
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier: 5xYP6etllWmUNiJGarMs0Ev0Uan5htUVARGn/lz8+ZY=
Subject key identifier: 01:1A:10:57:9E:B3:31:A5:BE:58:11:BE:CD:FE:BF:9F:78:90:CF:7C
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019F73995579310F30F8564982A3B969A196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number: 08F4
Signing time: Sat 18 Jul 2026 05:00:56 +0000
Manifest this update: Sat 18 Jul 2026 05:00:56 +0000
Manifest next update: Sun 19 Jul 2026 05:00:56 +0000
Files and hashes: 1: 1-lZQQwIGspy-A49VyQ7kHmNHpKQ.roa (hash: 2vhnioGO/eiMQvJeJ+tmXutIm8YlR1a8HfWiqLl7pT0=)
2: 2LWYmASxuBLRbzVC9LCRKSvqhJM.roa (hash: 8dPo2gye6yX3KmBTpVEzeXu2YyozD5gTuof++Xq9PIQ=)
3: 2XNigP1XX5v-b3FUJHAwFh0xXbY.roa (hash: Oo5YPE7FvlEd2/zNBUPSdHNjdbk39M4tT85PV9QMW+4=)
4: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
5: 9GJllxYCYuwNzBFKMnz_oxHLdWY.roa (hash: YYCua/crN7Zq2OAzCbcmSx0UG9y/gFrgV5F+Ua0iFZc=)
6: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
7: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
8: FJnvWNGFuLmbI2RkF1PBMfW4AaM.roa (hash: Lia6Niow9mvTIEp6IZQLMa57V883PVRlmqrb94CP8h4=)
9: HSZJOMMgqldMqXCQrjEqHsBDzGw.roa (hash: 9AQVGhxSXSd9IT7bQVwCvuQJIeCspjGvlwwEhQZYorE=)
10: LCFdxVlAtcLkcKUr0blTTKgZmEw.roa (hash: jGJaxEMPKFGeVP28YWJ4t2xMx4rPzI/ALe0dQ924UAc=)
11: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
12: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
13: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=)
14: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
15: alomw2OsWHbd8tHr8rQUVSaTf48.roa (hash: /SgtQ+hB/USe7wR/Kp74UDlxjPB2bz9JIMvjDNTyblY=)
16: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
17: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: 5vP4iutrd6AEvZl7QAnWbzPmnalKzc/V6IKoUblh+iw=)
18: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
19: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
20: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=)
21: yzHgZlCQT4Y7B8Y00NhRaB47xTk.roa (hash: FPbEBqFmlrQorlve4YibsVGnSYZoskFcy6Qs1bK0kdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:73:99:55:79:31:0f:30:f8:56:49:82:a3:b9:69:a1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jul 18 05:00:56 2026 GMT
Not After : Jul 19 05:00:56 2026 GMT
Subject: CN=011a10579eb331a5be5811becdfebf9f7890cf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:22:8b:03:d8:71:bd:6a:de:38:7e:17:92:
36:3f:25:ba:8b:6d:e4:ec:4d:21:44:2c:77:6f:47:
82:16:e5:1c:d2:c8:af:11:c3:1a:9b:f5:7f:91:64:
ad:e6:8c:4a:e2:fc:c5:a7:61:c1:4e:d0:d4:47:7e:
ff:ac:10:98:db:cb:3f:c8:87:d8:f0:0c:06:f9:e0:
00:99:6e:52:00:d7:69:8f:fe:52:ae:c5:fc:28:b3:
76:96:fb:c2:ce:b7:b8:df:2f:61:4a:7b:cf:c8:ad:
09:31:6a:73:bb:ee:f2:9e:4a:4b:9e:8f:36:43:d6:
9a:47:78:0f:51:ac:18:58:3b:61:fd:53:27:64:b5:
f4:01:bf:3e:66:d8:b7:da:57:39:20:68:b7:f1:c8:
b3:b9:64:55:b1:cd:47:1e:3e:2f:fe:3d:40:78:72:
b5:1a:6e:4f:47:bc:6c:05:6a:d4:45:e7:bf:11:9d:
82:0b:d2:ec:ce:53:3d:c1:a2:6f:aa:7e:12:5c:42:
43:9c:bb:d6:24:56:74:e4:ee:a8:6c:2c:4e:ab:97:
e9:ee:53:ca:ea:0c:66:f7:c3:96:93:79:d8:66:35:
b5:4d:62:4b:75:2a:83:99:0e:2e:67:1a:6d:50:40:
87:69:74:13:98:c1:58:2a:0a:30:e3:86:e4:f7:aa:
44:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1A:10:57:9E:B3:31:A5:BE:58:11:BE:CD:FE:BF:9F:78:90:CF:7C
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1a:22:ef:43:34:39:5c:c6:64:bc:4c:c9:23:d4:34:8c:a3:
e2:99:a5:0f:78:0f:91:49:4c:f6:1d:bd:91:56:6c:d4:50:8a:
72:ef:5b:59:98:99:49:eb:e5:48:8b:61:d9:ca:97:13:1a:91:
02:01:45:2b:0c:f8:61:2f:7a:62:74:7a:7a:91:70:ed:fb:59:
eb:55:dc:c4:75:dd:21:7c:ee:08:66:07:34:f0:f8:78:cb:b0:
96:55:61:32:7a:04:d4:9c:13:8c:ca:c0:89:af:3c:56:7f:95:
d9:11:08:6e:a5:51:c7:8e:56:5b:60:7b:c4:12:51:0f:38:fa:
52:9b:c4:96:56:e8:fb:ba:a9:6d:3e:75:53:c9:54:dc:b9:da:
e2:13:6c:51:17:9b:57:82:bd:9d:85:dd:a6:0c:65:de:96:91:
95:67:30:db:de:fe:39:f9:7b:8d:01:d9:8d:92:3d:44:83:8a:
a8:98:54:f2:df:6e:9d:0e:ed:aa:03:7d:14:70:a5:c0:f7:72:
a2:e1:54:a7:cb:be:ae:5d:b0:7d:e8:62:44:7d:5e:19:de:60:
10:4e:ee:49:e6:8c:c2:0e:d9:14:b2:ec:80:03:eb:ee:64:bd:
63:8e:8a:df:8a:2a:e9:04:49:50:6b:cb:bb:37:ee:31:6e:1f:
34:03:18:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:11:32 2026 by rpki-client