
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: E6yXqntj0oZMjVHqKmSzTN2IbNlMsC52ZC1JX/5V/bg=
Subject key identifier: 84:AC:E6:63:D2:31:7F:E1:B1:E5:18:13:ED:1A:76:22:9D:C6:0F:7F
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019F9135B9C8F4F5F0C7CD13569913C92F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 13BF
Signing time: Thu 23 Jul 2026 23:00:45 +0000
Manifest this update: Thu 23 Jul 2026 23:00:45 +0000
Manifest next update: Fri 24 Jul 2026 23:00:45 +0000
Files and hashes: 1: 1GxQmUTb97UmZv7pfW11O7jdoKQ.roa (hash: FmC4+AN9e0K9c8X4YT0jW6rSPs+y4UOdKxP9qZCnFuc=)
2: 2_M3hjSd7CTsmWcIflPRCb5WQkA.roa (hash: lb+AroYfcHpsLjtLQUflH3VlWHXn0bD5oDoLv70oXjU=)
3: 2fjRCs8xlK3pQaPk8rOIDSYlcxw.roa (hash: I2k2KEupu6w+ziyxDip54GCFZn2g6M1lsanI8ZV5WcQ=)
4: BxKZgBdEOXm741z70o-b-8aaZ1U.roa (hash: 9rDM/H8P5h5tG13SRwkUwohyZWN/9GQOe+B0Xl1+fUU=)
5: GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa (hash: 2tMBvhTBaG9FOblLPHKcO+h2HyVM2AobojKlvW5vzV0=)
6: J3vzcKMRFcvugofD01F-WNUda7g.roa (hash: tBjEDKKlNdNNr7PYENGOctFjWK7OCe+09gFHwhf+c+U=)
7: S_cMNHwGmO53SbTaPSTvEUZSyO4.roa (hash: VJ2mNoR51FwtQFNmuZTNPyshVFI+sQ6fyBXwc1Q4lR4=)
8: dYbDdMuBsyQvL7kdUhtnVt9Qq4Q.roa (hash: Uc1pM7+13084KA3rRz3NbQmC1rtfcHSF9LSKdQS99oU=)
9: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: jQNOSUTdDDMa7AdTicOhtuuv3uvEBHUBsJuXkLRPe0s=)
10: dwc98g5fGUgPAWxFG8AQgkdTGUE.roa (hash: r33CVUyGl3+7P6ErqgK1Pc1v2YLarpkrErbsExQx0So=)
11: gbf_kkJkJHVfWvhpOZp44zXkSi4.roa (hash: L7TAKQTj5DgzgInyo2Z2o+5W5kIP6WxJWd/ULoNrui4=)
12: izn0gTPOQgQruf6Plz077lbyDvQ.roa (hash: SL5lQV0cHnhG5e9HsORKQLS+k85jrcJmLKm8DFk0UWk=)
13: mBXHe8xwrq_f8wh9M3ZXaWdq8f8.roa (hash: dI8S3nju8gYg5btIsxEkeYY9kQycBzwf9pyizszOFek=)
14: ocHcLPqIiXs39TMNmLocr_HH0to.roa (hash: 2m7W1dsOxKOHHVh+M6gzZPsYBZCOmqgU0+hBomALNJM=)
15: q--OuP_rfB_qdy_7f_RIgPMsU7I.roa (hash: J5d2AOEi0HNsiyJ+nB39gHaVUpXKMLDnfhR+GSmUgHE=)
16: r2wp15RalYZ-BpL4xsNnngK0594.roa (hash: NNjjTsbzbTB3BJf0ScAIqlbHnQQtN/B+x9X2kssrtLQ=)
17: tiWoclLyoubi_eH2eBTEmg_nRPQ.roa (hash: v7vNaiqbe+aP8/SaLVbx8mliFyA9s414yzNmBa2a+SI=)
18: uuy6ECeKU5zPxhagn8FIr283yKQ.roa (hash: OOKXwwUyMmEuY99QE9mTnSKY0ij2Tkkt4XqvRj4K6hc=)
19: xfzSJZkuJaEFMZbSPNrdm-vtVgk.roa (hash: 03aH6k3XO2w/avcqYf5rOTHSew6NN0Bs9faZ8hBNn0U=)
