
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
File: 8uFg8M5eA1rzyyH039BOq56n7lE.mft (raw, json)
Hash identifier: atPEAIn+QjGogy55NVHAbevwfaZnM2QzVYkePYPqKhU=
Subject key identifier: F0:69:5B:2D:CD:9B:41:D8:01:46:E0:B7:32:19:5D:10:3F:75:A1:87
Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Certificate serial: 019F9FCCD33F574FB975D7CE498D0C03AB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
Manifest number: 0207
Signing time: Sun 26 Jul 2026 19:00:28 +0000
Manifest this update: Sun 26 Jul 2026 19:00:28 +0000
Manifest next update: Mon 27 Jul 2026 19:00:28 +0000
Files and hashes: 1: 8uFg8M5eA1rzyyH039BOq56n7lE.crl (hash: eMw5XVGS+XaR2Zvs5+Pt73r1YkmhFvjCLaS+zs37LVc=)
2: Ao4FawbWy1rx_3C0QBM_SiVJ59w.roa (hash: ZTZ0v5tj9CgEjBZ8gXz9+Xh8wVEjAJ0vxv+jI08fD5E=)
3: FRRRnwExpXw7a2MuDv5ABSNE0os.roa (hash: 3ZQFCRFjP8UeMQLhH1/qjBrVW66rsV7z4ra4rGbF/Rk=)
4: IYhXGcvuReRwLkKFqkHfMT0xdMQ.roa (hash: P65YHmORj/Qbi7gb1HICB61t5DJTFwQfC/ueE2C3wHQ=)
5: LD4LiJakMnd2fM_muaGzK3OCDm4.roa (hash: 06z+15zWX5rCsS3FhV81kHp2Sa4vXMzL9qdPTiJ9zeM=)
6: U7PSP9nWfWRKWIUoCFTyUjwxEDg.roa (hash: G17Pia5bNZc2B8AE0xsa/dxprFpgNsjPpfQnTzG97J0=)
7: ZZ8EJAvAm0C06wzFaBzSONJZFPk.roa (hash: HIvZs/TkMx+bymwhUhZwvlQVHu6QM24ito4FjiIQX2c=)
8: ZjMYC0UoF-rr4Yr68ciz53_Avuk.roa (hash: XSFfC2tpTl7pGI7s34smkuOaa4jrXUiaCPuucJLlqxI=)
9: eABulvX519zXYKkLmeandGZ9N7w.roa (hash: m6XnfSrV2frwGCv/l/D3+0tVwZvOqYONPwxqBxG3KcE=)
10: gDVnbdgyGBxPjaEc46h1SC6bKGc.roa (hash: bRdUEdhFNf/pMvUllLg5PTYpswbssaY0ednf3AqAQx4=)
11: h9XQo9sfSkFCznhFBhUYj0IPxa8.roa (hash: zxh5OD7tf1cu+nIhR68MGPvOj/rjhARaVJK2XbbAHBI=)
12: hxVjN4ViTYov07b0DOLl2w6qTEI.roa (hash: 5T+oFS29RJ0l8yQWiVqg0MoWL/i6NlSEWAxcmSYEMqE=)
13: ilqY9c8IbcEKTWk24AXRgSNrWO0.roa (hash: m73bbuMRMSiNr5UeY5P6BQ8Ud8zaXgZ2oA4zOG5Tf2M=)
14: s0HOCx3ToCFGRzZUHm_UV-cLZBI.roa (hash: OKS1HAKlGU2JN5vzskZAI17mKtPa16rejzU50FR3zwM=)
15: sGNYZDKF8s8_UsTeuK9XpTB6Wkw.roa (hash: gaT8D+qDaVi3KbUN95vQ0WglNN0OnaGWaUxlYVphb+c=)
16: v_MCckuvkmHRzh3YWE8nt-ZoR54.roa (hash: FGgmeFbXcFcehxYNJD3aNuzFTZwBgyIrsfMAVTMWYLw=)
17: zykPnjolFt2OKhMEu2SeOAG0N3k.roa (hash: vMmczSDv2P7kmvRApRVGBrOXghKNhAgyXktPnIT3lVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cc:d3:3f:57:4f:b9:75:d7:ce:49:8d:0c:03:ab:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Validity
Not Before: Jul 26 19:00:28 2026 GMT
Not After : Jul 27 19:00:28 2026 GMT
Subject: CN=f0695b2dcd9b41d80146e0b732195d103f75a187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3f:df:be:96:49:b0:da:6e:97:c1:dc:da:c0:
eb:70:56:71:ed:d1:12:4b:2e:7b:97:cb:fd:db:6a:
e2:b1:fb:16:42:8f:d6:bc:0d:40:3d:11:55:b4:c8:
9a:51:d7:68:0e:3e:1b:8e:c6:12:c1:48:14:f4:5c:
b9:5f:2d:ac:e8:10:65:ea:9d:7c:95:85:78:25:ec:
52:d9:4b:64:c1:63:f4:58:b5:5c:32:e0:d7:c4:08:
27:d5:a7:a2:16:45:43:4b:6b:fd:43:2d:12:03:e9:
27:90:0c:c4:98:5d:cf:7d:4a:38:57:cc:f8:e0:cc:
