
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json)
Hash identifier: 24RoozoazpjTuWxVXuZ5ebHdSChcL+UFaQ1nbGMSfdE=
Subject key identifier: 6A:CE:6B:7D:C7:14:EE:94:B2:44:8B:EF:C6:4A:43:68:59:FC:16:CE
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 019F909169D82B1B7F77E048094D9271AE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
Manifest number: 19E6
Signing time: Thu 23 Jul 2026 20:01:16 +0000
Manifest this update: Thu 23 Jul 2026 20:01:16 +0000
Manifest next update: Fri 24 Jul 2026 20:01:16 +0000
Files and hashes: 1: 8Eblc7pa_4U4okyHLfqfcyfnWz0.roa (hash: yDyQhyWU2Yy6CbJb1KU7PdxVdmn9PLwPpcooL0C53mY=)
2: AyLKfRccIqVZSZfeJQ1-KG_YPTU.asa (hash: utC08LUwBVA4cVQBYh5JTq1FqYPeFvwHosHL7fDW+sI=)
3: HvJf-bfTg2tiYUvSB0Kj9WjrWi0.roa (hash: Zj79TOXiKACE8B8W/OUq9I83R0d9i1y3XLh2/Gqubpw=)
4: W-sALm5q0yq3QnzfCn9zqwJqvaA.roa (hash: xnIdiawY8eAQvPvkfIlMj6UoPw+J3dJ14IvwIdndhxo=)
5: WDscPdpfG-kb__QIc1556x7o_PY.roa (hash: l96y3WYtqpU/N9iNr6T/BhsvK6KFKMEJ/k50G6U6KZ4=)
6: dDBO-S6Wp6dejnuaBq43TxSUg-A.roa (hash: 4J4YToYV6H1+Y7Dnf4EOV1eYe0uHDGZBia2zslZYn1Y=)
7: f9p5fANR3rgdNF9ibKB-GDcgYp0.asa (hash: qcx5yEHomaJVsdDB+zzIUqbgqwQXu1Ph9bsEC6CL9SQ=)
8: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: m1WrVPCASDb8utl3w5XA98kclu80hObWc0b7R0sNBzo=)
9: ouM5YtdgzmK88LVBLR4anX4lhhA.roa (hash: 8cSgKHpeL4CzJp24fOsiDeOOZHqLgpt9SIcrnZhqRTM=)
10: pG6KdtKifWBBYo7DL8JxMRs-nM0.roa (hash: gKlmdKh10IDFHdiA03gsTAC30YiWDq57ljKUq/ouYK0=)
11: qvhCmUDzNKL8cJBghrHddfWvkhk.roa (hash: UnviboD1YkVxbTanetQc6UpYBMCuKxxYl0kVwOj2pxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:69:d8:2b:1b:7f:77:e0:48:09:4d:92:71:ae:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Jul 23 20:01:16 2026 GMT
Not After : Jul 24 20:01:16 2026 GMT
Subject: CN=6ace6b7dc714ee94b2448befc64a436859fc16ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:64:75:3b:68:29:89:32:a6:c3:e7:dd:e5:
f6:0c:f3:59:64:dc:c2:2c:3d:04:4f:b6:43:80:11:
45:e7:88:92:78:8e:36:e5:40:3a:55:a9:71:8c:3d:
85:34:51:55:1d:57:db:8b:d9:7e:34:b5:33:b1:ae:
99:16:08:5b:8c:c9:0b:3e:9a:d6:43:0c:01:6e:8b:
29:48:da:39:d3:1c:44:38:cc:2d:5b:f6:be:95:92:
5c:7d:e3:84:a6:84:5b:9f:5a:97:6f:e5:63:35:08:
21:7d:26:94:d2:c3:9d:66:e6:cb:3d:3e:6c:b8:00:
c7:0b:50:6e:8e:5e:c1:27:1f:a0:75:e9:ae:52:4a:
9d:99:6e:6a:09:9d:d8:c3:37:0f:98:0c:33:28:b8:
04:5c:ce:f8:fe:e2:eb:98:e4:3f:3b:fb:fe:04:3c:
aa:fd:37:db:45:5d:8f:15:a5:0f:90:6f:8e:6c:05:
b5:af:16:9e:0b:85:0d:1c:70:ba:a4:f5:e5:c3:56:
0c:1a:c9:22:29:a2:4b:d2:7d:22:e6:f6:7a:0c:35:
39:5f:18:4d:01:6a:6f:49:a8:a7:f7:7f:a2:a1:3e:
ee:12:f0:a6:bc:ab:a2:7b:91:c2:92:bd:7d:92:2b:
bc:6b:e3:88:bc:ec:4c:e2:10:15:c3:a2:5b:d9:d5:
27:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CE:6B:7D:C7:14:EE:94:B2:44:8B:EF:C6:4A:43:68:59:FC:16:CE
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:04:79:f4:23:a4:1e:1f:37:02:2f:03:79:f9:98:c6:97:7c:
99:28:9e:24:d5:66:bf:42:63:e6:1c:6e:f9:ad:b3:32:58:2e:
32:32:b9:4d:1b:43:d9:aa:a9:1d:01:6a:37:ec:e9:0d:43:f2:
20:ad:a6:22:b1:29:c4:0c:d6:0a:22:18:a8:7b:6d:a1:34:8f:
04:12:ed:56:9b:f8:3c:59:30:06:b2:ab:da:78:17:8d:13:17:
59:d9:b9:ff:b9:4b:7f:3c:0b:c0:4f:76:f0:ba:58:62:f4:39:
87:37:34:15:2c:d6:96:5a:e5:2d:8e:87:d1:75:38:42:d5:74:
80:14:d7:2f:b8:0b:0c:07:19:6a:03:d6:5d:70:14:86:88:fc:
54:6a:3d:c0:59:89:2c:a4:09:70:a8:f6:71:0c:0b:be:ca:2b:
18:6b:ed:96:4d:f8:ea:80:51:39:d2:c8:52:80:6b:7e:dc:96:
eb:47:2e:1a:2b:7f:c5:65:99:e8:50:e7:b9:10:d9:97:a6:91:
36:8f:75:38:b9:56:81:e1:a0:e1:a8:30:62:7f:6c:83:58:28:
89:e5:02:69:4d:61:0d:64:8b:e4:f7:44:bd:fc:3d:8c:a3:0c:
77:9e:f9:32:ea:50:41:34:78:a1:96:6f:a2:69:ea:e3:fa:1c:
c4:10:0c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:01:38 2026 by rpki-client