
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json)
Hash identifier: iSzTW/WgRE9l7Di09O3lrDq/IN4IkeiBpczE7BnfMIc=
Subject key identifier: 22:B8:8F:B6:DE:B7:3B:F8:08:AC:11:51:49:93:97:2B:65:F1:61:10
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019FA2CDF49277FAFE0B0F2FE95020F2999E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
Manifest number: 19EB
Signing time: Mon 27 Jul 2026 09:00:34 +0000
Manifest this update: Mon 27 Jul 2026 09:00:34 +0000
Manifest next update: Tue 28 Jul 2026 09:00:34 +0000
Files and hashes: 1: 2rAGmumAatpMz3kw0VsK7nvOOnQ.roa (hash: QkO7bxWZSDvJ15l2k1OHawSRFNSNmwY3Ip4idTP8XgU=)
2: 44tbRBm3zSZMoCst6WkxTKufMIE.roa (hash: 5gCjJr0c5JiHRvqLpZ00s+SrgcQffTqmoJaDyLE8c74=)
3: 4b5IG88yGY57oOV8rMMD65D9450.roa (hash: L2WJBC1WPudMtSgpBc/n3eAovKHJ7Y5NfWrM/nSEbtE=)
4: 4kfyvx6IcqlCxed7fdvb4m5sTD4.roa (hash: KVGLl3eS3kXmc+q2aJ0R4MjOlnAmyZYkvCj/Q8Juapc=)
5: 8hx1gAb9JQ9Jt_adfPfauV83-lw.roa (hash: 5Yu25cs4dK7+vmfRVz+5LCQcuI9l90lTLui83bcVIAU=)
6: ECR02Lvma0Akqx8_eko_IQ3lvNk.roa (hash: WYbPrDTPpGPZPcdOFkDj0vuliDTMuVhh8dLndPv7htw=)
7: KUG1dAS56WFyM7HpXaZJm_9NZcI.roa (hash: bDHk7s2ypHa/VmIhy+huenZ6Yha/61UKd4WW960McEc=)
8: NIP6OMbGVO_LoBDEsbJ6LixxNnc.roa (hash: ZLVjxa/g6JD46/uf8XHrDkESKrByzEppqfl3vJn4wSg=)
9: V0ZbvO-Kau_hina_xax1FtPv3HU.roa (hash: 5pDhKp4j1D9CHXJw1ml9s4a1yEyDrOVGDOf0oK5BSVI=)
10: WrWwHOItDmU_S3g0-w_cgsaPRFA.roa (hash: jNNtsFSn9AMYEFYuH0fqqD4hwORadbXk3pHoHndZnnc=)
11: ZJD3Q6iJx8-f2YHw1Hw_i2VwDds.roa (hash: 4ehtslOSeTUspbDXf2ztNXuLiv7hRwHykkGiKzcBHMY=)
12: f0fB3ZCLspEHf4xo9ont5Ruj-yU.roa (hash: s3KQRvgs0uMJaKxlqnyZSS+058EdiVidz4VTBoWLKeU=)
13: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: 00rGGBH5Xj2S7xlIA4VIFbmAjsDtm2RtO25m25KkEng=)
14: oU210CVFzLuiQyHcf_YEp8pxk6M.roa (hash: HDzrvRtHa5TwJys+/lsPvAJ6xNgxTrYnp7lOvSNjpgo=)
15: pOcafHbNpE6IufWUjCXZs2WWYP4.roa (hash: lDDN8g4MAtlbqtSRtBrtfZVHqI5iUxRV0FsUbPWXCHU=)
16: tZjmsStp0VcKPFFLWR9K3de-3PQ.roa (hash: OEQhtHW2/RhfDyyYWpUnjsi1Rb0UQYxvnkk2lrldW2w=)
17: yGz8NgbL_uPaqQIt8HfMRIIbhxI.roa (hash: 1r231ZIpUKsAJqSZVFd8j4Zxh9itylhnPaX/Hsb0udk=)
18: yt4sMwydKd-q7CRhhaUoMNZQcYE.roa (hash: HAZLAfvTvsad0Yf/uypEMiAh8+oiLiVNNSNJqAQE/M4=)
