
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
File: TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft (raw, json)
Hash identifier: 0FWScJBPLQXQHQQKsYSYOHcTlNWBkMPdelkUYoV0uCo=
Subject key identifier: 33:5A:62:09:E4:13:C6:D1:F6:12:7E:E9:8E:DA:AF:B6:00:9B:E8:5E
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 019F8FB5445695EF47A6E532D66287C54DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
Manifest number: 19F0
Signing time: Thu 23 Jul 2026 16:00:49 +0000
Manifest this update: Thu 23 Jul 2026 16:00:49 +0000
Manifest next update: Fri 24 Jul 2026 16:00:49 +0000
Files and hashes: 1: 0lpbV27AN-RWXlo8EoDNHkn_WFo.roa (hash: 6Kk8nKuXT+iDhxODfuxvlj4oC1k4gGbREeQuyIoqN44=)
2: 3a7na1VrOyD4j9eANMYFxWbuuXA.roa (hash: zi3twxBdnTcqBHYcetTlSiGtn2VDXgmL6wD/jF3qYjQ=)
3: 3hJuJj3FhmNTTAdNdHYKFv4Qbhc.roa (hash: AfMPl1I4FCjIX3coVGZnaX03RsdIkobHgk2ozUg0CRU=)
4: KrEjWh12m9Ky0XdHMs-AV4DW__Q.roa (hash: htLgSYFv0aza897YRzqYZzsiSWGM3XLxPit9x6cKCoM=)
5: QFNxEKmMB0w9c_fcbUm6kZIgIiU.roa (hash: yRObraxWQ+KSiz/NMpv1EAHhy6xFZ3g/Tjjo6DSAkhE=)
6: SNq1qsP_v5HGgFCmwxtgF5oBbtM.roa (hash: KVtsT0fMQgVAG+EfM+vPhmS8z1w+vo6LbjbuGgZDfvk=)
7: TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl (hash: pzDgxyLi+JOqUju4qrEiVFhUALfeS2vcP98bCgtUJVo=)
8: UYXgcCIK5zcKT9TlB3oRxLcPw4c.roa (hash: ZKu5onIAs6YBld/h2tSRXhaOsFitxQIlAPhxGco8hos=)
9: UvcJIP9GU_V2Mt4tyf-MC05D4z4.roa (hash: Irba1/9xm6DmXZQD7UmL9JlVgVcOaYu4q1AwZlIIIho=)
10: XfkL7_PpVycbprVLaH4OE4tT8zw.roa (hash: Oii2pbC7CFv3HCPeNrmN9q1EffMqA0bBjcOQLdxIuL0=)
11: _K246O-pbv3LImR_NbGl0Uuk0ms.roa (hash: 4aM+aELc7GT7SUF0gs3npOnDB0xgu8gqvceBuJ4g3W0=)
12: aDqWfD8qVv5mTmy_YKlw0knE910.roa (hash: Nt6HJPyyJEcO8XZlWiN2Qky5erL1hvtr6Hh2B65imCI=)
13: cRwj08O3uwfvrDOHpp6Z7hcZGo0.roa (hash: oSg1p4d3f/Ek/TgEvq1Kl3nuuVmFt2QEXW8+ntmYEbw=)
14: dX-rNWvNzQQp4mkv-p-E7vQ4jvE.roa (hash: tzroMUcOp9V01Z5SuKmv3L+kiGKSKimIDzFfo75M/VM=)
15: e2-M3_roN4thnHrSRcYhd3A5tEE.roa (hash: HtHoJrcFJ7Tr7k+ozWHjO7whHbckIcy4WmHKQ/7ZFj4=)
16: hJ_DSrWaO3ObBm5-hhe295ZUGZU.roa (hash: sBGo0ebfgaJ7zl4GXpc60jYy9/bgceVEOmE1IuNRiO8=)
17: hjOcsPBVdAJXSAwKdiUTWAmGopQ.roa (hash: X6Ep2QeB8bOGHavV+XJT5rALDucLiATYg1DR3vQrIUc=)
18: iI_SDTDKoORMx-kq45a1qjOTuZk.roa (hash: J2K/cush+bx+VMhqbDSKLYwVdG3Sbi2stgQnJe6Lx8g=)
19: kwWZWud0oDxj9bqRYQSnO1fTRms.roa (hash: pxOltO+Vbwb+oDFmvBF+y18EOaW3vQK3U1vDji5y33Q=)
20: m-uMu0uWUHMAd3RnwZiaiy6-u0I.roa (hash: n8StrjuRMyFGihImcOgaJXRS+zodWuJUHk2aQxkkkuU=)
