
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
File: 76W2I0ehtkzqSaKrOrSYPDSGH7I.mft (raw, json)
Hash identifier: aff1BWPOSByTPHerf7tIFk1tKUwklNfR8Q+JXDNyX2w=
Subject key identifier: 69:52:29:B6:64:BB:B6:B1:72:BA:B9:3E:4D:F8:0B:25:DC:F7:AF:6E
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 019F9248E9A794EE29CFC088BF8A4E50F209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
Manifest number: 040A
Signing time: Fri 24 Jul 2026 04:01:19 +0000
Manifest this update: Fri 24 Jul 2026 04:01:19 +0000
Manifest next update: Sat 25 Jul 2026 04:01:19 +0000
Files and hashes: 1: 30rSP67H4gX5RMgOxT5dBfg20_g.roa (hash: pLbD0z+swzOFRKhR78b058ocPOqvyBgBR9Tg94u9QPE=)
2: 68EZrauB0qv4UqFcrYI1HWiTafA.roa (hash: bosTecBYxP1S8RTUkYY+Q2j0KSr6GAn+ipiGx0hncVw=)
3: 76W2I0ehtkzqSaKrOrSYPDSGH7I.crl (hash: JWWiep3jx+3JzsCQkFRJsolAQud6YqW2jZouEFxEXoI=)
4: C3ruCzQFpObijbg6nKyWeHWjy4U.roa (hash: Y2PICPggtqJuBNrLg9GLriE7TFiGRSa8ctzypTp0k5Q=)
5: FoL3qyEY48cw05gLQhNBtfACHmc.roa (hash: yngu0V2+UyneI185UKcvs0YYxoSzgQOcyO77l7Bzxy4=)
6: V9bz-LIlrLlNcy_JnZK_x-nhl2s.roa (hash: EweRvUyQqzzdZsQlbOmurMzzeItcgxBnOe1Rf0PMP7c=)
7: WOK1iT_PCPPQV6sHVEx5Px_Y9fE.roa (hash: 94hNqjQI8cFTU6a6Kw0AEcP1Xdns+Wtf+3N07hYhGa0=)
8: fzWlLGEPBxz1DR-_ybKSosveito.roa (hash: PMju7hqmYk5olTtNec80dTLKx9r70k1T9axrJxxCFmQ=)
9: iuSpcrmsV4f1Ysb1cVg-3onOaZA.roa (hash: c9q3XFMjCEy0sE0Ce3zydIbkqouf4LIzsM2RvAlYwio=)
10: mGbAQxmjiNdAu-Zs5G32dsHWBXE.roa (hash: JMUztoBnvYlG5WEaZWtEODvt69OyGAw7D5VrIEI87vM=)
11: sDq5U53kui-SouGQwvgx88wuoqc.roa (hash: cLZsm7xp+yinJ4qALYPDYjVVs4ZwSgrcr5htqd8PthY=)
12: xkBXp7rwmSNtGrPWn7O7LK3eIPc.roa (hash: ruZb0fyLFNIK8oCJZQCr0uOvP96aIH6PYR41YcREAHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:e9:a7:94:ee:29:cf:c0:88:bf:8a:4e:50:f2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Jul 24 04:01:19 2026 GMT
Not After : Jul 25 04:01:19 2026 GMT
Subject: CN=695229b664bbb6b172bab93e4df80b25dcf7af6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4c:b5:dd:c2:8e:20:df:20:bc:f8:d4:3f:6d:
65:74:34:db:cf:8a:2b:88:8a:f5:8e:a3:2a:0e:9d:
dc:67:27:ab:50:4f:30:32:49:5b:55:ac:f7:81:f6:
25:16:af:72:49:83:06:8b:22:9e:bf:fa:47:8f:21:
ac:e5:d6:a1:07:d7:51:1e:af:9f:67:3f:b3:81:99:
39:e4:37:04:c3:95:c8:7b:43:af:99:42:ba:e8:b2:
74:4c:be:55:7b:88:76:47:73:c8:be:c4:48:5f:38:
3b:56:d0:5a:f7:13:5f:1d:c6:67:af:95:97:12:db:
1d:dd:a2:0e:0b:a4:cb:c2:ec:f6:21:9f:58:e4:23:
7a:17:73:44:27:d9:91:2b:ab:6d:40:25:0d:5b:61:
8a:73:27:5f:51:38:dc:0b:27:0a:b7:00:89:23:8e:
ce:f1:34:47:46:da:7f:71:d0:d6:5e:4b:f0:fe:b5:
2b:8c:ef:62:3d:f1:4a:9d:b5:9a:1f:c3:71:28:a8:
f4:c6:78:01:89:6a:6a:e6:eb:b3:5c:ac:22:2f:54:
55:7d:d0:a3:40:14:f2:b1:d7:e9:97:76:04:9d:74:
da:c8:5e:04:0c:ce:ef:f8:af:c6:50:34:a0:a5:17:
d4:b4:21:ff:29:89:77:63:79:f2:c2:5f:6f:62:db:
0b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:52:29:B6:64:BB:B6:B1:72:BA:B9:3E:4D:F8:0B:25:DC:F7:AF:6E
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e4:6a:bd:75:bb:81:82:2b:73:66:60:bd:d7:12:cc:a8:77:
12:c6:24:78:da:95:3c:4b:ee:68:24:94:5c:15:35:ef:41:32:
b7:a1:4c:47:80:13:4a:15:1e:13:3b:48:6f:a0:5d:82:5e:97:
df:d2:e5:69:8c:dc:f3:17:43:4f:71:dd:94:06:6c:68:c9:93:
29:e7:d1:c5:5d:8a:8e:aa:fa:79:dc:39:42:e4:81:f3:2b:99:
60:c6:7d:f6:2e:56:39:9b:ce:36:f8:ad:a4:ff:4c:fb:07:23:
eb:45:83:02:39:ae:90:d8:c3:c3:d4:00:a3:40:40:66:08:1b:
7e:da:68:cb:48:a3:ef:69:02:75:ee:3e:0d:80:44:65:67:91:
3a:61:30:8f:78:17:6e:88:e2:d8:b7:2e:95:e7:ad:27:b7:22:
09:48:bc:02:b8:60:ff:e6:1c:9b:29:d3:19:ae:f5:65:d3:d7:
21:67:06:5f:37:a3:cf:10:ea:e2:41:a1:9b:67:81:a7:ea:2c:
04:1e:76:50:be:2a:38:1a:e4:f6:dc:17:3e:1a:8e:86:44:8b:
dc:ec:73:7c:ac:e0:5b:2b:74:29:d0:d9:32:82:7e:5f:b5:17:
45:b9:ec:8e:0b:e2:44:42:a0:2e:41:c4:7c:69:74:d5:df:9a:
42:be:00:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:48 2026 by rpki-client