
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
File: NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft (raw, json)
Hash identifier: uM/pBPTHmp4e5cGPJH1R2OFE9Cnyh8g4H6mWzUs1eoU=
Subject key identifier: 4A:AC:95:3D:4F:A2:EE:97:68:E7:27:1C:CA:70:2A:28:B1:47:BA:48
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019F8EA2C04D012264ABAF36E4710D55A2F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
Manifest number: AA
Signing time: Thu 23 Jul 2026 11:00:58 +0000
Manifest this update: Thu 23 Jul 2026 11:00:58 +0000
Manifest next update: Fri 24 Jul 2026 11:00:58 +0000
Files and hashes: 1: 0y3by7vrttBQ33nFxtmSxUGDWQA.roa (hash: yskrl2o2WvFQv0MLJ0YRc2QrdyAgKS3RiSkSxlcjALE=)
2: 3hGblXZHkfF0d3EHYGbTWnSiNQA.roa (hash: QJIZI7te5M7LXWjeDg4x4g3m7iNaESqw8YCnOYlGo0M=)
3: 5VTYF8RHuM9hcpAN3kwPNt4o2dA.roa (hash: Rd+pDgwOetwYm3BS2RYIzb2Wh7xKpHMttU38WFORi7g=)
4: 60bYQFIRxfiNZZtyrd8v132OhQo.roa (hash: yoh+4hIc2iMYV+qe0Nix7m4JiW6PSX9beruheEeiPEw=)
5: 7loHyHhPVpat4f9MglB51vsJoMM.roa (hash: yrqVhvEkaCCmAr5JwpBA5F/9OAaY7CpBz/lL4yE+mxI=)
6: 9LOBcCuKiSIsEc48LJsOFLx8pv8.roa (hash: afdgRI5eC8fXQW7GUPyk2bIwAoB4/4X8Zlan6lpvko4=)
7: B3bioRLbAVuR82UWFBCkWvTTCus.roa (hash: OfIk/DktZrTMIWs/c6M+Tk2imIiQjnhuduF8IZvnL3M=)
8: BVGtnyQZgRc-7rbdcsiLTPdcP5Q.roa (hash: N72INfSHSUGHX50eQ8hqjrtdk61/xPzA77YWindEdy4=)
9: J8Nu292jWRKPjq7q0neCyO9_j2A.roa (hash: s5eBVw7COyG6QNqTi8sSQVL4i8mVKcCaq0WtADvLryU=)
10: Mim9CmMQR3ozLGCE-Tgf11KxorA.roa (hash: dOIzZQ99FYcO+06vOL0/z+/bioujv1F4xxKsnMDaHCA=)
11: NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl (hash: 1oaifJUPNlrItaFUk+Vt4mWobNM36vI/V2SiB0o06l8=)
12: QSu8RTBS_GeHC7vNPlkN8FoxyTA.roa (hash: HcKvfKMp+RjVDwb3JERnNNpq1J/LEdftWRuUkuEkLrQ=)
13: RXV0FkyrSSURuYKBNp97mfkTveU.roa (hash: 4XLzFBeAf1dzQtEYF/WORTvsT5QBqOnVV9gSjQgj5oQ=)
14: Sx3lD8t_1d5XN5YvVg5ooDUsYHY.roa (hash: MVIq2OMyU9/DCJe+SAOqCNWgxjau22pregso3ngLxcc=)
15: Ud21UgAkszMTN1VkhwH7y54HQls.roa (hash: TDiL5RYpZd5bkb4q9qfKhjcV0EPJz6ihmUZhWMEEhwA=)
16: Vc48rKL3rg5h-ZOkYPMqFhAt-nY.roa (hash: kggOhBvOEFBZS+rMyd+otPlcng38mjnoQvO7twIO76Q=)
17: df8fyZGgZ-MHftFhqfv8cp43YrI.roa (hash: 6b+ndI23XxYj6JqzyvYHphqWGIdD3cmhum/VBu59tcE=)
