
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json)
Hash identifier: JbbOjwe2Dwt6ZB6/L+wCngABT4/6bkrd6xkmqggj6WI=
Subject key identifier: 43:E4:16:1E:A8:28:83:C6:78:41:73:ED:99:14:03:93:6C:3D:1D:3E
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019EB98FC36E40D6203B43F009344CA25FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
Manifest number: 196F
Signing time: Fri 12 Jun 2026 02:01:07 +0000
Manifest this update: Fri 12 Jun 2026 02:01:07 +0000
Manifest next update: Sat 13 Jun 2026 02:01:07 +0000
Files and hashes: 1: 2rAGmumAatpMz3kw0VsK7nvOOnQ.roa (hash: QkO7bxWZSDvJ15l2k1OHawSRFNSNmwY3Ip4idTP8XgU=)
2: 44tbRBm3zSZMoCst6WkxTKufMIE.roa (hash: 5gCjJr0c5JiHRvqLpZ00s+SrgcQffTqmoJaDyLE8c74=)
3: 4b5IG88yGY57oOV8rMMD65D9450.roa (hash: L2WJBC1WPudMtSgpBc/n3eAovKHJ7Y5NfWrM/nSEbtE=)
4: 4kfyvx6IcqlCxed7fdvb4m5sTD4.roa (hash: KVGLl3eS3kXmc+q2aJ0R4MjOlnAmyZYkvCj/Q8Juapc=)
5: 66nbrZ2mCYwG3e6ha3Nfy0BJKE0.roa (hash: nivnljP3mO1OIkIFMtZNC7rvfkUDANm7b9o7EEV+vw8=)
6: 9u44haxRix1aXmDblsqAtiOy3ic.roa (hash: r3I5n8f6rdoTo7uI5qExlu1uSbAdj4bGLbRaLfkDE8E=)
7: E0o_FE2T3DZ1D-UezcaaMgIR4Cc.roa (hash: 5MnQxHTjDi2NDKJrwnJ1AAzWp+hIpNaMlweOYJUqXj8=)
8: V0ZbvO-Kau_hina_xax1FtPv3HU.roa (hash: 5pDhKp4j1D9CHXJw1ml9s4a1yEyDrOVGDOf0oK5BSVI=)
9: WrWwHOItDmU_S3g0-w_cgsaPRFA.roa (hash: jNNtsFSn9AMYEFYuH0fqqD4hwORadbXk3pHoHndZnnc=)
10: ZJD3Q6iJx8-f2YHw1Hw_i2VwDds.roa (hash: 4ehtslOSeTUspbDXf2ztNXuLiv7hRwHykkGiKzcBHMY=)
11: f0fB3ZCLspEHf4xo9ont5Ruj-yU.roa (hash: s3KQRvgs0uMJaKxlqnyZSS+058EdiVidz4VTBoWLKeU=)
12: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: tvHTSt/4u8fiXvbo5Uw87KYfbZMn2LPMG9EJQ3dUXow=)
13: oU210CVFzLuiQyHcf_YEp8pxk6M.roa (hash: HDzrvRtHa5TwJys+/lsPvAJ6xNgxTrYnp7lOvSNjpgo=)
14: pOcafHbNpE6IufWUjCXZs2WWYP4.roa (hash: lDDN8g4MAtlbqtSRtBrtfZVHqI5iUxRV0FsUbPWXCHU=)
15: tZjmsStp0VcKPFFLWR9K3de-3PQ.roa (hash: OEQhtHW2/RhfDyyYWpUnjsi1Rb0UQYxvnkk2lrldW2w=)
16: yGz8NgbL_uPaqQIt8HfMRIIbhxI.roa (hash: 1r231ZIpUKsAJqSZVFd8j4Zxh9itylhnPaX/Hsb0udk=)
17: yt4sMwydKd-q7CRhhaUoMNZQcYE.roa (hash: HAZLAfvTvsad0Yf/uypEMiAh8+oiLiVNNSNJqAQE/M4=)
