
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File: Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier: JeMJaqCBVTqACsPes4ZWGirF+IpME0u6c4Dau3tc630=
Subject key identifier: B2:6B:EF:27:F5:26:39:AB:8B:3B:EE:C5:39:EF:86:E9:85:2D:47:16
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 019F92ED30AE1E3C3A67DFCAA4A9A7EF81C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number: 19F3
Signing time: Fri 24 Jul 2026 07:00:45 +0000
Manifest this update: Fri 24 Jul 2026 07:00:45 +0000
Manifest next update: Sat 25 Jul 2026 07:00:45 +0000
Files and hashes: 1: 1Yk3wLsSFqIceQz9okyZeYwSmUU.roa (hash: XuNQlAxXibSKzFFM3alxNEJs9SFC+R0bjfD85sz3lps=)
2: 2rNvx3N9jKo76idv1HsGHAcnnwk.roa (hash: eczcKAWkF5L/9LrtvswF4lmskTN97duPXq74deE4ZjY=)
3: 89TNYzq_U7xA7Y9BxvWtQuf55Qw.roa (hash: gJOB7b6DwbK+XopIODXerFY7Dl/1i2NMhMaK+LjT9Lk=)
4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: AeteiWW4gK1kHoL7DQmSpwi1c+2DP2DCrMEdcu080EI=)
5: I50Xdmc2vD7Yx16IjkscqSWGByc.roa (hash: RDUO+YNn3phd3/QIVNJIvwDgBTmufyoyrH3ITgLGClY=)
6: XGgIS2kdMhFLyP-i-D0W3B8JW7A.roa (hash: eJBUNPOd5UiGzU5DENLhYsoGYS/OErO6pyZfCeZ9+DI=)
7: Z-AEi0EtQTiXIQZyMMd-Bg1cjpI.roa (hash: yIwR/WFk+tPJZkyXjHRduYJCHgmO7w46d3yBhaQ1ujQ=)
8: _AlvkImBx9fT_58A-ot68g3ZAWg.roa (hash: msAI/PDOB8nUEhgzHGsqD3SG29keFYFQtvJbuYgfbh4=)
9: kTXJB6aBHgwhRXUGSGWP3zEgdOI.roa (hash: 4LVFe/ghy7IgD0Awfkn3rJQNGmSBoiii8ZMrwc7Y7FU=)
10: wEsor2MQvIFzGGLmwfUZgbYVkto.roa (hash: asdhK4hFtXHqOa5kFwrF3vv+JxQieRNKL69DY1/povE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:30:ae:1e:3c:3a:67:df:ca:a4:a9:a7:ef:81:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Jul 24 07:00:45 2026 GMT
Not After : Jul 25 07:00:45 2026 GMT
Subject: CN=b26bef27f52639ab8b3beec539ef86e9852d4716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2f:35:b9:75:07:f3:df:88:25:4f:9a:18:cb:
c2:f6:6a:9f:85:59:34:ab:a9:77:b1:32:39:e8:51:
76:3e:21:48:e5:d6:9b:a0:f9:6b:9c:4f:19:27:28:
dd:c2:68:87:37:f8:12:7b:e5:6e:f2:1e:63:b9:2c:
bf:fa:83:b0:77:35:16:6c:28:08:14:8a:25:c5:42:
df:39:08:d9:80:52:c9:99:0b:08:c2:a4:fc:e0:91:
cb:1f:7b:db:37:8b:92:68:6d:9b:93:bd:fc:2d:f5:
29:25:fd:65:e9:62:63:ed:f8:ec:5a:53:9b:0e:89:
d8:5b:07:b6:4b:64:1d:56:4c:ab:c7:cd:72:5a:ed:
77:a3:fe:48:41:00:be:88:0e:cb:19:9b:c3:9b:97:
c0:e7:63:b1:7c:8c:77:bf:7b:ff:a7:77:08:0f:a9:
75:34:8e:e8:2b:7a:8e:3e:f7:c0:47:31:47:81:65:
8c:33:63:4e:0a:03:00:8a:56:88:47:d8:f3:e4:a5:
18:86:aa:fd:1c:54:6f:bf:dc:3c:10:af:80:75:84:
db:54:cb:8f:aa:15:10:34:2b:e4:9e:97:e0:03:58:
e0:e6:86:06:c1:bf:e0:c0:81:72:d1:08:d4:09:ca:
f1:27:56:26:1b:15:6a:b3:f3:ab:b8:eb:d3:28:7e:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6B:EF:27:F5:26:39:AB:8B:3B:EE:C5:39:EF:86:E9:85:2D:47:16
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:83:04:d8:f2:d6:2b:ee:46:6d:d8:30:e5:79:63:d8:ec:1d:
0e:61:5d:07:58:17:58:94:7e:55:98:ca:dc:66:51:e6:a4:a9:
9e:1a:3b:ef:fc:7a:3c:22:47:5b:1e:fa:9a:16:d0:8d:7c:39:
b6:4e:d5:4d:d7:70:14:43:cc:65:e7:ae:2f:2c:e4:55:80:2f:
a2:1a:33:3e:c9:67:5a:e8:ce:4d:9c:51:67:42:1d:12:f7:7c:
67:83:95:58:35:48:cc:5c:16:f4:b8:62:6e:76:16:85:1b:e5:
4d:57:33:cf:42:ed:50:4c:fb:d6:e1:93:15:48:d7:ea:d9:6b:
a7:ef:97:f4:9b:0f:9d:5f:6d:e7:4e:16:dc:d2:00:ca:08:e0:
9a:2f:91:c1:c3:8d:40:10:5a:4e:41:8e:c0:72:19:48:7c:a2:
a7:01:fb:68:6c:12:fd:dd:f7:16:d6:78:7c:6d:ee:84:02:ac:
e9:70:40:22:bf:21:77:68:7a:4d:1b:a0:73:38:4a:6a:c0:12:
48:a3:94:ac:ec:7b:a4:b9:a4:fd:f5:e3:2c:fe:82:70:76:fc:
bb:47:19:75:1c:d5:b9:5f:b0:75:44:bf:45:35:98:bb:f3:83:
57:64:02:89:31:58:f0:ef:34:09:c1:40:ba:f8:d8:3b:17:6c:
47:42:4c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:44:32 2026 by rpki-client