
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier: tkmt+WzNcj3yokgLyivskPphJInnHkgeVRIkCFXTGtE=
Subject key identifier: 06:B2:44:DE:0C:90:12:2A:52:6D:AB:59:8E:C3:B8:B1:D3:9C:74:61
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019D861417222B025DB8FB90ADB7E6C7CA47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number: 07DC
Signing time: Mon 13 Apr 2026 09:02:36 +0000
Manifest this update: Mon 13 Apr 2026 09:02:36 +0000
Manifest next update: Tue 14 Apr 2026 09:02:36 +0000
Files and hashes: 1: 16Np4JNZv6v2ZaABJcy2sCql7pI.roa (hash: qAvGjbOzsR63qF3tqsjKZEDozeFVN2kLIVrjTI8/doM=)
2: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=)
3: 1t0W39rjvnhlr82paEbC8GZYcC0.roa (hash: 17SD6nyFJbW/EGjQCaf/6g0oWpZcAdugL0aeYfs/fCc=)
4: 5UDuqrSyuGprLjI2HKiGxGynvqE.roa (hash: NGA8WTAO8zMKPpGzof9YMthqeMGnL9P153gfC/S9Zh0=)
5: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
6: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
7: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
8: FsWz95bjpsQz09qkc-hQos-M0m8.roa (hash: 3XsppK5S7iL8gQ3L3NeC1DD01cY/1dPaUa81kDoWAKE=)
9: IWbk6zNSYB6WM0Y5Z6-XcPx7fTg.roa (hash: lD3YgQPEcJ+Lsldpe4bbaxPUzCjTvoc7u6pwJwRKzSw=)
10: IjZEx1eHpkQjZ-ES_Rg9N95_Zzg.roa (hash: 5Sm4tdW+S9NYYEZ3KZhaD241AoDsBp/MjQHfJVYoRSk=)
11: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
12: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
13: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
14: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
15: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
16: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
17: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: sjAZFXRDhbA1+GVLKAMLEd4PpH4r2EkrcYC4SxTj4vo=)
18: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
19: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=)
20: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
21: qfYseX0GpDJ3nwbZkrDDY-_lcTQ.roa (hash: 9SV1r203DsffZLFBuKYeAWKCRAM7udUdpGOOPSGi5Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Apr 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:14:17:22:2b:02:5d:b8:fb:90:ad:b7:e6:c7:ca:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Apr 13 09:02:36 2026 GMT
Not After : Apr 14 09:02:36 2026 GMT
Subject: CN=06b244de0c90122a526dab598ec3b8b1d39c7461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d8:4e:2a:b4:5a:c6:3d:39:e6:ef:0a:60:37:
7a:fe:a3:f5:32:cb:f0:fc:6a:ca:5a:fc:9c:20:ec:
cc:7d:c9:5c:5d:3e:92:41:82:80:c2:b0:f8:48:e7:
69:75:c8:34:7e:32:57:36:14:88:da:6c:63:f0:bf:
6c:57:8d:f4:4f:9f:a7:af:7c:bd:bc:f6:85:2b:15:
31:05:d9:28:df:fc:4d:c2:d5:66:56:92:3e:73:30:
73:cd:2c:d5:56:1a:b2:5a:de:1c:15:52:14:82:11:
a9:b2:d9:19:cf:1e:4a:ab:ec:4c:03:1e:7e:de:e1:
08:d1:89:fa:91:9b:b9:fd:2a:e1:50:3b:d7:b0:43:
85:b6:66:01:3d:58:d7:b4:37:4b:4a:e8:90:43:77:
29:86:13:4b:68:20:da:c3:62:4d:72:f8:f0:ef:84:
79:b5:2d:f8:fc:73:99:d5:8b:55:c4:3a:18:a8:dd:
be:55:a4:c5:37:fb:b1:c0:f0:6c:27:e0:35:de:93:
25:6b:d0:ef:37:25:af:ee:86:20:4c:97:78:c8:40:
f9:92:d6:05:31:cb:15:13:6b:15:5f:06:92:b4:55:
f7:02:6e:bc:38:d5:c7:fc:f9:b8:95:37:c8:35:dc:
80:e9:f0:b8:df:74:aa:8d:7e:11:0e:01:10:93:bc:
ae:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B2:44:DE:0C:90:12:2A:52:6D:AB:59:8E:C3:B8:B1:D3:9C:74:61
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:90:74:cf:95:64:70:ee:da:d9:c6:eb:37:c8:df:ec:36:67:
18:6e:ec:cd:72:4e:9e:48:9b:2b:c9:b7:7d:e7:92:6b:e2:4e:
b1:f2:be:d5:a9:54:53:b7:92:1b:41:70:20:7c:87:2b:6f:33:
c2:c6:01:c9:40:ed:cb:e9:10:e5:9f:be:71:c3:05:82:88:4f:
c4:11:85:8e:5b:62:e1:29:19:48:6f:9d:ff:90:be:32:c9:04:
3c:49:b4:fe:41:9d:45:86:4a:ab:f0:af:5e:ea:3d:16:45:36:
03:f1:6c:8b:14:55:40:c0:62:55:74:09:33:75:26:8d:06:de:
8c:fc:23:be:99:95:fe:71:ef:38:ad:72:d8:ed:89:1a:a4:3c:
fa:95:6c:27:fc:f0:ad:4e:a2:94:b6:bd:a8:80:06:fe:71:81:
20:47:f6:e7:80:a4:ba:d0:1f:05:12:40:f1:07:7c:12:0f:98:
8d:b2:47:a3:40:3e:1d:fc:7c:95:ce:5e:30:18:9f:67:41:45:
14:2b:0c:67:ae:c6:cd:8e:89:45:e7:f4:69:51:b9:22:1d:08:
c8:1c:a4:63:61:11:14:61:84:fd:d7:9a:b4:0f:5e:57:09:43:
c9:49:ba:b0:7a:09:b5:44:75:a9:98:bf:70:59:50:42:91:aa:
ca:d7:ea:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:56:49 2026 by rpki-client