
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
File: v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json)
Hash identifier: fp3y8538ZehyMi7SAEUo8vr4YM13PLPiYz/YNZN+wNg=
Subject key identifier: F2:0E:30:08:25:65:2E:66:55:05:9A:24:8A:B1:89:10:B0:6B:2F:40
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 019F93247750840FC84F60A3368FBA4F62F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
Manifest number: 19E1
Signing time: Fri 24 Jul 2026 08:01:08 +0000
Manifest this update: Fri 24 Jul 2026 08:01:08 +0000
Manifest next update: Sat 25 Jul 2026 08:01:08 +0000
Files and hashes: 1: 2JAGeWqOz-z8FVKdPCxyLtHJNFA.roa (hash: +TySuOsOtYESlmt3r8OIGn1Nao4rCD0nAMni4cCzhG0=)
2: 37plEvr9_SAxpS24SOyNrKA9Ebo.roa (hash: T+3X8+kwm0mxKJkDFOwSTGKX5y/yChg7gIfBo7o4fzc=)
3: 4v2abVtxmKK1EfY1UKsh5vBwTBQ.roa (hash: Fs7Ab7yQf/ulu1DAd1ofgpYjehocmFGlxjUMdJ2h/+Y=)
4: 6FvTo5bRSodTC6FDiz2fehPBQHE.roa (hash: apDjsNYn3O+BU+7M5QZsfrZaIB7/OL7UKbfG6C5NerE=)
5: 9KcHIAUvzuR2GWge4D-VK2067f8.roa (hash: 9sijw09CpBSxcD1XyR49IxKSXJ+lbUtfOT6XCsfhPs4=)
6: B8mKcjnkQ06bQ0cYOYl4NuSVaMg.roa (hash: BHHwvopeV4L0Tgx1rARSKD5k/JLb/fI5L/vuVF66caI=)
7: BmKkxsvsllYGRv2VQUx8x8IPybM.roa (hash: iJVvCwQgSkbFGgNZWYbEzkgvbnxvQYXvysN7fV/Jo/I=)
8: CTkFnxq5k5gkKBOyHIjTnJxEA10.roa (hash: wNOA1anlJOJNxwL/khfQbYI7GWefAhmxsi5L1GTuKvA=)
9: CybUaoE-1zIBrxVRyCGND427ieM.roa (hash: 8GMC+ouN1TxZrZlKa6hwbH6dJmnjXnGYbHSveCF/7PM=)
10: ELqztzBTOVJ9TbgArZg2cCQeUqs.roa (hash: RpN+biF12RBn9jYvgP/g7LA1mBZiYaf6GKLjllO7nRY=)
11: JO5erv-vSOU_O-xUynzRSVbHmIc.roa (hash: zMiR3ptMJOgOIdKG+IIwNcZj+cGNLnGMV7wyCQljD4s=)
12: JXnrULMb6DsHyM2cbpC7FtDo9UY.roa (hash: iamRHWkLnsJiPb+n+IZVDqFiRKag4o4LNxuZZzmL0jQ=)
13: Jb979-aOtFrxIQewqtQtN3rvkPY.roa (hash: h5kBwpidUiteAllQX66DeU4MAx24NppeXa8u24NM7iI=)
14: SybLZ24hhMiBkVFRqMhgG4Tt_So.roa (hash: jdIOIL7oBwjwXGbHbND2Uo+qRIMM4Rdpr2383Sxr5BI=)
15: TEEJpugeYt1F43E2tJGuUV3FeZA.roa (hash: DLdME2cAIv/rSNCUPiFiPYf01huYXXEj3+nEaRucgYU=)
16: Tg7LpYV7I-GpxinThcktcQRnm_4.roa (hash: BbXoN3AQWQv407qJGvIy6QX/6IL8zec6zQB0QjsD6HA=)
17: ZPlBlPD-W-maIRDabAoyZWrxupE.roa (hash: MQ/ql1GxKXsn5YKKa+q3cWZtrV1Ms5Llr3f8Hh6BGNE=)
18: c9_fZRRZyW0XDy9Nuj5gaWSKFjw.roa (hash: 1Hs4IJDmnuMEMdz/1IBBL0atJ2FMVY2hg6chmbt42Mo=)
19: lUbooQJTqUPsGNWs9whSoRmQ9io.roa (hash: kluWa3I7Ato5aw2LG6KL/4iV6N2sUDy3GUsBbZKsEa8=)
20: mhK9zCgXdFlII0XrtCsgCaL9xjI.roa (hash: hSBJb7L+mvFAKQjClhKXrHgKgsxf+0/Ah1GNpCqTJNQ=)
21: sMNPbaJ2swpQDptjsmEdLRBAjsE.roa (hash: wMrNQ1Dt9RdtalTcVqalUbl+Cb5VgC4Yw+MpJfT4roY=)
22: sWFQ2639y5fQaDmU5ThRk6YSWFs.roa (hash: YXKPoBXjKE1eqIFJiy/DtB2fJyWSkDcytdS8/Lx36Lc=)
