
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json)
Hash identifier: 4IcqiYoSKpU2dDyNvARXpIGEgLiBACNlwQISCicgPyU=
Subject key identifier: 4E:70:34:35:AE:55:A5:20:9D:35:5F:C6:F4:4D:FB:84:B3:E7:21:24
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial: 019EE8FB5F0017306746EAA55ABBAB0CE209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
Manifest number: 1985
Signing time: Sun 21 Jun 2026 07:00:48 +0000
Manifest this update: Sun 21 Jun 2026 07:00:48 +0000
Manifest next update: Mon 22 Jun 2026 07:00:48 +0000
Files and hashes: 1: 0VZp4QWne5bvAgKwv7SjoOEfGHs.roa (hash: jYh91mIzIriMnUPh9dL8jbBMf/TyJtraSuS+inHNoWM=)
2: 0pS0ka-H_pjf8zmsDhi1S6g_SD0.roa (hash: 3pwjPiGqhzZ7Y/680vy9pG+yzhMOL9IwvcISv966MT0=)
3: 5gizdFY-AQlhbCdYV0MHkXmuq7M.roa (hash: k9r1XdI4/Lx+2gwOSiva8ziRNB2yu8viuLXNYvO5Vys=)
4: 8HZ9HwPcvCjV2P3D1Xns45l-b7g.roa (hash: DvNeLlKBHFprmUWgVpmbGaSEgyoFZqbsKOxc6r1Ij8M=)
5: 8f4-tHMe1_zfMdQiJbY1PQ5lT3c.roa (hash: 1EfLr/LiMTpt9+tNTY1NQrpFVMSuEtCowZrWCkArzsw=)
6: 8lHTKcd0GYAhajj68n6yCoBLBmg.roa (hash: /WULm6fdsfbYX9Ht5hhngSNry2Eyx0hFZ+HW4F+/kU4=)
7: J3Nb9V1J66BnIsJ0KbxFX94VKXY.roa (hash: wcLCauUWs3bEGu09x4ivSvD/ChTk37avzRoy7sqTCsg=)
8: OZz5Z73RCocTg0hscsirqJpi9Vg.roa (hash: vWpk+fzrrJttr02xG3C/WBrhT9TCYx+ekEsOWrAU8P4=)
9: pAF8GSze9ehTbgJAIF3FBa54cNk.roa (hash: PvFwSg+H0WDB7gVfETtfHniBE9Eh+MMRXqrqan++8pg=)
10: qrK8l-uIuryQmH_-AqhZga8WNz8.roa (hash: eI1rOqGrZ+k2KHlXxvPdF7xmA3oDCvTfj+3Q37y0Fi8=)
11: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: Z71aUNPZsAs9Y/eAlLCuAA2Gopcd8460wirZpnRtmwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:fb:5f:00:17:30:67:46:ea:a5:5a:bb:ab:0c:e2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Validity
Not Before: Jun 21 07:00:48 2026 GMT
Not After : Jun 22 07:00:48 2026 GMT
Subject: CN=4e703435ae55a5209d355fc6f44dfb84b3e72124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:dd:ce:fa:b2:de:0d:b6:d5:8e:67:86:ca:
98:f4:b0:75:60:9b:21:1a:6b:cb:20:c8:d9:de:40:
9a:6b:c9:9d:09:00:df:6d:78:26:e0:11:81:5c:6e:
5e:79:fd:64:19:84:5e:51:92:51:29:8b:6c:eb:74:
0b:22:c4:95:1f:71:2f:d4:a0:2a:78:db:6c:6c:4d:
2d:22:3b:a0:1b:d9:c6:02:73:ac:c4:9a:63:37:bf:
e4:96:bb:4a:47:6a:9f:ec:06:46:c3:b2:68:5c:f5:
9b:17:93:a8:09:0c:21:25:cd:7c:53:37:0c:c5:25:
38:0c:1b:2c:26:f8:09:c2:4c:49:8e:26:a8:4a:ec:
68:49:53:2b:71:7f:a8:65:2e:85:2e:e7:95:25:61:
da:9a:6e:91:54:44:c0:12:05:ea:cb:6b:0a:b5:0d:
02:6d:c4:ab:c9:e1:a6:01:13:6c:5b:50:e8:fe:41:
68:05:72:5e:ef:b3:84:f3:87:98:fa:a4:d3:f9:b9:
20:1b:db:43:99:11:11:f0:d8:47:00:87:ce:0c:7b:
b4:87:d7:22:b6:fe:2c:b8:30:fa:44:c3:71:f1:9c:
1f:7e:a9:cd:01:c9:e4:bd:45:da:a1:c0:42:cb:a7:
90:89:92:df:65:5c:7a:9f:0d:a7:81:e8:e1:ef:27:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:70:34:35:AE:55:A5:20:9D:35:5F:C6:F4:4D:FB:84:B3:E7:21:24
X509v3 Authority Key Identifier:
keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:54:73:7e:6b:63:59:0a:78:ce:cf:49:a2:82:a7:95:d5:bd:
b6:4a:1f:e6:e4:b5:9f:5f:bc:a3:84:33:08:07:38:28:bd:60:
d7:5d:df:d3:f1:fb:5b:77:12:05:17:48:ef:fd:15:81:8e:87:
00:c0:ed:03:ab:3b:02:87:77:1f:d0:e2:5f:25:33:32:10:31:
4e:7b:47:f6:e0:e0:77:7a:e3:e2:3a:9b:bd:6e:8b:0a:d3:1e:
81:42:0e:fe:c6:eb:69:56:8b:32:e5:4d:0a:60:c7:2d:74:3f:
0b:d6:99:8d:9a:40:25:27:4d:fa:ea:b2:84:12:75:90:a1:72:
70:4c:d0:11:8d:3f:0e:61:db:8c:7d:dd:d4:a6:44:f7:14:d6:
64:18:46:9e:a3:09:64:fb:a3:d0:29:5c:d3:92:32:d8:6e:06:
9f:53:f4:53:69:5f:05:bc:4b:7b:7c:15:a4:21:54:54:e8:a9:
c6:a2:cb:94:ba:bb:21:b9:81:eb:6a:a9:8c:75:94:19:f7:cd:
71:da:5c:5b:a6:29:26:e8:b2:8b:37:f5:74:b0:bb:18:54:0a:
89:fe:13:0a:e6:61:d0:05:7f:2f:5e:b3:43:20:c5:88:eb:44:
5e:86:4d:f7:fd:b7:40:16:d4:cf:4d:7a:e4:cf:bb:e2:e8:ef:
69:c4:f6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 12:40:40 2026 by rpki-client