e3:78:f9:76:b3:9b:56:97:99:6c:17:eb:de:6c:33:
2b:05:78:e3:d6:29:6a:3c:ca:58:e1:83:23:18:8f:
4b:c7:2c:bb:38:14:ac:3f:1a:62:62:7b:17:6d:24:
22:b2:f2:9c:8e:6f:d7:f5:af:c9:2f:59:78:3e:0d:
60:0a:1b:17:0d:59:60:85:a1:c4:65:e2:1e:a4:9a:
ec:9a:02:f0:0e:76:78:cc:59:d2:09:fd:0c:3e:ca:
64:4a:d1:73:b5:de:c4:c9:90:39:cc:9a:8c:de:46:
74:8d:ae:78:5f:30:b0:e4:71:c4:a4:7b:50:f9:b8:
72:e5:22:5c:19:57:7a:cc:01:ff:98:ab:25:d0:4e:
ad:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:69:5B:2D:CD:9B:41:D8:01:46:E0:B7:32:19:5D:10:3F:75:A1:87
X509v3 Authority Key Identifier:
keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:73:fc:ed:a1:25:a5:52:04:5a:eb:e9:62:1e:db:0c:3e:0e:
7b:dd:a8:b3:c1:a9:b1:bd:3a:ae:f3:2d:c3:f3:e7:dc:ee:90:
79:74:a8:ed:1c:93:6e:aa:48:b1:a5:37:39:48:50:96:8b:45:
51:49:3f:46:d2:d6:ee:ef:ee:a3:ea:97:b9:3d:b8:f0:17:aa:
17:6b:9d:08:98:0d:b1:2e:01:64:6f:60:15:0e:ff:92:8f:85:
4b:92:b2:80:0e:17:7c:90:08:90:8d:98:4f:2e:53:b9:09:d7:
51:b7:43:63:c3:39:93:1c:9f:ef:13:b2:80:87:ac:e1:e9:e5:
8c:8d:63:b7:35:e2:a4:0a:f4:27:7d:60:52:aa:c7:e5:31:0f:
ac:48:6d:c0:1d:6e:22:9a:42:48:77:e8:01:32:6d:fe:f9:61:
9d:40:2b:a1:7c:e0:34:87:d4:d5:2a:29:66:c2:e5:99:1f:7b:
29:71:22:65:d4:00:71:30:3b:46:26:47:a0:36:4b:74:39:51:
25:55:e8:6b:00:cc:10:46:ef:35:6a:e6:23:a9:d9:3c:b4:e1:
ee:e4:f8:57:c6:52:a9:57:d2:ac:ae:7b:ca:ff:ec:44:de:1e:
de:c1:54:aa:75:8e:58:9d:22:3f:3c:45:ce:55:89:17:24:d1:
26:ab:af:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fzNM/V0+5ddfOSY0MA6uBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZTE2MGYwY2U1ZTAzNWFmM2NiMjFmNGRmZDA0ZWFiOWVh
N2VlNTEwHhcNMjYwNzI2MTkwMDI4WhcNMjYwNzI3MTkwMDI4WjAzMTEwLwYDVQQD
EyhmMDY5NWIyZGNkOWI0MWQ4MDE0NmUwYjczMjE5NWQxMDNmNzVhMTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD/fvpZJsNpul8Hc2sDrcFZx7dES
Sy57l8v922risfsWQo/WvA1APRFVtMiaUddoDj4bjsYSwUgU9Fy5Xy2s6BBl6p18
lYV4JexS2UtkwWP0WLVcMuDXxAgn1aeiFkVDS2v9Qy0SA+knkAzEmF3PfUo4V8z4
4MzjePl2s5tWl5lsF+vebDMrBXjj1ilqPMpY4YMjGI9Lxyy7OBSsPxpiYnsXbSQi
svKcjm/X9a/JL1l4Pg1gChsXDVlghaHEZeIepJrsmgLwDnZ4zFnSCf0MPspkStFz
td7EyZA5zJqM3kZ0ja54XzCw5HHEpHtQ+bhy5SJcGVd6zAH/mKsl0E6tEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBpWy3Nm0HYAUbgtzIZXRA/daGHMB8GA1UdIwQY
MBaAFPLhYPDOXgNa88sh9N/QTquep+5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUt
ZmNlMjE0YzZmZmRhLzEvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUtZmNlMjE0YzZmZmRh
LzEvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXP87aEl
pVIEWuvpYh7bDD4Oe92os8Gpsb06rvMtw/Pn3O6QeXSo7RyTbqpIsaU3OUhQlotF
UUk/RtLW7u/uo+qXuT248BeqF2udCJgNsS4BZG9gFQ7/ko+FS5KygA4XfJAIkI2Y
Ty5TuQnXUbdDY8M5kxyf7xOygIes4enljI1jtzXipAr0J31gUqrH5TEPrEhtwB1u
IppCSHfoATJt/vlhnUAroXzgNIfU1SopZsLlmR97KXEiZdQAcTA7RiZHoDZLdDlR
JVXoawDMEEbvNWrmI6nZPLTh7uT4V8ZSqVfSrK57yv/sRN4e3sFUqnWOWJ0iPzxF
zlWJFyTRJquvHQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 00:53:41 2026 by rpki-client