
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
File: KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft (raw, json)
Hash identifier: EhhhLC2FGI5g1P6ttMydUk5Bm0sIm7k1xovKAAuEJk8=
Subject key identifier: 21:B7:ED:3E:FF:D4:16:99:E7:DE:31:05:34:A4:51:0A:0D:D1:77:F7
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 019F9EF10FB79E10A883E3FCCE2D33BB7686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
Manifest number: 0EB4
Signing time: Sun 26 Jul 2026 15:00:25 +0000
Manifest this update: Sun 26 Jul 2026 15:00:25 +0000
Manifest next update: Mon 27 Jul 2026 15:00:25 +0000
Files and hashes: 1: 2E-MME-lm4K0uyBTuIg5ZM5-8I8.roa (hash: JzkT3L/H7HMV5VqAPBU8OB3GqfswpWq+Tu8hcXApBv8=)
2: 5ELvi2prTaHlQQw-aKR9uMwtFA8.roa (hash: 8uiks0UyE3YVuRlbo43yM8bQQXEWa2U0fKuakGVSNAU=)
3: D7_QPk2qAFTVuCWwAG0izANeaRc.roa (hash: n5F0AgHZRQ1JYqQ0higj9UJBRqSdojfEHkwWOchuMIU=)
4: KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl (hash: u/O5gZUpjp0lZEkz+OmZAQtrGvYeH7GwF5pW9drHm6M=)
5: PV9nn29yp2PBBJ08DH1Hzy77tzk.roa (hash: W2PgmiS8Op18Md9+/XFq6wqhLS1g6P/+ZLsWwjKbTR0=)
6: RB0GL9giB0u7zxwi4U8zR08ihPw.roa (hash: Szh3L0AtY1SzUtQRUTJ6CEK6mqyoxGEDQuesq2qnd/s=)
7: YzFna3l-BC64_Hy9sCXon1GnhcY.roa (hash: mHlEQsM8xLD+TBDwkEVeJd4jeKLg08Jp/4wsw9FdVUw=)
8: _6a-RWXCtiM85tk-pFSkSlcUUfI.roa (hash: B/tQnvdBFH+M+nv+Nk2B9RYqRSdNR6S1bMjLWiTjAJY=)
9: tKg8bmmm6waKS3dVDFR2D0N_Kp0.roa (hash: NxiPLV70KM3UlDzotgKT8px4zwsMhil8u+4mX6+fcsM=)
10: xqE2x6TB4ktJqDhDRIstav0I34M.roa (hash: a5jdOMPc2+BN/CePheTtmvryp7+c0nQR8BLYlcgEO6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f1:0f:b7:9e:10:a8:83:e3:fc:ce:2d:33:bb:76:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Jul 26 15:00:25 2026 GMT
Not After : Jul 27 15:00:25 2026 GMT
Subject: CN=21b7ed3effd41699e7de310534a4510a0dd177f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:75:c8:89:92:80:de:44:28:37:ab:24:13:
84:22:c0:43:ff:f5:01:2b:5b:8f:83:0e:d0:a1:6b:
f3:0d:b6:24:db:5e:41:e5:6b:2c:59:01:3d:b4:8b:
7f:06:cf:ee:55:8e:30:62:b1:88:d3:af:ad:90:65:
b5:05:d3:2c:77:1f:84:cb:f9:4a:e2:99:af:f5:11:
f8:b9:99:af:36:38:5e:57:a0:7a:f1:4e:25:cd:01:
1f:58:77:cf:51:3c:be:14:95:07:df:a3:6a:a1:b8:
85:25:0b:79:cb:1f:3c:5c:be:02:4d:76:78:61:68:
97:3b:f8:ed:8a:ed:6b:86:b2:23:8a:b2:d6:44:2b:
09:ad:31:60:1d:84:dc:1b:c3:03:10:9a:2f:40:6f:
3d:77:9f:17:89:de:a6:3e:17:d2:b5:0e:ee:d6:8a:
7e:dc:26:63:b5:79:7d:58:c9:b7:89:d2:0f:80:79:
ef:e9:c1:16:2e:4b:76:eb:64:51:f7:41:fb:da:d9:
06:91:91:98:ad:ec:bd:ee:74:c9:37:81:aa:0e:8f:
cf:ec:a4:ee:31:bb:23:cd:b6:74:bd:ac:fd:c5:59:
88:f0:91:e2:5c:66:eb:df:44:c7:08:8a:0a:84:b0:
32:96:5e:05:4d:39:8e:eb:a2:85:0f:c8:6b:f4:cf:
af:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B7:ED:3E:FF:D4:16:99:E7:DE:31:05:34:A4:51:0A:0D:D1:77:F7
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:95:14:3c:4f:b0:cb:c5:fb:27:f1:4d:aa:ff:dd:03:f8:4a:
0a:4b:9a:78:0c:9e:8f:82:1d:fc:36:12:e9:f5:ab:9b:ef:46:
35:df:9d:8c:30:fb:1e:ca:58:a8:e7:78:54:0c:30:db:8b:2e:
12:69:9a:37:bf:54:b1:69:42:b3:9c:64:da:b6:26:47:25:1a:
21:4a:2b:5d:57:c8:6a:fb:ad:a6:6f:4b:af:f2:05:31:bd:80:
8d:aa:68:16:cb:ca:80:ca:6a:f2:99:16:b9:1b:93:f1:43:10:
65:31:d3:a1:f4:ec:6c:c5:e8:a4:ce:09:97:bd:88:0f:1b:09:
90:6f:db:2d:ce:82:47:6e:f6:ee:0d:76:01:50:1f:90:be:93:
2c:d1:bd:56:0d:7d:10:a0:17:ec:25:e9:7d:f6:9e:59:49:1e:
f8:13:a0:9a:f4:e9:ac:e1:85:20:55:61:7b:55:03:52:a3:bf:
7d:ee:d9:61:28:22:48:bb:1e:ad:92:fe:ba:e4:18:90:c2:c5:
85:ad:01:b8:15:a9:cf:d2:6b:63:0a:1d:04:41:fc:d9:72:9e:
82:d6:75:40:5e:d0:0c:ab:dd:b4:4a:62:a6:53:af:95:b0:d2:
ae:f4:4f:6e:ed:67:c6:4f:67:da:4a:f5:5d:c6:48:46:6c:7c:
c3:c2:d8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:53:41 2026 by rpki-client