
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json)
Hash identifier: FSNTHfux+0uaipYSra6J7zzvShnmGtLf4BtGwAcE/aA=
Subject key identifier: A2:19:1F:72:BC:FD:C5:31:9A:81:DC:94:A8:6C:C7:91:21:B6:8C:FF
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 019E99289DC97FA978A8E2D2B55452116DD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
Manifest number: 1706
Signing time: Fri 05 Jun 2026 19:00:36 +0000
Manifest this update: Fri 05 Jun 2026 19:00:36 +0000
Manifest next update: Sat 06 Jun 2026 19:00:36 +0000
Files and hashes: 1: BKLkIdToQetqMN6t0fILb38dSDc.roa (hash: RhVkHdE+vukqBXIHV6N+0FaehH32ohYDLGAwN+SuRTk=)
2: CupzWU4aLHwacea9s2f26JgGU7w.roa (hash: YiVW0zn+2J0x+BF2Yslb930PEXt7HMZ5DbfmBNoWQKE=)
3: Hf9SE1c9_AO3kFICjo06WD1ExT4.roa (hash: Zcpcz8u2FNeH+3dXoD7WRhTdlszR9sgi9wm3DkRL4TU=)
4: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: +pv4Av8TKjDZeTr8YFzcB3RssG0HmnzZ+9FcZq7yRs4=)
5: V6V_NlUP57LahAmPSdJLWOxrfrk.roa (hash: PQq468qMgQ7iMbphbUgZdzLfF9PWviyerqDZHzWerVE=)
6: a6tV42bT2z7X2lsjs8cvX8HIAIc.roa (hash: NDbBw26iXwsVl/ElEophDI0QYBlkmtkRinFz/9BOzMw=)
7: ew5GxWmNdi8APxJ7DnyuV397vVY.roa (hash: scbuflEbcOaCfZ8YsAmmUBvMpXLhScUEwCDFhgE24W8=)
8: fObJjjriSFDg4fSQTq7ENWa9-zc.roa (hash: WGLV3VjdN5mD0f589CBjcyMgLQSoTV+NVe84m46+eBc=)
9: hcsvWgXQpRuMWY3WmGaGm9cGJ4A.roa (hash: dkGLaaklnk5lHe0yhu52I503lMVuY0bbx3ehGkFXyqY=)
10: i7574yuT4RZ2_MwlIM2VKqIIK2U.roa (hash: X+/UrliSCfToScMB/8/XDGdMggPWp6ennjed9G4uk1A=)
11: qOIniIo2K3_zis3JibLadioBPRo.roa (hash: 5h4shskfhopVb9L7z02A78iAajdnh2sIBdf4Kss8RH8=)
12: vWKFpPFVl35hfIog_KoQjclWrmY.roa (hash: 7m8wK3gsN1166dBeFVQxAfE0K89nsZEcg+lnonfGv9Q=)
13: wWIoMzB39ahvaptJv9NhKUQr9Cw.roa (hash: 7GV/ae9yumSfYZH3dmuAGtWW+nlGHJx1A9VViiivwD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:99:28:9d:c9:7f:a9:78:a8:e2:d2:b5:54:52:11:6d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Jun 5 19:00:36 2026 GMT
Not After : Jun 6 19:00:36 2026 GMT
Subject: CN=a2191f72bcfdc5319a81dc94a86cc79121b68cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:44:96:aa:ef:25:13:ff:c4:b8:2e:66:c6:
c1:d3:a2:c2:58:c0:ad:e3:6f:6b:58:ce:1d:bd:32:
17:6f:de:02:a5:79:76:50:09:ee:ff:f7:5f:76:64:
f4:80:4d:22:cf:15:c7:ed:e8:ee:8e:a6:9f:75:b7:
b3:34:4c:3d:68:fa:46:fd:19:08:75:26:1e:00:39:
77:f3:ec:90:cb:c9:78:83:95:09:ee:55:76:1d:e4:
5b:3d:7f:56:5f:74:a3:db:23:3c:8d:63:d7:f6:b4:
1b:6c:7f:fa:ee:16:08:39:6b:b3:a1:3d:7a:58:74:
7f:29:94:54:1b:6f:40:fa:a1:55:5b:b9:54:b0:a6:
b6:cf:5d:be:77:17:cf:8b:c0:13:ed:13:f2:41:68:
26:52:34:d4:f0:97:68:7f:94:65:b4:12:3a:dc:19:
08:85:3e:ff:c2:da:78:4c:bf:19:16:b2:2e:30:2b:
41:f0:77:7a:60:c4:4d:c8:29:14:07:4c:82:f8:ac:
45:ce:ea:ad:79:3d:6c:fd:82:6b:4b:59:db:6c:a8:
4e:7a:e9:8b:53:c7:dd:fb:3f:6a:f7:6f:75:aa:5c:
35:77:25:8b:fa:8e:01:a3:6b:40:00:6a:10:ce:3f:
e3:b8:03:49:81:e4:b2:94:e0:8c:fd:9f:88:84:bb:
c1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:19:1F:72:BC:FD:C5:31:9A:81:DC:94:A8:6C:C7:91:21:B6:8C:FF
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3b:2b:ee:d1:ff:1c:a6:b8:48:8a:35:67:ef:05:4b:09:34:
04:9d:f6:0f:bd:d1:f9:2a:0c:72:64:8e:fa:28:a2:c0:70:df:
99:1d:35:43:57:23:54:5d:a6:ea:ed:78:5f:7c:78:06:67:3b:
0c:01:ed:ad:2a:e3:6d:57:56:cf:de:e3:3d:83:f8:a8:1c:97:
97:e0:81:dd:f6:39:53:28:2e:37:38:f8:2f:68:06:b5:14:99:
ea:74:57:8e:44:9f:6e:ef:c9:ee:af:6f:1f:53:ef:fd:16:c4:
6b:6e:d5:b6:71:30:9d:f2:4d:30:04:b8:98:d8:3d:55:9e:9d:
bd:e0:99:84:68:42:59:a1:60:0c:a8:04:e1:d6:01:c2:0e:74:
f4:bf:c5:30:49:dd:ff:5b:01:37:02:59:e7:83:3d:70:07:58:
ed:60:f0:17:e1:4c:a8:6e:0e:11:f9:40:ca:3f:f0:36:14:c2:
91:b2:b8:10:4e:d0:ea:66:c0:3b:7b:1b:26:50:d8:ec:c1:61:
51:0c:95:5c:ab:2b:78:d3:59:9d:6b:db:68:71:c0:4e:6b:fe:
36:43:62:eb:61:6e:e4:13:d4:9f:7f:40:29:31:7b:51:33:d8:
4d:9d:d0:27:68:66:18:4e:40:79:d6:20:eb:f6:0e:c3:9f:f0:
bf:1b:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:32:03 2026 by rpki-client