
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json)
Hash identifier: CAm08CXDoycjYVNOe5rHUKQFFaajQJC6zxQROV1OqWI=
Subject key identifier: 0F:BE:8E:81:AD:E2:2A:87:9F:CA:58:FD:AE:D4:7B:60:C9:8B:78:F8
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 019F9E157C0AD50B566851A075C9C600A402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
Manifest number: 158F
Signing time: Sun 26 Jul 2026 11:00:35 +0000
Manifest this update: Sun 26 Jul 2026 11:00:35 +0000
Manifest next update: Mon 27 Jul 2026 11:00:35 +0000
Files and hashes: 1: 1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa (hash: 5WDg7is6i4G67NPbvdAbr5wSujjhW6eqXhKIZJmd/1M=)
2: 6UB2fd80X8NF3hjgXuy_lEnL14k.roa (hash: FwGNu6vnkuFrpQLSRXI1YDdbNMKa0QpgsCze4fDjYDM=)
3: 7tK-Y_2zDn6v9bsNxgC2WC7pK58.roa (hash: cLZskeRMwGxHkUDQXpA7UBDzbVsdE10cl/owbtiDKLo=)
4: NCpae5NUBzzwFjKHO6HKoQsFaNo.roa (hash: T0hKAilYfTHdTNrgXDqwDch+EpqH3yYGNopfwv8HRVI=)
5: NKrF44Cb48ibyskEc0pmLGMwSbQ.roa (hash: /FUxbrj5UG1STIUqFgYzP0jhCRLEmRamnELFeSKbL1M=)
6: _XQtBPNeW_iuy40orAGtRGhMTSk.roa (hash: LAWDSlOuHdvhK5NcbfNOkabxOshrkg3NCFkUAyd9zsY=)
7: aJedP80vMINu1NAowpUIlCicd7A.roa (hash: xNb3NKZjro39aj2cJlh+Qm4X9UDfgL/pDQnE2wrTJ84=)
8: c0DX6GY3TX9xmWCZpKdJEnw99zA.roa (hash: +8IkCXO7va3zumQ/zB3m5nLEyKPvgB/ye9epdlLzV9o=)
9: lsFM17k2ZtwL3Bozkjk-itU6fX8.roa (hash: PyQz7GTqlUWm5GnNRZLXoq3Y3tepCY9boCvSS0rIfDI=)
10: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: OsBSFIw2xDICdhDxzUhe19t0EyFmetdoDWWfCy933D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:15:7c:0a:d5:0b:56:68:51:a0:75:c9:c6:00:a4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Jul 26 11:00:35 2026 GMT
Not After : Jul 27 11:00:35 2026 GMT
Subject: CN=0fbe8e81ade22a879fca58fdaed47b60c98b78f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:30:a4:90:cd:05:1e:be:b4:66:83:db:ee:5a:
54:26:ac:7a:f8:67:8e:49:9e:63:d8:fd:a9:e5:69:
f9:35:d5:4c:09:32:4e:f2:45:df:bb:75:84:8a:4a:
41:9e:87:a9:0c:44:c2:a9:26:78:e8:72:c8:c9:b8:
d3:2a:b7:84:b1:f6:40:4b:04:1a:4b:76:42:0a:20:
6e:37:48:66:29:32:31:1c:0f:11:90:a6:7e:de:e8:
f3:e2:ed:28:6e:84:54:86:90:63:0d:e3:f4:5f:a1:
aa:1b:22:16:d4:66:0d:a5:66:79:68:fa:55:25:0b:
d7:70:96:46:85:cd:3d:47:e2:b1:35:1e:8e:88:81:
5a:ff:63:42:ad:7c:af:20:f2:f3:04:7d:70:a9:70:
0b:a7:ef:b3:0c:43:7e:42:79:1a:6f:f2:a4:ab:38:
a4:8d:44:e2:63:d0:6a:fc:54:7b:bb:74:9c:19:25:
dd:98:2b:ba:95:61:73:22:39:79:42:4d:8e:14:69:
47:ee:37:78:02:20:78:ce:6e:52:e9:3f:f2:8c:d6:
00:d2:f9:ab:c6:61:16:46:90:17:c5:8a:a7:26:bf:
76:20:bd:5a:3a:a7:18:c3:10:2d:68:36:fe:24:9e:
18:4a:df:f2:e8:1b:ba:16:bb:46:b6:f4:ac:34:c1:
60:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BE:8E:81:AD:E2:2A:87:9F:CA:58:FD:AE:D4:7B:60:C9:8B:78:F8
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:3c:1c:55:51:13:d2:0a:85:89:da:a3:e3:f7:7c:0b:a2:77:
72:bb:aa:28:2d:58:0c:f9:33:6e:45:81:b9:e5:47:17:d7:d2:
e9:0b:ca:a6:00:fe:33:d0:e4:21:08:56:35:76:3f:3a:04:6b:
4d:99:1d:8b:5a:07:ce:24:91:6c:5a:74:fa:21:da:96:8a:e3:
6b:09:da:ea:91:f5:6b:6f:c3:5b:92:26:7f:04:d4:f3:50:4e:
6c:29:3e:50:76:07:12:f5:74:62:3a:27:37:9c:59:2c:85:77:
4f:3e:73:07:d8:4c:79:38:ac:90:b0:0d:31:ff:e8:8f:bc:a3:
3b:02:e0:0b:1f:fb:c9:89:fb:e7:d4:e4:14:56:84:29:57:9a:
95:22:cb:07:38:cb:c0:fb:d4:78:ce:89:ad:a7:df:20:55:87:
03:4f:da:92:7a:54:a5:81:5b:0e:08:8b:0a:c7:02:07:7e:8f:
ff:90:fd:3b:c3:ec:3c:5c:64:08:99:21:e6:e4:b4:75:8e:9d:
2f:f2:ad:be:52:1d:a5:10:2e:b0:06:eb:6b:dd:fe:fa:93:b5:
da:7f:20:23:de:7c:b7:8a:fc:ef:ce:be:17:cc:91:35:55:60:
22:95:79:64:3f:bc:f3:5d:b4:7e:cd:5e:a0:fb:3d:48:e5:c0:
48:b1:12:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:22:06 2026 by rpki-client