
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: JCxkAIizNgZBdhpIVRZNSyfoEInz5Cibqn7+V1//CpY=
Subject key identifier: 4E:35:D5:D5:6C:38:54:B8:75:F7:0E:EE:BA:40:BC:20:1E:9F:38:69
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019EF45B446BD1E3AD30210AA5FABCF896AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 19BC
Signing time: Tue 23 Jun 2026 12:01:22 +0000
Manifest this update: Tue 23 Jun 2026 12:01:22 +0000
Manifest next update: Wed 24 Jun 2026 12:01:22 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: h1nwlFUEV/+pajXZcQxjViNF5dQX0sHOXR8LixfNK6E=)
4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Jun 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:5b:44:6b:d1:e3:ad:30:21:0a:a5:fa:bc:f8:96:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Jun 23 12:01:22 2026 GMT
Not After : Jun 24 12:01:22 2026 GMT
Subject: CN=4e35d5d56c3854b875f70eeeba40bc201e9f3869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:54:df:f9:d5:02:49:30:a2:dc:05:1f:10:53:
d1:97:46:86:db:be:40:78:51:2d:6f:60:84:66:ed:
5b:82:64:51:4c:12:b2:41:96:29:c8:9e:2e:92:62:
6d:e7:76:02:2e:04:00:f1:90:88:5f:55:40:d2:f9:
a0:12:71:44:5d:2f:c6:8d:1b:a0:20:dd:ec:93:ca:
ea:62:56:da:57:f4:0e:10:6c:dc:cc:f3:bd:d3:73:
89:3e:e1:90:eb:97:b9:ab:09:4e:f2:c1:6c:9a:12:
03:a0:2e:3a:81:72:62:16:ca:98:47:32:34:b2:3e:
24:35:06:cf:70:70:92:bb:db:6f:02:62:5e:a6:4f:
22:96:73:27:ba:96:a5:c1:1d:18:ba:8b:b1:c7:af:
b5:6c:dc:34:c9:c8:ca:80:f6:54:27:a2:71:55:04:
e9:a1:fe:72:8d:23:f5:a5:20:d0:a0:12:ad:71:62:
59:89:bc:78:78:6c:1c:7a:22:27:ef:13:ad:91:12:
24:35:cd:e8:2f:2b:1c:82:e6:f3:02:b7:5f:a6:94:
49:37:a8:33:79:aa:19:d1:ae:16:39:9c:9a:9c:20:
26:ef:ff:18:6b:cf:86:2d:d4:86:fa:79:cc:ec:b2:
19:34:ae:72:51:b4:3f:47:39:31:94:06:41:a3:2e:
ff:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:35:D5:D5:6C:38:54:B8:75:F7:0E:EE:BA:40:BC:20:1E:9F:38:69
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bc:5f:cb:42:a9:a6:88:35:2d:1c:19:09:75:04:7b:d6:09:
f4:1a:29:29:c9:dd:c6:19:58:38:a0:d8:e0:22:4b:1c:02:54:
ba:65:f9:e7:1a:6d:0b:02:25:61:f5:22:54:67:57:f3:73:8f:
3b:d9:03:15:b9:24:78:57:21:3d:9c:a8:dc:18:e7:b9:3d:4f:
69:54:f8:02:08:3e:65:7b:87:85:32:2a:35:50:19:3f:1c:f2:
2a:98:a0:50:47:f2:d3:8b:95:b0:cf:8a:e8:a2:bb:2d:3d:d4:
4d:c6:e0:63:58:c4:e8:0e:aa:8f:a4:39:41:ae:5a:17:17:fd:
d4:51:41:5c:0c:ac:9f:6d:b2:6f:1f:7e:f5:e7:40:4d:79:38:
ff:c9:a0:37:39:7b:a2:64:7f:48:a7:30:b8:d4:2d:e1:52:2a:
7e:34:ee:a0:df:22:fc:34:df:b5:4c:01:f8:69:a7:46:aa:d3:
24:64:ae:ba:4b:cf:61:89:b9:77:2a:44:a3:53:9e:26:cd:b8:
4d:02:12:4e:ce:5a:68:84:73:e1:41:88:1b:1b:26:de:5b:43:
f8:d2:17:7d:5b:de:25:e6:fd:9b:11:af:ad:b7:5e:ca:8d:12:
40:fe:cc:fd:ab:53:d5:bc:17:a0:9b:08:71:71:dd:10:ce:59:
48:b7:84:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 17:53:35 2026 by rpki-client