
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
File: x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json)
Hash identifier: bz+vauk6XyinRwiUwgVonuVekLFwfph2hkDn6iqAeFg=
Subject key identifier: 40:E2:93:F5:08:87:7B:1B:49:BF:05:FA:74:92:10:2E:F5:86:CA:B0
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 019F8EA276A9517DBCF673B174DE47DD8491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
Manifest number: 1500
Signing time: Thu 23 Jul 2026 11:00:39 +0000
Manifest this update: Thu 23 Jul 2026 11:00:39 +0000
Manifest next update: Fri 24 Jul 2026 11:00:39 +0000
Files and hashes: 1: 0-d96R17ltUSy8fr0RUugwI-BVw.roa (hash: T+9pJSDxipOo4VQ90dksmKw5tDBPPo/BiqzTM/apWGc=)
2: 6MXPr8n2FVwdA-Vt6oqBdRGu_Mg.roa (hash: NZX54zdIf0Wm5ZnYmNdMli+Cz2MVmUZnuyAev1D/9/E=)
3: 94VCH5-yUsBwicojbjgImHgRoJA.roa (hash: JkHlAtKE0WPUSQeAnVh91wdkspZbKJDK7LSBm6EyhHc=)
4: BFdJc-7yBxarSw_UwCSCI2_nZzY.roa (hash: Mfwh/Ri4oMFWHDOwaf0KLrBxq/7lyDjZHbminSO7kww=)
5: FlKDqhsB-kDJgOhLmCv4DNUnsd8.roa (hash: JZ21wYzfPfkSwGCQh1OtjrZna2xAaeFagGp1aClwZy0=)
6: GQwQ4NJBvyg0S5cirOINdsK2QUo.roa (hash: hPCA2eD/WAsZM79tgjhqtOTZx90myfRAeK+dN2Vg5Wo=)
7: GWOMCgc6frfuXzWmR3iYp-MVmSA.roa (hash: Anj9LGw2xp0TmbMPDVVyvGqohtYkFBACqEE6N9Y1dWM=)
8: Itg1prYwWRPhF5zNIUnOGVNFGeM.roa (hash: nAsp415Ngb0XOA9HboUId94jZhl5oTnXqu3QjJfj8KU=)
9: KwEEYIOx6dCBO8O6EXuJrP2SxEA.roa (hash: FJXGRBaEUrnNNyE8GBPLymN44URpQA1gYBmnWCwP478=)
10: MtY73m5Dy7Z-8IkMEEvtPhwun6o.asa (hash: YVP7j6bXOWilQyVf5GWPEBF5i8ugo1QMSomNFKB/BjY=)
11: Opa484uAlsVB9CtOuyZoIiqmIy8.roa (hash: 6u4ASe0ldiNjEJ3vKFZgisfLG676P+RimGMZcC3Ur7M=)
12: Tx9FMpngkKKRbOgn_YsDb4v7X18.roa (hash: BOevx6RbQLerHQQRMHC1Yu0hT6Exer/t3dYk9fLXFik=)
13: XpQW9Vko4NnnhhqSe6YnUmv4WzE.roa (hash: 1hl0BmRk0nZLkQjPQnXw86SjORpjVK0UnQhzFB2uADI=)
14: YjIsM4Uno7ILYs53JtLji9bmdRM.roa (hash: T20Rm6nai402HDN+LFukerdCiUhxMnqEcLW4G63DHyI=)
15: _QfreQ9EqD9ss46rDX_UENkjJZk.roa (hash: zfUdwflwTagWZ9n75pKYGfQVwgMmnMON42g7fWb4fZ4=)
16: bjtqDJXlOz7pCpEjOBsxaBiuwec.roa (hash: NF7IuS5ng6fRX6mAKKyUm5b/IR1xDvuUmKt4bVjV978=)
17: c585sEb31KrksO5MlyuNt-hfuHU.roa (hash: fJ78hp+mIYgaOdDbv0g//N4rP8oKIJRANU6rLFZmpT4=)
18: e0CW_4oZRrryGAZlyRnhpcoXNPo.roa (hash: 7QHbtai0zkaLG8Cn4EhJepZwZsFysU2qR4KGXEevHnE=)
19: kd2-Thgfb2MvE6yw6VsCA8zzSfQ.roa (hash: yP3N4xFcOT8W3j9k2ZJ+fBiTsgbDKcU1wngastwJJcc=)
20: qOxZbeQcH3nmMujSCPVKvHl_hII.asa (hash: ASwjCTML65AJz8INpKtIJ9HsxUbvMPMUPCfyNp/UqwE=)
