
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json)
Hash identifier: REfEe+8Ij3L9V1JhAsPEbRDI1yADFAR1Rc1iSyRrN5E=
Subject key identifier: DA:F8:3C:54:6E:04:46:BB:92:C2:F1:35:5E:DC:FE:F2:70:76:11:8F
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019FA1BB27CDDC48BEC7AE33D6076F4D2E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
Manifest number: 1A12
Signing time: Mon 27 Jul 2026 04:00:24 +0000
Manifest this update: Mon 27 Jul 2026 04:00:24 +0000
Manifest next update: Tue 28 Jul 2026 04:00:24 +0000
Files and hashes: 1: 1nFCKi1R1uWAqKJnbMUD9y_3pno.roa (hash: 5C4IbhqcH3E0EkSlqxD//f0/kRfbI7bdALbkI7++DS0=)
2: 45jcpGMeN1MEq1EOG0Y9qcXt_7E.roa (hash: T4PlRQPL8k2IXPh/6bf0yHYACLBVnc7hXe7KA88boSU=)
3: 54lQx9jq3eHeFIcJKMTm3kHCZTA.roa (hash: 27oRvIuzZnhWTtAi86vMeQgbiUWJ+XcD4ONYqT3e54I=)
4: BtE_Prg_QTilEMkESiUbs4oIDmA.roa (hash: SFNeqY+UDzZLqbIx3LsR2g+sDJ1BvW0wdb9XdlLKZ0k=)
5: C-Qps28bGJ9viEITk81kKk0b0dA.roa (hash: YvQZ6I3rsCF/RjF8TlblPG71ruEskxswS8/cnuK9jtA=)
6: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: vUh793ub5FyJwE/F6ZwqJCPhjONf6um0kYJQ2ZuAElw=)
7: GpPbNoyLVyrmQ4b8e1AhKTzfuOg.roa (hash: ghZh7XoU09TtPH2tIcN1D5InXaZeImBLFNLb0RMUPhs=)
8: McMAEXhLQiJ8zGNeGMw3UTPr0gA.roa (hash: Axa3TJcrAyunbvQsH7ha/cb/OA+FPV5fxnNPJ+XHc9Y=)
9: SH8o9XaYeY75kSYDFek1xvvvpes.roa (hash: snF/ko8o9cC13jo1dYD32crG+aO3GlqBSVVV17i0l7Q=)
10: c-QDkOwRsaqWaCLR67UW_lU7-L0.roa (hash: AE6Uaz5NJLGOrk5M1q3pxLLZKI8/2jUOSqya5+asWc0=)
11: fNaq8m6O9BbhsyXfpIVgO1FBWfQ.roa (hash: YWEpMcVfS6S4vwVF7Bdrpn4pCsO6G0a695Az/e9ZD/E=)
12: ke2TciPSbDOn6zXxGdQLJTfLAsw.roa (hash: 9ny0lYpK79F/d0zmuY5DS1VwZbJpVvPVS9XC0rY+Evc=)
13: sgSvFZT7cMQ6O7meaSYCsiAvpIQ.roa (hash: b1OuAlU0+cSQfcjeLb3gpe1ABMzAcbi57g2ciFKHZfA=)
14: sl7rtV7gRWnH0rzgCWs0BxwC9uA.roa (hash: 13ubUUikB/ayAhjAv3tgoeX0xlseT2rnUuFrpyiC5X0=)
15: wCYaXW9yQXdX5eY6SwGBDpsbJ2M.roa (hash: +1+KMrFBvRETqP/PeuYGipr75ZikVYJF14sV08bslAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:27:cd:dc:48:be:c7:ae:33:d6:07:6f:4d:2e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jul 27 04:00:24 2026 GMT
Not After : Jul 28 04:00:24 2026 GMT
Subject: CN=daf83c546e0446bb92c2f1355edcfef27076118f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:98:0d:e9:bb:9e:7f:20:65:d2:c0:fa:08:
58:67:59:e6:ec:f1:8a:0d:cd:39:35:74:dc:a2:5d:
1e:ae:5e:f9:f4:b3:7a:d9:0e:bb:cf:8b:8c:47:92:
87:fe:6f:de:a3:2d:a2:68:9a:a5:20:7c:e5:4f:75:
86:3d:19:66:78:36:32:64:38:07:e2:33:f8:ac:24:
a3:06:3c:eb:7d:36:1a:cd:0a:ac:5b:b8:0c:39:11:
d2:d7:21:1d:b1:c9:25:3b:34:4d:36:c6:be:14:12:
2c:60:04:33:50:85:da:02:ee:f2:50:35:06:29:30:
6f:a5:15:4a:ff:30:b2:ea:fb:e8:68:8f:d4:88:03:
75:0c:d4:b4:d2:b9:d9:1f:ee:14:c5:54:9b:36:20:
