
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
File: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft (raw, json)
Hash identifier: UoxLrbJ6o0taklOqEJTOUwLYnWXAVQVNUDBG4iu3YR0=
Subject key identifier: 6B:EF:21:89:09:F7:D3:79:E7:7A:92:64:C8:40:4E:3A:67:E7:C2:23
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 019FA0E05DF596B4B589AC6AECC44B763305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
Manifest number: 19EC
Signing time: Mon 27 Jul 2026 00:01:26 +0000
Manifest this update: Mon 27 Jul 2026 00:01:26 +0000
Manifest next update: Tue 28 Jul 2026 00:01:26 +0000
Files and hashes: 1: 67pKVcBP4g1ka7BHnXY8o1GjatI.roa (hash: NHI8d7vH5tjpxPomV3eBVCOa5aQTAvgW0GwAOx6HDCM=)
2: 6oyqxH6fbfCjScGv2qC0XiD5gCU.roa (hash: X2pwG2wmLfB4M+6njFbtbY0lJjAJiNG8E4ePk2t5PZ8=)
3: BG7hZwdKTnkeh7F43mqTspITrC4.roa (hash: 9w3fRT22xu3zZICYpxgXI0CEKv6s/N6rtv0UUVT3l1A=)
4: E3UcI6HbofZm_snwFtZqoqwg5-4.roa (hash: d4QiFFj+amh2JyYpNEFn0n/k8uKNUlkfpX81m7S5ZMs=)
5: EHRfsqdBqIv-_jr_ZiggJSyGQh8.roa (hash: GuBt3vwa11J5qRXuLm85netCILaHs5EboKmysMN31gs=)
6: Ig2ees5HLfOePoZmV44oy1ypzFU.roa (hash: Xt9yas6tqq8RhgQUndyXvcQyGrhriLDFS4gSQyBaGSk=)
7: KsuuqZuzWciosvKgFRPXzNp2Gcs.roa (hash: fH9tuqcfvS+JzHyWBgJi96fMfx/uXZQsaH9PlzbW4JY=)
8: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl (hash: OzUTUN7S+P6L/9TAb3qb/88Gncif4UfF5mP6Og+Di3s=)
9: gAqwEcTCZcYoTWX4c9WWfhoNMgI.roa (hash: vAiaSmq1X3G0blOObiQg/SKw+90F8oGpc/icVWBJSss=)
10: k0wZqmhMQI1_yKbqeg-OeoA8ghg.roa (hash: okOMVmkk1MoA9VfXhi+YW9SB7pABGOjg3hztcxMcS9k=)
11: nzPG4vwX1IeVP2cSHRY5OFKnn24.roa (hash: OLyA9Gv/rl69xwJleWIyqhvz9X35ZOv/7WlzFp3vKrM=)
12: qMM2yBBqAUZtpJ-UlQnkHWnMjy0.roa (hash: TpFOiG67I1bJklLN/pt/Lsphs7nPRwEpTIL7MabwCy0=)
13: qOQMcO_XSSMHONHJzrh7779P3jo.roa (hash: ade5av8pqt7Ksv1kVj/c8U/iRecFohg4Rxixd7NnxeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:5d:f5:96:b4:b5:89:ac:6a:ec:c4:4b:76:33:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Jul 27 00:01:26 2026 GMT
Not After : Jul 28 00:01:26 2026 GMT
Subject: CN=6bef218909f7d379e77a9264c8404e3a67e7c223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a7:b3:f1:e4:8f:ad:c8:f7:bc:e8:41:fe:fb:
51:3a:1a:75:cc:a8:88:b6:27:61:8c:49:d7:5a:22:
d8:78:2d:54:03:48:11:cc:ae:10:ec:e7:5a:19:62:
74:b4:fa:45:3e:cf:16:f9:e9:13:8d:09:30:bd:d4:
6a:0b:60:7a:fd:10:13:db:c2:c7:a1:79:1e:1f:7e:
5d:c9:82:17:4b:a3:39:a5:8e:d2:5d:99:f2:67:62:
1c:63:74:5d:6d:00:62:52:3d:3a:ce:33:92:85:be:
78:ee:a5:67:6f:ff:2b:7c:02:52:57:2d:11:09:cb:
00:17:2e:ce:6f:08:2c:f9:95:69:4e:8a:0e:5d:bb:
0a:75:91:65:b5:bb:c6:06:61:dc:74:95:b3:a3:ce:
e4:bb:38:12:26:6a:10:da:b2:11:1e:f6:ea:e1:df:
23:e9:4a:b4:07:e9:14:a0:13:1c:ff:0c:28:ca:5a:
df:39:1f:5e:35:2a:12:af:ca:97:b6:33:9f:ea:94:
5e:29:95:0a:aa:79:cf:d0:51:e5:77:dd:b4:98:d7:
1e:ee:9d:6d:7b:6b:32:2b:20:13:ef:a9:7d:f7:dc:
cc:e1:84:5a:c9:28:64:e6:9b:a7:c4:f3:95:9b:a9:
ea:c2:08:7f:39:3e:f4:be:e0:b5:9f:8c:2d:52:5b:
1f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EF:21:89:09:F7:D3:79:E7:7A:92:64:C8:40:4E:3A:67:E7:C2:23
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e1:8c:03:20:12:69:4c:03:81:42:af:e6:10:05:cd:e4:61:
f0:85:d0:9c:1c:69:59:b3:3e:12:e1:9f:54:fe:0d:40:2f:c2:
26:2d:c2:a0:93:80:93:fa:14:1b:5c:a0:ee:3d:30:ad:1b:07:
ce:9c:1f:7b:f2:b9:8e:3a:d3:a5:1c:fa:9f:e3:2c:ce:6d:c5:
42:c2:14:f1:bb:ac:bd:8a:ed:8f:07:29:0d:f0:c7:8b:84:8d:
65:f7:3c:0b:bc:2f:d7:63:c9:00:c5:ce:17:36:9d:25:ff:9a:
c6:f6:a5:d4:76:f6:a0:a6:04:b0:41:92:1c:0f:0e:12:97:d2:
88:b3:12:57:d3:1f:ac:2a:aa:f8:1b:37:93:b9:bb:9a:15:9c:
a8:60:28:88:6c:ca:6f:fa:fb:e8:f8:d5:43:b2:f8:6f:cb:91:
1a:b6:ac:7d:37:ed:23:12:98:86:09:c6:8a:cc:c2:d0:b0:ac:
34:a3:90:61:9d:9b:76:26:55:51:31:26:71:53:4f:2e:e8:ad:
7a:6a:33:22:04:77:d3:e7:30:c2:55:f5:e9:d3:c1:b1:d9:3a:
2e:39:54:6b:52:36:9a:fd:01:5d:08:2f:ef:af:b7:6e:35:da:
9b:92:a0:46:80:b7:2c:0f:03:72:f7:65:7f:63:9f:0a:4f:d5:
d0:18:94:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:28:29 2026 by rpki-client