
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json)
Hash identifier: cRyVHLl7eXY8Du/mtz1kOIGmqdCrb4Pr4J0lTsBz528=
Subject key identifier: E2:1D:64:A6:F8:6A:E2:85:CE:34:9A:C4:58:68:D4:94:0E:1B:50:8F
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 019E9D3CAE3ABB01D7632EA8EB88D0DD850F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
Manifest number: 1955
Signing time: Sat 06 Jun 2026 14:01:00 +0000
Manifest this update: Sat 06 Jun 2026 14:01:00 +0000
Manifest next update: Sun 07 Jun 2026 14:01:00 +0000
Files and hashes: 1: 5lFyIZmBLBFDx76RfuZHevsHQQY.roa (hash: PI10EPnFAgNZeRBfLyN6vfxKBB4r+mmccm1SKvgO9H0=)
2: 8JXNaaQmDQHdM4yP_RNeiswPEDI.roa (hash: UUO1y8o89Fboq48v1C/MZYuzKEwlodMmFc6P3ytbtj4=)
3: F1XFKolR75CvzOCyFlTtMYXp3UA.roa (hash: 1NsFIv/Vqxyf17zBRZ7ykgjIIYfbwgtJjmnNI1bztF0=)
4: Ho8BmWtRsGIfoh9TadeITydo350.roa (hash: jhic1+8GxEt2CK46n93QnO3HxEVdv0LVkgGPn/QSDf0=)
5: NDEJ4OPh2jQQg5h1HdKinOuNm1g.roa (hash: 6YV/mvu0IZaB1NRM8e6QdrWu4qWaOce8H7G5lo4LpOc=)
6: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: 2/Wd/0VDPOwa4VGdhcb/UCiS9mDv0HQHcgesBTUoAhE=)
7: Tj4Mcwc_96ZTjJYw-9rKbpG4AXA.roa (hash: 6X5APSqbz1P2mkb03h8c2CZF8YBdY33egLhUsQ1Fh0E=)
8: VlCsH-gKeuLV89RCvfubppUzoBM.roa (hash: E6tZ0jd2kOODThTzIfCZg56DVUHPrBwKWicp2pqqUq8=)
9: WLquCazhAB0ScMP5a1mkOMpQjSk.roa (hash: X6EOl+E5HOgYEVAmBJUO3eMgT+pMlGAkOYSNqnB4rac=)
10: Z7cr1HbCrsDtXUyxT8SJLiqzP6o.roa (hash: xU544IyvXcLXM7e3JvHPAxxk8EzCmMrxrlsPcRWgF9s=)
11: _Sp9nWnMGENvs_5RlKIg522yEo0.roa (hash: 5BiB2YKH8y+FxStt90RRFoc5lwCZkm5vmcOChmEykmI=)
12: gvMvxN1JHVPjgshkuwfHJsKx4dU.roa (hash: VUg2txUUu1/KKURpEb7Xa9x6WRrXiOxip3ohqdUTZeY=)
13: uGLn1rNehfP8gUHfuPWItHTs-Q4.roa (hash: rbb+/QdbyMdZWalyD4M+Cib5fxLsrq9/EvfwTaumIsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:3c:ae:3a:bb:01:d7:63:2e:a8:eb:88:d0:dd:85:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Jun 6 14:01:00 2026 GMT
Not After : Jun 7 14:01:00 2026 GMT
Subject: CN=e21d64a6f86ae285ce349ac45868d4940e1b508f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:23:45:9e:49:f4:0c:fd:30:79:21:64:98:
4b:bd:db:70:ee:65:4f:ea:76:7a:80:54:e8:dd:50:
78:48:b9:ad:a3:72:e8:4b:18:ae:9b:99:b6:05:c9:
55:cb:8f:3e:0a:ee:8a:2c:d5:56:c4:61:94:fb:eb:
f2:7e:05:d3:cd:fb:58:9a:6e:1c:81:39:9a:70:ed:
c1:f9:e1:e0:5a:29:73:e2:e2:05:b5:42:ab:46:0f:
9e:29:7e:23:3d:86:23:2b:6a:3c:74:15:4c:e4:7f:
fd:5f:86:52:ed:a4:a6:2b:8c:cf:d7:d1:5b:5c:0c:
60:25:67:fc:b9:7a:88:e1:6a:0b:70:e8:62:26:1f:
ab:93:57:4b:24:1d:3e:df:25:b5:4c:ef:33:3a:18:
49:04:b1:c3:7a:9f:ca:a0:3f:68:f9:e2:0b:d8:75:
65:0c:c9:1d:cc:c1:69:ac:58:ef:92:22:14:f4:3b:
6f:6f:09:ef:f0:1b:fa:47:23:14:9d:b9:3a:65:b5:
a1:20:d1:97:7d:c5:6b:31:ac:3d:d9:5f:02:ae:b6:
be:34:ec:86:0f:50:cd:5a:5d:7f:11:78:ff:1b:a5:
26:52:13:a7:f2:48:6e:c3:9b:fa:d2:7e:84:f8:be:
2d:f9:31:e8:2b:45:d6:b0:5c:ed:8d:57:8e:d9:f8:
46:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1D:64:A6:F8:6A:E2:85:CE:34:9A:C4:58:68:D4:94:0E:1B:50:8F
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4f:8a:be:bc:23:c9:8b:96:56:5d:e6:83:1d:b4:75:48:75:
7d:34:96:bc:96:bd:3e:4f:e5:4a:d7:11:29:28:d7:f2:a3:f0:
93:7d:9d:2d:eb:22:61:92:0b:40:7e:81:7a:cb:1c:d8:77:27:
23:17:93:98:06:f6:a3:42:ac:e3:07:5e:01:1d:46:4a:75:93:
71:3e:0a:0e:74:0c:91:2e:ce:1c:e7:40:ec:37:15:33:61:c3:
09:0d:de:92:1a:a7:59:d9:24:66:e2:76:4e:1c:40:00:8d:c9:
3f:11:0e:3c:da:d1:17:29:a5:fc:75:0a:8f:f8:f1:a8:3e:2a:
fc:25:58:5c:8f:10:95:68:fa:ef:ee:07:9b:8e:b0:e5:c7:6a:
e3:9e:29:3d:56:96:3c:0b:e4:cb:f5:15:ed:29:8e:66:06:2e:
12:52:8a:45:28:3e:ec:0c:eb:5d:0a:89:79:0a:40:f2:44:6e:
65:ce:95:76:02:5b:3c:e9:f1:15:8d:24:9e:c5:92:48:2a:b8:
ce:83:41:c4:ee:88:93:a9:b0:26:8a:58:ff:79:89:fe:ad:dc:
0b:15:12:76:57:69:44:3d:fd:1a:27:89:0b:87:e4:43:e9:24:
0c:e2:94:d8:94:7b:61:13:63:8e:fe:9a:4c:8b:14:2c:a5:70:
94:2e:1f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:53:23 2026 by rpki-client