
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier: XVziadl5WPsZjDslabLxe5QYxRmDXqo+JIzyZok06LU=
Subject key identifier: 1A:68:74:FB:DE:58:14:AA:6C:EC:F6:5E:5F:25:5E:F3:F5:76:DB:D0
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019F4EE8AC357DDB99F8CC2A8CED0240B754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number: 08E1
Signing time: Sat 11 Jul 2026 02:01:39 +0000
Manifest this update: Sat 11 Jul 2026 02:01:39 +0000
Manifest next update: Sun 12 Jul 2026 02:01:39 +0000
Files and hashes: 1: 1-lZQQwIGspy-A49VyQ7kHmNHpKQ.roa (hash: 2vhnioGO/eiMQvJeJ+tmXutIm8YlR1a8HfWiqLl7pT0=)
2: 2LWYmASxuBLRbzVC9LCRKSvqhJM.roa (hash: 8dPo2gye6yX3KmBTpVEzeXu2YyozD5gTuof++Xq9PIQ=)
3: 2XNigP1XX5v-b3FUJHAwFh0xXbY.roa (hash: Oo5YPE7FvlEd2/zNBUPSdHNjdbk39M4tT85PV9QMW+4=)
4: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
5: 9GJllxYCYuwNzBFKMnz_oxHLdWY.roa (hash: YYCua/crN7Zq2OAzCbcmSx0UG9y/gFrgV5F+Ua0iFZc=)
6: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
7: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
8: FJnvWNGFuLmbI2RkF1PBMfW4AaM.roa (hash: Lia6Niow9mvTIEp6IZQLMa57V883PVRlmqrb94CP8h4=)
9: HSZJOMMgqldMqXCQrjEqHsBDzGw.roa (hash: 9AQVGhxSXSd9IT7bQVwCvuQJIeCspjGvlwwEhQZYorE=)
10: LCFdxVlAtcLkcKUr0blTTKgZmEw.roa (hash: jGJaxEMPKFGeVP28YWJ4t2xMx4rPzI/ALe0dQ924UAc=)
11: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
12: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
13: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=)
14: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
15: alomw2OsWHbd8tHr8rQUVSaTf48.roa (hash: /SgtQ+hB/USe7wR/Kp74UDlxjPB2bz9JIMvjDNTyblY=)
16: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
17: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: I/8QdXngmiNJhS0necrNoTYjT3uCd1X+zH8ws7WIDh0=)
18: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
19: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
20: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=)
21: yzHgZlCQT4Y7B8Y00NhRaB47xTk.roa (hash: FPbEBqFmlrQorlve4YibsVGnSYZoskFcy6Qs1bK0kdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4e:e8:ac:35:7d:db:99:f8:cc:2a:8c:ed:02:40:b7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jul 11 02:01:39 2026 GMT
Not After : Jul 12 02:01:39 2026 GMT
Subject: CN=1a6874fbde5814aa6cecf65e5f255ef3f576dbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:07:78:36:e1:34:bf:90:f0:39:b0:ee:a6:7c:
a6:8b:71:c1:6b:ec:e6:1a:77:92:17:28:b9:0c:4d:
6b:ee:ce:d3:db:d4:8d:30:60:97:34:22:45:dc:81:
14:f0:d4:fe:35:9a:54:be:0f:cc:da:29:6a:25:86:
0a:37:35:b3:cb:a9:0d:a9:4b:96:19:81:1e:ba:91:
3f:34:54:5b:b9:b4:f2:f8:9e:92:92:67:f1:ee:d6:
