
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
File: bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json)
Hash identifier: PBUC5fqhflkwmR4EO6vfI3EojjiwJbMtnwH9rWLLbXI=
Subject key identifier: 2B:9C:F2:26:86:50:39:B1:5A:63:83:6B:0E:1B:8F:49:82:A0:72:ED
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019F9022AB2DD4C0B121953F3ADA128C0E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
Manifest number: 18E1
Signing time: Thu 23 Jul 2026 18:00:18 +0000
Manifest this update: Thu 23 Jul 2026 18:00:18 +0000
Manifest next update: Fri 24 Jul 2026 18:00:18 +0000
Files and hashes: 1: 8TeZpbl_qus5n0g90QhzhZotgWI.roa (hash: jS66+I6BTf47/f9YsHIptnfwhsFPalQW0oQ6WBC3rB0=)
2: 9xgiRaoDHZpfEWCuWGLVozZH1gk.roa (hash: v8wEhG7uE5X+Pic34dsR8NNSQFk/2P4s8T0Y6bprmWQ=)
3: B3ZlbL4gU6mGNdfE7GNgbCqsduM.roa (hash: 0PhXlz7OHulz176DWbBx9T4BxrFfJgZd9rJZ8KuMZgo=)
4: BGTIebFN8Np0NsQtF_avGDoUny4.roa (hash: NPCQmuapy/fWkxHdwPSPdnEK1QY4KGIX45+Q8l7yby0=)
5: BVAbby4n4nfVJfXWrR5Zl8eKCNw.roa (hash: 9h5dLOvIi1c2+opBBUG4urPF6XN2qAHfeKjpbM4tCxM=)
6: Dbdu-sAYIxR5QPvvVrRAhYH105w.roa (hash: fWwOPydmpUe+IsyFRDNgiL4cigw5qNtOrAk6xHxF7LI=)
7: EfWuRA4xuDAvflS5tv0JhzSei28.roa (hash: SAzMnIbvWnao7wpDdbRqrdkwbQWMAO6Jj0G8Oc5qkbI=)
8: HeSSKy0hpbFZwXpL4wRARD7sBKI.roa (hash: QjJUiqYDK9L1FM50J7fBEzbh41rsVg1rLGSgPBSUCpc=)
9: MJgiLKofa3--UVTFUoDMYpkd14E.roa (hash: H6wYuGz0ahIxYTCSRji68dw9L5rj0iVmY7ULRmePIqo=)
10: OGG1AN9r1K7fCCBDdkuKp2YurRc.roa (hash: uKPYBtL6H7NRJR1/TrQfck1LuVNFXIVWB3lTB8Q9nkM=)
11: SXe4L80C6NNAi8_Z_r_OzYlFJMc.roa (hash: rvAKW+Jnjq6JcXJuZTuezh3N37RsgK/dxB2hqkABN5g=)
12: Yi_0sb2Cd1tYZiiWIymmt_L8-nc.roa (hash: ZfN0GVzt124vq1vIJ26ojNWgsCUqMSJ0wE5cCnsN3gQ=)
13: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: PYnCTnLPEwl+ugpjhitNm1rXHdve4oF/KBVxxTRW/yw=)
14: bYiLveRsDlX78OsxGY3h5GANwkU.roa (hash: 7RIU6dRlDTBOGvkvNbaGxFh//l+X7XqnppaYQdzpO8E=)
15: lQ5I1RQhBLo7oEEMwItGQL1D4co.roa (hash: JsbTSCE7CBEzvAaKOwDU8edPgIOKQAAWgiGQC/UlKpg=)
16: tXOl2ubuLkmi5Hms7cr2oOrONy4.roa (hash: /mpuqbpXTMSqEVxHEhqKLpXW3WVDEqBZMvkdGp9RQuk=)
17: uPXsHfVse8rlnzUbj2UoRMWOq8g.roa (hash: SCLabx4GN4AnmWRb1f32gO5dZZyqhDCGfjhfHlPlGlM=)
18: u_DOEx2r_J3BkCywvogfeZZkNpA.roa (hash: oEGf5LtDawHz/AlzF45DhMZpwO1j9J3oHupUypQDU5Q=)
