
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json)
Hash identifier: FtYET7igGdgXRav6Ypa0jdskr8Fjt3rN9T4vOfX1J7c=
Subject key identifier: 78:23:37:0C:C3:8F:29:76:9F:FB:FA:8A:42:FB:85:B3:D1:BE:15:25
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Certificate serial: 019F8F7E2122C8C9AFACAC85DEDE6646EFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
Manifest number: 1884
Signing time: Thu 23 Jul 2026 15:00:35 +0000
Manifest this update: Thu 23 Jul 2026 15:00:35 +0000
Manifest next update: Fri 24 Jul 2026 15:00:35 +0000
Files and hashes: 1: 1-YByaiMeGaD1s6w4s77GCgHnrXY.roa (hash: S1szHNMiYggU2bXWCJ0y5Z9O0Xe6ogWq7kcI9RRHPZA=)
2: CPZG4XxfF0vIUqKLlml-DnAhI78.roa (hash: yghX+xOCfCSz2UxV0M4ErScOYQQ+0s+V03bXtP9h8Jg=)
3: ItbVNmV7D7Xz58HIXd8OUA10ZIk.roa (hash: 60qPs4eG3CJz9Jr0RllpZz1JwhEoHqZ3z8/Wkwni7OI=)
4: J0cgNdbp82xwSAhTcid--cSnvw8.roa (hash: NnNH2xB6swJJVG31LQ5vR+z5/IV/mvlmseViZQ49RZ0=)
5: N1eNUoekf98MkfeCq0d0_JdTGoc.roa (hash: nz2HilLDytUZJAVqDqHSq82uJ9Gp52F9hu+UGahbmAM=)
6: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: eX9aCfTv44af7I6yhwXfKJONrb1yhMqLhyJIBnhdJxs=)
7: YIodQuf58n6NPD3S4ZwYWU4G05Q.roa (hash: hAnlQcSr3iSrVyOVrTtnTihoMBTYOjvFhdRAdMoSe+c=)
8: fg2QbP6_NHroFLcB4VqlEsdsL78.asa (hash: c+f7ud2GD/XnZWo7d+BVUUMg4a2Tuu0iakas2CyyTF0=)
9: htEsk8is-3HwvISfO35xc7PdVM0.roa (hash: uHKztBgJ/wsTm8pbbSDKTc7meGtHJJGVbbj9VG266W0=)
10: j3hTOTMf81Nkcr0TsIH3WU1Dvd4.roa (hash: QfmXcXNN1Wd563NtKkGqTEqV9zXIuZBoL2/KRKrrmGo=)
11: r1wL1w6v-FmiJM6wTPegvCqzZVs.roa (hash: PHGHhjoRjtnu5vlNwMrqr/W1vzuZLgPWKcRcTuuiLy4=)
12: rbHMZH-yOzDb95f5uZ_DwfVDX-g.roa (hash: hyrGoGmheB3UHC4U69Q9VZBQns7Aig366oUvSyshDX8=)
13: uBecXrloW4prw2ylSn0_Ivng2VY.roa (hash: yFhPh9rE6yKyFP6xCMVODHQKX7tLrcXL5wGXXwvK1tU=)
14: vvun3eikZcpW6UjAhYfVCVsm-AI.roa (hash: U39ycL4LLB92O8NzJ38ORyHzqu/08gaa/sDm7/jkQGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:21:22:c8:c9:af:ac:ac:85:de:de:66:46:ef:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Validity
Not Before: Jul 23 15:00:35 2026 GMT
Not After : Jul 24 15:00:35 2026 GMT
Subject: CN=7823370cc38f29769ffbfa8a42fb85b3d1be1525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:db:d5:59:6b:c0:94:c4:aa:0e:29:10:f4:40:
96:45:75:57:ac:1b:1a:c7:a6:c3:38:b4:0b:ec:47:
74:c9:f5:36:dd:d7:ec:90:78:06:8d:33:0d:05:8f:
86:3a:8d:b2:13:ba:c0:8e:cd:be:bb:06:8f:5c:07:
8c:06:5b:61:8b:2b:82:90:5c:b7:5e:44:8f:e9:95:
e1:70:74:6a:4a:eb:8f:88:45:7b:a8:76:5d:43:30:
3a:c8:28:a6:c4:33:1b:14:fb:fc:7a:3b:24:03:53:
de:4a:0e:b7:cb:83:4f:35:d0:1b:b7:59:df:db:48:
98:13:57:ac:6b:f8:18:78:ab:5b:b4:f4:25:5b:eb:
c4:02:29:90:fc:9a:b8:a1:52:a8:2d:05:d1:61:20:
