
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json)
Hash identifier: AKZUQOd01+OB2jM+8O3yBod5FLD+CYB9JeQ97t2E4PA=
Subject key identifier: D1:D4:99:74:21:32:AC:7C:7F:AB:DF:D6:9B:78:22:68:62:EC:41:2F
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 019E2AA74D3303F8E475D17A4091BC2E8E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
Manifest number: 1915
Signing time: Fri 15 May 2026 08:01:07 +0000
Manifest this update: Fri 15 May 2026 08:01:07 +0000
Manifest next update: Sat 16 May 2026 08:01:07 +0000
Files and hashes: 1: Ab10LIDLRTF0PMThWTZR2XKCPUo.roa (hash: gOUOA7HUeObMo1sz87FojtFMHZKh1H5YBLGoqzYYHas=)
2: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: vjOaybgrr75e57dKNdX1eplrTM1R1YWXICPt7E4s2pQ=)
3: WKvQQ0vKtpL43A08LcaBXTbj1kM.roa (hash: PRKu/DhDcwlsm5Jxqp2u00fHvQbqCeG7Bd2bm+dr5Ag=)
4: WYkkzBha-wTT67Gvhww1_FOg7QM.roa (hash: S1GPXGttTr/+ACoT1bs3TKRF2XPsfPAL0AORzGoCF9M=)
5: fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa (hash: W2tlzy8p7bFGP6in7P36ocCzYFzrqqDwRCFH7LaoTu4=)
6: hatB16DXDw0_Vm1ySuNMj5Y6auw.roa (hash: hVNkkdPmq+q7XousYHRGOebUzbj6zgU5nS/86C8jF9A=)
7: icFgcPIuVEwDXoSkl0ySM_0s_10.roa (hash: m6BnteEoReQBu4GAYUMJxfQIRVgJC4sSvXHdkUa3NjE=)
8: jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa (hash: vtEwLtfqW4qkmELJWjSf6WMsJC95aJI8yky7ZJEN78k=)
9: lWZWuIJZ3q5_hVt6znDikSoBR3M.roa (hash: y85mPvpTXgrTdx2E8ZlH0eaEQJTPz5/4CbPHnZc0y/0=)
10: lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa (hash: DrSW8pSYEFjTMNFurufTgFjckkn7K2mmqSF0WbWEz10=)
11: vJQ8eWA9gitpdTEogU6FKIxSf4M.roa (hash: c/auuaX6uZTawydsm3NxKIP9OAI41TsWcjh2cXjpviE=)
12: vuBbsDJkWmoNnQMaSnTKljEK9f4.roa (hash: v05fmL1UJXoi2B7sFB3rnj4EDXcUe8R7u6fgG/Bd6XI=)
13: zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa (hash: how96F3OMhXkq8E95kXfSQSmzCi80yeTXVsw9qWAjXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:a7:4d:33:03:f8:e4:75:d1:7a:40:91:bc:2e:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: May 15 08:01:07 2026 GMT
Not After : May 16 08:01:07 2026 GMT
Subject: CN=d1d499742132ac7c7fabdfd69b78226862ec412f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:c3:4c:48:db:04:e9:93:3c:da:91:a3:db:
11:70:44:d6:f1:78:a9:9a:54:aa:7b:96:d2:0b:cd:
15:4f:5d:d7:0a:9b:7b:17:da:20:99:48:94:ff:51:
d9:06:6b:5a:c9:21:01:31:ac:a7:f6:ce:28:0a:ab:
2b:5f:57:1a:f7:39:15:d3:d7:67:7a:13:c0:e0:fc:
75:aa:eb:f2:14:a9:3c:e2:20:cf:7f:30:b8:75:35:
7d:1e:46:73:38:68:6d:e7:c0:87:da:f9:ac:1f:87:
4a:df:30:8c:d2:c6:26:2c:06:de:7a:02:65:c5:fd:
e7:dd:f6:ac:4e:04:f7:cf:80:ee:77:cd:fd:4a:6c:
b0:a0:30:18:d4:59:c4:22:9b:f8:27:c2:3e:c3:27:
71:e1:36:03:86:64:e7:62:e9:b7:5f:5d:65:c1:13:
09:28:d6:2f:7a:d7:5f:3f:80:32:a0:1d:08:c8:d4:
85:d4:f5:75:22:0b:e2:6f:21:58:1e:75:3d:fe:43:
54:2e:b3:53:94:a6:d6:1b:b8:39:2f:be:1b:11:44:
cd:5c:05:0e:7e:60:e1:a3:44:ab:5f:2c:9d:67:aa:
1c:ca:b6:3b:49:82:6a:c4:77:d9:4b:ef:91:0c:0c:
e2:43:5b:c1:6d:83:b0:3e:d3:8b:8b:c8:9f:c1:30:
9e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D4:99:74:21:32:AC:7C:7F:AB:DF:D6:9B:78:22:68:62:EC:41:2F
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:53:af:ad:0d:6f:df:d3:c3:f6:7e:1e:84:77:d2:6c:0f:6e:
52:c5:af:03:34:76:ae:c9:64:2a:b0:c2:ab:d3:8f:ed:91:14:
84:99:a5:26:54:d8:ef:e0:26:ce:2d:71:e0:db:39:3c:a5:85:
24:eb:ca:a3:a4:f5:0b:4a:e7:d0:bf:0d:d0:c8:d0:9b:72:8b:
46:d8:f4:1b:c9:09:1a:f0:03:cf:f6:22:9d:1d:bb:62:7f:90:
c8:40:d4:b4:68:3f:2c:06:03:dc:91:cf:33:7f:4e:97:e1:56:
b4:8b:d0:20:29:2f:81:21:88:9e:15:87:7d:d8:42:db:20:35:
42:9a:11:27:aa:9a:cd:f0:89:63:c1:24:53:ef:30:25:66:0e:
ab:51:56:2a:aa:07:70:e8:62:53:cb:60:58:51:4c:3f:35:f0:
e3:ef:97:cf:d5:1b:3a:b2:de:29:b1:01:2a:96:90:4d:f4:41:
1c:f4:42:70:86:f6:14:b7:32:6a:6c:ee:2c:99:fa:d2:68:c0:
fc:20:5d:02:3e:f0:62:04:ab:62:6d:e4:c8:31:f8:72:db:cd:
b9:28:c0:e9:de:64:31:03:17:74:f3:f6:2d:bb:a5:0a:aa:48:
f0:71:a8:e2:e9:fd:1d:63:9e:8c:35:f9:1b:19:99:46:b4:0e:
b0:26:a3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 12:43:31 2026 by rpki-client