
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
File: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft (raw, json)
Hash identifier: wGKTREbFzg4W4cAAqF9EMCblyJgeQVEU+IRvJNk4sOs=
Subject key identifier: BE:97:B4:FC:94:30:82:5E:45:DF:D4:9E:09:7E:2B:14:A1:40:E7:D9
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 019EB80F1D5C6A6D47D1CB2BA6B9B0D6A25D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
Manifest number: 1963
Signing time: Thu 11 Jun 2026 19:00:58 +0000
Manifest this update: Thu 11 Jun 2026 19:00:58 +0000
Manifest next update: Fri 12 Jun 2026 19:00:58 +0000
Files and hashes: 1: 67pKVcBP4g1ka7BHnXY8o1GjatI.roa (hash: NHI8d7vH5tjpxPomV3eBVCOa5aQTAvgW0GwAOx6HDCM=)
2: 6oyqxH6fbfCjScGv2qC0XiD5gCU.roa (hash: X2pwG2wmLfB4M+6njFbtbY0lJjAJiNG8E4ePk2t5PZ8=)
3: BG7hZwdKTnkeh7F43mqTspITrC4.roa (hash: 9w3fRT22xu3zZICYpxgXI0CEKv6s/N6rtv0UUVT3l1A=)
4: E3UcI6HbofZm_snwFtZqoqwg5-4.roa (hash: d4QiFFj+amh2JyYpNEFn0n/k8uKNUlkfpX81m7S5ZMs=)
5: FKX17PHtkRiTG0VO4fdkemmP9q0.roa (hash: 46njTd7Whv8oDcKQQcq166dpo8DO+HMFvA14eGT2kvA=)
6: Ig2ees5HLfOePoZmV44oy1ypzFU.roa (hash: Xt9yas6tqq8RhgQUndyXvcQyGrhriLDFS4gSQyBaGSk=)
7: KsuuqZuzWciosvKgFRPXzNp2Gcs.roa (hash: fH9tuqcfvS+JzHyWBgJi96fMfx/uXZQsaH9PlzbW4JY=)
8: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl (hash: 4Eo+qELD5ftD0ZXBZJlQQLaQPRbgIlBx/dTh2H0t8Zw=)
9: k0wZqmhMQI1_yKbqeg-OeoA8ghg.roa (hash: okOMVmkk1MoA9VfXhi+YW9SB7pABGOjg3hztcxMcS9k=)
10: nzPG4vwX1IeVP2cSHRY5OFKnn24.roa (hash: OLyA9Gv/rl69xwJleWIyqhvz9X35ZOv/7WlzFp3vKrM=)
11: qOQMcO_XSSMHONHJzrh7779P3jo.roa (hash: ade5av8pqt7Ksv1kVj/c8U/iRecFohg4Rxixd7NnxeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:1d:5c:6a:6d:47:d1:cb:2b:a6:b9:b0:d6:a2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Jun 11 19:00:58 2026 GMT
Not After : Jun 12 19:00:58 2026 GMT
Subject: CN=be97b4fc9430825e45dfd49e097e2b14a140e7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:a5:38:29:b1:f6:fe:b6:a5:d2:14:06:42:
54:36:ca:2c:10:48:41:b2:7d:45:a7:10:d6:26:a8:
0f:a0:42:42:03:b6:b9:85:2f:70:3e:db:7d:42:79:
2e:e5:d5:b7:9a:73:3f:48:22:28:2a:b1:9e:32:14:
ca:17:19:26:c0:d3:a1:8c:4c:cf:7e:0e:20:a0:5c:
15:01:1f:b0:f1:76:4e:c2:cd:d0:e6:a6:c3:f4:d4:
1b:7f:c1:60:46:03:f5:d4:b5:13:15:d4:a7:b7:1b:
4c:2c:72:22:3e:c3:13:9f:2e:2d:fd:f0:df:67:c2:
1a:d7:02:2c:62:93:0b:dc:b3:88:8a:bb:7a:f8:ec:
da:63:1d:8a:dd:03:0c:d4:31:79:e4:49:b3:d7:71:
4c:2e:4c:50:21:bd:89:a4:72:77:cf:03:02:7d:8a:
d3:5e:6a:14:2b:52:0e:7f:02:e8:ea:22:97:64:b2:
e4:6e:7f:d4:5b:5b:30:85:7d:5c:5b:cd:5f:4e:ef:
3c:5d:de:d1:94:1f:45:ba:70:4f:2f:e3:65:31:89:
a7:da:4b:07:45:3d:15:08:67:f4:ed:39:bc:f6:26:
9e:9f:e1:7b:32:1f:ed:b6:2c:a9:dd:f5:4f:a3:6a:
db:06:0b:e9:9b:bf:04:cf:76:23:7f:80:8e:8d:0e:
e2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:97:B4:FC:94:30:82:5E:45:DF:D4:9E:09:7E:2B:14:A1:40:E7:D9
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9f:31:0a:2c:ca:81:dc:c8:e7:ae:0d:eb:67:75:ae:90:ef:
15:cb:cc:d4:cc:da:13:a6:40:00:be:b5:d6:da:b7:ba:34:0a:
22:b9:8d:48:3b:32:2f:85:78:e0:24:ec:fc:31:b8:28:19:17:
f8:05:b5:a8:e9:5c:75:20:ad:4a:87:77:1f:2b:0a:c0:e5:d7:
d3:29:8c:89:f0:6b:20:da:d6:00:89:a2:b2:04:47:1f:51:06:
2a:f5:d4:65:1f:3f:80:b7:23:04:da:02:7c:32:04:1b:60:47:
06:f5:e6:8d:9b:95:47:f5:bd:0f:57:bb:b7:6c:b3:2b:21:ca:
8c:73:1a:57:79:63:2b:48:22:dc:b9:fc:57:07:7c:17:e2:24:
9d:76:6f:19:6a:c8:8b:e4:6b:67:c5:9b:08:01:9a:ed:95:89:
f8:e6:ae:72:03:71:ea:41:fd:05:03:f9:85:54:87:cf:ed:7c:
16:15:5b:a1:f0:bb:a1:b8:a2:b4:ba:63:cd:e5:ff:11:ec:25:
ad:38:4b:c7:65:28:d4:1e:cb:44:76:11:de:52:27:aa:79:72:
58:79:7c:49:f2:9c:76:38:e1:07:8c:84:56:be:32:00:59:e5:
6a:00:28:e5:4b:24:62:a3:33:f2:3c:c6:fb:46:d9:e2:c8:45:
c7:fb:8a:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64Dx1cam1H0csrprmw1qJdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZTg4OGE3NmU5OTg1MWIwMWZiODZjZWM1MzdkNGQ4ZTYx
MGRlMTYwHhcNMjYwNjExMTkwMDU4WhcNMjYwNjEyMTkwMDU4WjAzMTEwLwYDVQQD
EyhiZTk3YjRmYzk0MzA4MjVlNDVkZmQ0OWUwOTdlMmIxNGExNDBlN2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXGlOCmx9v62pdIUBkJUNsosEEhB
sn1FpxDWJqgPoEJCA7a5hS9wPtt9Qnku5dW3mnM/SCIoKrGeMhTKFxkmwNOhjEzP
fg4goFwVAR+w8XZOws3Q5qbD9NQbf8FgRgP11LUTFdSntxtMLHIiPsMTny4t/fDf
Z8Ia1wIsYpML3LOIirt6+OzaYx2K3QMM1DF55Emz13FMLkxQIb2JpHJ3zwMCfYrT
XmoUK1IOfwLo6iKXZLLkbn/UW1swhX1cW81fTu88Xd7RlB9FunBPL+NlMYmn2ksH
RT0VCGf07Tm89iaen+F7Mh/ttiyp3fVPo2rbBgvpm78Ez3Yjf4COjQ7iQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6XtPyUMIJeRd/Ungl+KxShQOfZMB8GA1UdIwQY
MBaAFEToiKdumYUbAfuGzsU31NjmEN4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUt
YmMwZGJhOTMyYjM1LzEvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUtYmMwZGJhOTMyYjM1
LzEvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc58xCizK
gdzI564N62d1rpDvFcvM1MzaE6ZAAL611tq3ujQKIrmNSDsyL4V44CTs/DG4KBkX
+AW1qOlcdSCtSod3HysKwOXX0ymMifBrINrWAImisgRHH1EGKvXUZR8/gLcjBNoC
fDIEG2BHBvXmjZuVR/W9D1e7t2yzKyHKjHMaV3ljK0gi3Ln8Vwd8F+IknXZvGWrI
i+RrZ8WbCAGa7ZWJ+OaucgNx6kH9BQP5hVSHz+18FhVbofC7obiitLpjzeX/Eewl
rThLx2Uo1B7LRHYR3lInqnlyWHl8SfKcdjjhB4yEVr4yAFnlagAo5UskYqMz8jzG
+0bZ4shFx/uKBQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:53:42 2026 by rpki-client