19: x4pQf17vDFkXV3GUtqmWbktS3Fo.roa (hash: TF4r3ErV+VPSElRBLhwHiJMcDMk0C1SKhfdxBMi4KUM=)
20: zw3H3DTpeUhcqqHWXtBf0WnIJoM.roa (hash: 6GByi9aIOsCybNHah1sj3rggT+SfOktCNujJlbLQbPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:ab:2d:d4:c0:b1:21:95:3f:3a:da:12:8c:0e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jul 23 18:00:18 2026 GMT
Not After : Jul 24 18:00:18 2026 GMT
Subject: CN=2b9cf226865039b15a63836b0e1b8f4982a072ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:61:0d:13:66:40:b0:c5:30:6f:53:cf:f1:51:
a5:a4:21:8c:2e:14:e4:d1:4a:b3:07:9e:55:a0:dc:
54:fa:ee:6a:64:d6:49:c7:a7:f7:0a:d2:ce:68:68:
ad:1d:4b:f1:5b:c0:e1:fd:93:7e:0d:40:5d:d7:06:
27:37:82:d4:8f:fa:15:2e:82:f3:05:6c:ab:8a:66:
de:99:bf:e5:06:d1:fb:27:d5:4f:8d:a9:00:cb:69:
9e:fe:83:27:ee:fb:ae:3a:da:07:87:7c:1c:f0:b2:
e8:45:c0:30:27:9d:71:c6:41:3a:ba:17:1c:61:0f:
7f:c6:7e:6b:38:a4:2c:24:5f:1e:f3:ee:b3:72:a8:
bb:51:1c:8d:83:79:13:0f:55:5d:a0:c7:5a:86:a5:
65:3d:1a:0c:eb:5c:67:41:30:cb:49:ce:a8:32:d4:
d9:73:4e:82:23:18:4f:0e:90:b9:cf:3e:e8:68:81:
5b:35:3c:22:40:21:60:84:03:24:15:f6:4a:13:aa:
e6:24:00:1b:90:1c:69:8e:d1:36:29:ab:d3:71:41:
5f:0d:d6:e0:14:f7:c9:82:1f:3e:01:17:3d:5d:b4:
ee:93:84:52:1d:04:af:0c:1d:45:a9:a4:81:54:7b:
b4:62:dc:72:c4:eb:b5:a1:2d:fc:54:10:c1:9b:68:
85:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9C:F2:26:86:50:39:B1:5A:63:83:6B:0E:1B:8F:49:82:A0:72:ED
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:19:5f:1f:74:5a:cc:28:0f:4c:f4:4d:d7:4d:7b:1f:3e:36:
a2:52:af:87:1f:82:9d:f7:a3:5c:29:ab:65:fa:70:92:4e:ec:
14:0c:cc:2d:a0:39:9e:8b:89:f6:b7:4d:34:7b:55:24:3a:57:
5d:0f:6b:19:92:dd:c8:8d:15:6a:ef:62:21:e3:ad:92:cd:83:
6e:cb:6e:c3:1d:8f:f5:93:b1:c2:1a:23:54:c1:b6:9d:2a:be:
cb:6a:53:be:28:11:10:5a:cb:d4:cb:b0:bc:fd:af:22:c3:cc:
a5:2b:db:ba:8f:a0:f1:e4:1e:82:2f:d1:eb:23:e4:04:aa:5c:
53:66:a6:87:b6:82:46:6a:79:7d:67:fd:58:7d:ff:42:e7:6f:
5f:d6:08:60:e5:9f:1c:d7:82:c5:d4:9e:1e:85:14:66:96:bd:
d6:69:f9:8b:0a:8d:53:5b:0b:46:b7:85:c6:5a:8a:41:47:bf:
cd:e4:da:a7:bc:1e:ec:f5:aa:22:cc:0f:aa:b0:bb:7f:00:23:
9b:ae:d2:21:95:d1:94:a1:17:23:85:e7:cb:d3:82:d7:3a:a4:
e2:90:d7:62:b9:a5:a3:43:99:0e:56:aa:a1:6e:bf:e0:b1:f2:
02:19:65:61:b1:75:48:43:0f:08:18:ea:bc:74:a9:69:9f:a3:
b7:a7:f0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:15:00 2026 by rpki-client