
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json)
Hash identifier: QRQj08H6OkZ0NseffQ//x2o8zuK9owKmpu/peIL5IH4=
Subject key identifier: 9F:E9:6B:FD:F4:9B:E4:19:DA:CC:56:38:FB:B9:48:AF:55:49:5D:5D
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 019EFBA8B28E6E156A7CF67E171C7245BDD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
Manifest number: 0E3C
Signing time: Wed 24 Jun 2026 22:03:17 +0000
Manifest this update: Wed 24 Jun 2026 22:03:17 +0000
Manifest next update: Thu 25 Jun 2026 22:03:17 +0000
Files and hashes: 1: 8r1K1OM5qngui5thmoePxmjOGcI.roa (hash: Lc08lhuuRKkKxvYSfc9k1w2HHAp3Uz/xuk8BCj5oIrU=)
2: A1CXr4dOt7xuCmQiPBtgt3iWtAo.roa (hash: GtPqaBuYk/tZ5YQVdapU19lv8Ijc7CBMwLU16C7BxnM=)
3: HMy1wxSppt6a370WgOiNsXQlVPk.roa (hash: nDhnb6wdJq1bcejnMDwW0L0rGJF02QbJ2F6fT5r9zng=)
4: JpNz-5mJsFq7butKO_csWbCEm5Q.roa (hash: VpAczQvbgQ1Ym4VsrRQcCrHDbx+vYYfxzFiOJ1msYps=)
5: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: 0M7Gf/C4EKwx6j15zotmR+f0mBaLid3n/lYHPQXlc5I=)
6: ZuS-gRLhfC_n_ype4xj8F1xzPiw.roa (hash: EZUmDI/jcW023J4DXzaS1TmCl7OpJwcwm1bJROBPAP8=)
7: _foadMbZdx4Kyy6kAY35bfy57Ew.asa (hash: f8gD+BKnO4V+AgW6MN335RkWYKE7LS8tKEs9AypX4GM=)
8: aOh1-99JcOZxqAcykG11EP2F9_g.roa (hash: 5HlRoHZPsDB8WS/Sga5nh3qNHpa39AaXfQFzVc0mT+4=)
9: fN_qyC3q0DgZifOUjvgGUIVLuLE.roa (hash: Ghng4SHLOPaXZFJc/gZf2VJ82XHj4yYptmX1zNVV1oI=)
10: mP8zF_bJOTWvXPulXS_oUR4vAd8.roa (hash: 4byK92brafemOMsopEaLGHGlykZBiRbGdrhWO9EemSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 22:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:a8:b2:8e:6e:15:6a:7c:f6:7e:17:1c:72:45:bd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Jun 24 22:03:17 2026 GMT
Not After : Jun 25 22:03:17 2026 GMT
Subject: CN=9fe96bfdf49be419dacc5638fbb948af55495d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ae:91:1e:95:ec:de:e4:41:b9:63:fb:4b:77:
d0:b3:7d:9f:e7:c8:cb:22:52:45:d6:a6:3c:62:5f:
87:f8:dc:ba:3b:1e:83:bd:af:aa:53:ec:e3:6f:5e:
c2:3d:ae:0e:48:f2:8d:e7:f9:9f:76:53:63:cd:07:
34:36:ac:1e:77:3d:e3:e9:78:05:43:db:b4:2e:fd:
78:72:63:9c:68:6c:d9:b8:f1:70:0e:71:12:7c:c1:
ad:eb:92:37:3f:6c:f2:33:a5:c7:65:2c:05:f0:a0:
c8:a7:0f:4b:41:40:d4:75:00:6a:1e:72:33:d8:70:
ff:89:ab:28:e9:1b:8d:b8:50:2f:fb:af:35:51:6d:
3a:9c:85:05:eb:5a:6b:4e:89:d5:de:ff:93:ae:80:
c2:48:9e:11:98:2a:0d:91:ab:03:79:aa:2c:98:89:
1f:c7:bd:ce:82:c4:a9:fa:1f:b3:fa:35:0c:a3:7a:
99:4c:19:3a:dc:a2:17:e0:2e:0c:26:7f:cf:a5:58:
dc:34:24:4b:4a:8b:3f:6a:2c:da:f0:25:1c:bd:2e:
54:9e:8d:97:9a:d4:10:14:c4:16:68:ad:16:35:94:
a3:cd:00:17:71:98:15:3f:b6:ce:97:66:bf:56:51:
fb:44:4c:b3:49:20:dc:0f:33:96:dd:8e:c4:1c:1b:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E9:6B:FD:F4:9B:E4:19:DA:CC:56:38:FB:B9:48:AF:55:49:5D:5D
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5f:88:56:b6:83:1a:8d:7f:d8:4f:ba:68:f7:59:c6:13:ce:
b2:40:3b:64:55:58:7c:db:50:9f:b9:76:75:5d:94:0e:12:d7:
4c:9b:64:60:a4:9d:02:38:a5:3b:6f:12:1c:4d:45:ea:9b:ed:
18:b1:3b:66:0a:aa:2c:2d:f0:c6:f2:01:dd:48:8d:22:ca:8d:
7f:4f:d5:86:93:78:02:ce:08:34:0e:83:bb:d3:48:93:f5:43:
40:9a:5a:c7:d3:2f:a9:13:e2:6b:01:75:f6:a2:e5:4b:ef:df:
da:75:80:3e:49:ed:a4:c6:73:d3:07:89:a2:4b:f4:28:7d:e1:
0e:b7:58:52:f4:54:ec:cd:df:1c:d2:7a:ac:0c:35:04:12:b7:
7b:f9:34:10:97:2f:ac:79:6b:aa:91:75:22:8c:29:58:39:91:
36:fc:c0:de:33:27:b8:95:8e:68:c9:b8:01:c0:cd:5b:33:0a:
59:d7:f2:2c:4e:20:b6:be:c8:7d:7f:d2:12:5d:f5:c2:05:69:
f8:c3:61:5d:a8:da:9a:42:39:52:df:ee:8b:a5:62:e0:e1:6d:
ca:ba:3c:1a:b6:57:74:9b:0c:c3:ab:34:ab:ea:02:1d:c5:d4:
10:e1:54:40:46:f3:75:33:8f:96:ab:64:45:23:ad:7e:f2:0d:
5d:c0:0d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:31:53 2026 by rpki-client