
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
File: 8DmVMU18LHBTsc_z4T-WUCquq88.mft (raw, json)
Hash identifier: k9TM5/Q7UCcEHZayqyrDrj8ltavqWA/RQkvs8te8cA0=
Subject key identifier: AC:CE:A7:56:11:18:72:25:12:F5:92:74:9D:09:F4:D5:D5:A7:60:1A
Authority key identifier: F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
Certificate issuer: /CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Certificate serial: 019FA0E0173EF51989F9974FAB1EEC3EFF36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:08 +0000
Manifest this update: Mon 27 Jul 2026 00:01:08 +0000
Manifest next update: Tue 28 Jul 2026 00:01:08 +0000
Files and hashes: 1: 7Y-WGHeIKmavhhwyUtVSTv4dV74.roa (hash: 6aCml1iAjI5Ul10/DV9KNxyhcQNoCoHzIBHaF4XKERk=)
2: 8DmVMU18LHBTsc_z4T-WUCquq88.crl (hash: U7FgvKNzoiECOos0fevpNAb+clyfWNUUPQn8X7Ccps4=)
3: 8VBWQ2XfCMC5lByDcRYfdGeXThw.roa (hash: HzqPO66uE1+HiOwrkh0W6gUEqECAgV0PXkfjdzoF6Fc=)
4: ADSFjd7CdbzaI3rWM5WXzSr78b8.roa (hash: dpJ1bSM5jDKoR+wXRYlGh5z+uNOn0fdbBQpUFJegB00=)
5: DOhltBe7Jjwt-Zang59aCLv9pyk.roa (hash: r1rLZd7khJrDRQV2tg8gcIC9iFKyZ3MlcWZBnZyazys=)
6: GKNBUzbX6fk_ZGvEdYf3qJ03AqY.roa (hash: Yk5Z2ApUIFrV+C536vj94AjIDEb8pim9xmLcinHBJbs=)
7: Py5-SfzgdBopcKEbr1S0y6HLpi0.roa (hash: UfuqXVAeefVJVDWI/7a6Zdo2dE/lpe7wMglvajxwHoY=)
8: RHorQ2xcAb-F7Xna9K5af7FEmzs.roa (hash: S44AKUCf5f+EQxBGcjX+XoCjjJ0ey5c7k0eoY9Ekr5g=)
9: UgtMS63_CIHp4yrDJgi3ZLPBmnI.roa (hash: WN89G26tYkg2OtwRMyqMK1Q84ryZ7bW/B8p2iEKccX8=)
10: a1QWWFZ6s4DRdUSOTU03JY_v_Rs.roa (hash: Cmtap6+ZacRGEaEZSRlUzvkfeKN7ipRh2grGmp1mnfA=)
11: lKpsaMhWZ0fV61kPqKZYx1tVCjY.roa (hash: 3krPNydBrnfH95dkgxU42zpY/EBgzcVqcHPdZ1SpwQs=)
12: qEMDrkRlxLB5UG0Z6mCAhLBikio.roa (hash: mHPLMjrq5nmaQwjZOJcQiDtgEZxLquTnwJyzydmKSCE=)
13: wwpquAWTUuFb0E9CJs-YBNeMQ7E.roa (hash: 2XANtZptrutEVaXB3duL9dMIg7D+kzakEupuwq2jEe4=)
14: x3AkqqWCM_jT5RY8dyci5qYm37o.roa (hash: 6wh4k7uKUw5+QRgS1jkmB585ZTOG6T4LIDLdP+mMWWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:17:3e:f5:19:89:f9:97:4f:ab:1e:ec:3e:ff:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Validity
Not Before: Jul 27 00:01:08 2026 GMT
Not After : Jul 28 00:01:08 2026 GMT
Subject: CN=accea7561118722512f592749d09f4d5d5a7601a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:72:9d:9f:f3:2a:5e:e6:7d:dc:e3:c8:5e:
4c:c2:f7:e5:e7:cd:54:bf:fd:86:5f:dc:91:c9:9f:
c4:d0:e1:8a:30:60:c2:ed:b8:aa:84:d0:db:49:73:
c8:4e:dd:9f:f2:3b:fa:18:13:a8:1e:8c:06:3a:9a:
c2:3d:de:6e:69:67:5d:4f:ae:ac:e2:d9:df:e0:7b:
e4:ca:7b:70:cf:4b:e0:ff:1c:52:05:62:db:7a:44:
a2:2b:44:83:88:e7:12:59:83:2b:31:38:6f:ff:24:
34:04:03:68:ad:b2:b8:19:bd:04:c0:06:01:7d:26:
83:31:ea:b7:69:4c:c2:57:c1:1c:3b:59:0a:3d:d1:
e1:17:47:5c:bd:d1:a3:4c:10:50:c0:cb:00:ca:c6:
b4:45:25:2c:68:f2:de:3f:63:37:f6:0a:63:7a:e3:
a9:d3:6d:ef:ba:3d:09:cd:14:d0:9d:5d:b3:9d:22:
83:5b:0f:6b:22:d1:0e:7a:01:fc:4d:8b:af:88:b4:
e5:f9:d4:17:01:b0:4f:02:5d:d2:9b:e3:04:a6:90:
f1:d9:e6:fc:a8:4d:1e:43:a8:24:25:fd:19:58:a7:
d6:da:e1:dc:ca:0c:72:56:e1:79:ec:5f:86:11:6e:
69:a5:77:ea:d0:70:31:ba:3b:6e:d0:61:e6:6a:f8:
80:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CE:A7:56:11:18:72:25:12:F5:92:74:9D:09:F4:D5:D5:A7:60:1A
X509v3 Authority Key Identifier:
keyid:F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f7:1d:27:4b:85:db:b8:e4:4c:b0:38:b6:bc:80:c2:47:24:
8c:57:c5:b9:89:5d:9d:52:3f:61:04:29:73:ba:e5:10:ea:a0:
28:d6:6a:06:0f:e3:24:cd:02:19:f5:e9:86:6d:be:40:c6:37:
e3:2e:fa:35:b2:87:19:2b:05:1e:ca:1a:59:4f:a9:e9:17:66:
42:f1:be:26:b5:a0:ce:8c:ed:b6:f9:1f:4b:e9:47:dd:13:ef:
ea:67:05:95:ee:a8:e5:89:fc:d0:46:72:ad:86:c6:25:41:08:
18:69:37:27:b1:40:a9:db:a1:2c:9e:9d:bc:47:69:db:b8:0e:
7e:07:17:04:fb:68:cb:1f:5b:50:a7:2e:75:93:28:d3:3f:1c:
72:d1:3e:82:0a:b8:77:61:f7:4e:63:4f:96:71:be:4b:de:9d:
f1:13:65:e1:5c:ce:97:9b:6f:4c:66:bc:89:ac:59:5f:f0:25:
8b:89:fa:a4:4f:aa:1f:af:bb:af:db:16:8a:7a:38:3f:36:b4:
e1:38:4b:7b:3f:df:e2:20:11:e5:a0:81:b4:3c:0f:13:93:6c:
74:78:20:b4:14:0f:b1:a8:4a:ea:21:30:46:29:68:7b:73:8e:
38:45:30:1c:55:86:f0:0a:95:8f:1a:49:e7:92:5e:c7:f8:7b:
12:89:b1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:06:38 2026 by rpki-client