19: zMHnxNkGZBmoNQowVHKQvmrR1So.roa (hash: 5IVAfxXNsWU6GCJqjsRbswDzTaG988IprK4skA5INuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:f4:92:77:fa:fe:0b:0f:2f:e9:50:20:f2:99:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jul 27 09:00:34 2026 GMT
Not After : Jul 28 09:00:34 2026 GMT
Subject: CN=22b88fb6deb73bf808ac11514993972b65f16110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:2c:bc:bd:ff:6f:ac:11:4f:6c:1a:b6:f3:
a5:de:c7:20:6c:94:21:d8:a3:96:b8:e5:3e:56:44:
9e:1c:13:60:b0:42:f6:37:d7:a2:2c:a1:dc:8c:f8:
74:3f:10:54:b4:a3:10:86:ae:e9:4e:32:59:04:18:
14:98:0b:d5:30:42:3d:21:e7:1c:5b:1e:3f:ea:9e:
a2:6d:66:54:48:47:21:8d:8e:ec:c8:b5:fc:b3:1e:
1a:8c:84:f0:33:8e:84:88:48:e4:ee:b5:56:26:e3:
54:75:8b:18:8d:8a:8a:24:50:7d:03:d2:2b:53:5e:
94:cc:6c:2d:68:3a:41:9c:c1:b3:10:13:59:68:eb:
bb:f4:74:f0:59:4c:34:68:bf:89:9c:b7:ad:c6:76:
08:7f:8b:2d:6c:5d:6f:ae:c6:36:96:e8:dd:61:71:
6e:fd:8e:6a:dc:87:3a:60:ca:33:28:90:ed:21:c4:
2b:00:85:bb:8e:f1:a2:70:51:23:f5:a4:77:44:33:
c3:f6:e6:e8:7a:e9:f7:8a:83:3f:be:9d:81:6c:61:
f9:78:db:98:44:55:9c:b0:c7:89:47:a9:35:f2:0e:
06:1a:54:90:86:4c:f1:a2:3a:ed:a0:58:3c:de:3d:
e9:bb:d3:d7:17:de:38:51:e7:95:c0:9c:b5:e7:ab:
36:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B8:8F:B6:DE:B7:3B:F8:08:AC:11:51:49:93:97:2B:65:F1:61:10
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c9:2d:6a:1c:10:b2:20:0d:46:a8:26:05:4f:24:83:f0:4f:
27:a6:85:35:e1:b2:74:d0:0d:3c:96:13:e1:64:01:13:6c:0c:
7c:9e:fb:cf:55:02:ee:e2:d0:05:09:58:cd:36:63:68:2c:10:
dd:bb:64:55:2b:d5:27:4b:22:37:84:d1:7e:ad:ce:c5:3d:05:
f2:de:94:a7:13:43:29:a8:3e:26:fc:6c:31:6c:89:33:aa:28:
ff:5c:9a:ae:c8:b1:98:36:fb:eb:1e:06:23:b2:38:02:28:bc:
5c:2f:41:88:85:ce:ff:65:e1:29:25:b2:59:99:cb:35:b2:3c:
11:fa:ae:3e:11:ca:8e:77:cc:cf:97:51:6c:1e:ca:55:27:df:
a0:9b:88:e3:45:b6:5e:4d:8a:fe:54:92:71:01:c4:c6:66:95:
8c:32:8c:54:88:fc:3b:33:39:79:08:3b:9c:dc:99:ba:d2:73:
06:6d:91:ac:a0:d3:08:44:95:4a:53:21:ff:99:ef:ad:f1:70:
08:2c:54:08:59:07:70:a6:ce:30:bc:bc:5d:a8:4d:a2:bc:a7:
a4:85:af:03:06:4b:cb:60:13:7d:5e:04:c3:ca:23:7c:70:3a:
db:54:7c:cc:08:a0:05:74:24:c5:91:bf:e8:9c:d4:37:4f:b9:
b6:86:bd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:38:46 2026 by rpki-client