
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
File: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft (raw, json)
Hash identifier: D7hHr+AlB6MYcOPgrJ5CxZIQjAax07BRuOp8/Jq2skU=
Subject key identifier: A3:96:F3:FE:10:9C:E4:21:D1:00:3B:16:FF:AC:FE:F3:00:A5:A2:6E
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 019F9023014F57481EBA962301CD5FA59B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
Manifest number: 1A1B
Signing time: Thu 23 Jul 2026 18:00:40 +0000
Manifest this update: Thu 23 Jul 2026 18:00:40 +0000
Manifest next update: Fri 24 Jul 2026 18:00:40 +0000
Files and hashes: 1: 01kfrBCLXsb_MBRY0V39-NQ7rgQ.roa (hash: 0enDaZKwuYkATDRkwnd98W7Je5T9WDnrNDfkylmrhd0=)
2: 0GwtoUzvyeaOyVgiz5_5u_fQDK4.roa (hash: ZzkFfie4rwQqLWELgA2gskNhetqEHZ8eQDpZfZACQJA=)
3: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl (hash: Q4tCvgButb+i/BPF53INGFnQt7DsDXtqlj7Ed7QgWt0=)
4: 0NM6OSy1-2utk4vYfW3N3lcm6CU.roa (hash: T9zHPa+wiHk/vH1viiblf2/lNsxeACCEIu0h4BWNOn0=)
5: 0Uc3BxU_hXHpSu7kErsjHH6v97E.roa (hash: WMKCnIPbNmoxZ3upeXUrLDZyCXrsFGG09LEi5Qnl5mI=)
6: 1-bpC3R-TJzAZkx7Z3Jw1SoB5KZ8.roa (hash: 6tyEc5tMWuMh2FkN969E+Sctsk4S0t8ffe4PDGzRuAg=)
7: 1-n82VSkOxrSKgV1PsGvwKKSfCdI.roa (hash: ZZsyj+78mzK435bwg8IeS0gsZEU0AFtCxgKahg6foPg=)
8: 2R4qazNLSt_RDhIqgNJX537nd3M.roa (hash: IvWoPDvDk15n6pb3UgrI/eE54rqQ+OqHA7wWhj9Kyy4=)
9: 590q1PW4Pl-XJ81yZ8CuJqt81Uc.roa (hash: 7DGNNt8rFOglcPCft+Gv2AJm5OdQ/eIhAH83DqaPEIc=)
10: 6T7wlM6C0qqBOLawcH0bO7G9DLM.roa (hash: 9NAPSc05b+DVo+TnqKYmM4gkM8VaqxeSULCyj7IwNqU=)
11: 8f1gsQJvei2ndGgGzbE2q61rqaY.roa (hash: iWFMGHls8EyIEkAg6Qm+dl/+p7FExBuCdoG6ggjSBpA=)
12: CkvM4RqQ-786VcbBaoIZjU3ZJQA.roa (hash: sI3YWga44CFHLW4l4QO3EywjCuMYYSObR+oVP14vFnU=)
13: DsTtMGQ0L8mM4brEnLkUKrq-UwU.roa (hash: oE4VTfHSNDRDGHt9TR7fUWF8m+BPcMZmJzIcx4TX/hs=)
14: Eq5ioVwY0Z8MJRoQEKvMar-suRA.roa (hash: x5+YRcpOPcZJN6v4+CqB6CF57wC48AN2GfCAXoRkaME=)
15: GFbvwxHreaHsN26iR53CTvGiaIU.roa (hash: ri3kwHvnHm4Ma2XOPIzNZmz4mCbBdBwPzLuqnyqYSKQ=)
16: IuoZZZv4Idh6XvorGPkALwXDxNM.roa (hash: Z7JliQ8dYeU2aaNB/QnhDItmzn8DL76OTO3c/loOzyg=)
17: JXZCrFRVlexsnr-6gFTDn3l3dME.roa (hash: WueDk2BO0sN5/26XG9ceGnKt//QvHV1jfqgq6yH3Uhg=)
18: Lz6lHqe-0qNjuvGLNOv9PGwX-NU.roa (hash: p7LdI92cIDtfHUvUoIs/QxfMZyom0tUqYoPCeudg8NE=)
19: OfQeP38YLp0H-vHTzOU-QIF2dU0.roa (hash: +bXd+URu/u2uHwGSmr3/gE7IFl9z0b4rIn3DtAlbhwU=)
20: P1I6iwGTt85fYfYAUkquFM4T7-I.roa (hash: EReexW3SdLOsBVVQTNn3ybvI9YT+LPx36BNRZrBsBWA=)
21: PIEMIRczLIOfdUkkwdVSw8e9KPM.roa (hash: NPUtmhTPQAwtBBDWToashg8KhDzj3KM74Q0F8kyz/dg=)
