
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
File: ZbfWaZg1v-moCB38EU3xv20hXac.mft (raw, json)
Hash identifier: /fwdyQnOwLL+YWJVubsPd5L9NZN5xRb+6BfeDO3j6DA=
Subject key identifier: 4A:2B:40:5E:98:AB:CE:BD:13:0E:6D:6B:1C:F9:DB:C2:0C:D1:83:2E
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019FCA138D86EEF912A2FD2142613DDFD9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
Manifest number: 1AAC
Signing time: Tue 04 Aug 2026 00:01:46 +0000
Manifest this update: Tue 04 Aug 2026 00:01:46 +0000
Manifest next update: Wed 05 Aug 2026 00:01:46 +0000
Files and hashes: 1: 1WCWC52zGfwCmY5V-mhdhgDriwQ.roa (hash: IPlYfdDKlG6GcFbb6yt9vpWAAJAp4h7ZVHeTEXhrSfo=)
2: 2293WVx5FEzWqVXSDjmLVc7kfB8.roa (hash: Z0We1fzMf0PQYdkcSo2x/cAXZoyZ0rwm8YewHU6T5Q8=)
3: 2KoAgZVTwnbWcixjMbqnJvf6xN0.roa (hash: p0gbt1YvA9hNbGitowNrqQTyinoOy92to8c/+jH2B7c=)
4: 55HWqxxZe2wnYl-SD-3TTNTZPYA.roa (hash: PHOed791pgRRjh0SKyECtJfcfZcGYeoyFrNZ2S7sdyo=)
5: B1hcAWVtfsu4p15wc7vb4f5FG2M.roa (hash: kyrwExxNdM9FgyuKFkeZaaofzfIrWd75BKVu637vFZc=)
6: BB19wgK_cXo8Dd4pF6PmXBrBreM.roa (hash: 3iQxoj4exX4X3C1YSZ22/4UJclsEWITyZFVoJzL/n+o=)
7: EerEbo6dEgHiwfgFLCrAnWDppgo.roa (hash: 6Lz61K63KtUQqm0ALtF5HndpRmjb7aGgv3XeEAtY0Gc=)
8: I1Ax98FMTUq1EZ8GdCpTaPZSTuI.roa (hash: HcHmzW2d0+z9EOnUudoaXJQ2cKcQ7/kyTrWUvsVJQrw=)
9: ICt1Rkbvy2PurXTbs0JUqBhl_E8.roa (hash: vC+h6HjFcV/FpKrWeC9krmj9LLxIWfjfzAQgLBkIKBQ=)
10: Lo8n8GTpAuX3cUT5TKIwpdDYMpk.roa (hash: LFfd8LdOzsN++zViD01pBmc6X7J6TGbEOTbK6bu+kU4=)
11: MDa6kjpECMXWe15W6-w-6g5-5AE.roa (hash: EhKZtfCh9xGJEskJActy0QvC9WEnI4730g54I6PP7+8=)
12: W2LQg6-KbZwplQNYht4GfUeX9DY.roa (hash: oHn90pVQF8lP0cmJLoeww27Hhkb8U2BBEb0V3tv842A=)
13: WFW_WIwBdI0SNLuZbC80uLnywXU.roa (hash: ECYS+U6BY2zt31zzKoFkN8wTRgzyvrgdtvRAK5RIgxM=)
14: XtF6dx1K_-9E8G1QrrAN0rjOP2E.roa (hash: AEIk+UMFJZOy6fARFY4HiJljniS60LJkRzj37goEaUE=)
15: ZbfWaZg1v-moCB38EU3xv20hXac.crl (hash: lxfu8PY9vOIwXodk5+WTFc7YyhYSGGsVGpLnDHp3/Sc=)
16: b73LYZVOKac6G4il-1ce4PTa138.roa (hash: pZGLRHEPXEVLg+1C0RtMLojmfnurp8HxJqliemmKo/I=)
17: bd2_haPLBRYi9ES34EvG-zee_fI.roa (hash: zv3v3Yxo4I1/H7/mLZQ/IjI9COcfhoJxeb//tFFD0cU=)
18: c6GILi92RmWHgC81JVzcin9qgpQ.roa (hash: /jZx+yR2zbucT8wVOYKro8tRY6PFAOqzqpqt7tcefH8=)
19: cuTKnPSYIqMi_v6Ugbvmok1PROw.roa (hash: 23+0bEujcw5tIRr1F8V97O5sEK7TfNzRLUEsi4oLeZQ=)
20: giZ2uZ_m5due4lBiPxv8SG1NOGc.roa (hash: 9B02223i6VysXTKxWCnxBQOkAZWOwRjQUTSDwwP8F0A=)
21: ja0BpQXhcblpKEj-Zj_RAjzr35g.roa (hash: iy0Afou5BdlAsZDL/FBHdBDLDYuwKrfJY54mLykthTs=)
22: jmSRD5Pbhaie_b0T8NixTJfcSnc.roa (hash: s2xY4deOusI8dO/f5m35S6W/k+iFhPCHHaOzT9YnjuE=)
23: lhRe_xHQCXI5rtB8SPIPogdMRdc.roa (hash: RTJfCFGZ0JUtgtMrlDAXPJi/7/7VB6A1h0/zy5VXyBQ=)