21: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: EujoUHYrBJ6ghH896KN47hyO20Azi+S6GEXL/jtlOl4=)
22: xIYF8mI26v6vzxb3X_nxcD6q9Q8.roa (hash: f2x35r/ZRXZy2klzCvK8jZiQ1j2C+y+64vR3ljojbc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:76:a9:51:7d:bc:f6:73:b1:74:de:47:dd:84:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jul 23 11:00:39 2026 GMT
Not After : Jul 24 11:00:39 2026 GMT
Subject: CN=40e293f508877b1b49bf05fa7492102ef586cab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:35:e1:6d:9d:02:8a:cd:9b:36:12:66:6b:49:
7c:f3:61:bf:d0:8f:7a:c9:4e:14:f7:a3:00:53:29:
ac:a6:4d:56:7c:ec:9a:5f:09:9f:ce:83:f1:0f:7a:
91:24:c7:82:ff:ac:e1:88:18:07:0c:3b:9a:ac:bd:
5b:e0:d6:2b:f5:bd:39:3d:d7:19:84:88:42:7a:f0:
d5:e3:fd:9e:be:47:b7:2e:c6:eb:be:f5:3e:9a:9e:
60:b7:23:63:93:cd:88:2b:4e:52:2e:01:f4:c5:62:
3c:f8:16:63:5f:8d:08:a3:57:15:46:d0:16:39:8f:
ce:ee:ef:59:8e:8e:fe:a0:c2:90:d6:a5:29:ed:f2:
4b:01:68:ff:ac:ee:d6:e9:ae:62:31:db:25:12:0e:
74:38:24:33:a7:fb:82:91:08:99:14:73:5b:08:78:
3c:54:a7:65:bc:c2:f3:ca:ef:29:d7:ef:cc:8b:60:
1e:2b:8b:29:f8:77:87:42:c9:81:a0:f0:1a:c6:c3:
86:52:39:78:40:63:19:14:c6:09:1c:79:36:a7:48:
f2:ac:30:c1:da:5a:12:d4:fe:50:43:9e:51:d4:5c:
59:b3:fb:6f:3a:3a:ac:bc:a4:b6:c8:b2:89:5f:03:
e4:47:2a:3f:33:95:8d:c3:1d:e5:9d:9a:38:1c:cb:
09:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E2:93:F5:08:87:7B:1B:49:BF:05:FA:74:92:10:2E:F5:86:CA:B0
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3f:61:c1:81:55:dd:20:99:1a:82:b8:76:c3:0d:5c:19:92:
e5:9b:09:14:da:b2:5e:e0:04:e1:a5:6b:62:90:76:31:58:f8:
36:3e:4e:99:12:49:8b:fc:33:d0:a5:17:78:b1:5e:6f:50:82:
0e:0e:4b:45:4b:17:1d:b7:b3:e2:11:31:e4:ba:b9:93:58:40:
dd:c1:64:e9:32:63:ee:47:86:e3:dc:4a:67:8c:9c:8d:1a:7c:
a2:15:aa:f9:ea:fc:44:b6:11:1c:dc:ec:3c:6b:01:34:eb:97:
b2:55:b2:45:a0:b9:03:61:38:5a:61:e5:42:92:01:89:5b:e8:
c8:75:b0:31:3f:df:0f:f5:09:0b:8d:bb:35:bd:37:a2:92:bc:
4a:f2:21:1a:7f:b3:e8:6d:1e:e2:90:8e:4d:9d:13:26:fa:72:
9d:c2:7f:1d:7d:0d:fb:5d:f1:f6:2d:30:8a:bd:64:0a:6b:77:
fc:34:76:76:ee:7d:c0:ab:fc:39:8e:bb:89:66:f5:10:19:97:
78:a9:48:23:4e:92:df:9b:35:2b:60:35:54:8b:10:63:66:18:
c0:ee:1a:39:3c:d1:5b:7a:a7:d6:80:fd:c5:39:66:8e:0c:ae:
fd:cc:44:8f:f9:96:f4:49:1d:8c:c8:ee:c2:44:c9:9c:ef:4a:
1a:41:54:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:25 2026 by rpki-client