
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
File: zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json)
Hash identifier: u3B6tem409JeT4daY3NnUaKBnQM4zz45XW320xXrr/U=
Subject key identifier: F2:29:97:3C:8A:17:33:88:14:82:E8:6D:3A:66:7C:E2:1C:1F:65:41
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 019EB7D79F8152F92A427935CEA81ED33143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
Manifest number: 1966
Signing time: Thu 11 Jun 2026 18:00:22 +0000
Manifest this update: Thu 11 Jun 2026 18:00:22 +0000
Manifest next update: Fri 12 Jun 2026 18:00:22 +0000
Files and hashes: 1: 6SfzyA20maGiI5XJBQeDm_u97nY.roa (hash: u3qBuRlWiB0K8K8vlPB1p6jUd1Xd8XzeiX/KEClwly8=)
2: 9FhDVq2bIcKPVT4-LNeLhleMtsU.roa (hash: 9KYuP3D+C7cw6iLbwhFcurqEz58uGe5Kg9G2sCqyt6U=)
3: DOxf14855Ag2AnO7jsSUueM5c-o.roa (hash: zgUJGFH5ZEpoQ9vBA8CvM2rtyQHfUvV/kzB3FtSEmYc=)
4: GGlyShlisJFPILLShUxi5K1FZvI.roa (hash: 8pEqvT44UHyALFkAUNaY4Zmjw5paANUkCryLrc0xDp0=)
5: GfgJL-lqR4cMbYOXW8gqE4t7HG4.roa (hash: kNPKoBDHTv7uxrRwNWkfM9yLpH77LlGXaUe+iObPj+0=)
6: GokcGb-P0NB7nLtMvW5A8ngZQgE.roa (hash: ZnAqIOIHh01hnkaJVPAholM5RdM/M+SxoO9A/Xev0yk=)
7: LFRJzkmgIAiGnpUGS9-bXzuIMLs.roa (hash: 46deT7TNnqX9MlHzhsUcZQAr19c/pEqoQrpaQ/72qGo=)
8: NbGRLoG_Gu4CVHGU2oYeQquSVC4.roa (hash: UI6Whsfm0XLotsIB2pUQkPKCVhCu0FIJUxPDYs/HA7Q=)
9: OhSGFuxiOE6u1yxeHuxozU-P634.roa (hash: 6Mmr2aFRyJOyiCmrE7LHa7GVo3hy9dAsRMv8rAlCtH8=)
10: PvCNmMuHcK2-0lwoP1YXz8fG1-4.roa (hash: ZcKVkYaVisIZB6lNJ9Oj7RdZ3ktv/iO+kT0iuJRn4G8=)
11: S7VSB8bMnzHem9-PYRKs7CJpYpg.roa (hash: Xkmt3ivNtM5U/VoznrjL63MFyqBi5WkWlVP9ktx+/Dc=)
12: SMW63T_0136aeLowZZQWjjrfsXk.roa (hash: 3ilHXV2UYPUXB+nKjinPtba67c0zOMGagZjCJHP3jcE=)
13: SbsNPH1Ntij3qyUVffsCiIKkGeE.roa (hash: hjAPDCld8Xta1vPhgXAeIRi+/mILiMGsU19jsuHqOac=)
14: Tcb9LIMv15mBq9nuN_lyx7EDWvI.roa (hash: AVbi90aopaltK4BW7qKfcZ+tcE+N0R+vLT2QnDiHoBo=)
15: UWaCKuifSAXQ_q_qbqARMjeLkuk.roa (hash: xqvi3BTcN1RVOAgMAoZQMY8MT30m6KbWtN2qeSF/sR8=)
16: WbuHsYRVEwtxjohFVduo42yY0BA.roa (hash: XRpJ203bgOZcZmoeOkpQMh/toy8YP0Drzt5W89I939s=)
17: bnK4p1zEjjMpHGYBWVHlrBkLh7g.roa (hash: FTLJfN5i2b+RptkaFlN3Il1kzjhjI+oXWg1vZs6H4k0=)
18: cE7jgFPedRUF8ap_cKImzYVddl8.roa (hash: zb4n0pfJOMFHA1alvI9W5X6cLuKCPOK3ES0MN3ZZTkE=)
19: enntkJ9MJgt_xpOfkD8kOLdtBJU.roa (hash: JIM8qg9/iO+d/Qq84yLmkyLF8sGbWGM70xRqLp4QZrk=)
20: fFA6Tc1793n-r3BnGi87lZEg-eE.roa (hash: yKcGEOfvNP+8jvQZLXGNhmpwiIIwq6NoShkHAH7kres=)
21: rXmLdpESy3JXHba6GMZpxFBce7Y.roa (hash: eJTs9WPxSlrRs5HsS9oqFD3SzVRLHXq/UsVoUjviM0A=)
22: rtiE1g00ygxdO1tTtGobMSI8MfQ.roa (hash: 1+qhvfyyWdOjy7p4VdnyDBwRoLGDkk0RvotZmYLEvbM=)
