
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json)
Hash identifier: 5HsG36MrmoDQgdgd/Kznn42cmhVuDWRccBCqWuqraV0=
Subject key identifier: B5:D2:AA:8B:59:D5:25:A0:5D:0C:80:42:7D:05:4B:AD:35:AF:A3:B5
Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Certificate serial: 019EE21EE3995FD1F58CCCA58FAE295AF995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
Manifest number: 1978
Signing time: Fri 19 Jun 2026 23:02:15 +0000
Manifest this update: Fri 19 Jun 2026 23:02:15 +0000
Manifest next update: Sat 20 Jun 2026 23:02:15 +0000
Files and hashes: 1: 1-5YvMXH0hxTnFsj1sAzG_06N-p8.roa (hash: qtH86zFamX3mvPAvdw+q4UCXn4ioDZi9V1NWUgQSNY4=)
2: FVTkjzWbmN1CXQ1gquYHPct9ixg.roa (hash: O+F6tjESCYzZkWop7KXE+D6dIUDkHaDfPEsn4FO2i5Y=)
3: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: T98Wr+HCzoD6YXDVzDvNnM1rwri4bKJnjjuicYiydBk=)
4: U_NZYpjmvtYZaAL9QOJbt18Da90.roa (hash: ImEoqLKkocpZGN3jliyG2JmnXa2NgKRx1aFT2s7Ccsg=)
5: XjDc2QA9m4quHMdfD5XNqmD-sRU.roa (hash: hUIq0ryrPFUtWnGVn0EVGNy126+7rvo1zZWi0URfcgg=)
6: b-jvFTusq2yMHvQus-EOGvQIcIU.roa (hash: UEESHc2CoqAdsZBnwreDavJ8dh67qE0F5/NXF/uJif0=)
7: eVf9uWw4an4J37lWXFXCY7TXLRA.roa (hash: TLeYBm2fbdmHg6RfdNeCWlTy8uamiAq/QUF9qcFVMZU=)
8: ossK8NVWIjYFpVS_EefAqYZy2IE.roa (hash: /y0pnw5X9uBmKvZNWFvXcQIM9KTs6u2DfBY5eqhbuoU=)
9: tsRs_smMGnXJS6Ngg5EdidV6amo.roa (hash: s9qZIcL7Vpb5CW9P2b/OUKeQv+DX4uJC5U3wk2Lpo2c=)
10: txvH1TOH6wMQ5yQgLlacwoKKBQ4.roa (hash: edU/OVpHTHKV2scSWmXngs1gD9tCdP7QXrGFexnNs6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e2:1e:e3:99:5f:d1:f5:8c:cc:a5:8f:ae:29:5a:f9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Validity
Not Before: Jun 19 23:02:15 2026 GMT
Not After : Jun 20 23:02:15 2026 GMT
Subject: CN=b5d2aa8b59d525a05d0c80427d054bad35afa3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:24:7b:c9:5f:54:de:df:90:de:06:40:8b:
b9:c4:63:d5:42:5a:ea:b7:f9:d8:b0:39:ac:c2:a8:
99:44:ec:48:09:49:04:5e:ec:d7:90:1a:ee:a7:29:
e2:33:8f:be:99:f6:7e:51:57:9a:b6:1f:aa:eb:1d:
3a:bd:49:37:84:fd:7a:1e:34:46:be:29:5b:8f:84:
0a:b8:27:5a:98:77:c0:2d:0c:a8:c5:60:b9:0b:3b:
6a:4e:15:c0:73:41:27:43:b6:0a:fe:91:38:0d:cf:
ce:d1:d2:07:71:c2:f4:92:54:58:b7:b5:1c:af:81:
d3:09:55:97:a6:13:8f:4c:b8:1d:0d:0c:54:0e:99:
d5:06:09:6c:3e:b2:8c:d8:1b:84:86:e6:0e:f6:58:
27:72:35:19:77:f8:ad:f8:b4:6d:71:7b:1b:78:53:
85:f0:b4:db:ad:37:cd:b1:f1:3b:c4:6f:d8:c0:f2:
b0:1a:9a:9f:c4:89:4a:a0:b0:35:3a:af:4e:ca:dd:
22:2a:cb:ca:6f:be:1e:f1:1b:6f:69:27:8d:ab:1a:
