
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
File: b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json)
Hash identifier: ye4xqW0DEDVNipWcdgPhMWIA++S+Al1E5D2E9hf0Xhk=
Subject key identifier: 0C:AB:37:86:0A:48:06:94:EF:F9:BD:30:C1:03:A4:BF:70:6B:9B:02
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019F122E4F4AA1C318BA77756CE005D8DFAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
Manifest number: 19E1
Signing time: Mon 29 Jun 2026 07:00:52 +0000
Manifest this update: Mon 29 Jun 2026 07:00:52 +0000
Manifest next update: Tue 30 Jun 2026 07:00:52 +0000
Files and hashes: 1: 1-ygVXvpX3v0iELiClfnmQNYwGyE.roa (hash: X5he1s+27okfT854bA2DHGCg/8azuLS5wg9wh4BAYOk=)
2: 81IrEqThFJ71oZltC7sydtXNojo.roa (hash: tEfEiIXn9wfKX7SvDjdARvZLxRgzMJ/S8JlSOukelog=)
3: AMQlobx9HParaeDL7T0v3tR4_mg.roa (hash: DvsmpIh8xvNvja7LOYbDo2D2JDk07c51OKvsQR0zZ1A=)
4: AXyzBE0tybxRg9_jdKm4jNHR7bw.roa (hash: nfQgADgYeSKYxfzdRmUnB0z2SSRcFjYrl/PLdcFMeDw=)
5: CP1-ZWFt3LQXYmFLwdbDKA6-btk.roa (hash: hFhoH59R3e+GZod8NYfc3YpX1Y6SV4cXhI67xJcoHls=)
6: JxJo9qALLP7eJJE5vuTtbxNKarg.roa (hash: HkVv74vSVM+BvE4aRbMZl6E3E6sT2RpvFk2i93TTTiE=)
7: X7CBYKuwZavOmFbf8xJJDhABAJ4.roa (hash: XXFExiGUxJHCf32+M8YXjA/DO0qOOWZKBpQs4MlsYQo=)
8: _BfUEuTWI4mH7z3tL2xj4fNLk8w.roa (hash: PZxV1RVfs2NX+n/RPHStsER54mLHjvguw+Y+i8qfbk0=)
9: _g7NYGu7EgLM-JyG677gAc99ISI.roa (hash: uHPD2j/d4/7LW+Vl6Kpwce5f7NuD1gag8TG/5Nj0SWs=)
10: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: mKkm4uZ7f/mvDkCru8qF3zCew0hR5oxX7pHU6z79dmg=)
11: bsWFgvY3xPXPpuBC9Tw4bi4Apaw.roa (hash: bP8V3ZFMrLnl6jl+IYnrqUoSwWhsKke/987U4dAlXSc=)
12: cZ_CGt8J22trk7fBID_Lw_UFQeQ.roa (hash: MJoA4QKvMfD128eHraMg34YoNGsOhXAw8I0h2v8nSz4=)
13: de2lwVssf8rnTbV-vrGaj_YNofM.roa (hash: X+D652oMPb3y57iVvUCNT577oF8mBPxjOL994t6GNZs=)
14: fxuyMV_7iGJ5rjIPhk3y0WiOc-Y.roa (hash: kZWQ/Ewlc4WMwycM0JTInlzSOn7k6IqfaiPaxpvk380=)
15: g4ShtOVoK1sOm96RfSspdLumCvI.roa (hash: dbDK/BecQeIz6Zb33EjyuQY6S7PvjAP+A9ZP96sRxE8=)
16: qo7ie-ZCOxr3kULK0wr2-czci7A.roa (hash: tjSzYVU1BPWM+eWE8epAD1zQp+0FNjjYVtJc8ORfDvE=)
17: u3tBTHFA6uA1xiho6mlx2A99Pkg.roa (hash: FgLJ+SuCyCEVccEPsDGFLFFI0Fpbheu8wLy47VogJN8=)
18: vELnjGZG0HPMMI6eyVMJCb07tlM.roa (hash: hBZn4JkNx5C+fP4A7VfhJIdgWEeaLDhsZs+aBB3PMpI=)
