
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
File: M8NCwGqsw1nTlDn_WN76jqGHV0g.mft (raw, json)
Hash identifier: G/HcgQiuFkDuh2C5HHFxdI18nERj90NnlHRXls+2EaE=
Subject key identifier: D6:7B:EF:BC:7F:A2:F8:23:C1:E7:C7:D5:CC:39:21:F4:5C:9C:5E:D3
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 019F4E0C95568E3B6B437CC1CE875260632A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
Manifest number: 19A4
Signing time: Fri 10 Jul 2026 22:01:15 +0000
Manifest this update: Fri 10 Jul 2026 22:01:15 +0000
Manifest next update: Sat 11 Jul 2026 22:01:15 +0000
Files and hashes: 1: 0_H--D3ld_V5A2GDwFkKX4GOiA0.roa (hash: 4e5kO9YfPo607NKs0GfVmGK8Ay03F7orhMQubGrK5s8=)
2: 2Y22JjtWrl0_nviPCh47UcoiEMc.roa (hash: MjixCwl1roku3r8M7cAmmfjxaUIrhcvJpiUdNlV6IQQ=)
3: 7aJymM8-A-Vzxrith_gpYUCnxLA.roa (hash: yavsVrmsFDM2twygwL9ROfhNDdkXtjYh0veEc5aPL6U=)
4: BREu-oLiWRVnvmr0OZpze-1yZho.roa (hash: JOSLUiFQMXinZ2s3xJFw5vOALrZZO+Y0VQuZomqNcNc=)
5: KQsPApaYWV1_80rHUTYo4kduGEc.roa (hash: DMlh9LVsGQgoH2sC6mgiD6McwaNhSBUcv3JC9I342EY=)
6: M8NCwGqsw1nTlDn_WN76jqGHV0g.crl (hash: gFTgKEKbs9GFKe/Fs2yIEme3zBPMRA3UoR3gHtEqGi4=)
7: QWYP1a7mE-901Npm0STCw-0_494.roa (hash: GGXXSRYOhg9nYn3L4Ohy/bvCK7SIobkN33noxERxNSE=)
8: TTEzQtE5d70mBmiMli4rrHXXguQ.roa (hash: xIxbskYOAuc9Yjyt/8RKTk7K32KNqi0KQcR/yqDrqdI=)
9: XiniKmHk48PTd4AWdTNpS7pWYPM.roa (hash: LdHpQkrTcb3/m2EigJdifn4oDDnwzMObaFnPm4GQZsE=)
10: ajM6u9AhobNFWsjqV0zszbZBQgg.roa (hash: 9dpjav4k95AK45D3gY5gAwzQc5Jmp0J5EfW5NA6MQrY=)
11: dal6AFPAMOKunkfF7hTY8Cuz5HU.roa (hash: IVF4Tz8JdO1RxYBDwDE4cvUkOAHOkcCD98baar1MrRo=)
12: hRwQ4mV8u9tsYeBBJi9cjl-qxEg.roa (hash: Z+XgNcTxGhoujnKCI9mZu3tfZCPpFoVHO4a9tPmkGVA=)
13: m7yZ_UyERPPI7rtLGNSBX9Jm9bw.roa (hash: ykcmm9r12Ob1/PzXbUDHvDBzZdTDZhIzOR7w4XuLSwc=)
14: qxewd6X7cZwHTA-zQMlA_OAvlN8.roa (hash: Ry7YnXFLSUjxQaaprtnh0Xvr7Lu/H9g4ex/4yimbRx4=)
15: shE5nirJjfzwtVvRNs6B8132Y90.roa (hash: bZPp9AYR6VCS07rIaJOgsQumohQ23Ohhw0oW9Q96CQ4=)
16: uRrZsstrzGEOJvLMKb6O233tS-U.roa (hash: hfakJlnSmscUlq1SwhM8hNCbJeeub/2zpsFlue2e450=)
17: wuPeAwGhCGGyy1vUlZnoXQ_te9w.roa (hash: Ya4gfqovf3JM8yFavds8OzJvokLnz9/3YHuh2owqYdI=)
