
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json)
Hash identifier: JNf+sVAExUPmqG1LLBqu/LS0WhT81WzT4QV2pylivWs=
Subject key identifier: 69:FD:86:C3:73:1F:78:00:83:CF:96:2F:D4:95:C1:D2:84:93:2D:F1
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 019EB84602FFC5B1C46DBCAD14F1E3D695D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
Manifest number: 195F
Signing time: Thu 11 Jun 2026 20:00:56 +0000
Manifest this update: Thu 11 Jun 2026 20:00:56 +0000
Manifest next update: Fri 12 Jun 2026 20:00:56 +0000
Files and hashes: 1: 6EiFZKIQWAEn8OFVy62rq2hePVc.roa (hash: QqaEwKcSsaYt3wwf9x5zbgaPoA6qxMBDNuqLJjfSh3E=)
2: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: Gc8+BUxZs/DiUGvcacVmtsvsspgx2mgBxhnGQxX4ACk=)
3: 8nyc8D2U6ZLNC1jg1xTgLIB5O08.roa (hash: UjE3wubUY3p3vPXEL528/Y/zzZrPn9j4CkCZh6HPAm8=)
4: D8drYTgqt32Cqf3EAiV6kDEeJmQ.roa (hash: z2zUysrNuxBIuhiC3z6/alcclEfX1JrDjmY7TAheY/g=)
5: FutR1Anwjf0YPYgj24VkOnnpOKo.roa (hash: B1PUo1d5o9i7GHA7LLQ+U0epYNN9/13TWk0w7UgND6Y=)
6: HrEvCC8IhGVeGnzBd0VRZALtork.roa (hash: O2TX3efNC8L1kVYPj9yl6qN6Xg9peYzVQTc557TbA/U=)
7: Kpq8EZf55_gV3FvEsn5mjf_dpBU.roa (hash: 2nhGvk06IqlLqxKExuqHomEp9VHs4mN4Vn/X8wYfMBo=)
8: U_LfKCv5kJDOuObeAwMorX4Nmc4.roa (hash: ecSv+ahB4B19FetdtS+R40A/h+b9mvwFfb6awkKuwag=)
9: _x6aIQIYgxoNnvNtpDTT6-qH5fs.roa (hash: j+sPJji49saMlwCW4eBAQImk7LYRvTzCGkaTq0ojLDo=)
10: cCLQDT_9t51iKlaGarf8PuI7ZuE.roa (hash: p225RnWWY7l8rkaX7oOrNPhwDG+u+RY9z5HJIbVDWT8=)
11: dOGEvxWz_zQwe0ywxB_yohVohyM.roa (hash: mrA0JieT5fE1JYF+wUVSCw2S+TnNb/74IV4H+fC+v3w=)
12: wYnNwRf0L8-7zAlQ9eMsEnpatqU.roa (hash: vGGDkEQtDcGYvJgapMsj38d8WJqbdN5ZD4U4q0HVb6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:46:02:ff:c5:b1:c4:6d:bc:ad:14:f1:e3:d6:95:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Jun 11 20:00:56 2026 GMT
Not After : Jun 12 20:00:56 2026 GMT
Subject: CN=69fd86c3731f780083cf962fd495c1d284932df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:fd:43:c9:41:f9:83:83:74:b1:ba:76:a6:
6e:74:93:b0:e0:da:6f:03:06:6e:62:d7:8f:9b:4a:
d8:14:3c:e1:b2:a3:7d:59:84:a6:ae:72:f2:7b:2f:
ca:7c:35:8d:02:9b:4e:72:29:ac:72:bf:eb:e1:b0:
65:70:ce:23:95:6d:47:13:cb:6b:1d:1f:bc:22:eb:
92:30:20:26:91:71:65:d0:cf:9c:81:1a:a0:d3:98:
30:80:c7:8e:61:66:74:7a:7a:1c:64:dd:cd:31:3d:
49:7c:08:07:68:cd:f8:64:1e:a7:d9:08:d0:45:7d:
ce:d7:12:72:e4:53:91:f0:cd:0f:49:7d:5f:7b:e6:
05:e5:b3:7c:46:16:9c:fd:20:d9:d3:a4:25:83:8d:
7b:80:ba:41:d6:56:3a:2c:22:61:67:0c:9e:84:db:
12:99:3a:38:4b:83:f5:91:d6:e6:b2:65:dd:f0:07:
82:66:0c:59:6d:55:69:ce:cf:56:7c:07:a2:13:78:
b6:66:a5:54:d9:a5:25:48:46:14:d6:b1:3e:49:a5:
11:5c:20:3f:56:18:36:46:85:17:98:64:d2:f0:a5:
0a:e6:ae:9d:78:c9:1b:5b:63:fd:26:b3:3f:66:42:
34:ae:96:81:11:a6:72:43:4f:a1:19:44:e0:ed:b1:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FD:86:C3:73:1F:78:00:83:CF:96:2F:D4:95:C1:D2:84:93:2D:F1
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:bf:b6:67:4e:41:77:2f:c7:d1:f5:fc:6a:3d:26:b7:d2:7b:
7f:d7:bd:c1:28:8c:4f:4c:d4:f9:67:49:23:c5:5b:25:aa:fa:
1e:e3:34:86:cd:5e:90:af:53:a1:69:0c:bb:58:6e:7b:b8:30:
4d:91:68:44:11:1a:28:3f:14:4d:4a:84:bb:6e:f7:77:52:08:
7e:e8:40:f2:c2:bd:1b:20:9d:43:e1:db:8c:ba:08:6b:47:01:
21:cb:a9:6f:2a:5d:da:0c:71:4c:ef:d6:e1:41:90:53:98:73:
e5:1a:e3:c3:9b:4f:28:cb:9b:1b:9b:fd:50:37:73:c4:e0:7e:
82:18:4c:79:15:01:ad:0d:3a:6a:40:2e:54:06:3c:c1:d1:a5:
03:5f:81:a0:d8:05:ee:f5:8e:34:f1:35:60:35:57:dc:a4:20:
32:66:d6:3a:f6:8b:bc:14:2d:b5:f2:ab:92:63:6a:f1:27:91:
f9:66:f2:ec:dd:f8:ce:01:4b:04:83:05:75:5b:99:26:79:85:
6b:36:7c:18:3d:0b:d2:d5:13:6f:12:fd:ca:26:6c:63:c1:57:
85:e1:2e:8b:06:7c:c7:8d:31:44:9a:23:23:55:f5:1a:c2:0f:
92:8c:a9:bb:7b:23:04:73:88:e7:ab:0f:46:88:86:d2:2b:ec:
2b:8b:c9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:28:54 2026 by rpki-client