
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json)
Hash identifier: 8js69BUywi0U+QhMvmMem3XhAqvE1VBETqPETUvZCew=
Subject key identifier: F6:D7:9C:7D:2B:F6:23:F2:BF:DD:B9:59:5B:C7:C0:E1:50:F6:7E:3D
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 019F111C794C9A43ABE0E5ABC750261AECDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
Manifest number: 19E0
Signing time: Mon 29 Jun 2026 02:01:46 +0000
Manifest this update: Mon 29 Jun 2026 02:01:46 +0000
Manifest next update: Tue 30 Jun 2026 02:01:46 +0000
Files and hashes: 1: 3_yk5eFrwBov3U-c2HIugxbMWSI.roa (hash: kKYQPtwtsyFnBnK/TTMNwaIGIt9OfuH8gl7hmRir+s0=)
2: 5aufIPquq3w8czdEJb_x03ID0ok.roa (hash: SXHv0uNnbQMrAAz38TkQXV7mhkcxZQRjdTnk2ZFMJ+Q=)
3: 6NnumjbLaK5uH21Kvrb7OjjLMWI.roa (hash: 7pnfS7LcH0iQhlqpTMUeGOkYaMziCcKZ9vKU4S2fblw=)
4: C5KHI6RHNe-c2_yE7mE0xFRL3gk.roa (hash: +jtxc9DRUocKwAVf35hRGVq2koZLjGVbE1XT/GiZZ2w=)
5: FOMPy_BK9Fi89Du1DiZYEnZuYqY.roa (hash: cvZrm+ar43YelQ09ZwBvqrLgjuizfADCJwzl9al2n74=)
6: OT8ciThviWG76oS0x4VT1DU7_CM.roa (hash: z/3tt6KD2m+nhRRFPABZHX2/tqaQ7t/vcbTbJ5OkeGs=)
7: RaSDCVs_3yb1Ag2Siqma7OPDTfI.roa (hash: 1BDwjFvUC8jAom6YokpKMPw9vBJY33AEAijvzVkLCbY=)
8: Y7bbNd_D_GJxw7w73h3QtuIaUD0.roa (hash: 6H7OQcEN2pqdM3pakr5EUmL8sOX3gH9g5VYKISR0rPs=)
9: _JStqxohmn4P46Jzv1xfqnIG_sQ.roa (hash: yg2AC+9uSmhpqVYsI3pa8EbjhOZNSYHEU2+Rij7qWjo=)
10: _kSC6SxEhsOLshYqTVwsSFaNbLI.roa (hash: KB6xLUsnETAFSWCWhqb4kG0B7HnLwgn6REmfOJuSowg=)
11: bIbo_daevEia3FzSMEis2R2yTQE.roa (hash: 2f8dvTsv4PE91HZTf97I67YVmPlzEU+5RlZeN9O2YSM=)
12: dWDpJgjgHWUUxlAFcGw9oho9DCA.roa (hash: EeKrlvmSYyhLjmugOgYr/BAu9l1QdnUK48FOOPpwoHE=)
13: ixD-Arj77LHgfX3zc7lJeNIlCF0.roa (hash: IZQY7H0KoOl6mudSH5mbC7Fo+cS244qdxxA31tTlbtI=)
14: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: yx/UnpMK++ojGqFILXW2aEWEzb0iwXqMn8IYWUp2aik=)
15: qutDbHBwHvwdi5EGALlPGyrMVYQ.roa (hash: cMdSXzsofITh70yCwGq+Cbopm8wIcWBaikFgYr1Fwsg=)
16: viXkXLZxJ-KrBDTHEU9eV2JpXfc.roa (hash: wxGAEO+n9Vh6k1iK9Pba4O/c6CbkZthcZ5GK3ng4+Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1c:79:4c:9a:43:ab:e0:e5:ab:c7:50:26:1a:ec:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jun 29 02:01:46 2026 GMT
Not After : Jun 30 02:01:46 2026 GMT
Subject: CN=f6d79c7d2bf623f2bfddb9595bc7c0e150f67e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:44:e7:34:67:dd:27:42:f1:9b:be:ff:ea:f4:
65:6e:d7:d1:4a:53:0d:f4:28:5a:fc:d9:32:4f:de:
49:3d:b2:ab:a2:ed:ab:6a:b8:0c:ef:d2:0a:65:21:
86:9b:14:0a:1d:97:4d:1e:03:f6:cb:35:8a:a7:5f:
cf:43:b6:1b:cb:76:cf:a3:46:8e:3c:e6:0f:db:a5:
8e:de:29:e6:ac:56:dc:da:2c:36:e4:f2:b7:19:13:
e5:39:97:e8:3b:d7:3e:f5:26:96:d4:0d:b1:ed:30:
ea:88:ba:8f:f6:86:1b:2d:81:d4:bc:b9:51:01:e6:
bb:10:a6:7f:3d:74:40:25:ee:01:c9:2a:51:4e:a8:
7f:ca:d9:3c:d9:ad:11:71:50:63:53:81:26:a2:97:
ec:0a:09:2d:66:35:0a:88:76:25:dd:1b:96:f8:f2:
4f:a2:ae:3d:9d:a0:95:e3:76:21:8f:f1:3d:52:a0:
22:1a:1b:cb:1d:30:74:91:cd:5c:54:c8:52:cb:e7:
15:3d:27:9e:39:88:aa:e6:20:2e:d3:9d:59:c7:52:
02:36:b3:66:e1:8b:2b:9b:f9:bb:b6:c3:22:6c:16:
5b:a4:28:5b:a6:8f:07:6b:c4:2e:c3:50:2b:9b:86:
38:40:3c:ff:d2:5e:2b:4e:d0:a1:fe:b0:c0:b7:6a:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D7:9C:7D:2B:F6:23:F2:BF:DD:B9:59:5B:C7:C0:E1:50:F6:7E:3D
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b6:8c:e8:76:80:9c:66:d6:43:91:b2:d4:53:bd:4c:2d:d5:
9f:01:8f:ad:51:c6:83:ee:f4:59:15:95:b7:ae:74:a3:ac:a3:
38:fb:d2:9e:80:fe:c3:62:33:98:24:25:93:eb:92:36:c5:2c:
50:c5:28:11:20:94:be:83:83:f2:a1:79:c5:38:27:de:a5:e0:
92:cb:77:dc:dc:07:c7:6f:9a:a4:01:c5:6e:ac:08:a8:6b:b2:
bf:dc:8f:4c:80:3b:6d:82:1a:b5:81:72:7d:3f:31:0a:70:49:
b5:7d:34:4d:36:66:18:b2:6c:73:ab:3d:02:91:e4:99:9d:cb:
e9:65:f1:73:67:bc:ca:54:07:82:ab:01:7d:f7:da:b1:be:73:
ac:ff:fd:b3:20:7f:9a:1a:3f:a9:db:58:3a:0f:e7:82:4c:4b:
3a:41:e1:79:a7:94:42:2b:c3:c4:5c:5b:c5:f7:04:87:29:13:
66:25:af:8b:af:43:a3:00:88:1c:5a:7e:63:57:51:c4:84:2b:
8d:e4:a0:61:3b:11:6b:54:a1:36:a9:45:13:d5:94:d9:3e:4d:
38:41:1b:ab:77:d1:11:bd:37:9b:54:d0:a2:14:3a:c2:38:5b:
97:69:a0:95:9a:d1:27:5d:73:65:29:b8:32:13:fa:d0:f4:19:
f9:29:c3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:43:42 2026 by rpki-client