18: y-LHl9JCf1vCgH9ww0oXT09BT3E.roa (hash: U2dDyow3uUPlXZ81c884FwuRrB1qQId+nf/6dQa9SLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4e:0c:95:56:8e:3b:6b:43:7c:c1:ce:87:52:60:63:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jul 10 22:01:15 2026 GMT
Not After : Jul 11 22:01:15 2026 GMT
Subject: CN=d67befbc7fa2f823c1e7c7d5cc3921f45c9c5ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a7:e6:90:39:5f:11:21:86:6e:da:eb:5c:eb:
a9:bb:c7:08:0b:35:20:fb:09:8d:fd:5f:de:fa:d1:
81:6e:5e:52:03:0e:1a:79:42:c2:b8:43:66:12:a3:
b2:b4:07:91:5c:a8:b2:84:fb:9f:a9:99:75:31:82:
51:6c:e3:a7:99:c7:e2:ad:9f:5f:7e:4b:0d:30:29:
08:12:4b:5a:d8:b4:89:8a:fd:af:ed:ff:50:d0:90:
25:c2:a5:05:1b:95:5a:93:0b:13:8f:4e:e6:a6:b7:
ad:1b:38:53:e5:d7:ba:f2:e6:e7:9f:53:41:a2:0a:
7b:3e:3f:1e:bb:0d:7a:e4:52:0f:fa:7b:d0:05:b1:
19:d7:4e:dc:4a:f6:8d:9e:45:39:9d:3b:60:37:c1:
42:3f:37:61:d6:63:d2:8a:31:5e:0c:ad:23:6b:98:
1f:bf:98:21:e9:62:e5:16:5a:24:60:14:e6:77:86:
53:bd:85:3f:a1:0e:1b:e6:0c:76:ad:e7:66:81:da:
5b:0c:f2:f9:44:6d:b8:3f:4c:60:b7:67:10:ec:b5:
3f:81:8b:c2:c1:a1:fd:49:96:06:8e:54:af:b7:1a:
90:fc:02:73:84:b4:42:9e:11:4c:1b:a0:45:f5:1e:
01:1c:ba:6c:be:16:d3:16:94:01:01:88:1d:f3:bc:
7b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7B:EF:BC:7F:A2:F8:23:C1:E7:C7:D5:CC:39:21:F4:5C:9C:5E:D3
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:06:8b:82:b8:48:30:d5:e1:34:91:a4:5e:05:ad:40:86:89:
e3:b6:f4:fe:79:e9:08:5a:f6:c2:8d:a3:85:cd:1b:7e:8e:33:
50:7c:74:34:2d:06:a9:fa:14:5c:1a:4c:f6:27:3a:7f:2f:fe:
94:f9:1d:73:8b:0b:ce:d0:e6:4d:00:32:83:22:97:f1:d8:c8:
37:50:1c:35:22:76:8d:54:8b:da:32:28:c1:c8:2a:d0:46:2f:
b7:49:8e:5c:60:a1:6a:9f:1e:86:a2:34:7f:e0:5b:2b:9b:a0:
5a:95:4c:97:32:14:d4:32:cd:38:13:ec:d8:12:2f:24:55:87:
d5:28:8d:ed:78:44:eb:6b:40:39:45:1b:cb:56:40:4e:89:c5:
e8:94:6e:c2:79:2b:1c:69:69:43:90:7b:64:f6:01:a3:97:30:
a0:3b:69:31:c1:a9:34:09:ef:2f:c5:68:92:bf:bd:49:96:3a:
ff:cb:d8:96:9a:a0:17:23:fe:a4:7e:15:ef:da:17:75:fd:2d:
69:ac:7a:54:a5:ce:57:f8:8a:35:1c:76:42:50:0b:f3:5a:4b:
5c:90:a1:f4:1f:a7:03:09:04:91:bf:8f:bf:af:79:2a:e4:8b:
9b:61:40:71:47:f9:61:5f:bf:03:9e:aa:0b:0a:c0:26:ad:31:
60:61:9c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 23:16:56 2026 by rpki-client