
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
File: L6FqsGAgBndApMH7R6kSYi8dByI.mft (raw, json)
Hash identifier: 8Fq+QBqI+pVpTMHA131er4I6JXVKIp/Bc1/yGf7DJRg=
Subject key identifier: 65:08:3C:B4:F6:2A:F5:D3:A7:40:75:7C:AC:45:39:F9:48:72:C4:DB
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019F818881BABB20A858376611FBBE8B549D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
Manifest number: 1A29
Signing time: Mon 20 Jul 2026 21:57:14 +0000
Manifest this update: Mon 20 Jul 2026 21:57:14 +0000
Manifest next update: Tue 21 Jul 2026 21:57:14 +0000
Files and hashes: 1: 06fSg1kB8ckHlCpjtqtFvEEoGmo.roa (hash: f48NpMpstUXIPO7HPVODVDToQ8B0NiDFbk8U3q4Yolw=)
2: 1zTKaDP4-Zj9mUt7-S5YAcY_mVo.roa (hash: 5+5yfPGg5lDhghBfx+dnbTS3tC9lex/WG7QMbZj26A4=)
3: 3Qr0L0RQ_Z8R5Cc74oenvNgwB5I.roa (hash: pkT85WzVKfS8+6maKuMZ3/z/S227uMf4I4OAK0s81z8=)
4: 71fh7xRTZMQEFeADtvBms8Jxriw.roa (hash: TUhapUQZ7I+Jwf6YXi6D4YZvbKOEtBxwBuVU+O4dqaU=)
5: 7XKrY6sRi0TOpYVIC72L4eR2QMQ.roa (hash: dRjz/HPxAbIEZD8TfYo3oBDmUxS8I/PLZra+7sLx66k=)
6: DEqgDw1OjuvCUcoY_GFoXdYUL-g.roa (hash: uaVIfBigKYn9jPBacBnYHFMS2xbXYfQ5wT7j6FjYz1s=)
7: IEYsZgA5S8VfmxdDgbohhLTNNns.roa (hash: iEIpm0ezjdj8b3/qEAPdEkQRFU/FlcYxVmHq5++f9/Q=)
8: ITJ_4YK0o5n4s0S4B56m9EJ0ogg.roa (hash: kcpE8+HMiQBohKY0fa+TOjXFBG4SK95c0ErHWF7t+v8=)
9: J-fPqsN-bTywutCgBgm0oMsMZn4.roa (hash: GwWRnUTMSKlctTV12vVbv4ww0CbgnMjaJS61PVU8Qu8=)
10: KH7cexp6-l1q-hMz0XztCASAh_0.roa (hash: n04fnnbHSBbrosj8SpMmI2CoVRjTOGfNu9TSTWPU2ig=)
11: L6FqsGAgBndApMH7R6kSYi8dByI.crl (hash: Q9yUeI+Lj41EQFdlxXkYgqMwPQqPWmWphQYrlvyUNrw=)
12: LY1fBMtbeXqoPs6JAb2Fp7GAya0.roa (hash: Qr2vedHCJgdf38v/J9aAhF6BgY1+sX1GDop+VSlJ8A0=)
13: QV6aNnm8UURvRuqfgI_kdEPt9EA.roa (hash: qGBvHUvU86fHU5nWskcmW6tvE6Bk4I7Gn2L3djwCsps=)
14: Touy1G_QPr8UYTeYYQtRpqJk_5g.roa (hash: KcWcsKPmd8sllWoi5Lk5MB90LqzJor5vq1GKXnj4Hx8=)
15: V-mmCMfH0ewPaLirmRRX0lynxtg.roa (hash: +J3VnkcAf47JsIizHu++4KN/uSIVT2PuurhD+o/0Z7U=)
16: a4eZtsxSoUsQLsQJUSldo0nW-QE.roa (hash: qETNMjbbv6m9d693TJqiz1wFLU2GtcYO5aUb7bDUTdw=)
17: iFHV-4_PQZAPSbyP-_eKAC5sXQc.roa (hash: YPZedpyXjCCm6shSV1jcGheCVvP+CziI5XLPjJa9XgY=)
18: ikqYwXx4ATF9s6KHl2PLmUXCWlM.roa (hash: B0bQ9MUv2KBsMgq8JKkZLtmuuK5t3EQXBliyDo6a9w8=)
19: inyGcps89W0KJ12qgHdULfVbny0.roa (hash: u8DcCG0CcvnANGvMJRgwaWdMSpZ52dquk6zoYwmbVJ8=)
20: jRWtyYMGTuWg2E6keQtB_dgm3p0.roa (hash: iF2FFz6WfUZwQrceNhMGsrL5i0NWuW8PDnRcyn9YNrY=)
21: otaASQB8GGspCrnWLO5XzeVcDtk.roa (hash: oDtuQThG0LQMGhrXFrB1ol0UNfbRDq15W0nys4vTqB4=)
