
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
File: hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json)
Hash identifier: rHi/SNHD0A3hHlUiWSLilDKlOloVgHL4SPpWEPs7Tfw=
Subject key identifier: A5:43:E7:3B:F9:A4:8B:C2:AB:BE:1D:D7:75:FE:76:47:76:AE:EC:A3
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 019F93920C9EC148C0B9BD603A64B9FE470F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
Manifest number: 178D
Signing time: Fri 24 Jul 2026 10:00:49 +0000
Manifest this update: Fri 24 Jul 2026 10:00:49 +0000
Manifest next update: Sat 25 Jul 2026 10:00:49 +0000
Files and hashes: 1: 1u23_XHmiJhjqy9S76sw3BzP9Ww.roa (hash: qDjQXmy6brh3hQItl8JxTdLVuqnZ3WF2FKz/Ualn8KI=)
2: 4KkUHNuHp_WUlcLV7ZmT-IELGLs.roa (hash: X02pU+wDvS97rZ0D42UQvqF9JhNnpzwkrnlhuhnewxY=)
3: An-h4kooPrBUGMT-6Nj0QudqGKE.roa (hash: 4VG1kUHyYf9yb01HKQwY97RZCAJU3VqeDAxr07wG4w0=)
4: DKJJrcnX3RnXlCDTnb0QnF9ph1c.roa (hash: FBpHgtUQjl2CKc1kAMv5YEG4ocTTbuqpzf8/LW2ex4k=)
5: GOgAejJFsLbsIoSjyXa89DsOln0.roa (hash: n61wmUPLOUsceRZoHaDl1wjd6NYSJP+7XllQ62IBWVA=)
6: Iz-RnZB4CPBnQJYhfp0OAhLrcMM.roa (hash: FaucEzJxlOy2Yut4nsgevP064GyqmURdESpVYmPVMZw=)
7: JVIsfJ3DVyq9OG-AbEDRx8a3Bto.roa (hash: J8o+5Ee3eNiQKRGdXJdghD9ZXv8Izb9VeieBzPJF1ak=)
8: L3AHD1nIaJn-Qkxqjxi4waU1okM.roa (hash: MqsTHnRn4vzlkUHWrFaXq9Uo9UAjzsK7URiYSvcgf8k=)
9: NY2MX1mgk76QbEK78KfRCv9HXlc.roa (hash: n052UQO+ldLs19+3y0B7Wj4/DIUQ0nHDh3aGl0cSB9U=)
10: NgMsux-odmw_2otfxo6fwQPz6nk.roa (hash: acZbMbI5ZnLhauOT05TvSrJPxsUogE9hJcD3gMOAgYQ=)
11: SUe4J3Et3KgT01K3Zx9sbKaSGM0.roa (hash: LwIG+mDSylEHKB/dZoPmrJsG/6vCNLIoKeokQAgcByE=)
12: XdIic6TtMnHLSFKPt0NIgYA3BZE.roa (hash: Hz8Dp4xvPL6d1SZb+xVGL2Fnk7Ii6zPdDdS2xRff/c8=)
13: bFtTO9kUoK7V5nLLHjzqVj2iOcU.roa (hash: jJC/VOkqkEwdX7ejcOTbfcTesLG6OI5LMSL4JFJb9Ek=)
14: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: BAdxSRs2878lxoeM5Hw1Ly/kMS/Ty5pYxP1d8t9y9is=)
15: mDj4POXBo_BA8ao0TEZHTmOo46s.roa (hash: Y2b4Ei43NJZ9dDiKlYc7gN5osX878buWXGf115YzawI=)
16: nFYGg4ZIP1H9kzcY434jAerp2kU.roa (hash: Y/IgWysEh1nmKw0nLD81dJWu3QFpKM+9pnP+lyeoZXo=)
17: obFwaT_4MZtX-dKod3UGli-Mmuo.roa (hash: S1tcUGtkx7R83UYo2rACVKW3cgPV5XEnzrmsW37TA/Q=)
