
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json)
Hash identifier: ehg2WTHDMz1Vn6Mir9rj8vQN3PZ5roYSo+CqhuE6cH4=
Subject key identifier: 48:20:CC:F9:B5:92:07:11:75:EA:C4:1C:22:E3:E3:3E:02:EE:B4:84
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 019F10E502C808491BCFD43C5FE2DA28A938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
Manifest number: 19EB
Signing time: Mon 29 Jun 2026 01:01:11 +0000
Manifest this update: Mon 29 Jun 2026 01:01:11 +0000
Manifest next update: Tue 30 Jun 2026 01:01:11 +0000
Files and hashes: 1: 1onWddNgt-hbXxg-7fMMVDkSMv8.roa (hash: 6xbzz0JrjMO/4fz5zHo8PgQ0CyGaKVVD/UoDkWFGr1M=)
2: 4k3-HpRCXFW3j7_8C4stbYfFUYA.roa (hash: C8f2KuD10zOuLUQcMwm5C74B3yZTjBcW9yOV/aVWErg=)
3: 8MDk26A6HB8ESAemQVS635P3dlM.roa (hash: rxyUnW+DZGiT5coh/pmWc5vX6tfUq/igWAH5aJLS19c=)
4: EehQPHS3ECI0lRzW1E37Vi8D5UE.roa (hash: tiuPhQwwNNDpckTGAMR+WIUq44ng7RNOy+b3509lEHc=)
5: Nsh_W4gT44WToqQeMBkvLdwLp7U.roa (hash: s1XEdXMI1+3uP5BkHw14NLcZMVjF5mmNtQSI8IR6ni8=)
6: OujepPxEWJf76CUpCTyqTjOXKpU.asa (hash: ThWY+hR9gmQ1aouAGBEnVouEZokSrfcbByNw6RJAbVQ=)
7: QKaa5M_Ls464BGXTJZlXMkecYvk.roa (hash: VYfsIkTwFvkSA3FB9Pu7FhpTVM9hzat73ShbqylONR8=)
8: Uhz_TUI3Hsi81u75mxMWZpekOT4.roa (hash: q9Go9HD9nYKVh+b76qK8j4mJsOQptkJ61FqLETJCZTU=)
9: Un_qTs_qUw6Cr9rSAjxMcB_qwIQ.roa (hash: /NZAsUlQyUhQsDytYI9yrui4/CAPCfbgRtz4l6TLnkU=)
10: Y1K-rQ-VX44rWAjvqhl_hw7Dweo.roa (hash: cEsowcsrRQw+N5wEyAbdQXCFdceUeFzwtiYgytJDtj8=)
11: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: PpVMJ3ETn9cP+AEMZ3oYXnXR7fwiLUmbekBIB//Ej2Y=)
12: aKvQ03F1bR1q6-Woc8m1q6jONu8.roa (hash: LcJqfZb4sulh5jvt0J4ioSYZjOzoPCpUud+7/IHHoW8=)
13: ip7XsN0-IlSnuEP_E--FUjD8qf0.roa (hash: CO94Nw8OySvoAWy5RjY0I0/eplwWsGb3UO5iKzV120U=)
14: l0uiGfn0_Ao0KJi5bVUaMaNKV8Y.asa (hash: 5p613mEjLDKXtkZwHBWoFC0KynCvj30DBewuSTWYGQ0=)
15: osuU6cABAT-z_og2fdV709jwbR4.asa (hash: ItbTyIqWcJVCMwjVvKdgJl+ZPlR3yuOKXNSj6k02k90=)
16: rjxf5Ppv88saIf4NMrBg7Lnjt88.asa (hash: 8f9M0wG41PE6ZfVDs5zv6PTV0f6czRl9ExFIm9zaW0o=)
17: t0cVkqPZjARFv36ftR5F1LXB_P8.roa (hash: aH1VNEGWBhfBG6pKNECJ5Njp4Dom+Xvfv76b48XldZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e5:02:c8:08:49:1b:cf:d4:3c:5f:e2:da:28:a9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jun 29 01:01:11 2026 GMT
Not After : Jun 30 01:01:11 2026 GMT
Subject: CN=4820ccf9b592071175eac41c22e3e33e02eeb484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:29:5e:82:cd:b2:4b:54:73:84:0c:41:81:
e0:6c:3f:12:79:f9:a0:8e:d6:75:da:bf:cc:36:79:
1d:b9:d7:ac:d2:d0:23:b4:b4:7f:d8:3a:dc:a9:c0:
23:1b:ff:40:85:19:20:de:38:ac:8e:2b:83:e6:0b:
4e:0c:bd:fb:17:c4:de:38:42:e5:41:aa:5f:2e:ae:
03:19:a6:0c:f3:14:a4:7b:07:5d:82:2f:7a:8d:75:
ba:f6:d3:b3:f4:96:5c:4a:d9:d1:68:40:7a:bb:8b:
a9:bc:7f:1a:e8:09:55:ec:08:9d:93:d8:79:94:de:
99:36:93:e4:26:c5:cf:9c:38:13:63:1c:5d:3f:99:
a0:31:78:a6:22:af:09:a9:9d:82:45:06:42:5d:12:
a7:95:51:39:33:84:e7:68:23:71:f3:bc:1a:d0:ce:
00:05:ef:64:b2:56:f3:b1:f5:5b:69:51:09:93:9f:
fb:0e:a4:96:ac:ed:53:23:11:ee:00:8d:a3:c3:ad:
87:50:b6:bf:11:5a:3b:34:53:84:d0:46:0d:13:b0:
12:a5:34:db:ed:50:ce:5c:eb:9a:3d:4c:16:e2:42:
4d:53:3d:29:7c:5a:50:e4:72:6f:bb:e4:c9:73:a1:
b8:2c:7f:a6:69:a7:55:ec:3d:48:99:f1:1d:a4:73:
37:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:20:CC:F9:B5:92:07:11:75:EA:C4:1C:22:E3:E3:3E:02:EE:B4:84
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:62:0f:10:ab:0f:22:51:db:ff:e0:03:ac:55:e9:0b:a0:36:
0f:57:b1:61:a2:50:79:8f:bb:e7:49:c0:a4:7e:ec:59:d1:14:
3a:d7:99:83:25:a5:6f:45:ea:2c:5a:57:5f:eb:3d:1d:f9:a1:
ca:ec:b5:7f:9a:78:cb:7e:0f:24:dc:b7:26:2e:08:a3:d5:0f:
0d:43:04:35:a9:82:af:85:4e:8f:2f:8b:f2:a1:bb:fa:da:fd:
d3:c7:b8:86:fb:b1:d6:a5:a2:6f:04:63:06:ee:b6:52:b0:04:
fc:4f:bc:b2:c7:5a:36:b0:0a:a4:eb:1f:42:d5:f9:14:18:e8:
17:cb:30:9e:d9:79:74:c4:d3:13:9d:8a:26:00:57:b3:08:01:
f0:da:4d:e8:90:d2:fe:4f:8c:f0:80:ea:bc:13:1d:38:bb:ee:
f2:92:24:17:84:74:0f:ad:3e:e8:a2:29:2a:99:ae:9e:b1:b2:
19:fc:37:3b:db:ab:ac:30:05:d8:88:aa:6f:0c:50:f8:d6:32:
59:50:91:46:ec:38:3b:c7:18:c1:15:e3:fb:b1:8c:49:ba:5e:
16:ae:cd:97:ec:e6:f0:5a:2a:27:5d:47:44:27:d1:33:7b:94:
4b:22:b5:0a:ef:57:47:5a:24:69:01:9c:19:82:9f:ee:dc:23:
86:c1:4f:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Q5QLICEkbz9Q8X+LaKKk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjYwNjI5MDEwMTExWhcNMjYwNjMwMDEwMTExWjAzMTEwLwYDVQQD
Eyg0ODIwY2NmOWI1OTIwNzExNzVlYWM0MWMyMmUzZTMzZTAyZWViNDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNwpXoLNsktUc4QMQYHgbD8Sefmg
jtZ12r/MNnkdudes0tAjtLR/2DrcqcAjG/9AhRkg3jisjiuD5gtODL37F8TeOELl
QapfLq4DGaYM8xSkewddgi96jXW69tOz9JZcStnRaEB6u4upvH8a6AlV7Aidk9h5
lN6ZNpPkJsXPnDgTYxxdP5mgMXimIq8JqZ2CRQZCXRKnlVE5M4TnaCNx87wa0M4A
Be9kslbzsfVbaVEJk5/7DqSWrO1TIxHuAI2jw62HULa/EVo7NFOE0EYNE7ASpTTb
7VDOXOuaPUwW4kJNUz0pfFpQ5HJvu+TJc6G4LH+maadV7D1ImfEdpHM3/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEggzPm1kgcRderEHCLj4z4C7rSEMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGIPEKsP
IlHb/+ADrFXpC6A2D1exYaJQeY+750nApH7sWdEUOteZgyWlb0XqLFpXX+s9Hfmh
yuy1f5p4y34PJNy3Ji4Io9UPDUMENamCr4VOjy+L8qG7+tr908e4hvux1qWibwRj
Bu62UrAE/E+8ssdaNrAKpOsfQtX5FBjoF8swntl5dMTTE52KJgBXswgB8NpN6JDS
/k+M8IDqvBMdOLvu8pIkF4R0D60+6KIpKpmunrGyGfw3O9urrDAF2IiqbwxQ+NYy
WVCRRuw4O8cYwRXj+7GMSbpeFq7Nl+zm8FoqJ11HRCfRM3uUSyK1Cu9XR1okaQGc
GYKf7twjhsFP6A==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:29 2026 by rpki-client