
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
File: dWEnxs1ONdmPCkujYs4nMWSXGUI.mft (raw, json)
Hash identifier: lyb74gL7NB3V2/CzgZExsbLJSjwpbf592b9t9PbLxbQ=
Subject key identifier: 06:BF:F3:0A:FA:86:A3:5C:9E:1C:D4:10:D6:5D:25:31:1F:64:57:C3
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019FA0E026D388A4DB0386C0D214851B99E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:12 +0000
Manifest this update: Mon 27 Jul 2026 00:01:12 +0000
Manifest next update: Tue 28 Jul 2026 00:01:12 +0000
Files and hashes: 1: 8h95uNIDYG-Ufog2I8ZoKMaLcsw.roa (hash: hikhXEetfPVBAmxhlFb36D4+i8o25j1BVGOBTUWKg+M=)
2: C3YXK2axKQQL03NOSjgoGxmbHCY.roa (hash: 44/VCgOyO6dDefynF1MFpTO2jMMF5QpDbEm5R3D+USs=)
3: EIkyoQiaHQwFX0yl3QCnz70zobQ.roa (hash: TreOi4k2EXby9E21239vBZMbdO6JXQp6FeGHzvuMLWY=)
4: Ilstpn6LoODw0rzv1fqsnj_9Dh4.roa (hash: Mn8znbmN/J+MxRnhv+qVpqesl4iX9HnxtbZyYlBp8hE=)
5: JpHy1IXUR9emW8WRyQ9wKWFBPHY.roa (hash: C+pLi3vdcWv6cPyXKJcNebdYvfzTWmkMhrsFshVCZ5g=)
6: JuX1_oQdQQlBpU0uPBnvcWB93j8.roa (hash: FZzogSqVxmvRLnflYQZMrGV7lYMhQxxacof5gMp7tHc=)
7: KI_KuOkM0mR_o_lboFwkN-bi1Fk.roa (hash: 14lNz1dQBEYnlCIOUgTsdTghcHSUoRp4iObiy4bcNE8=)
8: QAq5GlfcCx2uicmV2oYykBZI8X0.roa (hash: RYaoRoccHB52OTwDIZC5zlhORRPz3CEswpwYiOVL8sQ=)
9: VzIOsWVyN2BeULByH7QYq4dYbRU.roa (hash: 5im045bps89h9fEb8qZ1ReojgLd/qWfVKk9XBFUXXFk=)
10: YnaVL83EnDyPXsVJYrytnkQg5ug.roa (hash: Fnqs3WN0fegg9CdKzgXczrQTO3HUhiFCAXykCpf5Clk=)
11: ae6vfOe_UB5sL59_YmgnYrMvUjY.roa (hash: UYeEVkIJSbDL/qMMyz7MhtUKRqcR+Ervewhouno445k=)
12: dWEnxs1ONdmPCkujYs4nMWSXGUI.crl (hash: zgcVwubtqZ91QWA4f8b+NuusiCPLzPiWtbTziySZeWg=)
13: f3cr88yivxk7Bgm731ewrTZYRmE.roa (hash: KBvRmTnbWWNTOespy+pTserzrz+QFhMRF5nah9piKuY=)
14: gzC5cDg-uB1dPX3dGsiEhW7fD00.roa (hash: vQbqEGTq2U/QqR6/EYIM8eMnRGnw756aRoerxRFX+wM=)
15: hRHkkew4RJW-M5MNhUrCKO9r6iI.roa (hash: xmNN9Qa+v5JHw+YLV1UBftvBMTaZmLQDrk6AQl6upks=)
16: hxrlkQurmLyBhkWbdwa67ZbnUzU.roa (hash: uuNXT/oBMFxKXMlVY9upAUC8wrIrJ/ZYSjthqsU91us=)
17: itsbDKOcLvYTL1wL-BLv0v4776c.roa (hash: ZEawOvc7lWqHf5H65rd92h3sAyZZNHxySs4Mwva3K5c=)
18: ktAcfwaispPfbZlu2PcWbivGiDc.roa (hash: ZS64/IqKl++bCkfIjOUrM7ABwkRqytdLrqhBUhYIiLo=)