24: m35MBC3-R1Km-GWEprOI4k13d4o.roa (hash: LsPD64UtQd1Nb8CJ8XDG7o3lS49ig9cWrQe+LYlYhOM=)
25: mWBLEPz3C0Lf-l08xyY58aa8zT8.roa (hash: q8JaOwfKTrGzhPjlC43ijuG2sH1GANOpbIeobrHD4rg=)
26: mahoof4m7VQsfHWs8J1qWV__YZQ.roa (hash: fJTBlPt7bZTm/FjsAsBry9UuObsDLmAxGPqwEBr5S84=)
27: tLSGZw5-QpB_5fV81O2fLyOca60.roa (hash: QiSrJL6zpztpRwpWANYGtyIdsxsBMIWfzPt3CGOqWPA=)
28: xmMlfa7iRWWb2wsgVQjfEUP18xg.roa (hash: MZHFj2EgqlivJGFIR4zUNFYVY5Bn/cspVbef0X3zPHs=)
29: zMqk1-WIYUxSncp-81GKb9JoWog.roa (hash: g3omPs3FrgCp88PJmKaoUEjf80fMum+1oxYyWWIAYGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ca:13:8d:86:ee:f9:12:a2:fd:21:42:61:3d:df:d9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Aug 4 00:01:46 2026 GMT
Not After : Aug 5 00:01:46 2026 GMT
Subject: CN=4a2b405e98abcebd130e6d6b1cf9dbc20cd1832e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:50:88:da:e6:7a:86:21:4c:32:26:bc:2f:21:
a2:08:a4:21:7e:7c:4f:db:79:66:2b:b2:90:ad:65:
6e:2f:1a:6e:90:24:50:79:be:e2:c6:e7:f4:97:91:
11:51:83:06:d5:a0:ca:51:86:ae:72:35:a3:b4:71:
5d:7b:d0:1a:d2:28:bf:1f:1b:62:ae:e0:a5:c8:ea:
ba:b3:01:9c:ee:12:82:41:10:a8:91:fa:ac:fb:b3:
09:08:ae:f8:57:7d:1f:3f:e9:83:8a:ad:e2:76:62:
24:91:1a:07:ae:9d:13:f4:2b:d7:61:4f:2e:89:11:
3e:79:c1:7a:b3:2b:18:22:3d:10:c1:c0:7b:87:1e:
d4:f4:8f:d4:94:ef:18:13:24:c5:be:88:5f:51:d7:
a9:73:21:65:1c:b4:05:72:d5:74:48:3f:fa:f0:4b:
ae:c2:1a:73:4b:96:c7:60:6c:90:21:9f:a8:98:09:
46:37:7f:c6:58:10:d3:78:47:b2:da:3e:00:4c:cc:
df:ee:1a:57:a8:5e:72:3d:1b:11:c5:af:04:69:7d:
26:be:20:d6:88:76:80:29:d9:0d:80:45:aa:b3:d5:
d2:f5:93:9f:43:f2:13:c2:c9:37:8f:52:d7:8f:64:
40:8b:a9:63:21:51:b8:06:d0:85:21:26:bb:e2:38:
e2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2B:40:5E:98:AB:CE:BD:13:0E:6D:6B:1C:F9:DB:C2:0C:D1:83:2E
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c8:7f:d1:cb:ef:6f:4b:ed:20:6e:da:99:3a:d3:ab:65:c9:
6a:11:d9:31:8b:1c:71:fc:bd:21:12:af:61:94:8d:12:49:f0:
17:0b:49:51:4d:d8:25:14:38:fc:34:f2:ab:cf:1b:7c:58:ac:
85:1f:7b:4e:da:bc:7a:ed:6c:2d:d7:3f:9c:b1:cd:27:86:5f:
c9:85:ee:68:4d:99:35:ae:77:7b:07:f4:bf:8c:e7:07:13:df:
fa:7a:e7:b2:50:91:ef:2a:4c:b3:ae:81:1e:dc:11:20:2d:1e:
20:65:fc:fb:ea:fa:32:ea:e2:eb:a2:fa:4b:e4:43:81:e7:3d:
a5:0d:52:7b:c5:4d:d1:54:b3:b0:11:d7:82:42:21:84:0b:32:
b1:1e:a7:4b:c2:f9:ef:80:90:07:b7:7d:57:f7:81:8d:02:56:
89:c4:4f:79:41:92:a1:02:70:4d:2b:51:15:59:75:e7:ec:ba:
17:eb:dc:21:eb:30:53:67:18:0e:72:56:27:53:40:39:e3:66:
32:d3:f4:7b:15:32:8a:b1:ed:81:92:0b:a7:f4:c7:7e:0a:5f:
24:15:b4:e0:fa:03:cf:8b:32:1c:15:1c:99:14:25:33:88:bd:
f0:1d:b3:0e:4b:82:c7:50:99:bc:ba:f9:13:87:14:85:82:1a:
0b:c1:9b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 08:46:38 2026 by rpki-client