
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier: 8B38J26MA9I0GpkbKsD66vhGUY6jo5IrIhMqiIg+ic8=
Subject key identifier: AE:72:2A:E7:2C:25:B8:80:CD:D4:D8:53:78:57:39:8B:C5:65:F9:24
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019FDFBF743CB2EAA76092F87FDA80C29664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number: 0930
Signing time: Sat 08 Aug 2026 05:01:34 +0000
Manifest this update: Sat 08 Aug 2026 05:01:34 +0000
Manifest next update: Sun 09 Aug 2026 05:01:34 +0000
Files and hashes: 1: 1j5UAP5H5otYm6pS4g0n1VzxxYQ.roa (hash: mM9qtiyOIDoLHT2ky1NvYHeN+2+g0FGedZNgPDVPiQY=)
2: 2XNigP1XX5v-b3FUJHAwFh0xXbY.roa (hash: Oo5YPE7FvlEd2/zNBUPSdHNjdbk39M4tT85PV9QMW+4=)
3: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
4: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
5: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
6: FJnvWNGFuLmbI2RkF1PBMfW4AaM.roa (hash: Lia6Niow9mvTIEp6IZQLMa57V883PVRlmqrb94CP8h4=)
7: HSZJOMMgqldMqXCQrjEqHsBDzGw.roa (hash: 9AQVGhxSXSd9IT7bQVwCvuQJIeCspjGvlwwEhQZYorE=)
8: L9vi7oaF7p0v7m8lMsP1-CSnn40.roa (hash: SjasMchH3XZ1XzHCHPI6noKvIxn92k+R3PPiC6LGtDE=)
9: LCFdxVlAtcLkcKUr0blTTKgZmEw.roa (hash: jGJaxEMPKFGeVP28YWJ4t2xMx4rPzI/ALe0dQ924UAc=)
10: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
11: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
12: YN2cQdjx8MfN4SpkIZWHdTD1gDo.roa (hash: O+9/V5QrptcdWsyQKkyNmQaV+rxkd0ZkMWeazSDlkK0=)
13: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=)
14: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
15: alomw2OsWHbd8tHr8rQUVSaTf48.roa (hash: /SgtQ+hB/USe7wR/Kp74UDlxjPB2bz9JIMvjDNTyblY=)
16: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
17: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: O6I5jQRGvi6E8WAxLLns5KOLajqskk5uDdHlVbZD60o=)
18: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
19: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
20: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=)
21: yzHgZlCQT4Y7B8Y00NhRaB47xTk.roa (hash: FPbEBqFmlrQorlve4YibsVGnSYZoskFcy6Qs1bK0kdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:df:bf:74:3c:b2:ea:a7:60:92:f8:7f:da:80:c2:96:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Aug 8 05:01:34 2026 GMT
Not After : Aug 9 05:01:34 2026 GMT
Subject: CN=ae722ae72c25b880cdd4d8537857398bc565f924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:7d:8a:f3:74:cd:b1:8d:2c:6f:fc:71:db:
ef:a0:59:db:b4:68:1d:ae:5d:93:20:d7:50:15:fd:
c9:1a:fd:bf:7a:b7:71:d9:8f:ba:92:db:e5:72:e5:
f6:3a:74:27:bf:02:d8:d5:07:6c:3f:cb:85:93:9a:
88:be:1a:a7:60:20:71:80:68:5d:70:d4:43:f7:20:
b1:47:e0:29:1e:a4:bc:55:00:54:fe:08:b9:63:e0:
d1:4c:dd:98:c9:0c:68:7d:b2:cf:95:7b:2f:e8:0b:
f1:c1:f2:2d:4a:6a:cb:87:c0:d4:e1:54:4e:73:3f:
cf:9c:32:10:20:e5:e7:d2:eb:2a:ce:6a:9a:2d:ac:
03:32:cb:2e:fe:ca:fd:9b:61:75:81:ad:e2:fd:d3:
dc:1b:e8:80:68:65:89:87:67:65:c8:30:a9:6e:dc:
f8:e1:39:58:fb:4a:b4:cf:48:92:f1:95:64:28:43:
47:b4:b7:ea:9f:33:3e:00:66:b6:3a:c8:fa:52:f6:
ce:be:10:94:87:6e:eb:31:4e:b4:b3:cc:8d:d7:ee:
35:c1:2d:97:0e:96:7d:7a:b2:22:be:d2:12:41:7d:
07:ef:2c:6a:86:b5:81:44:60:0f:3c:5f:bd:9f:40:
46:75:35:30:a0:c4:5c:ad:ea:29:97:18:38:91:47:
14:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:72:2A:E7:2C:25:B8:80:CD:D4:D8:53:78:57:39:8B:C5:65:F9:24
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3c:77:53:b1:a8:93:45:c1:78:02:e5:17:8b:52:c0:8a:37:
45:3d:c4:d1:f3:b0:18:1d:01:df:bb:21:28:2d:0e:e4:73:84:
b1:73:d0:6d:ec:ae:5c:70:27:f1:09:ec:9b:cb:61:40:ea:77:
ce:fb:59:63:28:1d:5a:5d:6f:0a:ef:e5:28:41:d6:fb:f2:7c:
1c:33:ce:99:04:13:61:a9:c2:54:40:61:2f:c7:f5:56:1d:fa:
af:66:f4:80:83:39:ed:2e:95:8b:68:6c:6d:0a:59:e1:ab:77:
51:55:79:90:b2:a0:64:7b:60:2c:79:20:4e:ce:95:ce:21:9a:
fe:7f:0c:dd:8d:68:ea:f0:47:6a:92:f4:0d:71:91:db:19:33:
00:f9:93:a6:f0:4e:ef:25:d8:81:aa:e1:e7:86:13:a3:c7:2c:
e4:bd:a8:fb:33:34:c0:0e:a3:da:df:26:c3:37:65:e5:69:47:
e1:05:6d:5f:a9:65:e4:b3:9e:de:e3:37:80:52:66:b4:33:b8:
d5:02:ad:53:db:05:ab:88:c3:69:c9:76:ee:d9:bf:50:42:7c:
35:6a:0c:b1:db:55:bb:40:be:82:d1:b2:c4:72:f9:ef:97:df:
40:74:c3:4f:6b:35:26:af:c5:a4:19:32:1f:7d:62:7b:c6:e6:
94:43:4e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 10:23:13 2026 by rpki-client