
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier: OODcWHriHT1cooEhZ7ng/xdlvuRwjvsLC6azJvRwOUU=
Subject key identifier: 9F:91:A8:85:3C:57:62:B9:4F:A0:BD:DF:A0:C2:4B:48:0B:74:8D:C0
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019E751CD7228304D4A3DA9E3B18416013C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number: 0865
Signing time: Fri 29 May 2026 19:01:24 +0000
Manifest this update: Fri 29 May 2026 19:01:24 +0000
Manifest next update: Sat 30 May 2026 19:01:24 +0000
Files and hashes: 1: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=)
2: 3UxXNfbXuz8i0p4qeOcbr6GGK7g.roa (hash: hZgmhd7rTwkIKlbrCrKQZLJjwcORc7pG4gvvo+Rcs3Q=)
3: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
4: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
5: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
6: HSZJOMMgqldMqXCQrjEqHsBDzGw.roa (hash: 9AQVGhxSXSd9IT7bQVwCvuQJIeCspjGvlwwEhQZYorE=)
7: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
8: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
9: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
10: RW1Mn5jGY_fNwEa4nhfDdOF4euY.roa (hash: rormOO+Scyvc6/IMwyduU2PX9d097afAopSHjpl3a98=)
11: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
12: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=)
13: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
14: cfZY6a_P68a48WrfPdh2ybzN0mo.roa (hash: vz82xH5oEj0u8LL1xE6ynS2ZCw12kUa4tRY5hXJQvWw=)
15: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
16: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: wPAnpV8xcmLjqIq61xLLLh9yximY5tTROFwhD99rfac=)
17: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
18: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
19: pOZHVjX8onM9oBBZ12RCzAbquBs.roa (hash: pOOINsyyZRyr8GyLY4+525uladm5E7MLq4xyYrftyKY=)
20: tCmMoUtYFPQDVVVvD1xexWaYCPs.roa (hash: 8vL7GZMxy/ZTgYn7qa4CYEJlWKlh7uFIJGQ6a6Vvspg=)
21: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=)
22: x0w0SJYyBODLjpKGKi2OvtCd5BY.roa (hash: /oU3eS+zy0/9a9tpbxNFxOY3NXEHHhBLy521R4xGw7I=)
23: yzHgZlCQT4Y7B8Y00NhRaB47xTk.roa (hash: FPbEBqFmlrQorlve4YibsVGnSYZoskFcy6Qs1bK0kdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 30 May 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:75:1c:d7:22:83:04:d4:a3:da:9e:3b:18:41:60:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: May 29 19:01:24 2026 GMT
Not After : May 30 19:01:24 2026 GMT
Subject: CN=9f91a8853c5762b94fa0bddfa0c24b480b748dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a4:9c:b0:61:28:dc:81:d0:75:eb:e3:ed:d1:
2e:6a:7e:1f:f4:de:d3:e0:79:5c:a8:d9:cb:74:ed:
66:af:90:e1:89:f0:e3:05:3c:e4:60:fc:c4:02:2c:
e2:12:4d:14:08:b8:27:ac:56:9e:0d:b8:ba:31:60:
59:1b:94:fb:d6:2d:ff:9a:13:b5:7b:2f:52:fa:9d:
f8:29:33:d3:99:f5:7d:63:05:f0:c5:e3:07:1b:f0:
90:41:97:5e:c8:87:54:00:67:21:8d:b6:21:5e:9c:
d3:b7:bd:e3:08:8d:a1:29:e2:e7:e1:a5:61:86:9e:
da:29:95:47:3f:a7:f8:9d:e6:c3:e4:1f:70:4c:d6:
ec:1d:e3:c1:1f:45:a4:9b:dc:07:83:a3:49:16:56:
9d:2d:3d:22:19:f9:e1:ab:47:f4:36:df:ee:07:d8:
59:1b:b0:97:20:8e:d6:fd:eb:f7:6b:46:45:c1:0c:
57:bf:5a:69:c2:20:93:a6:bb:77:4c:bb:9e:e3:33:
f9:08:a8:62:9f:9f:a5:d9:3e:a7:fd:04:96:75:cf:
50:85:33:48:d1:ae:68:8f:69:24:cc:a8:aa:ad:a8:
c6:5d:80:66:e0:36:19:73:4a:21:99:e1:5e:16:c8:
5e:fb:e9:19:32:a3:19:e5:f8:23:2a:23:24:ca:3f:
cb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:91:A8:85:3C:57:62:B9:4F:A0:BD:DF:A0:C2:4B:48:0B:74:8D:C0
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:49:60:1d:ac:04:36:72:1f:cf:56:80:e3:42:ee:28:d0:8b:
66:b7:b6:5a:84:10:e3:9d:0a:76:c9:31:64:6a:de:da:d0:89:
b1:0a:6f:51:ab:3d:a3:ef:05:64:de:67:3f:c8:8d:cf:cc:ad:
d8:2e:00:bf:0c:95:53:8f:ca:7b:9d:a6:82:b8:00:67:d5:df:
2e:10:dd:d8:bd:c4:85:64:db:68:94:e0:b2:ae:5d:de:4e:3f:
c1:4d:8e:74:99:c0:61:5a:97:b4:6f:92:f9:95:5a:fa:4e:44:
a4:48:4a:a8:7c:ef:cb:6a:aa:64:a9:69:de:02:26:41:7b:bb:
d2:ed:af:44:a2:7a:9c:14:1f:7e:37:75:3e:fa:a8:cb:8c:23:
97:78:05:cf:c6:4b:25:04:9a:5b:2a:fb:62:89:14:06:1d:49:
65:fa:a9:c6:ab:d3:ed:35:49:1e:a3:0e:d1:ac:88:db:73:9b:
2a:27:60:1a:0e:cd:3f:01:70:69:18:2d:11:4a:c5:0d:fe:1d:
52:4b:3f:8a:d6:3e:29:d7:f9:b1:de:96:c3:35:a1:62:6d:fc:
a9:66:38:f1:75:77:e0:6c:09:cf:51:a2:7f:6b:73:a6:70:66:
89:0e:ef:4c:cc:86:4b:ec:d3:de:95:c0:e7:e6:8e:ee:0d:37:
7c:09:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:47:06 2026 by rpki-client