
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
File: UFkuaIlccGi0ZVUIkXrVu929Cl8.mft (raw, json)
Hash identifier: k31IqwZRRhoe9pqGxG19WOZyVvdxJm7QOTbaG5m1a1c=
Subject key identifier: 4F:7E:74:04:0A:86:F9:D2:7B:16:0E:8C:86:81:F9:7F:27:F0:50:4F
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 019EB8459E6D2749692CC68B9A7DFCD49A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
Manifest number: 1994
Signing time: Thu 11 Jun 2026 20:00:30 +0000
Manifest this update: Thu 11 Jun 2026 20:00:30 +0000
Manifest next update: Fri 12 Jun 2026 20:00:30 +0000
Files and hashes: 1: 6cPzePL8SbPhYxlEre30SLCYl-Y.roa (hash: bpE4jQ6I0nBPjXRqOCXt82xgQ0N1iRPYG2gk58BlGfE=)
2: 7qKC_f93I4x5vZAkFd7YPrFcC7k.roa (hash: Fej8whp10bdKNIubAsMMxHxf8nDoH0W086yoYql/4Y0=)
3: AglMX7mwwb3rspJEIopyVPwTx-E.roa (hash: S+AWhAQbQR4GQpkHiPCQOCsaczJj/pHTNHnGM4CmrlA=)
4: H02yV6HgXbkB7Sblo8iq_zMpEUA.roa (hash: wdaj1AYOG7ohn8sLP/a8ErBCpxjqgUG9MpQNoEmcpoE=)
5: MNvipI6k91242S53W3jqVcArQhc.roa (hash: 7sDpPYB99HElo2KA5xuF+lvuTcscLhsFKunpulQrN5o=)
6: MiUKM4-anjUIiLLo25o4aW1endE.roa (hash: 8GJk2lpNvqF8G6oHGKOgI8d2pjeWdDUhOm/xZPhFJK8=)
7: NFAuHU7LF_HyqchSKTj8EafONIY.roa (hash: 6n1a8gPcx7eZe6weWqKlrMFgR6RhTx10TMdXBJFAWF4=)
8: UFkuaIlccGi0ZVUIkXrVu929Cl8.crl (hash: kiBoQL8qEZtqQa92sDU5Muzif/1xHtX1Q/UDZQqJbXk=)
9: WFdUi3XXatfTABnfBpngGAHzARo.roa (hash: kKjPRwwZCBaY9u1h1EFLYB9g9DPTFuUTOwPzWAxE6M4=)
10: Zpq31QxZEBIlYUReZR_zQ9fqz_s.roa (hash: kvahSoEODcR6XaCVi1n2GMeJPQJl3cEsFyNEhPCk3BY=)
11: bHuZc9mUYBcqpEDyA_8H3U2OWFM.roa (hash: LIqVQ9mxztvdOqUbAJcArQV2MAsX+TwnaJ0MIMH4BK4=)
12: dvCXrpuIgKHCZtQqB3diL4N4JNk.roa (hash: fvscbXWy0N/msqi2rtIwXgUHt2kq1AX6g+9LTX7Mfrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:9e:6d:27:49:69:2c:c6:8b:9a:7d:fc:d4:9a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jun 11 20:00:30 2026 GMT
Not After : Jun 12 20:00:30 2026 GMT
Subject: CN=4f7e74040a86f9d27b160e8c8681f97f27f0504f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:31:2b:c2:22:2d:d4:2f:24:92:b3:15:7a:a3:
2c:7e:67:a9:c9:43:12:5f:ce:e1:86:71:4b:ab:10:
21:a3:9a:13:f0:96:d5:a0:50:b4:15:fb:7d:e8:61:
7a:29:98:91:44:20:63:dd:bf:f4:3e:33:e8:48:b9:
00:d8:bf:78:16:ff:9b:ed:da:52:7a:9b:01:ae:44:
8f:b9:08:78:df:4f:18:8f:3c:66:05:21:51:96:1e:
dc:08:50:34:5b:3d:1b:a6:79:8a:15:4f:b7:00:bd:
9b:41:c7:83:9a:07:d8:a4:9a:cf:22:aa:ed:ce:1a:
58:cc:e7:fe:ea:ce:02:8b:99:37:91:3b:ef:da:ee:
8c:fb:e2:34:c6:d3:14:8f:8b:5e:3a:c6:a1:d5:31:
a0:13:ed:46:d9:7f:81:40:4b:0b:c0:06:1f:62:58:
bf:12:89:e6:0e:48:08:f5:40:75:97:ab:d1:c7:44:
15:83:c7:92:92:1e:06:88:7a:dd:72:cb:6a:57:fd:
a9:3e:e6:95:f8:09:84:1a:f4:f9:44:8a:15:03:3d:
5e:de:93:ec:e9:a6:98:67:45:bc:84:d1:a7:b6:a0:
2e:97:77:85:95:5f:34:5b:32:de:9e:11:b7:f3:f3:
25:ef:9d:59:fc:75:f0:c8:10:48:35:02:47:2c:d2:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7E:74:04:0A:86:F9:D2:7B:16:0E:8C:86:81:F9:7F:27:F0:50:4F
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:92:b3:b5:fd:3f:e6:93:33:96:1d:0c:ea:5b:23:58:62:0e:
aa:1b:aa:f4:2b:50:e5:7f:42:ac:5a:23:57:c8:9f:75:c6:f1:
15:c7:80:e3:ab:d0:9f:68:46:2a:5d:9a:aa:73:ab:1b:9e:4b:
3a:05:59:1c:45:41:f4:cf:c8:f5:5b:fd:6c:8d:67:28:95:49:
a5:b6:9d:8d:52:2a:f6:eb:b1:20:c2:5d:55:6f:f3:75:38:c7:
b3:12:77:8e:a5:82:f8:5b:f9:03:88:c6:c6:9a:a7:b1:fa:3c:
c3:c2:26:7d:4a:c5:f4:82:03:c0:b3:3b:80:80:83:95:b5:bb:
c8:6d:be:dd:d9:e8:e5:75:98:bd:9d:0f:77:99:4c:d6:e7:2b:
4d:30:ff:ca:a9:f6:1b:05:27:5f:ab:c3:a6:8f:ce:30:67:e2:
c7:7e:48:0e:96:3f:ff:0a:72:01:19:9e:96:34:f2:b7:05:0f:
38:4e:64:12:74:20:29:65:09:75:22:3f:fb:99:e8:b1:07:b0:
c0:ae:0b:83:ab:4f:1c:1e:8e:b9:20:39:9d:a9:ac:a6:12:67:
8b:f6:29:a0:b9:5b:54:0a:a0:43:82:2e:90:2b:26:a3:df:5a:
23:57:25:7d:1e:59:e5:c3:09:d0:44:fc:b7:84:2d:ca:94:c7:
26:38:7b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:26:04 2026 by rpki-client