18: zMHnxNkGZBmoNQowVHKQvmrR1So.roa (hash: 5IVAfxXNsWU6GCJqjsRbswDzTaG988IprK4skA5INuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:c3:6e:40:d6:20:3b:43:f0:09:34:4c:a2:5f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jun 12 02:01:07 2026 GMT
Not After : Jun 13 02:01:07 2026 GMT
Subject: CN=43e4161ea82883c6784173ed991403936c3d1d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:b9:d7:18:78:71:20:26:6c:60:6e:89:5e:
61:7f:95:30:3e:ac:75:1f:f9:d1:95:f3:19:19:3e:
1f:24:77:2b:3b:98:f5:a1:d3:54:64:58:23:93:69:
51:b8:64:3a:29:34:54:6f:51:5e:ff:da:33:b9:b4:
93:e3:79:c6:92:67:78:cd:76:26:47:5b:8f:44:2c:
e2:a2:d8:dc:2b:66:6d:6f:08:30:20:a5:e0:43:0f:
17:5b:f3:a6:d6:1f:de:45:ae:23:54:55:36:2f:fe:
51:cc:08:0e:b9:d1:48:47:55:6a:32:b7:01:3d:01:
97:5a:f8:14:a9:a5:93:d8:0d:ab:92:3e:23:66:b5:
3b:a5:d3:c1:d9:a4:ce:3e:e5:af:c2:fb:65:2e:45:
d7:5d:3e:8e:50:f0:82:84:88:13:dc:74:b0:4f:1b:
dc:e7:7b:9f:20:1d:cd:d9:bb:11:6f:bc:6e:8a:33:
5c:b5:b5:ac:8e:11:b8:92:54:32:95:02:9a:46:37:
3e:d9:14:47:d4:05:18:a0:3b:ac:d7:59:72:3a:b9:
30:48:82:1d:68:2d:d5:48:86:68:80:a7:1f:43:78:
c7:62:bc:76:00:32:73:20:13:1c:86:44:2c:40:3f:
b0:0b:f4:cb:14:4a:82:dc:7a:f8:91:80:26:58:94:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E4:16:1E:A8:28:83:C6:78:41:73:ED:99:14:03:93:6C:3D:1D:3E
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b9:6e:67:df:c9:69:23:87:82:30:8f:44:59:9c:8b:71:84:
04:b6:4b:0b:b2:93:76:9c:cb:66:c3:05:61:c2:d8:6e:38:e6:
b8:d4:93:7c:4c:5a:cd:9b:1d:55:fa:81:a9:57:24:72:0b:05:
ef:91:ba:0c:5c:9c:05:27:c0:28:d5:96:c7:17:63:3e:28:16:
be:07:dd:22:f5:d9:94:81:b7:06:03:fc:ac:32:95:e7:f2:09:
30:22:a2:17:b4:2a:54:d3:13:84:8a:21:98:79:61:43:1d:8b:
f3:03:53:09:71:f9:f8:df:eb:fc:5c:cb:8f:82:cf:33:6f:20:
97:2a:92:91:26:60:1a:03:09:20:9c:64:36:1e:ef:f2:9e:2e:
61:bf:fb:0f:01:2e:e8:52:c9:7e:57:ec:ae:4a:1f:25:2b:1f:
46:dd:d5:f5:4f:3d:57:1b:36:70:37:25:51:21:a7:f4:d0:af:
be:5b:2a:57:aa:d7:ec:9d:c4:02:28:2b:5e:f5:5e:86:e4:76:
2c:d3:e7:91:ef:66:94:2b:7a:cd:8e:56:fd:c1:b5:06:ae:5c:
e5:87:25:d3:6f:29:e3:c7:d7:73:3e:cf:d9:2a:09:3b:28:0c:
a7:0b:a0:ee:a7:d4:f9:d1:0e:fb:36:b6:bc:ae:b3:c8:90:93:
07:42:9e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:36:41 2026 by rpki-client