
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft
File: UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft (raw, json)
Hash identifier: ajXJoGAJuX9+jef72VcX5bhSP9xijAuzOa6g+BdX530=
Subject key identifier: D3:F2:AB:14:48:BD:E1:66:4D:5E:93:01:7B:2B:8C:2F:68:7D:DA:1D
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 019F8342C2DAD0F12A04B3343683C68583EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft
Manifest number: 1AAB
Signing time: Tue 21 Jul 2026 06:00:18 +0000
Manifest this update: Tue 21 Jul 2026 06:00:18 +0000
Manifest next update: Wed 22 Jul 2026 06:00:18 +0000
Files and hashes: 1: 0CG97j_AzAe5K3GHp3bJaJPMXKU.roa (hash: tld3TRv2rCWn11E6jD+ykRtqUmKbxB1k4Dbk8bPFowE=)
2: 40RPb88TMToTQffHvVTDx-CJZTQ.roa (hash: pMNWmtN+BBDYuo/k3evwHjrYikeIXQcLITCm4LTFzLg=)
3: 4L5LfyrxMkGQ2rN7oxTaKP0FiGE.roa (hash: xGJ0KNYmEJfn7BJL9lBi0LmA90ycY8g1fLRg9+7CUrk=)
4: 5rstMAn4BxeJIjhDGUqU8LjDfCA.roa (hash: WrmF7iq2/LiqxwS9yV44gm844E6JlvPaXVciAffOa0Q=)
5: 8cX-M49pBWOJbiMLfnFMmFRCTT4.roa (hash: 04NbRh+Kh+3drJ883led5NTH9ePl4PXIGH9IxvgjHI4=)
6: Gj58Ycc5sgTKpy5rCKA-P9AzQZY.roa (hash: Q6gNonEq5nLMUlgVgoa+TSlQSkKmWvACZYbgKJpSJls=)
7: Rlg-IFCs8fwzbD6_ZA-dRjbFA0g.roa (hash: ul2GAwIXjkbnMzOcmru9IsjEgq5hrDYVzu63v5qH7i0=)
8: SkbNlzedwU03voRWlmZ84CPlZrw.roa (hash: ijgCbn5tI2VVCnbkHUvY++SI4u8hYhfkd8f5EbC8Bms=)
9: UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl (hash: rkK7Zr9UNMWND5mEFURv5TuxYfLFR+LBc+QLvbG8KHk=)
10: dyk-vXvtKHFjihSVdQ-5WuEJcCg.roa (hash: IRDzK8Qb8N0O7iOuFrJKW97+FsyQPtyr8kNJpfxt0ek=)
11: fa-o86UHfmGbW4nW_MeJ2MJ47-A.roa (hash: eUT3sgFq5ihgZcPeVuZNQUnESvSB8D10v8Jv+k0SYWA=)
12: i0k6OLD9jm7dmK5ZTslomwJsJy0.roa (hash: 4XCLTUAHRsCpdD5hqCYPM31FfnBCqXw88p7tpNLGYwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:42:c2:da:d0:f1:2a:04:b3:34:36:83:c6:85:83:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jul 21 06:00:18 2026 GMT
Not After : Jul 22 06:00:18 2026 GMT
Subject: CN=d3f2ab1448bde1664d5e93017b2b8c2f687dda1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:7f:c2:46:34:9e:4b:7b:80:fe:72:c1:13:
a3:82:f4:44:a3:ed:fa:0f:3a:eb:b1:da:17:bc:d8:
fd:d1:95:08:7f:dd:73:ac:02:06:9b:ec:dc:3a:01:
2a:58:20:60:c6:5a:a4:d5:56:31:2d:59:33:f2:b7:
fc:76:cd:2e:44:c5:96:31:c8:a6:63:32:21:10:27:
49:02:2b:d1:07:76:42:fc:64:76:97:13:e4:09:82:
35:8c:ed:91:91:4d:7b:36:05:20:95:e5:4b:f7:be:
1e:57:20:e9:57:5b:8e:6e:59:8d:71:27:b6:79:a2:
b9:48:4e:40:c4:88:09:6e:d5:a4:0b:9e:91:4a:a4:
4c:6b:0f:3d:cc:1d:72:92:f8:8c:14:43:8a:f5:f2:
54:ea:d1:e1:b2:ec:5b:a1:46:a6:97:b9:bb:51:f9:
75:e1:25:6e:38:c0:15:d2:78:22:a9:35:75:96:23:
7b:38:32:b2:7b:3b:4b:ac:61:b6:79:78:3a:9c:83:
48:c0:3a:cc:05:54:4b:c3:c0:f6:ea:c6:3e:96:bb:
da:24:39:56:f4:e8:24:ba:3f:77:20:56:2d:13:16:
6a:75:18:b7:18:de:c0:40:03:3e:9d:d4:39:ed:ac:
64:d9:e0:34:84:1e:cb:9b:a7:8b:c0:1f:db:dc:3f:
59:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F2:AB:14:48:BD:E1:66:4D:5E:93:01:7B:2B:8C:2F:68:7D:DA:1D
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fe:de:29:eb:73:b1:47:54:24:55:e4:3b:10:7e:02:a2:d1:
63:e3:ce:6c:75:b5:44:ee:d8:f7:5f:4d:bc:87:29:66:d2:a4:
fd:86:68:ac:f8:ca:c3:85:a0:9b:cf:29:d3:a1:5f:2e:73:11:
51:e8:d3:c8:45:59:48:b3:8f:1e:85:c1:7c:75:23:f9:2c:b9:
a1:71:1a:85:cc:5e:13:13:fc:68:f3:94:ce:b2:6d:e4:ee:4f:
26:fb:b1:61:7d:10:a7:20:25:e8:9c:41:01:24:67:fe:57:6e:
89:87:0d:d9:66:4c:e7:80:9b:ef:7d:c2:0e:e0:04:a9:87:a4:
5c:60:81:87:fd:9c:e6:03:82:0b:3a:01:38:f8:87:6d:01:88:
81:0f:60:c9:e1:7e:7f:79:8b:32:d4:60:8e:f9:d0:c1:f9:9c:
fa:8e:e2:d5:d5:20:eb:4f:db:9e:ff:ba:4a:4c:f8:cb:9d:24:
07:ba:14:e9:c4:c4:1e:e1:5b:70:e3:6f:17:51:43:bf:13:8d:
d6:a7:f5:ed:da:74:ca:64:a7:76:77:c7:8e:d5:5a:5e:4f:9a:
82:79:48:9b:6b:7b:88:8d:c6:78:24:2d:00:72:c2:82:61:91:
92:71:a2:37:ef:56:68:c6:18:61:44:4c:7d:24:fb:36:7e:89:
0c:02:de:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:58:59 2026 by rpki-client