90:d8:06:11:16:b1:ee:07:5f:17:d5:34:2b:c9:ec:
be:e5:e2:61:b3:1e:ef:03:9c:68:f0:de:07:4e:4f:
db:af:3e:2e:a5:0d:f6:69:68:23:9c:c6:1e:ab:cb:
41:de:2a:50:1e:06:67:56:45:b4:e1:1b:be:d6:50:
aa:f8:30:56:b0:09:fa:3f:54:ff:72:6c:a9:34:54:
57:b1:1c:32:7d:dd:81:2e:3b:36:83:46:26:a6:04:
00:09:02:2b:86:a8:44:c8:61:00:e5:12:8b:64:cf:
38:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:23:37:0C:C3:8F:29:76:9F:FB:FA:8A:42:FB:85:B3:D1:BE:15:25
X509v3 Authority Key Identifier:
keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6e:7d:2d:08:1e:e1:8e:09:1a:42:38:cb:cc:fb:18:c4:ca:
b8:4a:d1:5d:ba:ce:01:49:e4:2f:76:b2:01:b6:cc:78:8a:1d:
21:56:74:d3:6f:03:99:8d:77:6b:fb:36:50:fc:90:05:64:64:
9a:58:3d:81:10:dd:da:6e:79:26:85:f0:4f:4e:39:da:11:01:
ab:f5:10:3c:76:f4:80:c8:bf:dd:8e:9f:45:a3:ef:62:a5:3a:
fe:b2:aa:66:b4:1e:14:6b:9f:52:0a:f7:31:27:38:77:2d:85:
98:8d:93:8e:63:fb:64:b4:2d:e7:d0:dc:11:d0:78:85:a0:21:
8d:51:c3:c4:f9:35:fe:d0:1a:b4:ae:30:bf:7f:d4:7c:33:2e:
a0:39:e0:8d:f9:bc:84:28:7c:cf:94:65:0a:53:1e:9e:e9:2c:
f3:2f:a8:1e:8a:91:91:a5:2f:81:25:34:8a:f5:7c:60:80:c4:
9f:5a:cb:14:35:f4:ed:7d:85:81:83:59:af:4e:19:ed:8f:6b:
e1:a9:ed:b4:68:45:30:05:74:57:51:eb:05:7e:69:de:62:56:
91:86:81:5a:38:be:63:1b:38:ef:34:45:57:06:31:4f:fc:1b:
39:a7:4d:1c:a8:5f:91:89:64:32:5f:a8:a5:27:57:ba:25:52:
7c:62:b2:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfiEiyMmvrKyF3t5mRu/nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4
YWJmZDIwHhcNMjYwNzIzMTUwMDM1WhcNMjYwNzI0MTUwMDM1WjAzMTEwLwYDVQQD
Eyg3ODIzMzcwY2MzOGYyOTc2OWZmYmZhOGE0MmZiODViM2QxYmUxNTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8NvVWWvAlMSqDikQ9ECWRXVXrBsa
x6bDOLQL7Ed0yfU23dfskHgGjTMNBY+GOo2yE7rAjs2+uwaPXAeMBlthiyuCkFy3
XkSP6ZXhcHRqSuuPiEV7qHZdQzA6yCimxDMbFPv8ejskA1PeSg63y4NPNdAbt1nf
20iYE1esa/gYeKtbtPQlW+vEAimQ/Jq4oVKoLQXRYSCQ2AYRFrHuB18X1TQryey+
5eJhsx7vA5xo8N4HTk/brz4upQ32aWgjnMYeq8tB3ipQHgZnVkW04Ru+1lCq+DBW
sAn6P1T/cmypNFRXsRwyfd2BLjs2g0YmpgQACQIrhqhEyGEA5RKLZM84xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgjNwzDjyl2n/v6ikL7hbPRvhUlMB8GA1UdIwQY
MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt
NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm
LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZm59LQge
4Y4JGkI4y8z7GMTKuErRXbrOAUnkL3ayAbbMeIodIVZ0028DmY13a/s2UPyQBWRk
mlg9gRDd2m55JoXwT0452hEBq/UQPHb0gMi/3Y6fRaPvYqU6/rKqZrQeFGufUgr3
MSc4dy2FmI2TjmP7ZLQt59DcEdB4haAhjVHDxPk1/tAatK4wv3/UfDMuoDngjfm8
hCh8z5RlClMenuks8y+oHoqRkaUvgSU0ivV8YIDEn1rLFDX07X2FgYNZr04Z7Y9r
4anttGhFMAV0V1HrBX5p3mJWkYaBWji+Yxs47zRFVwYxT/wbOadNHKhfkYlkMl+o
pSdXuiVSfGKyVQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:47 2026 by rpki-client