78:36:ed:92:2a:cb:ba:15:b2:81:48:35:cd:66:79:
dc:a3:d5:41:bf:8e:1f:ec:6a:8b:58:e2:1e:ec:af:
e0:65:52:13:67:31:18:de:ed:ed:8b:90:f7:1a:99:
4c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D2:AA:8B:59:D5:25:A0:5D:0C:80:42:7D:05:4B:AD:35:AF:A3:B5
X509v3 Authority Key Identifier:
keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:dd:28:9c:d6:ca:cd:7d:59:fc:7e:b7:22:5a:9c:ce:8c:20:
9e:64:37:4e:76:da:53:67:05:32:19:b0:ee:4b:6d:dc:1a:91:
4c:f0:e6:bc:d5:94:7c:39:54:8e:be:1f:79:73:fb:7b:a6:1b:
a7:50:6e:90:d7:55:09:0d:aa:c4:22:bf:1e:2b:dc:e0:1e:6f:
63:fb:e4:2f:6c:b9:e4:8f:ed:80:25:06:db:45:b9:0f:db:08:
59:26:70:ab:b5:79:31:4b:78:dd:dd:84:6c:68:c6:50:16:40:
c2:61:46:9a:6a:90:39:94:bf:88:0a:74:71:c3:cd:5c:b6:d3:
f5:f3:dd:0e:b1:ec:e7:8d:41:89:95:e7:48:49:9d:22:eb:bd:
65:3d:e8:17:d4:fb:36:e9:76:d6:6d:82:8e:41:9f:ef:d1:71:
47:74:b6:db:ea:63:52:83:1b:8f:56:a4:e4:fa:b4:44:b7:04:
1e:85:8f:c3:fa:1b:2f:b7:74:fa:58:91:15:4b:77:fe:68:b3:
09:75:fa:04:07:59:49:63:c4:43:61:5f:84:0a:49:c6:0f:d3:
5d:34:da:78:36:28:89:41:a6:3b:1b:88:07:9d:09:59:cf:f0:
be:3a:2e:f3:5b:76:f0:ca:9f:5f:72:eb:72:78:24:a8:58:15:
4f:a0:6f:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7iHuOZX9H1jMylj64pWvmVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2
YjJiNDIwHhcNMjYwNjE5MjMwMjE1WhcNMjYwNjIwMjMwMjE1WjAzMTEwLwYDVQQD
EyhiNWQyYWE4YjU5ZDUyNWEwNWQwYzgwNDI3ZDA1NGJhZDM1YWZhM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaoke8lfVN7fkN4GQIu5xGPVQlrq
t/nYsDmswqiZROxICUkEXuzXkBrupyniM4++mfZ+UVeath+q6x06vUk3hP16HjRG
vilbj4QKuCdamHfALQyoxWC5CztqThXAc0EnQ7YK/pE4Dc/O0dIHccL0klRYt7Uc
r4HTCVWXphOPTLgdDQxUDpnVBglsPrKM2BuEhuYO9lgncjUZd/it+LRtcXsbeFOF
8LTbrTfNsfE7xG/YwPKwGpqfxIlKoLA1Oq9Oyt0iKsvKb74e8RtvaSeNqxp4Nu2S
Ksu6FbKBSDXNZnnco9VBv44f7GqLWOIe7K/gZVITZzEY3u3ti5D3GplMPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXSqotZ1SWgXQyAQn0FS601r6O1MB8GA1UdIwQY
MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt
YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0
LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADN0onNbK
zX1Z/H63IlqczowgnmQ3TnbaU2cFMhmw7ktt3BqRTPDmvNWUfDlUjr4feXP7e6Yb
p1BukNdVCQ2qxCK/Hivc4B5vY/vkL2y55I/tgCUG20W5D9sIWSZwq7V5MUt43d2E
bGjGUBZAwmFGmmqQOZS/iAp0ccPNXLbT9fPdDrHs541BiZXnSEmdIuu9ZT3oF9T7
Nul21m2CjkGf79FxR3S22+pjUoMbj1ak5Pq0RLcEHoWPw/obL7d0+liRFUt3/miz
CXX6BAdZSWPEQ2FfhApJxg/TXTTaeDYoiUGmOxuIB50JWc/wvjou81t28MqfX3Lr
cngkqFgVT6BvVQ==
-----END CERTIFICATE-----
Generated at Sat Jun 20 03:18:09 2026 by rpki-client