
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
File: tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json)
Hash identifier: ZH9wbSdH7uXpWA6Ukwmmidc/DeZ9RHUBonbz5qBMqJo=
Subject key identifier: 75:37:64:20:13:E8:02:7B:C6:01:18:02:3F:C2:03:CC:68:89:30:1B
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 019F91DB3ABC019D9246262CEC841DBBDE8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
Manifest number: 19D3
Signing time: Fri 24 Jul 2026 02:01:31 +0000
Manifest this update: Fri 24 Jul 2026 02:01:31 +0000
Manifest next update: Sat 25 Jul 2026 02:01:31 +0000
Files and hashes: 1: 7gdlonHkctidA_Jgo0e1sPluTfw.roa (hash: L7iWiH+YVCR3BgQWnot+ADKst5Rvum0Fp/JtCnJ65RY=)
2: DQ1yVesejJpDnZvd2JLWH_7gAEU.roa (hash: iuHd9st9MGEOE3UuhPG4vRJ6eBtZs6iPypxGkfqTQSM=)
3: MCv_Njd7Kt1jfUDJcMfP2Ew9zGA.roa (hash: 8slM4ZyNMUTgbPryNd+oyqvRv0X2KMYBpAbZ2g9V2+s=)
4: Pxzwfsnla9WCGgA_5yVN5NBVL14.roa (hash: dRusvivPw89AhWLw883YVx7O+/W5uw+jCzc5VJhBOks=)
5: dnlzr7T-KrzC8dTpRdaUUBCb42k.roa (hash: FlF41xrTHYEZQDWnwHhEl5bQr7qiicPhhj7kefuMDlI=)
6: h3NO-bNRnKL0h-LwaiCjswg7_nY.roa (hash: nge/dAbyC8BEKmPsWUQCbHBH18ANQj9ceVjvT5f7JS4=)
7: l8XwbbJw24-quxZEn6DNPzCPtQ8.roa (hash: X6CZp/lJQVG23+jPNOS99TJV1YAbrmzFBiz/CMHczr0=)
8: le7g6AeqMWo8tC4Pm6_9GuPpA9Y.roa (hash: M3GaptBPUtevgfpamZx3KC2EjkI+htg/GGtdiA7/WxU=)
9: o2KmTBSx7YAGDylX3itL6SdPUZE.roa (hash: lugrh1NUXlse4UYLEWT+hm10hbsF+hFuCCQ7+JOgu7c=)
10: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: BHrx9vlMW8fvQiA4akS7sh5w91OiI3QzLYwP3xpD64g=)
11: v9V5UdS7W7gv8Mt6_7V1IzHZAiM.roa (hash: oqxmALkOA6EG36s93nwvrqkYRgI5R7v2/8FaBvM3TLU=)
12: zMhciCUgU6J6shiNhaiwocMfw14.roa (hash: c8SQXIzHCbyAhdC6MEvd2MwYwyUckczcTmVUE35TvUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:3a:bc:01:9d:92:46:26:2c:ec:84:1d:bb:de:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Jul 24 02:01:31 2026 GMT
Not After : Jul 25 02:01:31 2026 GMT
Subject: CN=7537642013e8027bc60118023fc203cc6889301b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:85:91:9b:e8:14:8a:6f:92:ab:76:fa:2c:
19:70:e4:dc:6e:10:41:8e:f1:3b:08:40:49:11:26:
df:f8:9a:71:ed:d9:7c:0d:bc:63:c0:f0:df:a0:c0:
3b:20:1a:be:8f:98:a8:ab:05:7d:fc:ff:36:0a:52:
45:49:67:08:93:df:25:81:04:b9:81:1d:68:03:80:
d4:e5:ac:26:1b:a5:41:01:4c:46:b1:36:5d:37:84:
81:94:f3:b4:61:dd:19:a0:10:89:43:a9:28:fa:35:
57:06:1b:3d:a1:24:73:6e:60:7f:4f:d8:ad:6c:2c:
cf:7f:76:0a:c6:84:30:49:3c:59:98:04:5a:5a:cb:
4c:f1:20:8f:b6:f7:cf:d6:c3:b9:03:58:f3:62:d3:
e4:df:75:32:5e:92:77:06:d1:3c:f4:29:a3:08:57:
62:d6:20:d5:39:e7:66:b3:dd:e4:4b:22:ce:92:66:
