46:6c:58:
05:23:39:62:45:74:f8:39:b9:86:b4:9e:d2:d5:cc:e7:1e:f2:
01:44:be:23:9d:66:80:9a:1a:70:b3:bd:8f:57:7b:32:72:3a:
fb:85:58:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:52:28 2026 by rpki-client