21: niKMcxvkNHwtFE1swRnZRa7V130.roa (hash: 5BhfKtNxHPXceWh2gh+NnT77omNb+6j7lXfyG61q2BY=)
22: o5XpHbYzECM8PxBWg33FKmpPLyo.roa (hash: /s+OXvlcKVVirwj5hJhUGVZIhqNKlLQOjzuXK++kB0A=)
23: ptwWAfUIQhVLhqDQn5RDQ5c7CTA.roa (hash: Nd7kZjPWVNNkDzbbN1dtVJihtNFnEpHnC+VpDFqPs8A=)
24: xvJ1JSPTIpMQJ_Z_PhJXPC59D34.roa (hash: 944aX9Q9tSThrEugzQqJaCWIZrVcCyB9vKNFlU0FXPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:44:56:95:ef:47:a6:e5:32:d6:62:87:c5:4d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jul 23 16:00:49 2026 GMT
Not After : Jul 24 16:00:49 2026 GMT
Subject: CN=335a6209e413c6d1f6127ee98edaafb6009be85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:d7:01:6e:a6:44:97:74:9c:ce:d2:78:aa:
a6:3a:ae:5b:70:b1:23:de:82:57:83:8b:4a:b9:9c:
90:9a:5f:01:a0:3f:67:fd:9e:1d:3e:cb:ae:2f:04:
ee:28:d9:9b:74:e1:69:bb:79:93:25:01:36:f8:ad:
8d:28:22:0a:7c:81:4f:95:ff:40:4c:4e:f2:f8:fa:
fa:d4:c7:68:48:4f:d2:ae:6b:41:b1:1c:83:20:59:
9e:b5:ba:a8:30:63:c3:25:7a:d9:bd:f5:5b:db:e9:
7b:01:e5:87:94:c5:4f:21:cc:7c:d7:a1:44:77:35:
38:49:75:e6:48:e1:3c:54:e4:48:c1:f4:1e:9c:17:
c6:4b:3a:1d:e9:cf:55:2f:c4:07:72:24:f2:e0:47:
6a:30:48:c6:19:d6:83:53:53:4a:a8:3f:1f:f1:9a:
a9:a6:0a:77:c8:43:ce:48:29:a2:c3:e1:12:bf:a9:
0f:ce:36:61:56:a0:89:42:d6:52:e0:64:02:82:bd:
55:e5:30:fa:69:53:ec:6f:67:b5:44:2b:c7:6a:b0:
a8:0c:b4:9c:26:3e:3a:4c:42:c1:d7:74:4c:51:2a:
0b:cf:a5:39:49:c4:b7:10:da:24:3b:e7:56:37:e5:
b6:25:09:31:7e:75:fb:01:8d:5c:75:e2:cf:01:2b:
8b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5A:62:09:E4:13:C6:D1:F6:12:7E:E9:8E:DA:AF:B6:00:9B:E8:5E
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:31:67:e8:c9:04:58:2e:c2:fb:c8:91:88:fe:f8:aa:11:04:
32:43:94:82:c0:47:e8:75:47:89:85:a7:36:9c:f8:df:f0:35:
1e:d6:a8:aa:ec:9d:e9:a9:67:45:2f:d8:04:74:e9:ea:00:8f:
ae:cc:cf:99:e0:61:90:f8:2b:22:05:2e:f4:a4:b4:0e:a5:45:
ae:c8:8b:ef:bd:b7:7a:16:8f:73:02:0a:6c:bf:a7:00:f7:74:
6a:00:f5:7e:a4:30:ff:00:0c:d6:f1:3b:58:85:46:5e:23:08:
e8:14:cb:6d:0a:97:7d:d0:4f:f8:5e:05:f4:a5:ff:fd:25:37:
b0:44:80:a4:2e:fc:a6:06:ba:e9:1f:b4:69:e1:46:94:da:57:
f7:1e:49:4d:50:79:0f:4a:df:93:3a:9c:b9:34:f6:b7:34:e2:
d2:b7:c9:09:cc:e1:57:94:1a:d4:dc:93:48:b0:89:ff:fe:eb:
f0:e9:1a:88:19:fd:c3:a5:ce:38:4d:cb:96:4f:f5:e2:3f:42:
73:2f:1a:0c:76:30:62:f9:63:89:d0:2e:60:91:69:2e:7e:75:
ab:7d:9f:dc:75:3b:79:04:88:7c:d5:33:78:1f:03:85:5b:07:
a5:54:4f:22:1c:41:9a:6e:0e:74:c7:a5:c2:e0:d8:08:77:6d:
e7:64:aa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:16:15 2026 by rpki-client