
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
File: TYjrcwqxpQHqNuo0gtdkVE4UERE.mft (raw, json)
Hash identifier: JPVym/X1qE8mYBhrCZsE4jTZZaOBg62dKA7TQEd0kWw=
Subject key identifier: 36:27:A5:72:A5:6C:BD:16:1A:2E:08:6D:FE:BC:4E:72:46:DA:FB:03
Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111
Certificate serial: 019F9F95C1701DEE6C19B36E3EB193057AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
Manifest number: 19D9
Signing time: Sun 26 Jul 2026 18:00:19 +0000
Manifest this update: Sun 26 Jul 2026 18:00:19 +0000
Manifest next update: Mon 27 Jul 2026 18:00:19 +0000
Files and hashes: 1: DgOoOQQXCFOOiAboGyt3uJYGrX8.roa (hash: ttv6R+EWnpLDn0WbmgVmCLHJJB9im8Fg+Aestwf1Mxs=)
2: GlJSwTi2Fb0SaJjKLlqTY5SYTLI.roa (hash: Vhct9Hz5giaL8GbiD0lTZ+WsxND/eXGjAzq9jIuUyys=)
3: K_QMKdjdYGYO_K6jBRKDt9oPc-4.roa (hash: P33wrBWs2yJaqJ2LTURN/ha1UtuTGC+nJ+QNsu/z4d0=)
4: MPWMs16X005RVT9AI90Avga642Q.roa (hash: 2eWuFyAXp4gRIWiCS/+RGWaGItW02AaBBH51MmBYwwo=)
5: T89jwcM0aDv58J1uGaX_TI1vK9A.roa (hash: sG3D4TH7MLn7FU34onFGq465WOEDiHFkUuDacxXJOgg=)
6: TYjrcwqxpQHqNuo0gtdkVE4UERE.crl (hash: pa5KAiK38+kJmc3oxY4cftkZfUJbEG2tTeNNC16dMsI=)
7: X72Ta738C-LIMFvd1WFhI8hgB0M.roa (hash: v6AOZV930gaDano00ylIK8U0A/h3KnVoUcoteShVPsI=)
8: XtIJQiHXMFZdv3to7hzaFPe58CM.roa (hash: 0ywEoOgBomhFv9aUHIMG9mVJhsMccKkONYTnJ5FZ8MI=)
9: axYuvA_IMKhkXuc6tRXhlKz3RRY.roa (hash: AwD9qt83+cS+6XicWrhYgc1AHug+bQVZTsrb4VEe+DQ=)
10: uPeS0JTvQdvC1wREAs91Vli5Rnw.roa (hash: cPJXBJyczJ2xoLaeFVUtLWLl9YC0lFU4+Af1eOE64/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 18:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:95:c1:70:1d:ee:6c:19:b3:6e:3e:b1:93:05:7a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111
Validity
Not Before: Jul 26 18:00:19 2026 GMT
Not After : Jul 27 18:00:19 2026 GMT
Subject: CN=3627a572a56cbd161a2e086dfebc4e7246dafb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:a4:8a:7e:b0:6b:c7:03:2a:9c:8f:89:51:
ef:e4:03:ad:33:ac:2e:0e:8b:eb:58:be:0f:99:6a:
85:82:4c:f4:7f:13:28:5b:c9:04:51:8a:61:05:6b:
0e:bf:cc:96:93:e5:e1:38:d7:40:5d:84:a8:d6:b7:
f9:c5:b3:09:9b:ca:1c:f4:19:26:fa:ff:b4:00:e0:
df:89:6f:24:cf:43:14:1d:4e:80:8d:bb:4a:5d:f6:
a8:61:d7:a1:5d:c0:1c:b7:f6:1a:70:99:92:7f:78:
4d:30:be:be:a1:80:16:df:1a:8f:2c:33:b0:e8:82:
a2:a2:f8:6b:0d:b8:29:3f:89:90:f7:10:6e:d5:6e:
15:cd:d3:34:36:79:bf:28:ef:26:7d:a0:62:30:44:
42:a2:f6:61:39:f0:43:23:2c:48:c1:76:4c:8a:65:
cf:59:0f:b1:13:94:ef:13:cd:d4:93:a4:45:cc:a2:
ef:08:25:9e:a2:bb:b2:d2:42:33:35:5c:28:0b:96:
93:c9:e7:b7:e2:42:85:0a:3b:04:7a:d6:cd:54:b0:
29:ae:65:5f:e3:a9:f7:ed:f5:93:1b:1b:71:85:d1:
ef:d2:94:b5:6e:a6:e8:26:95:87:cb:2e:3e:6c:32:
b6:fc:ac:1a:f3:6a:6d:1e:9b:32:92:20:b7:25:11:
fc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:27:A5:72:A5:6C:BD:16:1A:2E:08:6D:FE:BC:4E:72:46:DA:FB:03
X509v3 Authority Key Identifier:
keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5f:52:2c:50:43:b5:1a:8c:c5:48:03:41:20:34:e5:3c:ea:
c5:b2:f5:c3:a5:54:f2:1b:f3:86:4d:99:74:cf:5d:59:db:bf:
6c:22:aa:52:bc:62:91:46:56:19:3e:f9:b5:46:ae:26:99:64:
9c:51:44:a1:b1:ea:d5:87:1c:a7:ab:e3:6a:9c:70:2d:70:b8:
e6:29:9c:c5:26:11:ae:e1:15:b6:63:8d:d4:d6:85:8b:7f:8d:
e1:9c:94:32:3a:83:d5:d1:56:80:43:4d:b5:30:4f:97:f6:bc:
6d:d2:5e:b3:df:08:40:67:5c:5a:a2:10:23:0a:aa:56:8b:26:
af:6a:76:39:98:00:1c:7a:41:22:13:f9:9b:92:03:17:9d:15:
73:3a:7b:99:e0:18:a6:9e:3c:ea:d0:22:ff:9d:06:ef:12:c9:
a7:8f:e1:61:17:79:ee:ec:26:e6:2a:21:69:fc:95:7a:8a:9a:
da:79:2b:97:01:eb:84:f3:1f:8c:f6:e6:3b:a8:bc:ac:83:a0:
91:36:9b:ab:24:d3:86:07:5b:9a:71:e7:b0:93:a2:af:56:6a:
f3:76:87:d3:c6:f8:24:40:9a:9f:0f:59:55:cb:1f:32:cf:70:
e3:50:5c:03:1c:b5:db:f7:dc:79:69:6b:e6:73:90:cd:b4:84:
4a:36:51:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:16:45 2026 by rpki-client