
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier: 3P8eHWQPJgBnGpFoNM03FuJfVMn/1J0Wck2BqFvAWF4=
Subject key identifier: 0B:DC:50:19:73:62:21:CA:C3:BA:77:87:F2:33:77:9E:49:97:8C:75
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019FAB2CA28B0B0090F30670FE97EDC5FD6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number: 1098
Signing time: Wed 29 Jul 2026 00:00:56 +0000
Manifest this update: Wed 29 Jul 2026 00:00:56 +0000
Manifest next update: Thu 30 Jul 2026 00:00:56 +0000
Files and hashes: 1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=)
3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
4: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=)
5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
7: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: OOnSl7ELavEwN08WtBylBDQSSyZYkc3XvjlvqeSZCeQ=)
9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
10: lbJDMqkl3r_zP_8RcjCwdgnRqqQ.roa (hash: MLj9IAZg1W5TsVOSKsUt+tjSOZpaYeIgJDEMRDXfZGo=)
11: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
12: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:a2:8b:0b:00:90:f3:06:70:fe:97:ed:c5:fd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jul 29 00:00:56 2026 GMT
Not After : Jul 30 00:00:56 2026 GMT
Subject: CN=0bdc5019736221cac3ba7787f233779e49978c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:19:59:fd:d8:ab:08:30:8b:58:52:ea:b1:
7f:d9:85:bb:a7:52:8b:11:0e:3a:a0:80:0c:ec:b3:
93:0c:00:d9:ca:5c:97:f4:08:31:52:35:ca:db:5e:
05:0e:9b:18:42:25:1b:6e:93:70:cc:6f:01:59:e2:
86:af:91:f3:16:f0:c5:8a:0c:b0:5f:7f:89:d6:1f:
9e:ec:72:a2:34:8a:65:ec:b8:a4:6a:6d:cc:be:fa:
b4:e4:61:71:bc:3e:a5:f5:a4:33:b9:ee:af:27:82:
19:aa:e4:17:32:7e:ff:b7:3f:a6:d8:fb:b8:cb:67:
3f:ed:60:78:5e:06:90:ad:64:aa:40:e2:dd:c0:74:
1d:e8:29:f1:1e:ec:7e:e0:66:7b:07:0a:99:ed:60:
46:7d:fc:7c:aa:6d:91:12:09:b0:8f:f2:c9:f2:8e:
73:96:55:14:b3:31:21:bd:56:4a:9b:99:08:d5:45:
c2:ff:c4:36:b0:d2:71:15:49:21:12:6a:c8:2b:c6:
8e:44:79:9a:aa:7c:e5:ab:86:cc:fd:f3:88:e7:6c:
f8:bd:c0:1f:56:8e:fb:3f:7f:11:3a:e8:ab:3b:ed:
b7:6d:0a:46:da:58:a6:3c:93:b8:e8:60:30:3f:63:
c2:70:0e:89:f2:51:66:a7:d9:52:8e:d9:b0:1a:ad:
8f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DC:50:19:73:62:21:CA:C3:BA:77:87:F2:33:77:9E:49:97:8C:75
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f5:d5:49:0f:e0:bf:3e:d4:8c:ed:77:51:71:4f:33:3f:43:
23:95:52:8f:59:df:fd:3f:64:c2:b1:98:b8:9d:fd:23:b5:35:
e7:4f:62:ee:21:c1:5e:6b:75:1e:81:4d:08:d1:ae:2b:7c:3e:
50:ac:35:32:4c:45:5a:4a:82:d7:3f:9b:2a:35:c8:c5:90:41:
ff:12:c0:da:11:ef:cc:a7:2d:63:6d:cf:c6:c9:d1:eb:0a:46:
5a:6e:0b:42:5b:87:06:fe:5f:75:0e:93:a7:ea:3b:a4:5b:e9:
2e:60:6b:80:d6:f6:14:42:a2:22:c5:6b:52:c0:a9:1a:78:81:
67:b3:39:a2:97:e9:0a:b8:79:16:77:b6:17:ef:78:b2:9c:8d:
3e:90:ed:25:e9:ed:f3:f7:51:e8:d3:da:57:4b:f1:68:b0:53:
d3:54:10:46:83:90:64:16:2e:90:e6:b2:5f:be:2c:f0:94:5a:
54:0e:63:93:7d:6e:f9:79:05:2c:8d:60:e4:d9:38:7f:70:4a:
0a:87:d4:41:ba:27:30:87:12:39:0a:9a:69:1a:c5:27:2e:99:
9b:a2:cb:4c:b7:eb:8f:d7:72:2b:59:de:12:f4:00:3b:7c:0e:
ec:12:4a:55:9c:c5:3d:3e:e0:78:e5:87:ff:16:bc:b4:d4:e4:
9b:78:82:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:07:12 2026 by rpki-client