
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
File: nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json)
Hash identifier: gMcSR1uTjhKL1ZKkYh5yOlB2rnw5ilGDUYcLT/P0GyE=
Subject key identifier: 07:63:CF:81:A3:18:26:69:3D:9E:E8:55:C3:95:51:B2:DC:74:F0:C7
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial: 019F33DF54A2A32BA6B05B1EAA98B4A7E6D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
Manifest number: 199C
Signing time: Sun 05 Jul 2026 20:01:41 +0000
Manifest this update: Sun 05 Jul 2026 20:01:41 +0000
Manifest next update: Mon 06 Jul 2026 20:01:41 +0000
Files and hashes: 1: 1ms-U7GStIQWyhBvk39Pmz4mWvA.roa (hash: lEZsZW9Tv4rbrMsSytyM2px+I6/78sknyWxeRiHKwJM=)
2: 465Kcfdz-gCkfuGZh8doO_u-oWc.roa (hash: +omro3YFQE2sJ1eByZhKP6jW3x+UZ2ptJKtI+7UVFM8=)
3: FudhY_GW4msTOukhgnBFXzVYoiM.roa (hash: 7UgC+06y5UTQvkQ9UgPJMOjARzvFFXEio5n7Jvg4z+k=)
4: HK6BNNsWSLGubaZl3upPyutswvU.roa (hash: WzFjY3CdZWeDvACOL+XKBEMBzEj0lVc25php/SCslcU=)
5: IBvfpHlo0nhBmzHxQLjSRpI2BSY.roa (hash: DAVNHApbGflPu1pSl2KrRTguzWmq2zUGW0dSw+3gnZ8=)
6: LTfWXRthcASup-DyG7vEDraK0EY.roa (hash: whp6f+y/ya/1LAvlaxCVtUimjkVrV3wXO989ASjx2UI=)
7: PUPZ5PDa_TnnNK5CKrAamkbA9qg.roa (hash: mlGNam5OVbUbnfHBcyzvj7iTYMgBLkQF8bhZoX4e0R8=)
8: XZ_A9oOFh615-GWf-jG9mLRl_BA.roa (hash: IjFd4KfJkkTKhVMOqjReLPHCLFxiAiN7OyTxurp0L6k=)
9: cqQ13TfAA2f3o1iYd5u_zHjR1og.roa (hash: PPVmtCcOrF5jhwXK7aADjsl4uaCgfyEm1Gbo+31zhCo=)
10: kCm_uKpWKjhNUczVOAQvBZ4TtMQ.roa (hash: S9J7ulFMDCXhT6uUyj2J+Qhp8QQOqTeuNdKWWsuYDSA=)
11: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: WY8jbv04uqk4hBhBwTw5OCcdgs6Vge14lf9PMGUhp3U=)
12: rEIw8icF5JeHNJs8hiRgw1rRnR0.roa (hash: ZktjBhuI012cqumaMif+o0oMdONZdwewIFYAJ7bf8FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:33:df:54:a2:a3:2b:a6:b0:5b:1e:aa:98:b4:a7:e6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Validity
Not Before: Jul 5 20:01:41 2026 GMT
Not After : Jul 6 20:01:41 2026 GMT
Subject: CN=0763cf81a31826693d9ee855c39551b2dc74f0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7b:e2:70:c0:61:73:ff:2c:90:43:6f:a6:36:
7b:bd:1a:8b:a2:68:8a:bc:1a:ff:00:bc:4d:f4:8c:
ed:67:f6:bb:f9:0e:a0:d8:f2:cd:df:09:cf:8c:b8:
8d:36:e1:ce:64:73:58:6f:96:88:06:c0:4d:6a:33:
d0:8f:b4:ca:03:c1:63:92:b5:3b:77:cf:2a:6f:40:
db:cd:7e:d6:27:51:73:73:d8:85:5c:9b:71:e3:00:
54:db:f2:46:9b:1f:36:dd:01:bf:18:01:0f:97:87:
52:41:0d:a8:77:91:99:70:02:95:d9:36:2a:52:4a:
b1:e4:e9:38:09:0c:92:01:e8:b1:18:a7:64:32:4e:
8f:74:46:a4:a3:9e:e0:91:50:3d:b3:2a:46:8a:17:
03:f2:3c:7c:14:fe:ad:d2:f2:e8:5b:d2:6b:fe:ec:
f8:ba:ab:cc:85:c1:cb:3a:7c:c4:33:4e:c7:a9:c6:
1a:0d:53:b4:db:3b:54:b9:a2:cb:cf:e3:55:03:bd:
e6:b6:12:0c:50:a5:80:c0:cf:a3:5b:28:71:07:1e:
8a:38:42:22:32:0e:b0:f4:b0:55:0a:62:9d:f3:c0:
76:f4:21:54:f8:05:e9:9f:be:52:13:16:9e:f7:a5:
3d:95:d3:95:1b:a9:28:82:8a:d0:34:08:d9:39:86:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:63:CF:81:A3:18:26:69:3D:9E:E8:55:C3:95:51:B2:DC:74:F0:C7
X509v3 Authority Key Identifier:
keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ce:dd:93:2c:10:d0:86:23:a8:33:72:7f:cf:b6:0c:9f:21:
5b:6c:c6:ea:bd:1f:03:e8:cd:46:db:91:6b:82:93:74:08:38:
6a:a9:36:be:91:a3:df:8d:47:0e:7f:01:05:7d:60:79:c5:09:
0e:17:35:c2:70:7c:db:5d:80:f0:8a:76:a7:83:74:be:5e:f8:
ab:ef:18:3e:db:4a:d7:ed:41:75:91:ef:9f:a6:f5:a0:29:ee:
05:37:02:35:27:eb:67:25:de:3a:37:5d:d8:aa:61:4f:ae:d2:
ca:f2:cb:ce:f2:8a:c4:ec:bd:7b:26:f6:05:f7:28:4b:b8:01:
db:22:5f:44:f4:d7:a5:ea:41:dd:b9:f0:af:4c:12:26:64:37:
cf:f7:1e:68:f0:8f:fe:70:c4:d7:43:13:1d:64:97:13:b5:b6:
22:2a:3f:21:4c:d2:be:52:80:8b:ad:79:f2:ca:fb:b9:b8:da:
9e:70:7a:22:1d:37:e3:b5:23:41:56:1d:c3:e9:4b:5b:49:39:
e5:43:a9:ee:3f:f0:9f:e3:4d:5d:38:ad:1f:6d:6c:71:43:93:
79:a2:64:61:97:40:22:a3:5b:51:d5:6c:d1:45:17:cd:9e:10:
71:66:a8:7a:4a:9f:38:2d:52:89:ad:5a:6e:c5:f9:ce:b9:0a:
77:52:de:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 23:28:24 2026 by rpki-client