22: QplKZEAadiuuJTpAFqdo8OUK6YU.roa (hash: XF7HLXwpectK8gVVho5HepLfu5XeAN9oMvpqGWsxGj8=)
23: T50C-DbO69bkRbIaWhwMYd2FZgI.roa (hash: ApEBmHxOi4b9nbcBs1a7m2y81kSTfHQtMQXnRNaqMbQ=)
24: UKjE1pTZntp5XJ0LkIvSm1AM4Ho.roa (hash: H1SamunUnJmGWMd+mnC6zCfE97JuUVFIkS729mOu4kA=)
25: WL3yj9F5EC-LYoSwjsy29igBJEc.roa (hash: 0LJi+OF7BjH+1HVPut0hQmzHVdemfjE/ARNgLqPZKxI=)
26: _93efxQgrZmoM7LY7A8dASmPXFM.roa (hash: iJkW4dVpgkk39bS1bRdj8dysS+u4EOLDejwkKagLJFc=)
27: aDdgy9okFT-VH-8Xe0iyw5Cf9U8.roa (hash: faf5JgpqOgasBUcFYGvX0bWfnDSi8YRdOLG2fQ4cWJs=)
28: bynx7CE-y5l0VuSf3AjcyS1DaLg.roa (hash: fcdqRQLhX2egD25I7LkNu0Qa2H5UuDKqtnM0W8Ih6KY=)
29: c3UQkLaK622oNueWHIwY2pf0u50.roa (hash: 68H5EYdpUem6VsrZDqSO1jCXZzTxv1in5+mPEJKKQkQ=)
30: cHwQrhBna2lxomTJDkhtmpkhfTU.roa (hash: 0pTkk47OKi+H2lTtbFgx7fEy5JTDq1MlYtJ8OXb0yNM=)
31: f741Q7g4kseNO1ry24nPUdQstbs.roa (hash: /ArewhrEGu9bVv2osl1xlS+ZuEvT8uAPiOtXxX8FF0k=)
32: g7yZx1fNYRztkH6Egf1MCdRKIp0.roa (hash: LeThgOMJvz5v6ZJTEM4z4doFArcbIegSXRy9an5TMEY=)
33: irocnpPXgA_Fth-m3en9JGahONo.roa (hash: BxmKvUydui/NHX3OGtlV7yFHY1hNbUVdGtKWN7hbOqk=)
34: kE1c2FoqPbFYpuP_3uDyDMNpi3A.roa (hash: ZLVUzims+TzWoAmZUdu5UaeXmFUGOW5FgDZQ1MpAcHo=)
35: lpJ_XjHkoBndBFAe0tPQdczaOcU.roa (hash: iJVprFgnDog5VHtz2hfcJxpWi7GFVg7T/irCMENFCFc=)
36: m1_hE1G8c1LjncKYSzWbUrqzXN8.roa (hash: y1uuERcSJn4xDVrfrVjdDqOO/t3/J4I0wu+VFqAHi6A=)
37: ssFgEvQaOxn1bVNWbgkIqqVCO7w.roa (hash: hwJ1nu3zOiqOogdc9jXDw2wMUcpERaX1zFgf/BAycx4=)
38: t74Gnb-SZFQRRgZRdSh0r6dTX3w.roa (hash: WSh8AcjKhf5L3RHoE5ZlhGpTH3/BR/yZVCcKaKkQ4b0=)
39: vaws-jaW3PuTPx0z2nsRGCr0OGQ.roa (hash: Zv1crVWU2SJCgoulPO5QlvRO9ESYG9SyXRdgkNWxWmM=)
40: whhn-De9wleqXUdRu_Y8guU1R8Y.roa (hash: n5PZSCHH1qAT6JBOY3cNOeI5/o1W1yLRGUGX3GupvP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:01:4f:57:48:1e:ba:96:23:01:cd:5f:a5:9b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jul 23 18:00:40 2026 GMT
Not After : Jul 24 18:00:40 2026 GMT
Subject: CN=a396f3fe109ce421d1003b16ffacfef300a5a26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:74:fa:41:a5:a5:b2:e9:4d:b6:ab:80:02:29:
63:16:58:ee:8d:f2:aa:c5:e1:dc:8e:be:3b:c2:be:
b0:89:2f:a1:41:52:8c:8a:fe:f4:26:16:10:10:40:
02:28:4e:59:8d:3c:a7:23:f0:9f:7a:91:d2:0a:44:
3c:68:58:81:5c:a6:a7:ba:37:50:cb:2c:2e:b3:08:
e5:f8:1d:36:be:85:4d:3a:0c:5d:aa:e6:dc:8a:72:
52:04:d6:32:a0:5d:10:64:84:c3:f9:95:ab:8d:c3:
26:f7:0f:7c:20:04:f9:d4:9d:b9:0e:42:6c:55:13:
e6:26:94:9a:f0:2e:e2:65:76:27:96:e2:c1:09:13:
1c:99:95:f6:3a:a3:46:93:3f:97:85:35:d2:2d:c5:
c6:94:5f:97:34:12:1c:30:86:67:40:86:33:a3:8b:
7c:81:2f:b7:4e:60:cf:e6:8e:98:2f:d5:13:b4:93:
63:68:bb:b3:33:8f:8f:d5:8b:9a:6d:95:12:7c:93:
68:35:ac:79:c1:e7:f5:a5:3f:4a:0e:60:d7:5b:d7:
13:04:fe:c3:5a:1c:9c:3c:b5:58:36:72:5e:ad:ac:
f5:45:62:2c:ed:20:ae:fc:8b:f4:ba:ec:e9:d5:84:
32:a8:d1:a5:4f:ac:10:9c:7f:b4:2b:3b:ee:11:08:
09:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:96:F3:FE:10:9C:E4:21:D1:00:3B:16:FF:AC:FE:F3:00:A5:A2:6E
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2f:e2:31:75:32:77:d3:15:da:9d:5e:ff:77:8b:1e:a8:f9:
e6:bd:cc:91:98:c9:ae:95:aa:c7:e4:5e:cc:79:2a:54:67:86:
b7:08:69:de:bd:d0:24:51:99:c2:62:1d:6b:e5:33:37:e4:a2:
72:96:2a:2b:d5:42:cc:88:50:54:59:44:ef:31:ed:2d:f2:c9:
61:30:61:50:98:61:71:30:a6:ab:d7:db:d6:18:5d:07:f5:db:
68:5a:7d:18:1e:c7:9d:75:2c:c1:73:3d:7d:3a:4a:3e:66:8b:
46:41:95:1d:46:f8:3c:b8:b2:dd:ba:62:e9:48:79:b0:0d:20:
c3:94:7e:fa:8c:d5:5f:c2:2c:93:23:78:8b:e1:8a:71:cd:02:
4d:2c:e9:20:92:8c:b6:da:ed:cd:5a:13:cd:1b:5a:4b:4c:b1:
4a:be:cb:1d:9a:ea:9b:cf:7a:cf:1d:18:54:46:70:20:4f:30:
3c:f5:33:35:36:79:1c:2c:b0:0b:ea:35:91:75:92:d1:6b:95:
da:9b:56:bb:1f:ff:5a:08:b0:ea:d4:51:02:2c:08:0c:98:cb:
fd:6e:55:75:d4:10:ab:50:27:5c:ae:2c:f8:60:8f:a9:dc:18:
f5:b3:9e:b0:06:d6:21:bf:a5:ea:1c:6d:42:8c:28:3f:f2:a3:
d3:af:15:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIwFPV0geupYjAc1fpZt4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjYwNzIzMTgwMDQwWhcNMjYwNzI0MTgwMDQwWjAzMTEwLwYDVQQD
EyhhMzk2ZjNmZTEwOWNlNDIxZDEwMDNiMTZmZmFjZmVmMzAwYTVhMjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinT6QaWlsulNtquAAiljFljujfKq
xeHcjr47wr6wiS+hQVKMiv70JhYQEEACKE5ZjTynI/CfepHSCkQ8aFiBXKanujdQ
yywuswjl+B02voVNOgxdqubcinJSBNYyoF0QZITD+ZWrjcMm9w98IAT51J25DkJs
VRPmJpSa8C7iZXYnluLBCRMcmZX2OqNGkz+XhTXSLcXGlF+XNBIcMIZnQIYzo4t8
gS+3TmDP5o6YL9UTtJNjaLuzM4+P1YuabZUSfJNoNax5wef1pT9KDmDXW9cTBP7D
WhycPLVYNnJeraz1RWIs7SCu/Iv0uuzp1YQyqNGlT6wQnH+0KzvuEQgJswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOW8/4QnOQh0QA7Fv+s/vMApaJuMB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiC/iMXUy
d9MV2p1e/3eLHqj55r3MkZjJrpWqx+RezHkqVGeGtwhp3r3QJFGZwmIda+UzN+Si
cpYqK9VCzIhQVFlE7zHtLfLJYTBhUJhhcTCmq9fb1hhdB/XbaFp9GB7HnXUswXM9
fTpKPmaLRkGVHUb4PLiy3bpi6Uh5sA0gw5R++ozVX8IskyN4i+GKcc0CTSzpIJKM
ttrtzVoTzRtaS0yxSr7LHZrqm896zx0YVEZwIE8wPPUzNTZ5HCywC+o1kXWS0WuV
2ptWux//Wgiw6tRRAiwIDJjL/W5VddQQq1AnXK4s+GCPqdwY9bOesAbWIb+l6hxt
QowoP/Kj068Vhw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:15 2026 by rpki-client