b6:fc:54:e9:e3:77:b9:88:85:e6:e5:c7:97:f3:60:
f0:b1:0d:3b:c9:1d:6a:fa:58:43:14:8d:44:d7:cf:
41:14:42:06:13:e5:c1:3e:7f:52:a2:5a:2c:6a:9d:
00:fb:e9:39:62:d3:64:39:2b:86:b9:14:ad:40:cd:
4b:d2:e5:cc:c5:f7:be:6a:89:3d:39:c6:91:83:20:
0d:7a:98:85:df:47:9b:30:53:b1:5c:0a:c1:ff:70:
0f:cc:81:0d:c4:58:2c:45:1f:ff:3c:4c:27:75:cc:
31:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F8:3C:54:6E:04:46:BB:92:C2:F1:35:5E:DC:FE:F2:70:76:11:8F
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:db:94:af:d0:c6:80:01:b8:ff:be:f5:29:b0:61:22:10:12:
a4:1f:ce:05:49:ca:97:d2:79:b3:25:99:f4:4f:47:6d:aa:53:
4e:49:5e:48:07:23:28:08:be:73:54:6e:fc:44:e0:38:db:e8:
63:73:5e:d0:05:19:d0:f3:55:8a:8e:57:b8:ee:31:4d:e4:26:
49:a3:1e:2c:48:60:85:12:98:35:eb:89:90:95:c3:c9:34:9d:
f0:37:fd:51:06:a1:f4:9d:7b:eb:41:b4:eb:c7:87:fd:79:6f:
4b:de:d0:7d:07:30:7f:1a:b4:72:b6:e3:e2:75:2e:93:5a:2f:
a8:9f:da:f2:bf:44:ef:45:0b:49:42:0c:4d:83:5c:7a:4b:6f:
80:07:45:33:d3:03:d9:f4:47:fe:83:c3:7a:4c:aa:57:4d:cd:
e0:3f:bc:8b:95:e2:0a:73:9b:ec:1c:51:40:98:75:ce:ca:e2:
a3:c0:0e:55:27:3c:3f:78:93:48:5c:e7:fb:ef:c0:44:11:36:
dc:aa:f7:a8:91:9f:65:6e:dc:af:1d:5f:f5:82:1d:20:59:42:
50:4b:e9:01:8a:00:4d:ca:2b:75:43:45:8a:03:c0:6e:56:c7:
0d:d5:5b:a1:22:5d:87:47:1f:54:48:4f:04:bc:3e:cd:0e:cf:
4c:08:39:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+huyfN3Ei+x64z1gdvTS4FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk
OGYwNjUwHhcNMjYwNzI3MDQwMDI0WhcNMjYwNzI4MDQwMDI0WjAzMTEwLwYDVQQD
EyhkYWY4M2M1NDZlMDQ0NmJiOTJjMmYxMzU1ZWRjZmVmMjcwNzYxMThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxiYDem7nn8gZdLA+ghYZ1nm7PGK
Dc05NXTcol0erl759LN62Q67z4uMR5KH/m/eoy2iaJqlIHzlT3WGPRlmeDYyZDgH
4jP4rCSjBjzrfTYazQqsW7gMORHS1yEdscklOzRNNsa+FBIsYAQzUIXaAu7yUDUG
KTBvpRVK/zCy6vvoaI/UiAN1DNS00rnZH+4UxVSbNiC2/FTp43e5iIXm5ceX82Dw
sQ07yR1q+lhDFI1E189BFEIGE+XBPn9Solosap0A++k5YtNkOSuGuRStQM1L0uXM
xfe+aok9OcaRgyANepiF30ebMFOxXArB/3APzIENxFgsRR//PEwndcwxCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr4PFRuBEa7ksLxNV7c/vJwdhGPMB8GA1UdIwQY
MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt
MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx
LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9uUr9DG
gAG4/771KbBhIhASpB/OBUnKl9J5syWZ9E9HbapTTkleSAcjKAi+c1Ru/ETgONvo
Y3Ne0AUZ0PNVio5XuO4xTeQmSaMeLEhghRKYNeuJkJXDyTSd8Df9UQah9J1760G0
68eH/XlvS97QfQcwfxq0crbj4nUuk1ovqJ/a8r9E70ULSUIMTYNcektvgAdFM9MD
2fRH/oPDekyqV03N4D+8i5XiCnOb7BxRQJh1zsrio8AOVSc8P3iTSFzn++/ARBE2
3Kr3qJGfZW7crx1f9YIdIFlCUEvpAYoATcordUNFigPAblbHDdVboSJdh0cfVEhP
BLw+zQ7PTAg5Ug==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:53:31 2026 by rpki-client