19: lgcI0p4y-3yd0Er2Lcq9G4NDiZM.roa (hash: qVffLmVLe5PeGI04xzCYu2VBq+NWEXwG8HflD234N+Q=)
20: nwLLLJnWeUevVC1axaBKhwaHn44.roa (hash: 4NEbrk+ehdLN38/5gtivM/dLignUGaWU9EqjJiYFAxw=)
21: nxPePhL8tH3NJQt_EAwpwmwqNH8.roa (hash: 7XrZ+U4ErAZSq+9GdJTbU1fkc22bILilCayfqLewDgc=)
22: oXHroVFqrTFrT4dW-jOwSgxKgcQ.roa (hash: bWjEdLBfsFa6qTx3+Dfw2/yFPlyDQhUFTnCquJm018M=)
23: qw9D3bwHD-pnEIm3zYFhAcY1hDE.roa (hash: wdRWH9AxQCpUQD8h4pLTtws6prvHWse3QWuviHE/f3Q=)
24: sfoaD0gh3QgYHRuTwM6KqFkxOkQ.roa (hash: MG+l0cjg9doHuJsEha9w6usP174LVgs0j+PQfMk+iKk=)
25: si7LSWMuuhPUeaWDlYag_JlVhKs.roa (hash: nyL0gUFvTFAGinP9bvtQz8LACtq13OiZAYvgoeGB/C8=)
26: wgx1sqQMaS-I2L2y6gRiBobGYlg.roa (hash: 7eLb6fN+zf4qJF/TPfiQ9qgt4nim0I4itE886o8X68g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:26:d3:88:a4:db:03:86:c0:d2:14:85:1b:99:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 27 00:01:12 2026 GMT
Not After : Jul 28 00:01:12 2026 GMT
Subject: CN=06bff30afa86a35c9e1cd410d65d25311f6457c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:00:6d:b6:b1:85:9f:70:63:ca:5c:8c:fc:d7:
00:9e:c5:82:79:8e:e1:65:96:a1:c2:1c:58:5d:e8:
ec:8f:d8:20:47:6f:b8:30:ee:9f:df:85:14:95:b7:
95:ad:b1:e3:78:03:f2:3c:5e:68:a7:76:ee:59:7a:
a3:f3:1c:53:ef:fb:8e:f9:5d:b9:a3:2b:6c:3b:79:
9d:1f:98:6f:b6:84:3f:35:ee:4e:b2:c3:c2:fa:b4:
22:25:48:76:9e:bc:e3:d0:12:39:6d:3e:4b:a2:ef:
e6:fb:d7:53:87:01:c8:76:f4:03:4e:75:68:3d:47:
d4:62:8e:be:6c:8e:51:8c:a8:ba:bc:6e:93:06:91:
4b:9b:a2:83:e5:e0:0b:f6:3b:bf:df:c2:b6:a0:cb:
68:d5:ba:fa:ad:05:f5:dc:6b:0b:27:bf:df:81:45:
69:98:83:4b:af:40:7a:8e:6b:61:c5:5f:39:31:3c:
c9:f6:fb:5f:b4:3a:d5:ab:88:ee:9e:7e:15:24:c5:
3f:28:01:6b:cc:52:b1:e1:c7:fe:b8:d3:c9:96:9d:
38:15:5d:dc:0a:14:f5:90:ef:0d:eb:8b:5b:4e:99:
cf:b2:50:3e:ac:2c:ec:ba:16:1e:31:cd:7c:88:f3:
40:0a:b7:d3:14:51:bd:41:31:4d:33:41:34:89:b4:
fb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BF:F3:0A:FA:86:A3:5C:9E:1C:D4:10:D6:5D:25:31:1F:64:57:C3
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b6:5c:54:74:d9:ba:38:49:be:45:c9:cd:c2:4b:2e:68:93:
64:96:11:4b:88:05:a5:32:08:69:06:ab:8a:d6:7f:db:9a:93:
ef:1c:89:dd:59:38:07:0f:79:8b:4e:c9:53:be:de:d8:c4:36:
89:5f:73:fe:76:0b:3e:1d:ca:46:f2:d1:e5:ea:40:9d:75:ee:
a0:ab:73:2d:2b:ea:5c:54:1b:2e:c2:dd:dc:56:89:db:04:de:
d2:85:e4:66:32:bc:be:64:7f:49:91:39:7d:4d:ab:d4:2e:1d:
c5:4f:e1:17:de:99:47:a1:76:ac:a8:eb:1e:46:4b:39:b1:3e:
d5:ed:b9:b3:32:60:60:62:41:88:05:94:3e:7a:aa:3e:90:93:
c1:ea:47:11:62:a0:a7:2d:2c:82:d7:f4:9c:6c:a1:99:77:73:
4f:46:2a:c2:ad:51:9a:e7:5e:27:3c:54:09:a4:90:75:ad:4f:
99:46:86:72:fd:ab:d1:fa:c9:6a:86:ae:6c:a1:29:06:c9:ea:
4c:70:17:64:89:d2:9e:0e:21:1f:f5:c4:45:ed:40:c1:c3:a1:
99:3c:9f:2c:c6:4e:10:54:e7:95:59:cd:70:f2:42:c7:10:b1:
4b:95:73:ab:3a:1a:59:7e:65:af:a1:e5:b2:4c:5f:51:84:f9:
a3:0c:80:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4CbTiKTbA4bA0hSFG5nhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NjEyN2M2Y2Q0ZTM1ZDk4ZjBhNGJhMzYyY2UyNzMxNjQ5
NzE5NDIwHhcNMjYwNzI3MDAwMTEyWhcNMjYwNzI4MDAwMTEyWjAzMTEwLwYDVQQD
EygwNmJmZjMwYWZhODZhMzVjOWUxY2Q0MTBkNjVkMjUzMTFmNjQ1N2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgBttrGFn3BjylyM/NcAnsWCeY7h
ZZahwhxYXejsj9ggR2+4MO6f34UUlbeVrbHjeAPyPF5op3buWXqj8xxT7/uO+V25
oytsO3mdH5hvtoQ/Ne5OssPC+rQiJUh2nrzj0BI5bT5Lou/m+9dThwHIdvQDTnVo
PUfUYo6+bI5RjKi6vG6TBpFLm6KD5eAL9ju/38K2oMto1br6rQX13GsLJ7/fgUVp
mINLr0B6jmthxV85MTzJ9vtftDrVq4junn4VJMU/KAFrzFKx4cf+uNPJlp04FV3c
ChT1kO8N64tbTpnPslA+rCzsuhYeMc18iPNACrfTFFG9QTFNM0E0ibT7BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAa/8wr6hqNcnhzUENZdJTEfZFfDMB8GA1UdIwQY
MBaAFHVhJ8bNTjXZjwpLo2LOJzFklxlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt
ODg2MmI1MTczMTdjLzEvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj
LzEvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILZcVHTZ
ujhJvkXJzcJLLmiTZJYRS4gFpTIIaQaritZ/25qT7xyJ3Vk4Bw95i07JU77e2MQ2
iV9z/nYLPh3KRvLR5epAnXXuoKtzLSvqXFQbLsLd3FaJ2wTe0oXkZjK8vmR/SZE5
fU2r1C4dxU/hF96ZR6F2rKjrHkZLObE+1e25szJgYGJBiAWUPnqqPpCTwepHEWKg
py0sgtf0nGyhmXdzT0Yqwq1RmudeJzxUCaSQda1PmUaGcv2r0frJaoaubKEpBsnq
THAXZInSng4hH/XERe1AwcOhmTyfLMZOEFTnlVnNcPJCxxCxS5VzqzoaWX5lr6Hl
skxfUYT5owyAzA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:05:03 2026 by rpki-client