23: ul8RfOvZQFi7b7h3CYZZMyB1Thc.roa (hash: ftj7d2qkg7awZuZD1JzEyU8qjVc4i/LwIGNmp8+f9gY=)
24: v1XAMryHcbVYBLXiFz1wOW3tUKk.roa (hash: JN1atA5xt1OyKxkpHh4rNxtPiXKSK2GbqwVySmKSgl0=)
25: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: Aa1tbQWERj6gr6t7OUYDI2I8455JGicvNA7DL0HbwA4=)
26: x0heqVIS4ldbm4VvDuHpvjwdG18.roa (hash: Q0/M1s9b+ez//kkSZOV821TfmbgQGcZ8JApzRiFz1/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:77:50:84:0f:c8:4f:60:a3:36:8f:ba:4f:62:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jul 24 08:01:08 2026 GMT
Not After : Jul 25 08:01:08 2026 GMT
Subject: CN=f20e300825652e6655059a248ab18910b06b2f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:40:bd:71:9f:19:70:b9:a2:b8:c7:bf:f9:
0b:bf:93:c4:76:a8:8a:52:05:80:d7:05:22:d5:a2:
a7:9b:dc:06:98:8c:72:fc:67:70:f7:3d:e4:2f:bc:
f8:eb:08:2c:50:4c:76:32:52:9c:a0:cd:7a:58:c7:
1d:75:f2:f0:94:e6:2f:d7:07:18:0b:b7:2c:2c:d0:
d0:4a:46:72:f2:12:60:f9:11:92:de:7f:ee:a2:1a:
e4:1e:7e:4b:a8:71:d8:cf:22:5e:b0:32:b3:ea:94:
58:72:bc:f5:1e:43:d4:79:15:9a:ce:f6:e9:b9:0e:
65:83:cc:92:6e:91:e3:88:32:7c:10:61:f3:1d:46:
3b:48:d5:cc:bc:18:1c:82:5d:2c:27:b8:93:0e:fa:
c8:2c:45:d8:9c:56:f4:50:98:a3:76:ba:11:80:e9:
1f:ed:fe:b9:fc:12:ca:88:fd:83:d4:e4:7a:5d:ce:
96:1b:7d:61:9f:21:40:4d:a1:77:43:fb:7c:e7:3f:
d3:c7:4a:50:b2:7e:da:88:94:ec:06:4f:77:42:74:
56:d8:74:37:b9:bc:86:83:15:6c:8d:2e:2e:b7:8f:
3d:60:a5:da:14:3c:24:f0:f2:7c:ee:58:b3:0a:64:
9a:dc:6d:4b:3c:31:b0:43:b2:c5:1d:fe:5c:ec:33:
45:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0E:30:08:25:65:2E:66:55:05:9A:24:8A:B1:89:10:B0:6B:2F:40
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ea:44:c7:25:57:d5:45:a0:fd:b5:df:c1:0e:dc:11:1d:be:
d5:ad:b9:ca:b9:37:df:dd:90:ed:fb:e4:0f:d8:30:46:43:a4:
0a:a8:7f:8f:d5:26:03:ce:7e:a9:86:f5:b9:6a:17:53:94:73:
77:c8:d6:a5:c1:55:86:5c:af:64:5d:73:b1:bb:f1:81:f0:c4:
53:b7:86:f1:3d:89:3a:57:e9:40:fd:8e:b2:22:ed:2e:94:2a:
96:c5:50:f3:d4:45:6c:49:f4:6d:8d:ce:f8:09:99:cb:44:25:
97:00:24:ec:f7:b0:9a:2c:f9:4a:11:75:af:b3:0a:c4:4f:b9:
1f:2e:00:d3:a7:55:7b:bd:71:13:74:79:ae:55:06:c5:a4:52:
0d:2e:72:a7:72:af:73:e3:40:2f:9d:f0:9d:2d:98:ab:99:ea:
6e:d7:1e:ac:51:3a:2b:87:bf:1d:ff:3c:f4:8b:51:1d:ca:fa:
9b:81:ea:a1:00:45:15:be:c5:92:60:68:22:38:3b:a5:5c:ba:
7a:ba:49:d0:34:b6:dd:89:7d:9d:24:d8:c1:82:e6:02:96:bc:
70:15:28:a4:04:5c:f9:d7:48:11:05:54:3c:2e:ca:8a:04:8a:
1b:2b:6f:25:96:03:fe:45:1b:ab:40:48:7c:ea:50:7b:14:26:
8c:c1:c7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:18:42 2026 by rpki-client