
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft
File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json)
Hash identifier: JH2lV+CIVicS5erKqR7yep9+Jw1V5LPaWcJHK/0TP3k=
Subject key identifier: 56:73:C1:D8:38:98:07:D1:2B:2F:73:1F:D7:C1:D7:EF:42:84:09:B9
Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Certificate serial: 019FAED24E4ED5AA9083D316A47051D777E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft
Manifest number: 19DC
Signing time: Wed 29 Jul 2026 17:00:45 +0000
Manifest this update: Wed 29 Jul 2026 17:00:45 +0000
Manifest next update: Thu 30 Jul 2026 17:00:45 +0000
Files and hashes: 1: 286ljgduSQ23zXxMskYIQVpjxXw.roa (hash: 7kRo+hhGrmwGIHUv917EDTqyatYEBV1hJSeuWZhlap4=)
2: 4PDvFK89C4F409g_XmWPwr7q1a0.roa (hash: 9lF1IQm65iaYh5J0JpeOleT0SuGGi5cwQEdnoe/v5JQ=)
3: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: mPaCnoDfqItXL3xT8sFK8+8sefjOlAidWtk94KmL65A=)
4: XpUefWEiJeIsRivUE_i8Xfs2GR8.roa (hash: PBHeI5NfF0k/v47sxglrYiZdodvTKkFHSpMBQlDcdXc=)
5: ZIFHSotu32VSRWz3yy7p-c2LO-A.roa (hash: HtmF/vHud7OvPwqTimOkx4Bd9iGAFPGDNsHwtbVJBZ0=)
6: Zc2NwjC7aoT6KGmTlpJCVRtAAxM.roa (hash: Lw8AgQnNa+u3srZTik73U4zlVyuicSwiTs/U27h1T58=)
7: a0ljWjjOMmlqv-KUZ9yfJ5o3o08.roa (hash: HgXqjfFgX4E4spO/gFoOPoWjpP4kI1tcmHiNguLieIw=)
8: bPL_MeYosxpJav1FZrlBnVGpssY.roa (hash: xbaf1MsiC38LB8r3yBiWSr3FjpTVnJNfGoxcFxBJEYM=)
9: oP5ts0FtfK91btZ3P7x-bBdVAcw.roa (hash: Hav/3aYz5+a57hb3pfiEZH2IAAqH/VmCtBV7UH/ck2A=)
10: tXhbIuVpYeE_jd1CU4lv2cgwfnw.roa (hash: lxyF6ei0/QTcu7Po0gkCzFazsZNHVkwJorFWOFgBWYI=)
11: vjXTFvPzZIb1zeRSL_kprTEdqbI.roa (hash: JwHjdybMdJ5oxvKoHkQM559e6BBUTavDx0DxnmOgdS0=)
12: yvxp8xW14Xp2PiR7kJbkc75G14A.roa (hash: o93DGCCTavhE3gLHe6hFNvurmN1iNt5bMJ8d0jqfGPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:d2:4e:4e:d5:aa:90:83:d3:16:a4:70:51:d7:77:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Validity
Not Before: Jul 29 17:00:45 2026 GMT
Not After : Jul 30 17:00:45 2026 GMT
Subject: CN=5673c1d8389807d12b2f731fd7c1d7ef428409b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b2:e2:69:1b:fe:29:1a:50:57:4e:93:b2:c5:
29:55:44:63:2f:3f:ff:7a:db:8e:15:f7:d9:03:5c:
81:ca:1c:0a:55:e0:17:ef:da:99:a3:34:48:0c:05:
de:b3:87:2f:e5:ae:44:9f:fe:1c:5c:02:03:f1:c7:
0a:81:e6:50:7b:87:54:ab:c2:23:29:92:8a:85:87:
ab:f6:87:e0:f8:a7:f8:c1:92:42:4d:46:47:44:d5:
59:dd:64:90:d5:77:d5:fc:ab:d9:39:2b:e8:63:da:
da:92:88:57:15:58:bd:33:48:0e:74:73:fc:4f:3d:
60:e2:6c:86:86:e9:8f:3c:be:2d:45:36:c8:83:01:
62:f2:b0:ff:98:88:0b:08:39:f2:6b:93:a0:14:79:
e1:c1:b1:c7:47:48:a4:48:e7:f1:96:c4:df:ef:f6:
47:ba:ed:8d:a3:5a:46:39:9c:8f:0c:db:85:b2:2d:
df:a9:9b:9f:8e:f8:7f:c7:62:ad:45:d0:eb:2e:3b:
f7:b1:30:29:53:a6:37:26:d4:82:95:63:67:0d:f7:
2a:31:23:ef:04:64:cb:06:7e:a8:0b:6f:08:67:19:
d0:10:2b:da:07:88:4f:1e:f5:40:83:03:d0:81:67:
41:16:68:ad:fd:c0:bf:bb:04:60:77:5e:4e:33:81:
73:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:73:C1:D8:38:98:07:D1:2B:2F:73:1F:D7:C1:D7:EF:42:84:09:B9
X509v3 Authority Key Identifier:
keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:69:f3:7c:3d:ed:96:aa:34:d4:5d:49:73:ce:21:54:54:95:
a6:6f:be:85:19:d5:2d:ba:7b:1d:18:14:41:86:24:e3:bc:45:
64:bd:e6:1a:be:fc:5b:ce:8f:26:1e:3d:c3:8a:cc:ad:c9:89:
14:9b:b3:31:04:2c:ef:a4:f9:b2:48:48:b3:b8:26:13:bb:2b:
66:22:da:b7:24:cf:be:c4:d9:68:d8:47:49:de:72:6b:61:97:
29:a8:5f:e1:85:40:c3:81:75:ae:53:2f:c0:9a:43:b4:3d:c9:
bc:f5:c5:8d:ff:3a:ba:75:d9:32:d0:75:27:98:65:90:25:1e:
87:e1:e6:af:8d:8a:eb:aa:f1:93:34:9c:a6:a4:6e:d3:cb:3c:
5b:41:d0:68:5e:b6:b8:ed:ed:b9:b1:91:86:d8:a1:0d:c4:7a:
cc:cd:7d:84:8d:87:cf:a8:fd:6a:52:e3:8b:08:e4:05:89:5f:
82:94:72:1a:0f:50:10:73:d4:a9:1e:16:c5:58:48:d6:8a:8e:
ed:67:3b:37:4b:a9:ec:9a:77:5b:1b:34:0a:0d:6e:92:f3:6a:
ed:b8:6a:87:09:ea:07:25:bf:32:8e:9a:f3:a4:ca:87:4c:c8:
32:cd:5b:fe:4c:48:ff:62:07:9b:aa:21:c0:ec:1b:25:4b:92:
8c:8e:38:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+u0k5O1aqQg9MWpHBR13fpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk
NGJiNWMwHhcNMjYwNzI5MTcwMDQ1WhcNMjYwNzMwMTcwMDQ1WjAzMTEwLwYDVQQD
Eyg1NjczYzFkODM4OTgwN2QxMmIyZjczMWZkN2MxZDdlZjQyODQwOWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrLiaRv+KRpQV06TssUpVURjLz//
etuOFffZA1yByhwKVeAX79qZozRIDAXes4cv5a5En/4cXAID8ccKgeZQe4dUq8Ij
KZKKhYer9ofg+Kf4wZJCTUZHRNVZ3WSQ1XfV/KvZOSvoY9rakohXFVi9M0gOdHP8
Tz1g4myGhumPPL4tRTbIgwFi8rD/mIgLCDnya5OgFHnhwbHHR0ikSOfxlsTf7/ZH
uu2No1pGOZyPDNuFsi3fqZufjvh/x2KtRdDrLjv3sTApU6Y3JtSClWNnDfcqMSPv
BGTLBn6oC28IZxnQECvaB4hPHvVAgwPQgWdBFmit/cC/uwRgd15OM4FzTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZzwdg4mAfRKy9zH9fB1+9ChAm5MB8GA1UdIwQY
MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt
YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky
LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAumnzfD3t
lqo01F1Jc84hVFSVpm++hRnVLbp7HRgUQYYk47xFZL3mGr78W86PJh49w4rMrcmJ
FJuzMQQs76T5skhIs7gmE7srZiLatyTPvsTZaNhHSd5ya2GXKahf4YVAw4F1rlMv
wJpDtD3JvPXFjf86unXZMtB1J5hlkCUeh+Hmr42K66rxkzScpqRu08s8W0HQaF62
uO3tubGRhtihDcR6zM19hI2Hz6j9alLjiwjkBYlfgpRyGg9QEHPUqR4WxVhI1oqO
7Wc7N0up7Jp3Wxs0Cg1ukvNq7bhqhwnqByW/Mo6a86TKh0zIMs1b/kxI/2IHm6oh
wOwbJUuSjI44HQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 19:49:46 2026 by rpki-client