
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: RC1nVW3eAGpp17OKFpRGc8QOeS2/U6vHj7k6MZGWE7U=
Subject key identifier: A9:C3:05:FD:15:07:3C:5E:D6:8F:60:35:A2:25:8F:60:2B:44:B4:AF
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019EA90965927477A8D3E805C8B43946BF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 1995
Signing time: Mon 08 Jun 2026 21:00:25 +0000
Manifest this update: Mon 08 Jun 2026 21:00:25 +0000
Manifest next update: Tue 09 Jun 2026 21:00:25 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: 08CUI5NcgIhWm/LNODVXvHt+l0hiuHtux4cRwKAKtzk=)
4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 19:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a9:09:65:92:74:77:a8:d3:e8:05:c8:b4:39:46:bf:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Jun 8 21:00:25 2026 GMT
Not After : Jun 9 21:00:25 2026 GMT
Subject: CN=a9c305fd15073c5ed68f6035a2258f602b44b4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fa:5f:77:4c:9f:72:22:38:71:b2:a2:3a:6f:
8c:92:c8:f6:cc:cc:d1:c6:f8:ab:d9:64:bf:33:bc:
43:85:de:ac:f7:9d:e4:58:e7:64:12:d9:1a:86:af:
b5:ac:d3:c4:79:54:a0:b8:f4:77:be:9f:d4:64:66:
ea:dc:e0:5f:94:7c:7f:dc:73:c2:42:38:b9:87:25:
20:e9:ee:d6:4c:c2:87:9d:8c:a2:03:96:85:b4:eb:
e2:51:59:c7:b5:63:43:f7:7e:c3:e1:89:68:51:fd:
8d:fe:8d:43:67:5a:8c:2f:6a:82:31:15:69:84:d1:
ac:5c:9c:1d:a3:e8:fa:cd:31:80:a0:5b:bd:23:aa:
ab:6c:a9:52:6e:96:af:f8:6a:04:d3:5a:3f:ee:0a:
28:4e:1d:f0:aa:7d:a2:78:64:fd:24:c2:fd:f7:25:
1f:2c:a3:10:b0:8d:2d:56:1b:c3:5c:c2:f8:51:11:
53:ad:5e:06:90:15:7f:7c:67:7f:2f:df:e7:f7:45:
ef:e4:3a:27:40:54:f2:4c:19:17:e6:23:22:22:1a:
1e:d4:4f:d8:f2:a5:ea:47:f2:25:4d:bc:20:96:b3:
4c:a7:14:e0:1a:c0:19:8a:1c:d6:30:83:63:69:7f:
25:59:31:ce:b8:52:7e:44:ca:a0:c6:8d:9b:cc:e1:
84:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C3:05:FD:15:07:3C:5E:D6:8F:60:35:A2:25:8F:60:2B:44:B4:AF
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0f:ac:0a:7c:f6:2b:fa:64:f2:64:94:35:39:e5:01:50:c8:
36:91:6e:c5:84:9e:97:37:f4:77:e3:1d:16:8e:c2:48:df:6a:
3c:ad:23:e5:4d:67:a6:a6:f6:11:15:53:33:6c:6a:a1:ca:b7:
b8:c6:5e:23:15:bf:f8:cb:40:76:10:cd:ed:cb:e1:97:77:95:
52:1d:fb:13:21:fd:37:b8:5e:86:10:a5:5b:26:15:17:57:fb:
34:93:f5:ba:a8:9b:77:3d:2d:67:90:1f:1d:ab:8a:18:13:dc:
ab:b8:8c:b0:94:37:e3:db:8e:18:d8:00:38:53:2c:df:8e:76:
9b:58:1c:75:b6:cd:78:e9:aa:9d:a8:fa:a0:98:13:7a:1f:d9:
54:fb:61:1d:b7:ac:b7:a1:0f:de:65:16:4d:e6:d8:94:b5:8b:
1f:b1:db:ba:fb:15:7b:69:bf:a1:3e:70:11:c7:d9:14:84:54:
71:0d:99:a3:83:2d:e3:be:91:e2:2c:ae:c1:c8:80:a4:96:48:
e1:2a:28:05:8e:ea:31:41:b1:bd:15:f0:3d:84:0d:27:33:4b:
66:5f:51:b1:94:a8:51:c6:63:b0:a9:ad:7e:b9:6f:a8:b5:bc:
0e:56:06:66:98:6a:a7:d0:3c:62:f2:61:5d:63:50:a4:b5:7c:
ae:f0:0d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 03:35:16 2026 by rpki-client