
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
File: C6yCgEcArTZTi_hvNMBz6XFDDaU.mft (raw, json)
Hash identifier: TJnW+z14ONArsO7stLlj56lIhOEH56uis4P+cCT0Y+o=
Subject key identifier: 8D:88:5E:54:60:1E:98:AC:44:8C:1E:D5:F5:1B:08:CB:25:85:DD:29
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial: 019F3A86BB394146C075D67574DEEF965B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
Manifest number: 19A9
Signing time: Tue 07 Jul 2026 03:02:15 +0000
Manifest this update: Tue 07 Jul 2026 03:02:15 +0000
Manifest next update: Wed 08 Jul 2026 03:02:15 +0000
Files and hashes: 1: 3zbGyukfQlvWlz1rIu3MF0i9ZQA.roa (hash: C8VCXrjogu4GEXHN+4VlV1RhYCbxfqeG8eCfQQqvC/8=)
2: 4zWqGYcx90MSsSObTI71OMevGLI.roa (hash: 2KPRh6/VRnqwHzM72EcE6I/hpiMNrQvfbcobdTHvrp8=)
3: 7qF8DvtzC3jirhL3pV2eCHws_Sw.roa (hash: PlA0iR4i8nMPJDQi1dSKU0Vsn1Phg8l6qs5AKvbNobk=)
4: C6yCgEcArTZTi_hvNMBz6XFDDaU.crl (hash: CPSKS7k+vWLgK2IV9+0Lg6QIdJBTsP/2BJMFLplLYyc=)
5: TYL3fd3U3hdntx9HEZmBNJvIfy8.roa (hash: e+FavOHdj6PxW9K+YpaIIbMqrQ5M/B4rSbRg/GiLGdY=)
6: X36wvkpUD5ZEtmHolX5djkBU7G8.roa (hash: 1peSiVa6+f8j5mPTp+kwnGd3XE3ejw1Eh+Z8/AWETA0=)
7: f5RT_hHMbwUMnFt-JoJl9jk0aq8.roa (hash: R7CzcVcdr1m+4aUYrv9u7aRaRpqSiQ4h6Ml1XYdGdCM=)
8: jIq1ZwfYXAAqF6SypiZfEAegC9E.roa (hash: v2vJlBOD+C5w7yw+8XzyFUOoQGvh/5fPqoNiFmi6fEA=)
9: molvQvJ_lXsmLhzkv5IAyHx3jBE.roa (hash: ix0VFib2vtnH3hKp8PnHjw409S+kU6b3YPQlaCcVI/k=)
10: sE6ob5p7cvBS3YZqxyoPQMbjYxc.roa (hash: dhUKIHoGV1Pe+2e5vIvUmP73NR0v7KSZ4nk35w2qwfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:86:bb:39:41:46:c0:75:d6:75:74:de:ef:96:5b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
Validity
Not Before: Jul 7 03:02:15 2026 GMT
Not After : Jul 8 03:02:15 2026 GMT
Subject: CN=8d885e54601e98ac448c1ed5f51b08cb2585dd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:18:22:11:37:4f:c4:44:4f:dc:c4:54:1e:
69:bd:68:2f:22:5f:b2:8b:61:82:a2:e0:84:05:8e:
36:30:f2:6d:c3:70:48:6a:44:db:c4:ba:2f:32:5a:
87:bf:2d:73:66:44:b7:74:01:69:55:16:25:b8:70:
74:7e:80:a2:07:f6:1e:f5:74:ac:78:12:c4:e1:ce:
3b:cf:1f:46:7c:4b:b2:a6:1f:bd:3d:2e:c1:d3:d6:
4c:81:51:34:15:90:c9:fb:83:a5:b6:61:74:a0:4d:
5b:39:d3:ed:2f:c6:25:32:0d:51:6c:6b:35:09:03:
39:74:11:0e:32:a6:c4:a9:c3:6c:50:5c:86:69:9b:
2e:6e:06:98:96:bd:ce:10:83:a0:45:f3:16:04:15:
ce:5f:8b:e8:96:9e:b5:e1:3f:61:ee:b0:7d:d6:3a:
81:17:26:ff:1c:cb:96:82:41:41:53:33:5e:94:18:
94:81:1a:4f:5c:01:e8:a0:4f:86:74:6f:2b:47:8e:
94:e4:1c:d1:cc:fc:16:52:5a:3e:cd:fc:1a:49:1c:
18:55:f3:a6:dc:c2:8e:49:ef:76:f5:a8:1b:21:62:
d5:4d:d7:88:24:c8:ad:d4:b2:ab:b2:33:1b:57:85:
9b:2b:20:ec:16:36:68:1d:52:65:55:4f:27:14:79:
e4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:88:5E:54:60:1E:98:AC:44:8C:1E:D5:F5:1B:08:CB:25:85:DD:29
X509v3 Authority Key Identifier:
keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e7:cd:45:58:ee:e8:6d:6e:1f:36:6c:b8:44:06:13:0c:53:
31:bd:2c:58:e8:52:84:76:ac:69:48:67:ee:40:c5:6c:09:f6:
26:73:ff:3f:41:38:8e:ee:1b:d2:db:fd:9c:69:13:16:71:68:
d0:e7:9b:f6:b9:78:40:ef:95:d3:c5:ee:8a:c4:d2:fe:c0:0d:
56:15:36:70:d5:e9:a0:f4:ef:e4:cd:e6:83:0f:11:9b:f1:74:
5a:fc:30:7f:e2:fb:b1:5e:83:7b:72:a5:eb:f6:25:c2:d2:5a:
a8:60:0b:7c:f6:17:ac:e6:8a:c6:9f:36:79:4f:e0:f5:91:83:
45:69:7f:7d:c4:d3:0e:79:db:02:ea:08:bf:7a:73:14:ae:54:
fb:5a:2a:d8:59:d7:f1:d8:07:b7:13:bf:10:aa:bd:07:c8:82:
a3:2f:74:0f:c0:17:b7:db:f7:48:f9:27:b2:59:bc:5d:a1:13:
a0:eb:87:a4:1f:5c:3a:8b:41:c4:f1:af:ac:27:b2:eb:e4:7f:
a6:81:b8:3f:3c:34:26:e8:40:76:0b:2a:5b:b3:1f:81:5e:be:
7b:97:81:66:6f:60:d2:b8:1a:06:82:f7:8c:01:f1:01:a9:68:
dc:af:55:ed:7a:03:05:26:a0:e5:20:e7:65:99:7f:d4:a5:a0:
f9:d9:16:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:44:18 2026 by rpki-client