
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
File: uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json)
Hash identifier: WvrXLXpwJk0nRrA9ntIC9rkJpKpQUcklvk2kz0FrGAY=
Subject key identifier: F7:A6:2D:EB:F8:AF:F3:8D:32:7B:45:5B:77:16:54:31:BE:95:77:55
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 019F91356D685E980AF6B5DB41A99C608CB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
Manifest number: 050B
Signing time: Thu 23 Jul 2026 23:00:25 +0000
Manifest this update: Thu 23 Jul 2026 23:00:25 +0000
Manifest next update: Fri 24 Jul 2026 23:00:25 +0000
Files and hashes: 1: 4NtXU3o0i9nTQ0aPnN0oHNUECOE.roa (hash: 3YYvrIPQh3ZlkWIDJWGzPef2omYQb9s0JIFyF3ZtUx0=)
2: 6WDkbHlgSXxNJbB0drss0reruS8.roa (hash: oFDNB9590aZJb3RqzjukoKFlQp5/LXVYXoZGCKhDyHQ=)
3: 8K0KdrfhqUloGiC916NzfAFxh-c.roa (hash: drOaS31gZWGo628/BltbevehLEyrF74VNJF1nPIwijA=)
4: CHm4uxJXlMUd0r5QClzcF966Ijw.roa (hash: s8FUQD2MuDH7rbiip50DyRQrMult5B8vV44+OSbORFQ=)
5: Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa (hash: soIv2LC8f5IdezvuoAAVJw8fZgLBnWGjy9O5qvDQ/+M=)
6: KuCSaCEOTSfMj8uwOknmWfQSUeo.roa (hash: 3+MmnXuvI/JOfNZCrj8AZFjZyZJa2SF9JSTpsOfpZ38=)
7: MsSKYSaiVUmdk4uw5DxmwFovsBo.roa (hash: gN7/7u1mFNWenCLCWkwGkblcTcu1MaRBKEfwH1Z/T9Q=)
8: PjcfmGvCF3Jo8bSPGEurQgZgvHI.roa (hash: nN0nspQjOZYATjn1JnM2nPvB9KoYFsNTbycrrE1wEhQ=)
9: RwhCBNFrzcUzyEWsFVoiT8IdNVo.roa (hash: r7grjzieZGND+TLUxKczhr2oesywsPmZIS/b0+pyM6k=)
10: SnhR0ywSazNW_LooQ-7w3mnox3s.roa (hash: sf6HWA102jlf5D1wHL5U+yeNTKyY8TOBcCejfejACe0=)
11: dqsYbbjCxnAptr8zjkd-iezgLz4.roa (hash: 1Yhk6OnIeIea3uiPYWd+rgtl98a+2OVsjXwz+GeFDuw=)
12: pVK-BRQ98HDM69ZQ63Bm0uZRCXs.roa (hash: jvRqREvNlJK1CxR23zptuMNPkMy0b8MVlSlIgEiP7u0=)
13: s2DbXwViqvH_t7XGoYjUHT_R1ZQ.roa (hash: OmXK2hMqfTiOv63cfpCHEUHp32DpOlQUjEVCGC0CAvA=)
14: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: tuVLa2kssV93X2Nsz5fwWm2xfBRn82uZhNVy0CNLE4E=)
15: zBKsN_Z6ioe9fqLCU_PChTHrs6A.roa (hash: CJ84WrCESQrejSbSiz0bPJ4g2Cfe/qkxFBCMR3bVRlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:6d:68:5e:98:0a:f6:b5:db:41:a9:9c:60:8c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Jul 23 23:00:25 2026 GMT
Not After : Jul 24 23:00:25 2026 GMT
Subject: CN=f7a62debf8aff38d327b455b77165431be957755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:50:e7:8a:6e:3b:ed:b0:65:a9:c5:76:31:5a:
70:49:a8:5d:fb:6a:1a:24:de:54:2b:2a:d7:55:a7:
22:0c:a7:df:8f:97:2d:1b:9b:3d:59:f5:5c:11:a0:
0b:d2:cc:52:af:11:fd:4e:c7:67:df:50:d4:d5:44:
c2:ab:0f:80:c3:cc:d5:5b:23:ac:27:3f:03:60:74:
65:95:2c:27:1a:7e:c4:36:29:e8:88:f6:49:2b:4b:
f7:68:9d:da:bf:9d:54:c5:cd:8b:c1:e6:b6:0b:1c:
b8:86:9c:fc:82:de:b0:33:7f:f2:ce:2f:4f:e4:05:
10:c6:17:ff:5b:1f:78:0f:17:b7:a7:65:cc:af:8f:
c6:99:3e:67:f7:e0:00:fe:ac:c0:2a:3a:42:7d:b3:
5c:c1:d2:6a:09:52:8e:1a:e3:b9:97:24:8b:2c:93:
8d:a6:09:b1:8d:cb:85:68:bd:9b:fb:a3:fe:8c:0f:
a2:46:67:be:63:2a:c6:76:6d:45:cd:2c:ff:63:cf:
fe:af:b8:dd:24:18:07:79:a3:94:e6:bc:22:d8:38:
86:7a:67:57:06:ba:1f:08:06:3d:0a:e3:aa:41:ac:
1d:3c:2a:cb:e8:7d:30:e9:b9:96:62:5c:ad:66:1c:
4a:06:35:4f:25:72:dd:18:82:ed:10:6d:ad:57:b4:
56:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A6:2D:EB:F8:AF:F3:8D:32:7B:45:5B:77:16:54:31:BE:95:77:55
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:59:e0:be:a5:89:cd:9b:f8:37:ad:4f:6e:18:62:03:de:87:
eb:27:93:72:ce:ac:c0:9a:8e:9a:84:d4:7a:d4:58:1f:8d:69:
91:59:b2:41:51:d1:89:19:19:38:99:52:73:f9:7b:81:d2:61:
32:34:6f:eb:23:18:c1:8e:fe:6d:95:d7:7e:b1:4f:70:53:b6:
6a:a2:64:51:f1:44:6b:ff:9c:64:c7:77:39:56:98:4d:89:ff:
84:90:d4:78:ea:18:ab:bc:10:4b:49:da:e7:e7:b0:5a:9d:ae:
75:4d:80:e5:76:fb:6b:6f:62:7b:34:ba:01:a0:a4:4c:23:3d:
03:28:23:04:db:89:37:84:35:c6:d2:f2:d5:55:b1:aa:31:2a:
1c:8f:25:35:26:7a:c0:17:6c:77:05:3f:2e:7f:67:56:36:f8:
b4:b6:03:6d:48:78:94:e4:c2:75:1a:90:3d:3c:68:5f:dd:ae:
be:cf:6d:fe:3a:aa:af:62:bf:e1:3b:93:23:64:01:92:0e:bd:
51:73:b9:cc:84:8d:c8:56:52:96:5e:54:88:4a:81:51:d1:83:
68:5e:ff:57:8b:c3:3c:54:e7:77:09:75:0a:0f:91:c7:03:55:
28:4a:d7:96:44:b5:ba:d0:ea:5c:0c:4f:6a:e2:6d:c0:43:f9:
b0:01:57:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:51:48 2026 by rpki-client