18: hmpZvaBGorcwo_ralAJScd3sWh8.roa (hash: lO3WbcBjBpqfFUJQMuuBp8iE0hr0b0CpOm1IZoQZmOA=)
19: i8t87RlNI6MGUTcU6g-xRThzehU.roa (hash: u4oceMG8JRLaB+aN8Oa4Sqot84g/vb4Jm4YvpXVq1PY=)
20: jRdAeFmN0KBRFg-nGD-IJy-4ZJg.roa (hash: nQMC3hCRmQ4D1KBdRyKzmttIb877jjd5D7xgwAT2WdI=)
21: mof6xABa_nGqS79lZW3MEn80zPI.roa (hash: GWP6CyDwsuU6R2JSLP0qzlZxMJto6qHE9P2Mbf7sWk8=)
22: nI1n5z6H4QpqTIdE1CU51Zoj8Ug.roa (hash: pekKDXCoFGjGVOlGNhx761IGJHBeUQoSqOrucczOuwM=)
23: oiFGNGuEBoRxwV4tr_6ltQZUOyM.roa (hash: hE47UOJjAbNPBn6kqwspGJbsZURO2T/edGWHIkT04NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:c0:4d:01:22:64:ab:af:36:e4:71:0d:55:a2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jul 23 11:00:58 2026 GMT
Not After : Jul 24 11:00:58 2026 GMT
Subject: CN=4aac953d4fa2ee9768e7271cca702a28b147ba48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:b8:56:4a:26:b4:b8:b6:d6:f3:41:47:17:
06:2d:69:34:99:87:11:9e:3d:7e:da:1a:6f:5a:50:
75:8e:9b:a9:d4:9b:5d:f9:ee:da:dc:25:5a:df:65:
0d:f8:4a:e8:45:35:6b:0d:bb:2c:9c:30:ab:a3:62:
a8:8a:91:67:eb:96:b1:f4:8c:22:5a:43:06:ca:aa:
2b:59:60:0c:1c:8d:7c:a2:3b:2c:94:37:9f:53:08:
34:20:e7:6d:24:ba:b4:44:d2:db:5a:2d:b8:a0:08:
b4:03:43:37:24:f2:ed:92:7e:42:5c:1a:bc:7a:f2:
8d:11:78:07:9c:62:98:11:b1:7e:80:e9:ff:88:fd:
3c:7e:fa:5b:c6:41:c5:6e:cf:c9:19:c6:14:a7:9e:
17:a4:b7:f8:4d:d5:9f:0d:57:d4:f0:1f:d7:51:a1:
3e:54:ce:03:d1:c7:88:44:5b:c1:a0:58:d3:2c:8d:
90:03:a4:93:0c:ed:41:6a:c7:27:4b:34:c7:f9:76:
44:ef:f8:3c:2e:47:53:85:0a:c5:d1:42:71:31:2a:
f9:cd:97:3c:ca:e8:72:25:47:09:e4:33:dc:cb:34:
7e:77:a6:ad:a4:fd:4a:eb:86:c5:69:44:5f:d0:41:
f0:8c:e5:45:75:1f:45:52:6b:47:47:89:e4:c3:63:
78:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AC:95:3D:4F:A2:EE:97:68:E7:27:1C:CA:70:2A:28:B1:47:BA:48
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:30:92:0b:a3:62:57:76:8a:54:f7:e1:6e:4f:5f:ec:ca:e8:
83:97:d0:9f:d0:8c:57:5b:fc:36:36:f0:ec:38:5d:99:21:93:
9b:44:bf:ec:08:d4:46:08:af:07:70:f8:4c:ac:d1:a8:8a:d1:
dd:f8:50:69:36:04:73:c9:43:34:e0:4e:98:5c:7c:de:90:40:
b0:b2:9b:aa:e8:77:76:41:ae:54:34:71:ea:21:49:c3:e5:3c:
78:fa:e4:bb:38:98:66:8d:59:86:ac:f2:69:bd:f3:14:d5:bc:
98:2a:40:13:59:25:c6:38:b9:01:b5:3e:cc:08:49:13:63:e5:
6d:8c:b3:06:03:c6:4b:5a:12:23:18:79:4c:87:35:a4:6d:74:
79:0c:94:75:07:5d:ce:e8:6e:2a:a4:7f:25:87:09:df:09:f4:
1c:bb:02:2e:11:7b:6e:54:7a:13:48:13:84:29:9e:b1:43:af:
b4:e4:c9:7c:ee:6b:08:b5:5f:5c:b0:a0:8b:30:17:b3:4e:4e:
70:1b:40:e3:0c:14:c9:de:7f:ec:8a:8d:e8:aa:13:ba:7e:26:
6a:0e:fd:aa:31:a2:74:fc:a1:d1:f8:12:37:26:73:09:67:bc:
a8:00:15:45:7f:f5:a6:03:cd:00:c9:51:3c:32:4b:76:f2:7f:
d1:40:b0:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OosBNASJkq6825HENVaL1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NzE2MDE4MTczOTU2OGU1NzhlMWI1ZjU3OTc2YTYwMzk4
MDYyZTYwHhcNMjYwNzIzMTEwMDU4WhcNMjYwNzI0MTEwMDU4WjAzMTEwLwYDVQQD
Eyg0YWFjOTUzZDRmYTJlZTk3NjhlNzI3MWNjYTcwMmEyOGIxNDdiYTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprS4VkomtLi21vNBRxcGLWk0mYcR
nj1+2hpvWlB1jpup1Jtd+e7a3CVa32UN+EroRTVrDbssnDCro2KoipFn65ax9Iwi
WkMGyqorWWAMHI18ojsslDefUwg0IOdtJLq0RNLbWi24oAi0A0M3JPLtkn5CXBq8
evKNEXgHnGKYEbF+gOn/iP08fvpbxkHFbs/JGcYUp54XpLf4TdWfDVfU8B/XUaE+
VM4D0ceIRFvBoFjTLI2QA6STDO1BascnSzTH+XZE7/g8LkdThQrF0UJxMSr5zZc8
yuhyJUcJ5DPcyzR+d6atpP1K64bFaURf0EHwjOVFdR9FUmtHR4nkw2N4HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqslT1Pou6XaOcnHMpwKiixR7pIMB8GA1UdIwQY
MBaAFDZxYBgXOVaOV44bX1eXamA5gGLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm5GZ0dCYzVWbzVYamh0ZlY1ZHFZRG1BWXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wNDVmNzAtOWVhNS00MmEzLTg3ODYt
ZWU4Y2ZkZDJlZDk0LzEvTm5GZ0dCYzVWbzVYamh0ZlY1ZHFZRG1BWXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8wNDVmNzAtOWVhNS00MmEzLTg3ODYtZWU4Y2ZkZDJlZDk0
LzEvTm5GZ0dCYzVWbzVYamh0ZlY1ZHFZRG1BWXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTCSC6Ni
V3aKVPfhbk9f7Mrog5fQn9CMV1v8Njbw7DhdmSGTm0S/7AjURgivB3D4TKzRqIrR
3fhQaTYEc8lDNOBOmFx83pBAsLKbquh3dkGuVDRx6iFJw+U8ePrkuziYZo1Zhqzy
ab3zFNW8mCpAE1klxji5AbU+zAhJE2PlbYyzBgPGS1oSIxh5TIc1pG10eQyUdQdd
zuhuKqR/JYcJ3wn0HLsCLhF7blR6E0gThCmesUOvtOTJfO5rCLVfXLCgizAXs05O
cBtA4wwUyd5/7IqN6KoTun4mag79qjGidPyh0fgSNyZzCWe8qAAVRX/1pgPNAMlR
PDJLdvJ/0UCwwA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:07:34 2026 by rpki-client