d5:8a:14:20:e9:5e:01:ad:b4:6f:a3:24:4b:89:79:
34:30:29:16:57:78:4a:18:cc:ae:69:a7:4c:03:24:
4e:10:f5:11:d6:a9:f5:10:74:3f:0e:1a:03:dd:2b:
23:27:1e:7e:39:33:4f:02:06:72:f8:a1:6b:a8:f2:
ae:2b:e9:9e:94:67:ab:f4:ce:6d:99:86:37:0e:7a:
4b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:37:64:20:13:E8:02:7B:C6:01:18:02:3F:C2:03:CC:68:89:30:1B
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:29:1c:af:23:fe:79:78:e6:78:3e:07:ae:0c:9f:91:0e:f6:
21:8e:45:57:4f:da:6e:00:b6:55:ab:2c:38:32:d6:00:2d:0a:
e2:94:a0:9e:44:e6:0b:92:2c:4f:0f:ec:e7:5d:9d:8d:3f:78:
20:61:25:25:1a:94:08:f5:46:f0:25:cc:8b:eb:2b:7f:f4:a7:
7f:1b:5a:22:01:c2:b8:be:21:74:1d:2a:89:55:5c:f5:ad:e5:
9d:8f:16:d8:5b:3a:2f:b7:19:26:d7:bb:61:7b:b5:b1:1c:b9:
7e:0e:5e:0a:21:90:93:7b:95:96:00:24:9d:5c:f6:11:b9:4c:
df:42:a6:11:0a:12:0d:07:e7:7c:76:b0:c4:b0:bc:1b:3e:b8:
7a:94:1f:ea:0e:9e:cf:dd:a9:67:a5:fb:0c:06:24:4e:2e:65:
54:19:e1:2b:96:de:0d:b7:25:e1:fa:05:fd:7a:51:64:f0:8b:
73:f7:a6:6b:e0:cf:7e:66:97:4e:c0:71:8d:f5:dd:57:a3:20:
70:18:79:0f:3e:88:99:02:37:77:7d:f0:79:a4:d9:21:f4:9e:
98:12:ad:18:b0:36:6c:8a:4e:83:3e:9f:cc:14:09:41:c4:01:
a7:e3:70:27:bf:e2:61:cf:8a:8f:ab:b9:10:db:37:c7:79:3e:
88:3a:23:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2zq8AZ2SRiYs7IQdu96OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj
YTQzYzUwHhcNMjYwNzI0MDIwMTMxWhcNMjYwNzI1MDIwMTMxWjAzMTEwLwYDVQQD
Eyg3NTM3NjQyMDEzZTgwMjdiYzYwMTE4MDIzZmMyMDNjYzY4ODkzMDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+mFkZvoFIpvkqt2+iwZcOTcbhBB
jvE7CEBJESbf+Jpx7dl8DbxjwPDfoMA7IBq+j5ioqwV9/P82ClJFSWcIk98lgQS5
gR1oA4DU5awmG6VBAUxGsTZdN4SBlPO0Yd0ZoBCJQ6ko+jVXBhs9oSRzbmB/T9it
bCzPf3YKxoQwSTxZmARaWstM8SCPtvfP1sO5A1jzYtPk33UyXpJ3BtE89CmjCFdi
1iDVOedms93kSyLOkmbVihQg6V4BrbRvoyRLiXk0MCkWV3hKGMyuaadMAyROEPUR
1qn1EHQ/DhoD3SsjJx5+OTNPAgZy+KFrqPKuK+melGer9M5tmYY3DnpL9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHU3ZCAT6AJ7xgEYAj/CA8xoiTAbMB8GA1UdIwQY
MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt
YWNmYzNkMmMyNTIyLzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy
LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVykcryP+
eXjmeD4HrgyfkQ72IY5FV0/abgC2VassODLWAC0K4pSgnkTmC5IsTw/s512djT94
IGElJRqUCPVG8CXMi+srf/SnfxtaIgHCuL4hdB0qiVVc9a3lnY8W2Fs6L7cZJte7
YXu1sRy5fg5eCiGQk3uVlgAknVz2EblM30KmEQoSDQfnfHawxLC8Gz64epQf6g6e
z92pZ6X7DAYkTi5lVBnhK5beDbcl4foF/XpRZPCLc/ema+DPfmaXTsBxjfXdV6Mg
cBh5Dz6ImQI3d33weaTZIfSemBKtGLA2bIpOgz6fzBQJQcQBp+NwJ7/iYc+Kj6u5
ENs3x3k+iDojjw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:51:32 2026 by rpki-client