
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
File: 00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft (raw, json)
Hash identifier: WqEx6JazXnfACu+zw4M/LlCVXlkIk0qpYUsCCaiIxQs=
Subject key identifier: D4:15:09:B4:9E:E5:FC:05:51:C9:66:56:D6:C7:12:71:9E:C9:1A:30
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 019F91DA6FC6057E616BF6CAE6AB9146239C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
Manifest number: 45
Signing time: Fri 24 Jul 2026 02:00:39 +0000
Manifest this update: Fri 24 Jul 2026 02:00:39 +0000
Manifest next update: Sat 25 Jul 2026 02:00:39 +0000
Files and hashes: 1: 00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl (hash: W9eRICXX1RUYGJwZYM32YotCsIgA3wmHXFetjIIuaQ4=)
2: 8SSXBbJAmh2M2VamgGPNaaqs-GY.roa (hash: SNkG8Uti9KHLJ03Y/sW0/JYA5jvGANqmsDmL+13iGPs=)
3: 8bHzMmkjwt_yLAGYCvMNqkW2FzA.roa (hash: 8QaTUHJyXu6B1zsCrAVs6lorOrcroP37WqlcGmictGo=)
4: DPpak8RgDkxLfzni-EWhrE5FCNE.roa (hash: jo10qFPskJDWOQaAr+nqpNhpAqLODkfkRNWEJwo+MnE=)
5: KjzF_07LNXsxnLlTwbx1qy0Nf70.roa (hash: ZSx0htaVrCbITx9CYSvyBpcrxLFJ5FXPjTi+sdFipU8=)
6: OjUriyX22SftvbuImRgRsgq800I.roa (hash: FZUR12pl5mPO1tU55PwRpuebEaECFWzXN6MydVjjchA=)
7: UOXA4oU0cYn3rZAwOMaEWtcF4QY.roa (hash: DU4w5RjcNeNPeF61/164VHqPXEXFyBssEnx5YQVlwVs=)
8: UUDuiwdwXBJkRQyOZXL8jNnUvh4.roa (hash: 2E9XBsXGcCTsZ+IIciA4F+MOAPni9HkOnxgq1kncY7k=)
9: Yt82kfMh4tTFldct4S8Y42V4ySQ.roa (hash: jjNY9yqyt1O9yRK9Zvv5unUVKQa7w6A3b2RNVpEK9H8=)
10: klZdZ8xiyHGKEf_gfoS4Gl7S3V0.roa (hash: PnFskfREpmwodvBbY9tSgM475PNufEhEVsxknIOHmG8=)
11: qsvSYt_EBTj0D4qt2QoEMH74YEw.roa (hash: xOazcLY9pAeAKwSCYmBAkPRN6rzWqpKY798GdNgA6FA=)
12: sUn-f-qK9eXwNyOmR3mfe7EM8No.roa (hash: MGpupH/5gZWb0QJDQlscqVzzSmxpIo72s/B8/Jhn89g=)
13: x_QvBoOIA6vBeIKgjoFBOXwgqa0.roa (hash: YumGg/rjGkeZiLzIodCSXvp8gqP2A52SQH7tSRPZWGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:6f:c6:05:7e:61:6b:f6:ca:e6:ab:91:46:23:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Jul 24 02:00:39 2026 GMT
Not After : Jul 25 02:00:39 2026 GMT
Subject: CN=d41509b49ee5fc0551c96656d6c712719ec91a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:6b:5e:44:83:ff:76:aa:8e:ca:4e:27:c6:
c7:ac:53:85:9f:dc:31:fc:0c:96:aa:76:fa:ea:3f:
12:50:01:c8:96:fc:c5:2f:89:29:3a:f0:16:73:ff:
5a:a3:84:09:11:53:e0:37:68:48:6f:d4:e3:bb:3c:
1f:56:e8:c4:9a:94:30:49:3b:ed:4b:f6:41:c3:8e:
28:ba:d5:c5:f4:27:65:86:e6:4e:45:7a:6e:d3:f8:
1e:0c:62:97:08:83:0a:eb:87:2c:29:bb:a3:fb:f5:
29:fc:37:84:07:bb:93:fd:fd:f9:7e:12:e6:73:4f:
1a:58:4b:67:ab:c0:77:78:13:51:45:d3:04:0f:17:
ca:53:69:38:b6:15:a7:12:75:b1:14:a4:fe:32:57:
b2:f0:ab:b0:f0:0c:45:5a:f3:0c:1f:e1:b9:96:56:
30:3e:0a:bd:1c:44:78:b0:d6:59:6e:1e:d0:46:aa:
56:5e:13:62:0f:1d:5e:3f:a6:5b:b3:f4:a3:9e:e7:
ca:94:d4:fa:b2:9f:3c:cb:14:aa:85:58:fb:39:92:
c2:57:47:51:c0:06:a3:5c:df:ba:36:3c:57:6d:95:
47:7d:97:6c:fc:40:aa:bc:1d:08:3f:6f:55:83:b9:
89:4c:95:b3:1e:60:5e:bf:0b:80:8c:3c:6d:68:4f:
7e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:15:09:B4:9E:E5:FC:05:51:C9:66:56:D6:C7:12:71:9E:C9:1A:30
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f6:65:6a:63:af:ba:50:3a:8d:e3:7b:5a:d4:61:9d:b8:c6:
e8:86:d7:4c:cc:57:0a:6c:b8:26:e4:1f:b0:31:13:f6:16:af:
7d:23:b1:c0:3c:5e:26:82:5e:19:7e:7a:13:42:d3:61:c5:5d:
9b:39:b7:fb:91:e9:79:c3:59:44:db:86:e5:c7:0e:4d:92:85:
3d:b8:77:ef:fc:8f:f3:c4:79:b7:77:70:eb:73:bf:5e:36:90:
9e:66:79:82:2f:f3:b6:10:11:fb:a0:9d:a5:de:de:6f:81:fb:
74:5a:07:82:dc:a8:ca:61:a2:de:f0:6e:30:7b:a2:9f:89:6a:
3d:0c:c3:82:b9:58:fa:56:b7:db:8a:ce:b0:99:53:51:12:98:
2c:3c:e2:7b:be:40:04:15:7e:72:6f:c1:b1:2b:d8:cd:4b:d9:
33:c5:4a:8c:c2:d3:4b:d8:dc:e1:bb:55:f6:87:19:ef:5f:dd:
14:41:30:1e:0b:a4:56:89:e0:7b:d4:96:b5:37:31:e0:c5:66:
25:b8:a1:07:77:3b:84:6f:51:b5:b9:02:0e:07:c7:c0:d6:87:
da:18:98:50:ed:82:0b:62:fb:bf:6a:c8:c2:f5:e6:5e:84:18:
49:0d:0f:3d:9c:e0:94:83:fc:5b:11:b7:31:4a:8c:d7:39:b9:
d3:f4:be:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:09 2026 by rpki-client