23: rtnNKdzuer1cLaHeVd2Efr32DmI.roa (hash: hrsJtWgWWgXT2uF4n4YErrta4DlZR555cIdEsyDsEYM=)
24: sUa1qZfE6YDq3QMgLH1F6vdwxUU.roa (hash: fTQiV/tRslTYxHykfit6SFwjZkI2ltHIm9g/9F6nVW0=)
25: tk19XDIbs2abJC_w7m3eyvCxcz0.roa (hash: NU3TfhMXPP24pf7R4GaRkyWoD5b0T4TNRSVTKMLyWEo=)
26: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: aQo1HZF0EjZxk9EHE8UmG1a8Ui7LLuyCPAYRAX36WTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:9f:81:52:f9:2a:42:79:35:ce:a8:1e:d3:31:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jun 11 18:00:22 2026 GMT
Not After : Jun 12 18:00:22 2026 GMT
Subject: CN=f229973c8a1733881482e86d3a667ce21c1f6541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:42:31:f0:18:8b:b6:dd:c1:f5:10:e3:60:1f:
97:61:f2:ad:b4:a8:6b:30:f9:6b:30:b7:80:d0:fa:
54:f7:05:ad:f1:5e:b4:79:44:43:0c:9e:0e:c9:a5:
dc:c6:28:73:95:9f:67:55:32:a6:49:f2:84:fd:55:
5f:50:17:64:3f:1a:d5:d6:8d:28:75:9c:81:64:e8:
15:32:ab:fd:c7:a2:f7:ef:1b:b2:bc:38:38:8a:10:
91:b7:30:32:2d:bd:30:b6:91:e6:43:ed:3b:53:02:
79:39:88:ae:32:7a:fd:be:1f:b0:72:48:1e:c9:f0:
a4:20:81:20:62:d2:a4:34:f8:9b:ea:12:06:c5:18:
39:a4:db:dc:cb:09:03:51:07:00:cf:00:af:60:a5:
94:53:98:25:99:01:de:d2:2c:6a:01:f0:0a:72:81:
6b:3d:bb:2d:e1:56:4f:4a:40:3c:b9:5e:cd:76:b5:
2e:57:a2:8e:97:03:89:70:97:24:c1:54:7d:06:e4:
df:e3:7b:80:9c:a3:54:0b:42:96:2e:2a:32:78:ae:
f4:58:65:ef:d2:da:f8:ad:d6:89:a3:23:1c:18:54:
d5:9d:04:4c:76:c3:c2:8d:1e:d8:dc:a1:ab:6e:59:
2f:ca:1c:27:d3:42:77:28:76:e0:7f:70:d7:d8:d5:
21:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:29:97:3C:8A:17:33:88:14:82:E8:6D:3A:66:7C:E2:1C:1F:65:41
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c1:11:77:d2:c2:01:6e:ac:19:24:b5:b3:d8:f5:9b:15:fd:
a6:06:5e:49:a8:5d:48:03:01:9f:fc:f1:6d:ee:5d:fd:c9:34:
2d:b5:dd:b9:a9:c6:2e:96:00:e9:b5:49:59:b1:7e:0c:76:ac:
eb:a3:8d:e9:8b:b6:4f:d5:45:f2:c6:9b:8f:d0:bf:7d:d0:a7:
c3:aa:d3:43:be:75:5a:1c:8a:22:c3:37:e0:53:d0:62:0d:fd:
52:0c:ac:b8:c2:ce:b6:f7:eb:0c:c1:96:d7:97:b1:1e:69:f9:
2d:35:1a:7b:9d:be:df:dd:08:dd:12:39:8a:20:b9:24:54:f0:
dc:98:e9:4d:75:79:69:3e:06:2e:66:57:d6:68:44:d7:99:33:
83:c6:fd:fb:3d:0c:4f:79:b9:de:3f:b5:79:0e:59:48:72:1c:
16:24:27:c6:5c:12:03:6d:dc:62:54:da:1d:10:03:38:f1:16:
5d:a0:fa:c2:b1:05:6a:bb:48:62:e6:cc:db:25:96:a1:26:41:
28:27:15:44:5c:06:83:64:69:b2:47:e9:d9:67:ac:c2:48:7d:
34:09:99:37:b1:93:92:a3:49:dd:2e:10:41:44:29:3d:b8:6d:
e8:e7:3f:45:52:95:aa:89:76:8a:31:50:50:db:3e:e7:a0:e0:
20:22:75:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:38:52 2026 by rpki-client