18: y2mTo6HHgH1hIKjXLEt22HvPvrw.roa (hash: YRXm/TWE2LnDq+SOmryX5rTG96P5ANXEnONR2xUrL80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:0c:9e:c1:48:c0:b9:bd:60:3a:64:b9:fe:47:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Jul 24 10:00:49 2026 GMT
Not After : Jul 25 10:00:49 2026 GMT
Subject: CN=a543e73bf9a48bc2abbe1dd775fe764776aeeca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c9:fc:04:9c:ee:59:03:57:c7:0b:6d:06:ae:
d1:3a:f7:55:98:19:55:08:02:d8:f2:77:8f:44:86:
c2:b4:09:8c:2a:d1:14:ce:aa:3a:95:ae:77:d5:5f:
2f:9e:37:45:64:e6:f1:f7:bc:05:81:c7:72:45:04:
a4:af:39:44:36:7f:bf:c3:f7:dc:be:81:75:e4:b1:
3d:d1:0c:bd:c9:fd:73:89:f9:03:46:da:a8:89:77:
95:57:11:e8:dd:4a:61:10:16:22:bf:14:24:47:4c:
df:ec:10:ac:36:c7:87:09:64:c0:0e:a9:1a:b5:9f:
1f:8a:5c:a2:35:b9:ed:3f:e1:f9:e1:67:06:f8:23:
bb:65:af:87:bc:74:d2:aa:9c:94:4f:3c:b3:9c:9d:
7e:2b:87:78:68:e4:59:e7:dd:0a:ab:24:ab:a7:d6:
99:c9:89:c9:01:4a:51:d8:d5:b5:6e:ad:ef:63:4b:
b7:5a:27:22:57:9a:9b:6b:52:a2:7d:f0:c0:b0:20:
11:ee:63:34:5c:d4:c8:9f:ce:32:3d:95:0b:97:d8:
f8:69:52:d2:f3:9e:cd:95:e1:bb:97:0b:2b:08:f4:
e5:a3:b8:5c:a4:cc:1b:7b:f8:23:f6:5b:a9:74:98:
e5:cb:69:a5:03:30:a9:d4:2f:4e:d2:62:73:01:04:
a5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:43:E7:3B:F9:A4:8B:C2:AB:BE:1D:D7:75:FE:76:47:76:AE:EC:A3
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:95:88:fe:d4:b3:65:10:88:34:fd:c1:2d:96:db:77:33:f2:
d7:89:da:6c:a2:cb:b4:22:de:9e:89:62:45:d8:4c:03:53:60:
04:c6:49:07:8e:9b:ca:c7:5a:f7:8c:34:9f:d4:c8:0e:90:d8:
34:e0:8e:c9:e8:df:92:d2:28:18:eb:97:0c:8a:63:cf:75:c4:
0b:17:ff:62:bd:ed:07:e0:68:46:9f:e7:3f:c5:6a:40:55:62:
29:c2:c2:5d:40:f3:41:20:53:a5:55:14:ce:0e:56:91:dc:77:
5a:e8:9f:c1:bf:83:a3:06:25:24:82:8b:e8:a9:53:70:fd:2b:
e5:0a:88:60:c9:f1:b3:97:eb:71:05:c7:64:7e:3a:8e:5c:ef:
d0:ba:c4:26:24:fc:67:8d:96:23:4b:b7:c0:0d:67:5e:7d:6a:
e4:ac:e3:35:fc:73:98:c0:1f:31:94:69:f0:c5:91:9e:a1:be:
a9:e4:c1:4d:00:7f:a4:80:b7:ff:18:e1:c0:aa:d0:d9:cb:29:
3a:76:c1:db:98:c5:25:d5:a6:e9:f1:82:e0:f3:83:e0:ca:f8:
dd:90:30:3e:30:23:59:80:2d:17:2a:f1:dd:74:7d:07:a5:3f:
9e:b2:b0:4a:e5:8f:21:d4:be:6d:ea:ed:eb:1c:e5:0f:e5:78:
4b:04:a6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:59:15 2026 by rpki-client