
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
File: cG06u7R4t07yre-bt8QzbjQRHVE.mft (raw, json)
Hash identifier: B5eiPfHlHci/+Bhob0heBZnhoNuwIjjZpUNnMM3VSsg=
Subject key identifier: 5F:13:62:89:5B:B6:D9:C2:0A:58:5E:4A:1F:67:8C:38:97:91:CE:7A
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 019E205A409042FFE5527F01925294EF6868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
Manifest number: 12EF
Signing time: Wed 13 May 2026 08:00:46 +0000
Manifest this update: Wed 13 May 2026 08:00:46 +0000
Manifest next update: Thu 14 May 2026 08:00:46 +0000
Files and hashes: 1: 0Mybj4rFQlGdxvZ7NznWNMzZNF4.roa (hash: izLvly3jkC64Eb5EtBveae4jjwGSamPNz65JeNhANXc=)
2: 0T_njveGDBox8dRnm6ptBU24SOE.roa (hash: MTvLZVcAf3FK4lXDgQihNVIFOil0UjLczM3XYj+vPwc=)
3: 1z42-6ZXNXaxf7r777NkMo1bMx4.roa (hash: NDah+AjQwAfCaSDoOItAkKPiUGlGL9lKXcqRc2wazQc=)
4: BWSIfeORL3ZaF98YJdEW_lwKSoo.roa (hash: O2KdoHsDXYMUXXkiHb3Ti5/HWYkXf5itDU8BQXurMDo=)
5: HfFxGJLVfgStnjkbuHPm0NlbD20.roa (hash: OTTBrtAbVcSgQpN0MQDDsHGVJuiE+QV/cGYKWbjIEu4=)
6: YHr6sMN1EVbEwUde6FetuHcueOA.roa (hash: 0BAOQ2lWNPhsH0gX4p/TlQYVZnjFg2uh0FOWf3CJEt0=)
7: cG06u7R4t07yre-bt8QzbjQRHVE.crl (hash: +Rj6OwX5gHJaiq5yBT5NKcKYeo2LzohQWQ0dFXydGBI=)
8: cr0AR-w_JWFamVAtdgkvTMTy1Qo.roa (hash: eKAgKSzUAMEtrHDrT7mnQsSII8a/h3K+YCAIf+FAWy8=)
9: d00ZvtrFum9P2Yp0ubsN6hUhmyM.roa (hash: 2Me5/G1Q2JvdBpJ4pZYv7LNj99NEpOku37A513+s49s=)
10: d50ryNf7AouleyVkV0KoPCj3Vbs.roa (hash: 8cb301Zu+uM5+wsIG5dakaifCIJcNQE2p9LiFv/55dU=)
11: zl9a6eQsJ3DfOxhDj9wKbJLx4Uc.roa (hash: GtWhb1HWStkTLvPPKC4+PE0+adtITAuVDXGWtFF4ZOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:40:90:42:ff:e5:52:7f:01:92:52:94:ef:68:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: May 13 08:00:46 2026 GMT
Not After : May 14 08:00:46 2026 GMT
Subject: CN=5f1362895bb6d9c20a585e4a1f678c389791ce7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:31:0a:e7:db:53:e0:9d:e6:89:b1:0f:c3:
a8:e0:ca:af:c4:a3:ae:70:ab:a5:0c:8e:73:ef:fe:
0d:ba:e6:17:58:ca:c6:bf:e2:90:0f:77:a6:82:f0:
a6:f1:91:9b:42:b1:5f:a3:e0:e2:2c:53:da:fc:1b:
f8:92:2c:8a:ba:99:cb:e2:5b:55:5e:3d:73:ef:8b:
c2:62:4a:e7:cc:c0:d3:80:aa:ec:95:c7:ec:ce:88:
fb:7b:94:24:b3:07:be:70:f3:aa:24:1a:25:5a:33:
03:82:e3:82:bd:92:04:21:c2:81:b2:56:1b:2f:92:
66:2c:1f:3e:d4:74:72:4b:94:9c:ff:d2:76:04:a1:
c6:6d:6e:4c:51:53:6f:a6:33:e4:00:27:5a:01:1f:
7e:66:f1:5d:70:de:8a:ad:3b:56:4e:b3:f7:15:93:
e1:a0:6c:86:cf:83:fb:4a:21:be:15:d3:a2:dc:bc:
80:77:ae:90:09:0e:fa:90:2a:80:4d:b8:4f:f2:03:
d7:51:d7:dc:ce:f8:07:d8:76:c2:f4:2c:84:e4:2e:
3b:63:86:8c:c9:34:c1:c5:a9:16:0d:73:c5:97:a3:
2c:05:3c:1c:7b:3e:c3:ce:0a:40:36:01:61:fa:2f:
94:0c:dd:b1:77:53:e1:ef:14:c7:a1:dd:a2:72:5d:
b9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:13:62:89:5B:B6:D9:C2:0A:58:5E:4A:1F:67:8C:38:97:91:CE:7A
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c7:4c:f3:6a:ae:ac:8b:d8:9b:04:a4:42:92:34:a9:96:0f:
f9:48:4a:1b:c0:5a:c2:98:be:69:21:15:90:68:dc:7a:0c:bc:
7c:b8:24:43:1a:81:64:fd:af:69:d2:4e:f8:11:e4:12:50:69:
e1:17:8e:83:d3:19:34:b5:54:01:22:40:22:45:4b:ac:2b:e2:
4a:b5:ce:70:87:ce:e0:e2:6f:cb:07:08:c3:64:1e:44:a0:a7:
b5:26:fb:1d:15:d1:32:cd:5d:2e:44:e6:93:e3:bd:f3:cf:62:
e0:23:e5:be:b8:88:12:2b:91:cd:21:73:c1:65:33:3e:60:18:
ea:4b:84:a2:55:ec:96:e8:0e:fe:fb:9f:9d:03:2b:61:9d:c9:
6b:b4:a8:c0:47:09:ff:db:f7:ba:ad:d8:92:c7:be:93:5d:f7:
31:0c:25:bb:f9:9e:0a:53:7e:02:11:a4:e8:92:b3:83:cf:85:
0f:e7:3a:bd:db:97:b6:46:e1:b4:0e:f0:03:22:93:36:51:04:
5b:65:24:ea:71:7b:6c:f3:07:36:a3:bd:30:4d:7d:63:36:f1:
20:ef:d1:0f:ce:ad:60:11:79:7f:d3:4f:99:5f:8a:5b:03:46:
37:b8:cd:e7:10:2a:06:c6:39:c5:a8:33:6c:3b:89:d4:25:77:
64:ce:d5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:40:37 2026 by rpki-client