
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: 4mhurUhuSaPILiWXfbV2XcZuMszVFeUVwgKLs9oLCbI=
Subject key identifier: D7:31:41:74:13:88:96:F1:9C:01:50:82:A7:82:91:45:3F:2E:ED:92
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019F5CA3A6FA0224A4948D97F4C7D507F13C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 19F2
Signing time: Mon 13 Jul 2026 18:00:56 +0000
Manifest this update: Mon 13 Jul 2026 18:00:56 +0000
Manifest next update: Tue 14 Jul 2026 18:00:56 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: oiO40+bSCiWeNUyCOxY3mkF2/Ww/LXr18rEqlYl3OmQ=)
4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 14:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:a3:a6:fa:02:24:a4:94:8d:97:f4:c7:d5:07:f1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Jul 13 18:00:56 2026 GMT
Not After : Jul 14 18:00:56 2026 GMT
Subject: CN=d7314174138896f19c015082a78291453f2eed92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:04:cf:87:5e:10:f1:95:bb:e7:6f:64:0c:
74:4b:8e:9c:42:c5:3c:6e:f6:af:31:5a:df:cb:ec:
64:9f:c0:95:2a:3e:11:b5:4f:3e:93:c8:57:86:47:
97:0e:07:96:8b:d3:43:72:7e:84:22:fe:95:81:d3:
04:17:31:04:93:f6:4d:d2:80:60:6c:57:a7:a6:2a:
83:fe:d0:67:02:0a:95:e4:8b:1e:e9:9a:52:0c:e0:
10:42:63:67:77:0e:c5:ba:55:0d:7a:14:5b:85:f8:
dd:bc:72:3e:78:1a:67:71:f0:e7:e8:0b:c5:e8:d5:
6f:fe:67:4f:94:4b:b4:2f:ff:6e:a3:b0:dc:ab:f8:
dc:30:c0:eb:ad:7b:bd:e4:4b:16:ef:02:7f:98:c9:
15:fd:3c:39:38:62:2a:ea:b5:e3:42:c8:54:94:a8:
31:32:d8:56:9e:fb:5b:51:48:33:68:23:ed:ec:9b:
d0:f9:a0:8d:e7:2c:bb:5d:b7:30:d5:32:46:0d:91:
2a:79:b4:4e:cf:52:03:1e:12:a4:60:01:a2:be:ba:
c7:ae:ea:fa:f2:15:36:12:e5:d3:4c:02:3c:a5:c0:
a7:af:b2:e3:a7:56:7c:9a:c7:e5:d9:8b:5c:22:77:
20:3b:e7:9d:38:31:2f:e3:e0:ff:82:a2:b3:96:63:
86:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:31:41:74:13:88:96:F1:9C:01:50:82:A7:82:91:45:3F:2E:ED:92
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:68:de:38:c9:ae:5c:10:52:e8:4d:f9:03:a4:5f:65:9d:26:
6f:3b:3d:7c:b0:8b:66:cb:77:4d:14:c5:a4:45:63:2f:1f:26:
68:84:77:07:fd:26:f3:63:4e:22:dc:98:61:35:e0:24:95:74:
52:ce:44:6b:dd:1b:03:fe:5b:e4:cf:d2:38:54:87:c4:e5:ba:
4e:04:40:a8:71:63:65:31:37:04:10:80:2d:f3:14:28:26:b7:
df:ef:1b:78:63:30:d3:26:6b:aa:85:1e:c0:10:11:e2:9c:c8:
44:ff:03:bd:c4:17:92:b5:57:ac:08:13:58:d5:10:8c:31:7b:
d3:5c:ef:d0:a9:45:f8:88:b2:78:76:e6:7f:4d:5c:b9:d8:ca:
81:6c:ea:ee:7b:02:de:9f:f2:bf:80:1e:55:77:aa:5f:17:90:
71:a8:04:d5:dc:06:62:7a:3a:de:9c:73:e4:39:12:51:7c:ec:
7d:1d:bf:62:5a:6f:d4:76:a3:1f:29:b4:9c:46:d5:c4:98:69:
17:9c:5f:a5:2e:ff:fe:2b:f4:84:39:27:e3:46:76:f1:08:cd:
4d:98:ff:85:00:b1:fe:12:7f:16:6d:26:8c:74:5d:4a:f2:d6:
70:21:6e:91:3f:dc:cb:b3:f6:c2:83:1a:42:a6:b2:a9:43:08:
11:76:29:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 21:10:06 2026 by rpki-client