87:cd:94:ce:88:cd:3e:60:85:dd:9d:f8:8f:49:27:
99:91:1f:c3:b4:c4:52:91:66:f2:95:08:dc:e4:33:
19:06:79:eb:38:39:7b:6f:f3:9b:74:46:78:1a:cf:
5e:e1:86:45:8d:0c:08:71:0c:a9:5e:b6:02:f2:a6:
f9:71:b3:0e:4b:03:61:49:a3:28:05:8b:41:5f:94:
34:16:81:ed:e7:e3:97:6b:0b:5a:f2:f9:f0:86:57:
59:a8:c3:15:bf:4a:ee:77:76:7f:7f:8e:f5:7e:f5:
2e:d9:0c:a1:22:8c:07:96:09:46:f1:53:5d:c1:e7:
a2:15:9a:a7:46:c9:fa:43:5a:57:ed:0f:1d:63:78:
bc:34:52:67:c4:36:80:82:8a:ad:a7:54:e2:d9:a2:
a0:b3:c0:3d:48:67:11:3e:d8:aa:6d:56:63:9e:46:
9b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:68:74:FB:DE:58:14:AA:6C:EC:F6:5E:5F:25:5E:F3:F5:76:DB:D0
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:3a:86:ff:51:11:ec:20:80:4f:f9:55:a8:b2:cd:bb:b8:f0:
75:68:b6:89:74:de:7d:51:48:02:b3:9f:ee:23:e2:af:15:cf:
3d:d7:76:55:f1:28:b0:d9:20:1e:e6:58:a4:df:2f:1f:36:f9:
a1:1a:24:a3:19:f7:c5:5a:de:04:af:ba:f9:9a:00:7c:bc:0a:
03:15:d5:a9:a8:1b:77:61:19:97:af:fc:92:d1:d0:b0:c5:21:
82:0a:b0:98:b5:43:18:99:67:1d:fe:36:62:1e:8a:b7:13:f4:
87:1b:f7:d7:0e:06:f3:a0:66:78:32:5c:b6:5a:2e:a1:26:8a:
b9:fc:90:fa:52:ac:11:47:21:7b:12:7e:39:79:7a:cf:fe:01:
7c:2e:70:0a:a1:57:6d:d3:80:ce:7a:27:11:f7:72:a7:f0:eb:
26:a7:6d:a4:6a:6b:90:41:20:7c:51:6a:36:9d:17:87:e8:f7:
c9:40:d6:47:07:43:66:5b:9d:71:9d:f0:e6:40:c5:da:52:4b:
1e:16:ac:c9:d1:5f:a9:29:65:9f:97:bc:86:6a:27:58:da:85:
6e:bd:3e:13:6c:f6:e3:cc:2d:3f:3e:0d:a1:14:b8:83:02:8c:
e2:ab:69:d9:7c:50:a4:95:4a:59:9c:ff:7f:5f:77:04:a1:8c:
09:63:64:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9O6Kw1fduZ+MwqjO0CQLdUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjYwNzExMDIwMTM5WhcNMjYwNzEyMDIwMTM5WjAzMTEwLwYDVQQD
EygxYTY4NzRmYmRlNTgxNGFhNmNlY2Y2NWU1ZjI1NWVmM2Y1NzZkYmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgd4NuE0v5DwObDupnymi3HBa+zm
GneSFyi5DE1r7s7T29SNMGCXNCJF3IEU8NT+NZpUvg/M2ilqJYYKNzWzy6kNqUuW
GYEeupE/NFRbubTy+J6Skmfx7taHzZTOiM0+YIXdnfiPSSeZkR/DtMRSkWbylQjc
5DMZBnnrODl7b/ObdEZ4Gs9e4YZFjQwIcQypXrYC8qb5cbMOSwNhSaMoBYtBX5Q0
FoHt5+OXawta8vnwhldZqMMVv0rud3Z/f471fvUu2QyhIowHlglG8VNdweeiFZqn
Rsn6Q1pX7Q8dY3i8NFJnxDaAgoqtp1Ti2aKgs8A9SGcRPtiqbVZjnkabwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpodPveWBSqbOz2Xl8lXvP1dtvQMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuDqG/1ER
7CCAT/lVqLLNu7jwdWi2iXTefVFIArOf7iPirxXPPdd2VfEosNkgHuZYpN8vHzb5
oRokoxn3xVreBK+6+ZoAfLwKAxXVqagbd2EZl6/8ktHQsMUhggqwmLVDGJlnHf42
Yh6KtxP0hxv31w4G86BmeDJctlouoSaKufyQ+lKsEUchexJ+OXl6z/4BfC5wCqFX
bdOAznonEfdyp/DrJqdtpGprkEEgfFFqNp0Xh+j3yUDWRwdDZludcZ3w5kDF2lJL
HhasydFfqSlln5e8hmonWNqFbr0+E2z248wtPz4NoRS4gwKM4qtp2XxQpJVKWZz/
f193BKGMCWNkjg==
-----END CERTIFICATE-----
Generated at Sat Jul 11 06:39:24 2026 by rpki-client