
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json)
Hash identifier: 1Rg4AM0kGB7ZrkPHhW3KyCcuSW+gfCbx18n2ZVPTnKI=
Subject key identifier: 1D:5E:40:E7:0A:84:5F:0F:97:18:49:3C:07:17:FF:3E:06:63:87:C1
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 019EB921FD34C3D97D25BAF2D32539505975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
Manifest number: 1976
Signing time: Fri 12 Jun 2026 00:01:12 +0000
Manifest this update: Fri 12 Jun 2026 00:01:12 +0000
Manifest next update: Sat 13 Jun 2026 00:01:12 +0000
Files and hashes: 1: 1iiQznngAAUoJBg2IRNbTIROLgA.roa (hash: IfOiJ0y8Jxc7SmQONu8fFngEQ795WWF+gFMreRxG3CU=)
2: A5PgGRLn4kXJK7rp7MRelJlQCGs.roa (hash: uoHX6U7FvckkMUmhHzgYs1oGVMNEJnR2TmiJTsJFLvY=)
3: Bzo_VHzhyMxVmlaGb7eDpMOzKNw.roa (hash: faAu0B/ZNdAR9cPNQILlVsqLeHnhVt95YfA/GQi7kCw=)
4: DwjEXVnUblEp_ffjT3ktDSUITT0.roa (hash: I6xp4PWDpWQ5//0ycJ2/A/YaDv2hFHAvBn6TOMEWzLI=)
5: GIo6XBIIGKLKY5fo-2KAJGPCwGY.roa (hash: KkZCoIa9nndDPKaAqxfqTYTtr6XtVmuZC5N9YIEfldg=)
6: MASv_rraqDJSYbqgrPz4hvaUE2c.roa (hash: cVsPoSNgg1jdtpq+zgxbSf3SDxFypt0t/a96jTQx6hE=)
7: NzbIi-FrPomQ6ctOPJJUrBGgm1I.roa (hash: PdBiVtgjdqqfmsvkZMECcdaQfrG9aEwqLBPPRyETYkY=)
8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: sZ80iD+E2bWoAM5Ub+GqS00yLF9fN6KeDluwnLuCJ2k=)
9: bzkVBP_m0QOkL7HvzQFXrT5rq10.roa (hash: NzVgHolIVrpawCE7CDio6iuv1mdZYc6KIW6NA0eXBBI=)
10: mr3eytu19hz9X8102ddOQBMhaCs.roa (hash: rgExvt59Z6M78VouciXS9dA08jr+rMik1ukA2amoJZc=)
11: pUmN_6XpWcEqw-3rUBgKOFddqas.roa (hash: Cn7MMw/oqRiT9o2HCgwnJRlue/qjCZYJ4u8zRlj1ypM=)
12: w-PDKFF3prApvO2JzmgAyow-O5c.roa (hash: yGP/NbSbCcqtvQkL6kf+yxHQ3/xxKzetGY7fqt3Etok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:fd:34:c3:d9:7d:25:ba:f2:d3:25:39:50:59:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jun 12 00:01:12 2026 GMT
Not After : Jun 13 00:01:12 2026 GMT
Subject: CN=1d5e40e70a845f0f9718493c0717ff3e066387c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:c2:0b:a7:e0:15:e3:00:a2:a5:9e:10:c2:
b5:64:cf:fc:a9:16:3f:bb:30:e3:73:a6:5a:ac:28:
88:f1:ee:a3:93:bb:46:d4:bd:64:78:14:0d:3d:b4:
3a:3e:4c:6a:36:95:59:0b:c7:fa:4e:3e:2e:66:90:
24:ae:9c:8e:6a:da:ce:8c:ba:fe:5f:35:8d:f2:45:
ae:5a:4e:42:c0:f7:45:3e:55:b9:9f:45:38:d4:4f:
4b:0c:7d:5a:c2:e5:9c:b3:5f:d3:17:cf:6b:a2:d6:
ed:8b:19:34:a1:40:44:fe:ff:b6:77:c5:e2:f3:54:
c7:1d:5b:c6:f9:40:28:06:8f:8b:f5:cb:62:2b:d2:
45:1d:52:8d:dd:a5:c5:11:5b:9e:2c:20:b5:aa:78:
73:c5:b4:2c:d7:b1:b9:46:ec:81:88:7f:d7:d8:e2:
34:8f:7a:4a:52:6c:e0:00:15:e2:a8:b9:7d:09:f1:
63:2a:47:3f:d2:09:64:a7:8d:08:c9:18:03:53:7d:
1c:b0:94:97:ef:29:94:22:5e:1b:ce:cb:5f:37:c2:
4e:5a:db:de:f5:c1:99:dc:38:ec:da:32:24:58:7c:
dd:48:72:72:f5:a9:fa:87:33:31:08:29:87:98:31:
61:5f:a8:69:d8:a1:e6:fe:15:2e:49:87:fd:f3:ae:
33:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5E:40:E7:0A:84:5F:0F:97:18:49:3C:07:17:FF:3E:06:63:87:C1
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:92:e2:d9:2d:b5:44:7f:72:a2:0c:39:70:42:6a:01:92:d7:
76:96:54:a4:d6:b2:39:47:6b:b0:0e:7e:cb:b5:30:ed:41:f6:
16:8b:8c:b5:0c:11:3d:64:29:db:af:cc:15:8e:3a:4b:c7:9b:
a8:ca:eb:da:70:89:e6:eb:22:df:f0:df:ec:e0:37:fc:2d:01:
19:d4:2a:56:22:6c:75:04:8e:98:06:25:03:b7:28:87:b7:ef:
ef:b2:70:6b:6d:6b:70:04:0d:d7:28:5d:0b:45:c0:ce:f3:cc:
62:02:2b:f1:09:2c:34:02:0b:11:a2:fe:52:84:1b:c1:63:ed:
c3:36:95:7c:f9:72:52:1d:68:23:2a:26:4e:f9:98:88:6e:cf:
f7:dd:45:8b:e3:1a:12:39:b3:e5:69:bf:9a:2c:2c:3f:0b:cf:
fd:08:41:cf:40:cb:6a:72:52:f3:72:75:49:a3:04:83:8e:37:
04:5b:cf:c0:51:69:c3:4f:d4:d7:2a:16:87:e3:ec:77:89:2f:
45:d0:3e:2f:3a:c0:2f:ef:17:b6:08:89:05:b5:0a:e3:e0:a7:
21:24:9d:73:70:3f:83:6e:2a:ee:5a:74:e4:cd:4f:13:0b:7c:
d4:07:34:59:02:76:b9:1b:22:4a:e7:c5:69:3d:61:02:f3:d8:
34:54:dd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:29:19 2026 by rpki-client