
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier: QuXbHJtgu2GvPFFVgA+QcW7k53IlXXiHSIkt+Xj9SZs=
Subject key identifier: 49:97:5A:2D:2E:36:24:96:98:F4:E6:A8:EB:88:6C:2A:66:DE:79:EE
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019EE142BBACA5A3A8E3ED2D94E83733C996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number: 08A5
Signing time: Fri 19 Jun 2026 19:01:47 +0000
Manifest this update: Fri 19 Jun 2026 19:01:47 +0000
Manifest next update: Sat 20 Jun 2026 19:01:47 +0000
Files and hashes: 1: 0-M2wHYVJo6WO_dOM_FrtWqv32g.roa (hash: Syur9QoTGjJsrlDvPR/2jwpPclrs3Zqpe7DQd8jDoYk=)
2: 1-lZQQwIGspy-A49VyQ7kHmNHpKQ.roa (hash: 2vhnioGO/eiMQvJeJ+tmXutIm8YlR1a8HfWiqLl7pT0=)
3: 2XNigP1XX5v-b3FUJHAwFh0xXbY.roa (hash: Oo5YPE7FvlEd2/zNBUPSdHNjdbk39M4tT85PV9QMW+4=)
4: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
5: 9GJllxYCYuwNzBFKMnz_oxHLdWY.roa (hash: YYCua/crN7Zq2OAzCbcmSx0UG9y/gFrgV5F+Ua0iFZc=)
6: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
7: Dvx2hzvMT7hi8a5hX4LumdNaC7c.roa (hash: Ocu370sBJZGLJXicuZAmLfZhcN2ZwV3iU7xOO4V/BtA=)
8: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
9: HSZJOMMgqldMqXCQrjEqHsBDzGw.roa (hash: 9AQVGhxSXSd9IT7bQVwCvuQJIeCspjGvlwwEhQZYorE=)
10: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
11: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
12: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
13: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
14: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=)
15: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
16: alomw2OsWHbd8tHr8rQUVSaTf48.roa (hash: /SgtQ+hB/USe7wR/Kp74UDlxjPB2bz9JIMvjDNTyblY=)
17: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
18: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: 5TpaliAyD/cdmyfFPMl4SAM8pBjzHPX/zieo6TmMlGQ=)
19: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
20: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
21: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=)
22: yzHgZlCQT4Y7B8Y00NhRaB47xTk.roa (hash: FPbEBqFmlrQorlve4YibsVGnSYZoskFcy6Qs1bK0kdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:42:bb:ac:a5:a3:a8:e3:ed:2d:94:e8:37:33:c9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jun 19 19:01:47 2026 GMT
Not After : Jun 20 19:01:47 2026 GMT
Subject: CN=49975a2d2e36249698f4e6a8eb886c2a66de79ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d8:19:b6:b4:65:fc:cf:28:49:ea:74:f4:24:
3a:64:63:58:98:15:0f:05:27:3c:22:44:28:33:d0:
39:a7:d7:40:d4:7d:0a:ed:4c:47:a3:ec:3d:7a:5e:
80:1b:6a:e1:cf:59:41:9d:02:16:2e:55:b5:01:ec:
aa:84:d4:b3:c5:6c:1a:1e:54:04:e7:96:19:3f:a1:
9b:5e:14:2a:07:96:5d:fe:0c:f9:b1:ae:21:37:af:
8d:5a:59:ce:55:f3:95:06:d7:dd:57:60:e9:07:4a:
ad:e3:f8:bb:8a:44:85:55:f6:96:79:23:a0:bf:0d:
7c:46:5c:86:bc:8f:84:70:9e:48:67:c8:59:cf:5a:
3b:1a:01:08:6d:65:e7:f7:4a:23:f7:02:e1:82:72:
0d:64:a6:c7:50:12:b4:f2:b6:db:29:6f:e8:23:b8:
f3:09:e3:19:96:9f:e7:dd:fb:5e:f8:2f:f1:d9:3f:
34:87:54:33:76:b3:3c:c9:cb:95:6f:18:bb:2f:b9:
06:8e:09:06:7f:d5:61:79:24:29:78:c9:37:d3:4e:
84:83:d3:d7:09:16:15:40:0d:ee:6b:cb:2d:98:1e:
a8:9e:04:e7:a0:1e:bb:c6:3c:12:f1:53:b2:b2:ab:
44:42:3b:fa:3f:52:2e:01:c7:3e:d2:49:d9:4f:37:
1c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:97:5A:2D:2E:36:24:96:98:F4:E6:A8:EB:88:6C:2A:66:DE:79:EE
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:fb:57:ee:a2:b6:9a:68:be:f3:ec:5a:63:98:80:7e:78:c4:
57:76:2f:d5:ac:a9:de:99:49:67:86:31:d5:3b:9e:41:c5:a4:
1d:08:1f:68:6a:f5:a7:5c:6f:cd:6f:7d:2a:5e:bb:8f:96:4e:
e3:36:63:21:c9:89:e2:86:cc:5b:f6:dc:f9:15:69:a8:55:d7:
e9:6a:ec:14:1f:e7:dc:27:8b:85:d3:4d:a3:aa:01:a0:32:2f:
fb:27:78:05:ae:fc:3e:5c:a0:25:22:be:c7:bb:c8:f9:37:ce:
b6:06:cb:c5:48:e2:4a:87:f9:6b:08:87:13:d8:03:e6:30:2a:
08:df:4a:6f:c0:d2:54:ce:78:bf:61:51:32:ce:70:15:5c:87:
64:2e:57:38:40:55:cb:4f:40:a7:40:5e:07:8c:40:b1:3b:cf:
76:d0:63:c6:6a:cc:64:34:a2:e6:33:f6:90:c1:f7:de:53:bc:
ef:3d:6b:c6:52:9f:6b:ca:f8:b0:9d:26:5b:f1:3a:5b:1b:c9:
e8:0d:90:bb:3b:6f:42:b8:b8:f5:6c:6b:75:ed:9f:ec:6d:15:
6b:1e:46:92:cb:c5:96:1f:ca:6f:61:d1:02:b8:8f:7b:33:e1:
84:9b:63:51:21:08:d7:2d:a2:a6:7d:5e:ac:72:05:51:87:39:
82:35:21:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:15:20 2026 by rpki-client