20: yrbB1vsBIjdbUaylEPRfMMB-k3g.roa (hash: uUmid3sXY3uL8GFqpHsIlPFVeU82iqmCl12sBdQU42s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:b9:c8:f4:f5:f0:c7:cd:13:56:99:13:c9:2f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jul 23 23:00:45 2026 GMT
Not After : Jul 24 23:00:45 2026 GMT
Subject: CN=84ace663d2317fe1b1e51813ed1a76229dc60f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:a8:39:ac:21:26:f4:b3:f9:0b:80:78:1e:
c1:b3:2e:be:3f:95:b5:b6:ea:67:38:36:0c:d4:23:
8f:17:5d:09:ea:44:92:f4:03:2a:ab:39:df:25:b8:
cb:3b:26:ec:03:13:b3:23:0f:d7:12:1e:96:c7:4e:
1d:86:55:18:15:ca:c8:ef:3f:73:d8:8d:c3:0a:2b:
8a:cd:22:41:ff:a8:fa:89:12:b4:19:c7:6c:10:b5:
96:51:c6:1a:2a:44:02:1f:80:94:6c:a7:86:8f:c0:
8e:90:09:df:e4:e0:78:4c:b0:e3:6e:96:3d:ca:e4:
b8:8b:30:7c:ad:b8:98:c5:fc:c6:08:f0:b0:27:0c:
21:84:36:31:61:74:89:01:2b:94:b7:0e:19:94:91:
95:00:49:35:4b:90:c0:3b:b2:ee:2e:6f:ae:f3:d1:
f9:ea:83:a3:f3:c4:e9:06:3f:ad:10:95:02:83:c3:
35:23:f7:67:af:bf:f9:5b:8e:6b:86:69:c6:7e:e1:
f5:a4:fb:63:ad:b2:b4:c4:cc:37:2c:31:0c:81:30:
db:fd:ab:0b:29:95:15:20:c0:9e:3e:17:98:a7:67:
ce:3a:c8:ea:fb:99:0e:43:a1:64:ce:3f:9c:7f:03:
ee:c8:3c:7d:db:58:45:dd:42:84:d5:29:17:b8:76:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AC:E6:63:D2:31:7F:E1:B1:E5:18:13:ED:1A:76:22:9D:C6:0F:7F
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:8b:ca:2d:52:59:b9:66:73:82:a4:34:43:f6:c6:eb:e7:8b:
42:82:14:48:5b:b4:9f:7f:c4:d9:3c:6b:b1:d7:33:d1:c8:65:
f8:45:09:47:9f:90:49:38:c5:85:d5:cf:52:3a:c0:68:e1:be:
a4:ae:48:cc:24:a7:a7:ef:bb:b0:19:4b:b0:cf:75:60:fc:3f:
43:04:3a:c1:61:ce:2f:a9:98:76:9c:6f:11:37:6f:2e:cd:34:
ee:80:ce:67:9d:25:5e:ea:77:56:79:0b:8a:83:82:18:4a:98:
de:98:8c:16:bd:df:68:b8:4d:f1:db:56:a2:13:d3:43:4a:37:
cb:36:fb:a0:74:72:eb:d3:64:3a:58:84:49:80:d9:ad:29:72:
aa:37:95:d5:63:46:af:4f:00:7a:fe:d3:88:b0:e7:c8:1a:37:
f7:cc:fd:4c:19:c7:3b:29:b3:cd:e3:f2:3e:1a:4d:ac:68:0a:
12:7d:50:ea:cc:40:eb:8f:f9:64:c5:50:7f:12:72:83:5f:b4:
5c:06:69:8e:80:6e:99:a1:d4:78:82:81:3b:1d:83:6e:86:06:
51:9b:88:15:11:67:9c:98:a9:75:2b:a5:60:e2:47:ed:79:39:
68:f8:4b:82:d6:a2:13:d1:4d:09:e7:83:40:10:25:bf:28:29:
20:a1:6e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:41:10 2026 by rpki-client