22: r3uWhWQfYQ-7I96xPQgZcGOfgm8.roa (hash: 3XA1JsyB/6+JdqSvjZhGBEJokLbWA2Jq/KVD4Zxhe/g=)
23: vnZI4Od1GtuWmbcfTmasYrA2CVc.roa (hash: hJx0ALHEmU6KnL133ic1OuF6Y0ua/ikvZuJIZHg4VQo=)
24: wnrT0lCYLHW2wtAS-UsPdzbCuE4.roa (hash: BRm89z/l+kKbdn26JzqMifrc7bDhOG/Y4poCpOQIQ3U=)
25: yUTmeS-NkDfKbmdfTdkhxc4774c.roa (hash: agdIY8JzBTM9yK+Bw0ruFZ9HCc1JBNpz+/JAwoXldN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:88:81:ba:bb:20:a8:58:37:66:11:fb:be:8b:54:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jul 20 21:57:14 2026 GMT
Not After : Jul 21 21:57:14 2026 GMT
Subject: CN=65083cb4f62af5d3a740757cac4539f94872c4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:ae:d2:3b:a0:f7:6d:c6:f5:f1:37:f6:e4:
65:0f:30:b3:43:a8:01:9e:6c:be:a2:f9:14:ff:c1:
31:85:09:a9:64:de:6e:09:cb:a1:4d:15:96:88:5d:
7d:13:78:ba:7a:b8:3d:da:ec:5d:8d:68:56:89:cf:
43:44:c6:fe:b2:be:02:2e:23:6c:b6:c9:4d:e0:db:
f3:79:5f:a9:f9:ec:54:2e:75:bc:93:ee:95:37:47:
e3:20:57:9d:0d:51:03:5c:22:e7:f7:e9:60:eb:34:
e1:68:7c:a7:73:73:c1:c0:c9:23:49:50:45:26:5a:
6a:99:e3:84:93:75:e0:4c:4d:e9:6a:e3:d8:c8:5f:
09:f5:08:c5:57:56:f6:aa:7c:48:e5:b3:08:fc:5a:
96:43:37:7a:3a:85:7c:7e:64:a9:ed:c4:ae:fe:ef:
fd:6b:9e:ff:27:32:6d:26:cc:41:2b:ab:49:e3:7f:
d3:f5:03:b9:66:87:e1:3c:c4:e3:d2:49:5b:3e:9e:
29:e4:f7:b8:80:a6:6f:61:a6:c5:ee:38:46:83:a3:
ac:28:1f:00:a4:37:65:7a:9c:76:19:93:a5:d6:51:
06:0d:06:ca:7e:9d:14:27:3d:e3:84:e7:bb:5c:e8:
25:1b:9d:f2:bf:a1:2d:a6:e2:c9:85:fb:58:f3:87:
0a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:08:3C:B4:F6:2A:F5:D3:A7:40:75:7C:AC:45:39:F9:48:72:C4:DB
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ff:4c:bb:28:a6:3c:b9:dd:bd:be:16:e5:10:b0:86:be:28:
ee:90:35:71:47:d0:1a:f6:b8:bd:8d:fa:a1:d7:46:45:24:78:
93:2c:1b:0f:d6:4b:c4:18:3a:46:f9:e8:57:42:4c:ff:bb:dd:
3f:27:20:1e:a9:d5:c8:3d:a8:7a:1e:6e:b2:61:4d:01:d4:58:
1e:bf:f3:49:6c:c8:6f:10:5d:c3:89:27:2d:e5:1c:b2:7d:20:
27:d8:6e:6f:70:bb:73:99:e0:40:e0:7d:da:fa:8c:3b:46:da:
c2:96:88:c8:29:ca:13:4f:cb:f2:35:82:ec:da:f1:0d:b2:36:
ab:c1:50:39:f7:ec:4c:db:26:34:51:ed:1a:eb:24:33:d6:a7:
42:84:e0:a2:40:11:60:33:72:f5:25:92:e5:99:f0:dc:b8:ee:
2f:a0:c3:3f:d6:f0:62:09:69:a7:39:8c:55:c2:df:c5:06:ea:
c7:b6:a1:02:07:d9:3d:9e:d3:ce:6e:99:1e:e4:6a:a7:b9:e4:
b4:47:f6:89:4b:8b:21:96:5f:9e:68:48:a1:dc:3d:78:0a:b3:
bd:22:3a:21:95:35:c0:9e:9e:80:07:d4:de:7b:05:17:ef:3f:
cd:76:5a:68:92:cb:6e:c3:3a:d2:f2:26:45:29:49:17:15:f6:
e9:99:8e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:55 2026 by rpki-client