
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
File: 6AHyPOghwmTWdydTbsGDU3WUxfI.mft (raw, json)
Hash identifier: rlryHKujSjMUIsHHh3m6x0CyGghuirv1m5/NbJ/8P10=
Subject key identifier: 7C:FB:BF:4F:C0:80:A2:11:84:85:97:B4:0C:D1:70:DC:5D:22:6E:A0
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 019F17C2E8E11AEA7CC1C589438B062BDC45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
Manifest number: 1992
Signing time: Tue 30 Jun 2026 09:01:17 +0000
Manifest this update: Tue 30 Jun 2026 09:01:17 +0000
Manifest next update: Wed 01 Jul 2026 09:01:17 +0000
Files and hashes: 1: 4Ad95JRvdeXEOh1-p8DSYxoEeas.roa (hash: Lh5iJPxcP6pYOkGhzgCKScjKfILFOR4uaZhpWxHfUC8=)
2: 6AHyPOghwmTWdydTbsGDU3WUxfI.crl (hash: Zcc69ppIaiJ8LRhF0GA6GmVaRPe7o54K3VSIKKf5VZc=)
3: AHUKnErfTdd73p4bYOK90XDEM78.roa (hash: 5EaqsItxZ1BQsHU9Kr2YPy6oSupY2lc793z7PhSn48k=)
4: AbY1YkxSFpgyQmaox0DTvnAaAZQ.roa (hash: Pa1IL9mamM/yk2/roqlTQznqixyuJZ5qqNij4nNn7EU=)
5: FU6qfDeRGLTUUYPJh9COMZcbYuQ.roa (hash: TB+QrpXIIEHGgswGPR+KyYTjrwKORb9/h3q/s08f8O0=)
6: GXUGbRUgHF_wrrQsRndE_u1ZPF0.roa (hash: iTsepqpyUm1VVT1XwxzGIWO+pPFlI7X8SSW23YloZhc=)
7: Iu4tkvX9eFepODgJW-D4xKTDxjg.roa (hash: tI+pzuy6NJ/herD8mWytW/brnOXFysFlcBWfh+iy2gQ=)
8: MQ91-_M3HdTKmtUzGxeTt_hx0bY.roa (hash: kaHa7BtTHpBWORAytG3D7pjT5GuCQBg9FTm80u8Ki/o=)
9: PebWzmmguc5-4aQZe_HKUETdWLE.roa (hash: TQfr6FtdSj9u4LPbpAXmyw42DJTb7tOsjyKKAu7N3CI=)
10: Ps9C6gUFgHi7aaKL-5LqKG1lRNk.roa (hash: r74jkZOlx1JZBy0H3IDqp9qZgEG3W+yD8/XxGtvJxmk=)
11: XGfCqgFXc4zN3NEcVdkR_AbqEZY.roa (hash: vrm/Xdu7IdXpfwhj+3D9vsHsNrXWechY8Kxx0iPqPOM=)
12: ZBh08H6VA6CHko16OZIamGu1xf8.roa (hash: k9NrPgoQfkYKCXaBLD0TbREzH8yEwImKG9PJRAocjEM=)
13: aDenCe1KG3TyvEfzC3K0RLYBIo8.roa (hash: O79f1hU9h1ztutsgUtFAtX9An++mnwkM5DagmosPmKk=)
14: bvnYLjO4XnZpQwlp4A4LeramkVU.roa (hash: m98GrPDwOLEJ7ds6AJ3l5MrgQAx4G25F8NpI1kHjfRY=)
15: mFqx7FR9CXpnw3kdZUPrFGbJD1Y.roa (hash: /sd6E/lm/3IAT+F+ugKfMXjWXgoBW3+GutVYmu82Uk0=)
16: mP2GOcaU1PjclhV4W2iGXN0sBnY.roa (hash: AXKGTP6zGRcR7DI8dH98N4TRJhL4YCD6kauJs0pK9YI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:e8:e1:1a:ea:7c:c1:c5:89:43:8b:06:2b:dc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jun 30 09:01:17 2026 GMT
Not After : Jul 1 09:01:17 2026 GMT
Subject: CN=7cfbbf4fc080a211848597b40cd170dc5d226ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:6a:8f:b6:10:d1:40:ca:1c:cb:01:e2:1e:
c2:18:16:27:3e:df:84:fa:b7:ba:64:ef:05:0a:d0:
8d:bb:3e:59:46:69:58:f4:9d:e1:5e:12:9d:43:ca:
43:15:f1:18:e5:aa:f9:1d:cb:ec:be:9e:46:85:fa:
0c:2b:89:a5:4b:5e:31:1d:ef:68:8d:65:e2:fd:fb:
bc:89:09:e0:df:3b:1e:08:52:45:74:cd:57:d7:7e:
c7:38:fd:06:1b:8e:24:04:56:e3:55:06:08:9d:b5:
a0:49:7a:61:a4:f5:27:a2:2f:c1:11:43:74:3d:7d:
ca:db:76:a5:19:f1:8d:68:e6:3c:3e:77:c6:5d:08:
1f:4f:89:56:15:99:22:80:a3:14:14:68:6c:d2:2d:
ba:b1:c2:23:51:46:46:15:c2:c7:4c:54:ee:64:dd:
c7:01:e3:fc:6e:e9:e4:ab:db:97:9e:71:34:5e:aa:
2e:1b:f7:11:f5:af:fa:07:ca:cf:d8:dd:4f:7a:25:
79:c5:e8:fa:1e:64:89:a2:58:f1:e2:db:70:9c:ca:
55:44:c7:02:5e:4b:2d:7c:d4:dd:4f:fc:80:53:7c:
93:cb:6d:16:e5:cc:ef:22:3c:0d:ad:d2:3b:ab:9f:
c1:41:3d:be:31:f1:66:a2:bc:82:5c:86:3d:43:32:
bf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FB:BF:4F:C0:80:A2:11:84:85:97:B4:0C:D1:70:DC:5D:22:6E:A0
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b2:4c:8b:9e:08:96:ab:05:5f:d7:28:b8:0e:b2:ab:75:91:
e6:5f:da:12:1f:13:75:76:90:b8:24:db:dd:3f:6f:f5:a4:9a:
cd:61:cd:6e:ba:0d:e4:f4:69:9c:9d:e7:44:51:9e:58:05:8c:
b5:09:59:82:f2:06:30:ea:7d:1c:ea:66:1c:2d:b3:10:a7:1e:
74:28:c6:f4:1e:e0:7d:7e:74:12:92:09:77:2b:78:cb:6d:6b:
49:3a:29:c7:90:c7:67:0c:47:35:6a:2b:f5:2f:50:34:69:26:
de:f9:51:55:a3:a0:9e:39:9b:47:35:f3:f3:68:b4:0a:be:c6:
ec:64:3d:03:a9:47:cf:1f:ba:65:13:07:11:5a:a6:08:4b:d2:
30:82:62:08:51:17:1b:e6:d2:1a:5f:df:aa:03:95:b6:e9:83:
43:3d:47:53:c2:35:cc:06:fb:e6:50:44:b4:70:48:b0:e0:3f:
08:30:01:16:ee:dd:0e:77:0b:dc:09:fc:9f:3b:a2:f8:c4:f3:
9d:e9:d2:ab:a5:ed:2b:e1:36:37:d4:bf:95:29:de:bd:72:49:
6d:b7:14:8e:52:46:b0:84:9c:80:20:3d:02:5b:3a:c9:2b:f4:
b8:f4:20:85:7d:0c:3f:d7:03:d3:95:2a:a2:46:ca:eb:3d:4f:
89:da:c6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:40 2026 by rpki-client