
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
File: 9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json)
Hash identifier: REJKM4bSGTch7TIRXfcvayBfiAWlbgkrAzVBq4s5xm4=
Subject key identifier: 4C:13:72:98:C1:1C:E7:0D:81:08:46:1D:C4:2B:43:98:E8:1F:BB:10
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial: 019EB7A0A50091CF26442C6909E55867DC5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
Manifest number: 17F9
Signing time: Thu 11 Jun 2026 17:00:18 +0000
Manifest this update: Thu 11 Jun 2026 17:00:18 +0000
Manifest next update: Fri 12 Jun 2026 17:00:18 +0000
Files and hashes: 1: 1-3IPJhNn2z6uBNLHxMmCKfvzzKc.roa (hash: NdBkfOzbM5bOy0bYu/5qjiwop0xpNPBqxYjexeBjzV4=)
2: 2Mw_RsL7Tu1raZO7N_NmWBt_4Lw.roa (hash: JucO5ifrsP8q+Lpu01KX5CahDpNNuMFp8igwggz5f+4=)
3: 7Iz6U-UbML_bHt2iBpNhyMsUex4.roa (hash: kuOf+8ykZKiwJgvJAoLirBjFoMp1t2BI/tsXr1phgfs=)
4: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: r4+7syEJKe1Mt6ZRLwNoR2EAMSDcm8/xdLX2/uXystQ=)
5: KTnr28UXB2AOhLUGojIXh3TKOoo.roa (hash: 8eiF90G8f4f8jQjBHQ0ai2Os8eR7L9120f3BRFVgphs=)
6: LKPNjW0FwzxJuXJJO8QeVx8xVKA.roa (hash: 7aAIkZ00eO3qTrf1/VDBo5PmzNCovWfeD3QFFzPD2+k=)
7: XWplAHLb4h-dRGf7GRqU5aYBne4.roa (hash: vcUnwVhvidom6bWizccTCS7wF3vMreiwdFHr11qyWHQ=)
8: XgKbk-VfS5Fk-dDKQjpQqRf0_lY.roa (hash: iWT0RhDme3TLlIGDD9yrT4WHfNUoRqswY0iSVi2J+04=)
9: bu5zIhc9syS0fhKBovFQXcGQRxQ.roa (hash: /Bq2k4bmIQ5EUPK41v03YcsLqkRVvDHXfxrIn2yzw5A=)
10: epRr3ot_tO1I-RC0EsosxizeUW8.roa (hash: 2A4W4DbPWY16lTKuPfcljbBbTU9AeJIZxwLQ/cXz2wo=)
11: hIAZzuP6Gsu6ylCAGgkd82Ycc_M.roa (hash: SQISDbvDjBaLkSadlmENoao3YxR8/bK49Sgx969cf+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:a5:00:91:cf:26:44:2c:69:09:e5:58:67:dc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Validity
Not Before: Jun 11 17:00:18 2026 GMT
Not After : Jun 12 17:00:18 2026 GMT
Subject: CN=4c137298c11ce70d8108461dc42b4398e81fbb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f7:d3:8d:bc:cc:eb:d8:58:3d:f1:a8:f6:a7:
e1:17:35:e2:45:ed:dd:8e:fa:a4:10:0b:9d:f3:30:
0c:6a:5d:82:f4:fd:3f:ec:cb:b7:7c:59:37:bb:fc:
da:36:ab:63:d2:85:70:f2:89:90:87:0f:e9:a5:cd:
b4:58:39:c3:b1:d2:bc:18:88:23:97:bf:f3:81:4e:
58:6d:a3:3a:31:e2:2d:a6:51:a7:98:b4:dd:f4:72:
46:a8:95:b4:c7:8f:eb:91:72:a7:21:95:21:96:59:
70:28:4e:1f:c3:19:9c:73:f7:2c:7b:03:c6:ca:01:
2f:7c:e2:63:c2:29:56:ec:41:39:74:bc:15:31:79:
ce:5c:5f:76:d4:30:dd:45:b3:6a:1b:c0:f4:e7:96:
a2:33:30:56:e8:85:d3:5e:05:42:85:e8:93:4c:00:
c7:67:5f:ce:f0:9a:a1:14:72:aa:b1:cf:e2:78:2d:
98:2e:19:6e:e5:92:44:cb:24:14:ac:86:37:36:d3:
c2:40:4f:d0:1b:cc:5c:0d:9f:2b:07:df:3e:20:78:
8d:10:19:7a:24:09:94:61:72:4b:47:5e:51:cd:d7:
c7:be:db:7e:7b:4f:41:c7:bd:b0:8e:aa:60:cc:4c:
ce:14:b1:a8:68:9f:94:aa:d1:78:ea:0a:61:74:a7:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:13:72:98:C1:1C:E7:0D:81:08:46:1D:C4:2B:43:98:E8:1F:BB:10
X509v3 Authority Key Identifier:
keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fa:50:8a:68:8a:44:88:2d:ee:fe:c8:5a:38:81:37:a8:5f:
ca:ed:2c:f5:86:d8:68:b7:c8:01:a8:5c:ea:a9:c8:91:45:f6:
4f:5b:72:36:44:8a:2e:4d:a5:82:ad:4c:26:7f:76:00:f0:3a:
4f:ce:f2:ba:ac:47:75:39:cd:45:82:ae:04:b6:80:f5:65:70:
a8:ee:60:b3:51:2c:94:54:c7:72:7e:87:a4:c0:5f:29:72:8f:
25:ba:e9:dd:3c:55:98:9d:bc:9e:69:47:89:03:13:f8:41:35:
c3:09:e6:0b:a7:ab:59:0f:3a:8b:fc:40:12:67:4a:41:81:37:
23:0b:49:d4:c3:c8:c4:85:72:73:15:25:8b:4c:42:e8:92:09:
81:d3:28:06:dd:0e:0d:c7:10:49:16:d7:30:83:94:2b:8d:a4:
83:4c:d1:ca:30:23:89:66:27:1a:b0:72:92:61:c0:d1:08:30:
11:88:2c:44:68:8a:4e:cc:4d:f2:92:6e:a3:fb:5b:2c:4d:c3:
b2:35:5b:b7:f7:22:4a:fb:db:2f:8a:02:57:88:c3:fa:84:65:
28:05:9f:71:09:92:c7:14:a6:79:a0:71:e7:38:16:4f:69:70:
95:0b:ee:0d:11:c1:50:a3:07:05:51:62:0e:87:02:7c:47:84:
0f:4a:a1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:24:00 2026 by rpki-client