19: wLenhQFsuSLCwYXZncb0yLg71-M.roa (hash: dddbiY/EtjgN2niK28Vk/3dSWCYor5BQPW3BdmG3koo=)
20: wRsmJd7CIJgwynHO3eDWK5E65EA.roa (hash: Is86hG9/O11lh+0TSiK7Jnli8yF4j5q5FW3grn/LkD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:4f:4a:a1:c3:18:ba:77:75:6c:e0:05:d8:df:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Jun 29 07:00:52 2026 GMT
Not After : Jun 30 07:00:52 2026 GMT
Subject: CN=0cab37860a480694eff9bd30c103a4bf706b9b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:26:3d:28:46:6e:fa:6b:8b:f7:97:36:df:
22:b6:5b:65:49:18:5e:e7:47:ca:a6:04:9c:1b:9b:
a7:57:6c:64:2a:01:d9:59:47:a0:03:cb:57:24:60:
c3:61:e5:bc:8e:15:8c:74:68:29:2f:7c:fd:95:66:
d6:4b:d0:93:0f:10:b5:04:06:ed:cf:fa:f3:36:c4:
a4:e1:2e:53:2e:93:f9:d3:aa:89:3d:92:cd:66:01:
2f:0a:f9:b6:5e:8d:de:9d:7d:5d:07:f6:10:18:ca:
e1:2b:fe:c3:c2:fa:a8:05:5a:04:a4:a4:7b:54:3f:
c6:94:03:9e:17:ef:27:d4:12:fd:1a:16:ee:bb:c7:
dc:c4:ca:16:9b:f5:fb:02:b5:b1:4d:c4:e1:1d:d4:
6a:3f:78:6b:ed:5a:b2:88:9f:a8:2e:dc:fb:15:bf:
b6:97:55:fa:b1:12:de:00:68:99:e5:18:b1:3f:a6:
ce:18:f8:4a:8d:8f:6f:cc:21:a6:98:04:55:4d:08:
53:27:81:5d:cc:43:db:7d:06:49:b2:ac:9b:11:e7:
ab:2c:07:04:b1:30:a6:1f:08:ca:48:f2:37:17:cb:
c4:f6:14:7d:81:54:f2:d2:ae:d5:e9:9f:22:53:65:
50:f9:d7:22:b8:e0:e5:03:8e:9f:be:c3:fd:9e:df:
09:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AB:37:86:0A:48:06:94:EF:F9:BD:30:C1:03:A4:BF:70:6B:9B:02
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4d:47:36:57:50:b3:d9:7a:bd:8e:4a:f4:ed:2d:2b:66:a9:
85:9e:60:6e:2d:2d:bf:90:94:52:d8:fe:5c:f3:4e:5f:71:f3:
a7:6c:c9:10:a8:3f:4d:b6:22:4a:88:d6:50:e1:d5:60:67:d0:
78:9f:ca:9b:e3:f8:d8:67:89:36:51:0d:80:ab:3b:09:1c:43:
83:11:4a:e2:10:93:58:af:c5:f5:d7:d9:42:a8:77:f3:b9:a1:
e1:a5:dd:30:66:a7:b4:01:21:3b:3e:f3:95:de:f6:33:30:fe:
ac:1e:81:c3:f1:56:6f:ea:43:47:a1:e2:65:00:e3:44:65:38:
f9:ba:ae:7b:be:30:b6:af:86:d8:8b:dd:44:f5:f7:ab:96:7a:
61:dc:16:5a:e0:81:84:3c:c5:d0:c0:20:52:79:21:09:6c:ef:
3e:0b:fa:cb:f0:66:32:2d:70:b3:a5:bc:72:c7:04:d3:9a:7f:
db:e9:6b:fb:08:60:98:9a:9c:87:99:e2:32:3f:83:19:57:b9:
81:f5:13:c3:c8:5a:97:d7:47:72:c3:cf:de:2c:c7:15:08:23:
f7:1a:bc:6f:49:ee:b7:5e:15:22:1a:c5:35:5d:d9:9c:03:a4:
08:57:d7:3b:f2:69:49:7c:4c:2f:7f:a2:d2:b8:11:9a:b9:70:
7c:e1:34:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:09:38 2026 by rpki-client