
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft
File: pnhXc98xO5FxG_a8WxSezCRrnok.mft (raw, json)
Hash identifier: DoxUIxfJIWQw3fddDQGV42VibleQkLKtyUSvNNLrxUw=
Subject key identifier: B3:49:54:5B:7C:85:E8:4C:97:3C:52:B2:42:6C:22:9D:26:AF:C1:99
Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Certificate serial: 019EBE7F0A99D51A227CFF7D322014548D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft
Manifest number: 1724
Signing time: Sat 13 Jun 2026 01:00:57 +0000
Manifest this update: Sat 13 Jun 2026 01:00:57 +0000
Manifest next update: Sun 14 Jun 2026 01:00:57 +0000
Files and hashes: 1: C8g7Pi5B0RKpnrlAYnkGNfdVaNI.roa (hash: wxMFCVvSA3tdy7i3OaSOQ9SIAg2wmBIcYz9jkUGPtlk=)
2: Ine_1lLdl47bEMn6aiw9Axcdsgo.roa (hash: S/r8lpXeW/d857boj4AgP81lqUx6Xba1Zs9uDln2Uuk=)
3: L9nqjZgCKM_h4eShTqHdEr9Np6c.roa (hash: m3EOAebEcr3Ec2NVZh7NKfNA+27GisIbFErRrtFBX6k=)
4: NanNAKKpriw1xLHpXZYYWO89_ic.roa (hash: vJoNpzNu5goOWjEeID9l0AJGNtpWeDH6gI91uoAnwIk=)
5: O6JDbaslrGOSZKrdtuCBt6ssF94.roa (hash: 8ty72z4beTGAGlxyLGLA0AACx0Qa5f/MkundTg5sepM=)
6: Wvbb_a2COrZy8u2YHT4IAcPCo7A.roa (hash: JCvZpNcLMyYDQVI9nqJFb7h8bZSYYqo2EDX3T4my9ww=)
7: ZQQkerLBkFsKEtd48dsMSA_rmYI.roa (hash: 6NjK7e1f3uOhtOOeU7twP9rf1tXwX1yAjDALcNdcBDM=)
8: _dst1Xn6SlUI8nUoQkjpnLlhahc.roa (hash: BiPvKLoz5HOyAuWJJP0IXnbLHFFchqo6uteOhXIPeKs=)
9: dDB5YY9PZuYzIK0czNYk6awWuOU.roa (hash: B1+NRVwOUhTIMmxV8tnE89O/MNjbHirt4Fghn1v7gaE=)
10: eFI0tBDLnesndLqlj1NoxqsPUjg.roa (hash: hjKjXxMem27vbAFHspC4BJNh7EJxRAQg9zId7c2baKg=)
11: pnhXc98xO5FxG_a8WxSezCRrnok.crl (hash: YQKBnEaJ10GoZPMWFeTrspT8mHtJY4863Rr8vonzlgc=)
12: vz8HwWs32wz7LdSPq6eo_tOp0to.roa (hash: 6psAckPnQ9/EqCFp17rxTfMjqVmehqU3pMQvhEu8MeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 17:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:0a:99:d5:1a:22:7c:ff:7d:32:20:14:54:8d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Validity
Not Before: Jun 13 01:00:57 2026 GMT
Not After : Jun 14 01:00:57 2026 GMT
Subject: CN=b349545b7c85e84c973c52b2426c229d26afc199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d9:8d:93:a2:6b:1a:d3:36:af:de:5f:1c:90:
1f:3c:04:d4:e5:05:70:7a:46:b3:9d:52:a6:4b:a4:
28:e9:00:04:61:60:09:9f:ef:d3:2f:8a:9f:c9:37:
1c:f7:20:07:de:5a:ed:1e:1c:3d:a1:40:90:61:f8:
b6:4a:a7:5b:ae:84:65:e5:f5:85:81:84:fd:6a:d8:
d1:4f:8c:69:20:ed:cc:ea:65:45:e8:bf:ce:8c:ff:
c9:a5:40:a1:d0:9b:47:28:fd:c3:a2:98:87:87:ba:
d7:2d:21:16:34:cd:d0:a7:a6:0f:16:ce:86:76:49:
57:79:10:e9:29:48:15:db:c1:48:72:6b:02:f9:3a:
17:cf:88:59:31:ca:2a:38:64:86:ee:a8:99:f1:1c:
a1:33:73:00:88:74:12:72:45:6d:9f:8b:e8:4c:a9:
81:66:0d:c1:b0:28:7e:58:21:a3:7f:13:c5:ed:a8:
51:1b:a1:45:24:53:70:ed:23:74:c3:09:31:ab:8b:
da:2d:9d:cc:d4:97:10:0b:69:ae:1f:1b:98:1b:3a:
f9:5e:03:6a:cd:3c:64:fb:ea:b7:16:aa:cb:58:82:
80:ec:ce:6d:d1:92:57:88:c1:be:94:fc:cd:bf:c0:
93:ea:6e:0c:9e:70:5c:0e:be:70:5a:98:9f:8b:55:
06:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:49:54:5B:7C:85:E8:4C:97:3C:52:B2:42:6C:22:9D:26:AF:C1:99
X509v3 Authority Key Identifier:
keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:61:d9:02:18:1f:b6:d0:9a:69:00:74:74:0d:f1:9a:4b:80:
85:30:a5:a8:76:63:88:fc:81:af:a1:93:fe:09:cf:33:b6:ed:
63:e5:a3:ba:59:cb:6d:74:0b:d6:ce:e0:a2:7b:90:5c:50:fa:
7f:f2:9c:66:51:54:eb:4b:fc:56:b7:d9:31:fc:ac:dd:04:e2:
1a:59:67:78:31:5a:e5:f3:7f:33:9a:f9:96:0c:6e:d6:7a:33:
cb:49:57:18:3b:f2:69:7a:08:47:fb:6b:aa:44:35:d6:55:ea:
26:01:90:9e:fe:d6:89:97:23:29:7b:6f:b2:6a:f9:56:ed:99:
e2:32:62:18:fe:6e:36:8b:85:ec:18:08:b3:5a:42:e5:57:92:
fd:1d:c4:22:9b:08:7b:59:d3:52:4c:39:71:83:33:c4:72:bf:
3f:5a:86:69:8b:23:d1:01:0f:90:65:02:25:42:d4:92:3d:04:
47:6a:00:c1:a8:9f:a6:ea:c6:8e:6e:39:c5:e0:ec:62:b4:34:
d0:27:b2:25:b4:3d:ee:6d:fc:bb:0c:2f:97:e1:ed:65:f5:04:
3b:bf:ac:68:ab:c4:87:6f:a8:8d:f8:c2:e8:2c:b7:57:5d:55:
86:28:18:b3:e6:3b:93:9e:73:c6:f8:bb:44:04:68:fb:fc:c5:
cc:18:b5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:28:53 2026 by rpki-client