
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
File: 6kaWPMR52tvjxSI0q5-rqoEi0ls.mft (raw, json)
Hash identifier: rqk0J764JJbH2DNEuQi4vQBr48Mxj7T4//M4DsYTbME=
Subject key identifier: 14:B5:7A:DC:B5:9F:D3:DE:B7:06:CA:82:CA:87:4E:56:58:FE:9F:27
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 019EDC895E8B5596CFCDBF88E31E9DD1255D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
Manifest number: 1991
Signing time: Thu 18 Jun 2026 21:00:50 +0000
Manifest this update: Thu 18 Jun 2026 21:00:50 +0000
Manifest next update: Fri 19 Jun 2026 21:00:50 +0000
Files and hashes: 1: 1-V2f5BIvAjoxWtMfXiOEdpxut6E.roa (hash: D7oyZz1oHRszroBqObV23g+p70gyyYzI6HwkfnsCOpU=)
2: 6kaWPMR52tvjxSI0q5-rqoEi0ls.crl (hash: HhFXT6X1BlhInRAmauAYjy8EXMzD0i8+lfjJkNdjmVI=)
3: 7hi7Ah4iY_QQeOlVJayptAGSNSQ.roa (hash: 91eReMLkF+2CXAAIZp2KhXfLlZYAztOnwmcmPnVUzXo=)
4: 9R90z_RXFkZAiwMA8btLrqNKc5k.roa (hash: qB3OSrsx3CWWt5hbnFdtOpLb0xWqshoihPM7A2OR0ZI=)
5: 9cn7oO0iiJOK2Jrlawx7PDY1feo.roa (hash: j5TG1qDIuGwfkqIJMBOyK7GFpL9NpA8P1Hsl6lon4S8=)
6: JDTZDW6AYWQ-yj7N5Zoenz19vXY.roa (hash: aJ6VAzk0xVWZ+1DH33f1NLSDcnI/7+vJFB3jbl7CnPc=)
7: QaR40Du4QHojtPoMdpOj--q01WU.roa (hash: eIGnLm0U97IrEJBoUThT3XNpPhCvMXo7GasLn6DQpoQ=)
8: _iw4-UbxRcpMoWsfFn6G2aiGN-s.roa (hash: 2naXiACb6/BywUEITZo6HGPyiSxLs5Zs4g1/62TMQcU=)
9: burJ78lKaBi9GwpclBHxJ1tt3J8.roa (hash: 7zKgA0U3yskpNhBj2DmX/6y6Luj79ABkwPUXMuxefqU=)
10: h2gp67O50OZSa1oqQZXjN2SNpx4.roa (hash: Pa+pjoEKIMF2XBf3tbxUYkCZYzHfL5nJuwgyvpsFLdw=)
11: mtubXUlBQXjcnE7fuf616NzQiL8.roa (hash: ZPi+7TMbUx5kPi5sDdlZQektqLQyg5jCkWs9e2Cya6g=)
12: sLcjP0MexoJKRfJdT7_XekWEx5g.roa (hash: 81Gv1gjQe+8o8rD8eLhttbKdZxs2A/IOu9hlnmcGBtM=)
13: tEVXcAqmFhkbtGLmUdbLn_80yig.roa (hash: 9MErMfs8Nn0borG1HaQK08aY1yTDK65zdP9huz/FJ9g=)
14: wFIC1mkSpA0e2UovbVVh_Scnn38.roa (hash: gvnZu9oBw0R11C5ZwnQeTQrVmEIlj6ltv4xIOtBZ5cQ=)
15: wbkCFCpGOAFv3gQa4dX5dSBrtR8.roa (hash: nYzqM3na5q/wwfaIOmk+FxvcOctc4P9IAUI7PFRpl7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 15:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:89:5e:8b:55:96:cf:cd:bf:88:e3:1e:9d:d1:25:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Jun 18 21:00:50 2026 GMT
Not After : Jun 19 21:00:50 2026 GMT
Subject: CN=14b57adcb59fd3deb706ca82ca874e5658fe9f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:48:5f:d9:d7:e6:5d:b7:61:c0:69:27:1b:63:
e9:f6:2e:e4:a4:63:f6:6c:e5:68:6f:0f:16:bd:8e:
e1:8f:8a:08:16:b9:d8:19:93:cc:b5:8d:96:0a:d7:
61:52:e0:03:1e:8e:b1:d5:77:47:61:e6:5e:30:74:
63:6b:a5:de:3d:ff:af:16:04:9a:1d:b9:e8:c0:a0:
3f:0d:c3:92:8f:d1:ef:84:f3:c0:d4:16:eb:c4:c8:
6e:da:bd:4f:55:ee:36:05:07:c5:41:64:34:5b:68:
ac:69:fa:53:1b:4d:81:08:9a:92:09:4c:e0:47:3e:
c2:41:a4:83:73:a6:0e:d3:bf:98:56:3e:b8:38:05:
83:d5:fa:59:c9:b8:26:c0:a0:b7:93:7a:61:50:e4:
e5:63:25:3e:44:a7:a9:0b:b8:05:03:00:e0:43:23:
f7:df:45:12:23:e9:91:09:18:76:5f:55:93:67:49:
c4:e1:00:31:d4:81:69:f3:8a:e6:e6:70:eb:50:82:
3a:f8:ad:ac:de:84:05:e4:66:2f:79:d7:42:96:ca:
e1:ca:5e:bc:2c:ad:a6:8a:ef:90:4b:60:42:9b:19:
91:7e:43:55:ce:fa:19:87:33:df:ec:aa:21:42:40:
62:ea:1e:57:49:a4:be:33:a6:4e:23:d1:05:c1:54:
38:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B5:7A:DC:B5:9F:D3:DE:B7:06:CA:82:CA:87:4E:56:58:FE:9F:27
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:64:37:2e:50:7e:83:24:b5:ee:bd:ba:21:ee:27:38:0a:68:
64:9e:c9:b9:2c:85:e4:a2:3d:ad:79:c2:1a:a2:5d:e4:dc:95:
5f:77:89:92:32:41:53:9f:12:b1:a7:3f:6d:2c:7b:45:7a:f7:
af:2c:fe:6f:1c:d3:ac:78:aa:b8:25:75:2a:e2:ff:4a:58:58:
18:93:56:fe:19:67:8a:c5:b0:50:e8:9d:c9:95:ab:b2:b9:ea:
98:eb:93:50:99:64:b4:fd:49:4b:5a:c1:2b:ea:e1:ae:b3:97:
8d:36:ff:bf:ea:93:b5:f0:8d:58:49:cb:6b:24:8c:4b:5d:4a:
f1:71:3e:f7:62:db:c4:f2:38:b8:63:28:f2:80:25:b5:4a:cb:
a4:e2:86:4c:c1:28:81:3e:12:42:9e:b1:15:ce:0d:52:b2:6e:
50:9b:fd:c4:d4:c3:ba:95:4a:ed:97:39:1f:d3:8a:21:ad:cf:
b5:c1:05:df:76:3f:52:f1:3b:3e:36:fc:f9:c8:cf:e9:e6:21:
da:12:85:ca:4b:49:b8:72:47:7b:64:bd:71:f2:ad:48:4c:a5:
6a:1c:c3:13:1a:77:bd:60:ea:94:21:52:a5:8b:7f:53:2c:e1:
76:c3:61:22:c2:0a:f4:dd:0f:9b:20:3a:32:e7:cf:8d:45:07:
b1:53:b0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 23:22:37 2026 by rpki-client