
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
File: KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json)
Hash identifier: bgozJoJz0jrVDJvqdcZ0wiwz3yY5VidHlsUUtr/ewNA=
Subject key identifier: 47:74:0A:6A:5C:C9:5C:D5:11:FE:F4:B3:D1:31:B2:9A:BB:0D:4B:73
Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Certificate serial: 019F927F910594D7390F0038F773B8E9B097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
Manifest number: 19E5
Signing time: Fri 24 Jul 2026 05:01:01 +0000
Manifest this update: Fri 24 Jul 2026 05:01:01 +0000
Manifest next update: Sat 25 Jul 2026 05:01:01 +0000
Files and hashes: 1: 8Hj63DuSPA7Ht457MhBvt5rAzCo.roa (hash: /JX6zlbBh/f3Q4c+ifBYnU8yxbIOW6a8gYL/3LC86tc=)
2: 9DusrtcNuEKlX3-m9foPJH2szlI.roa (hash: b8raHEJQGNgJfwuoWcURy2P5Ad5oX4Bo6uvIPpzRudA=)
3: 9tcHbPB03Z8eEKZg676gB-TlqvI.roa (hash: 0EY6tBHpX7uJe3hmSPPM5eq+qwso1DAT1la3CCjjUOs=)
4: EO_HO_nFyWVTdx6SDz8m4wUOlnI.roa (hash: gFB+9g7cOaJTdIFNt34NfO0b7Xz0U9fpgCXRfQJDw48=)
5: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: 74eOALIeXr/pSwY1JA+kfvfFHTWsm2gs77lacKMa9og=)
6: LcfjvM3VKxWMWMCxo2UYzOGhdNM.roa (hash: qwiD82k0GJBEu4EGgOxSBm88SaDWlnEZJMmEJL+CMw8=)
7: LgqwiddErCeqmONalEAccIe_9ZI.roa (hash: vUvF2iqoGKYdCngh26+3XZdI1nh5UcCaB/cJvH2Dedw=)
8: X_WvLqJE85_JLPG8u8QOORQ8vrY.roa (hash: 3lJYcwNuNWaK/TxwzxDQE8C+SHvEtkNNzsxVBp4XmNA=)
9: fNYW0E0mrdFedNKBb3zR-gEkNFA.roa (hash: nh3ZGXFkTGVxlA9H+fmw3V84hDZ1pU+3aDOZwNEcWRI=)
10: mzyrfk0_SKXJ4jm3l-g7rtem-Ng.roa (hash: 64Bq4BjaquUNa/q+gUB1JEszW2wTR9StXwwTroa+sNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:91:05:94:d7:39:0f:00:38:f7:73:b8:e9:b0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Validity
Not Before: Jul 24 05:01:01 2026 GMT
Not After : Jul 25 05:01:01 2026 GMT
Subject: CN=47740a6a5cc95cd511fef4b3d131b29abb0d4b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:94:b2:d6:0e:c2:13:3f:3a:6d:d7:ce:fb:
88:ae:c4:21:b5:9d:b3:c7:a9:c6:31:e2:57:4c:60:
5b:b7:68:ea:b6:cd:91:e1:a7:e1:89:66:b5:fa:a0:
52:71:e5:d4:69:2c:6b:83:76:bc:4c:3e:db:3a:74:
b9:22:68:04:66:b6:09:dc:b9:d3:ff:77:2e:c0:0f:
b3:a6:4c:ae:38:97:6e:e4:6f:47:9d:4c:82:1e:02:
d0:e9:31:47:b6:56:1c:83:39:aa:4b:c4:27:2f:b3:
ca:bd:35:f0:28:4b:d4:75:05:8b:ce:d1:dd:19:4d:
19:07:b2:8c:00:7d:f0:1b:6d:ff:1b:c7:12:26:c1:
90:f2:76:24:38:67:d6:8c:e0:2e:4d:d7:3a:0a:86:
66:46:40:9c:90:5a:29:b4:58:ae:19:6d:6d:64:06:
fc:6c:2a:ff:b9:62:a9:74:94:5f:26:52:cb:4e:b4:
b3:6b:c7:52:2c:0d:ca:06:b5:8f:14:7a:2a:60:c4:
25:99:5f:bb:9d:2f:82:8c:d0:e1:0f:86:a6:a7:21:
af:1e:9e:fa:72:1d:f8:91:f7:31:e8:7f:6e:81:7e:
b6:7a:d6:44:76:8c:84:e3:e6:09:fb:b6:7a:3a:4b:
59:a8:43:a9:75:2f:73:d4:06:c0:82:70:69:fb:3d:
c2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:74:0A:6A:5C:C9:5C:D5:11:FE:F4:B3:D1:31:B2:9A:BB:0D:4B:73
X509v3 Authority Key Identifier:
keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e0:47:30:46:98:c7:b1:f7:fe:3b:80:0e:bb:45:7a:f2:53:
1a:d6:d1:81:9c:24:c1:50:ac:63:b3:73:14:bf:62:45:33:c4:
4b:19:d0:e3:29:ae:58:54:c9:3e:1d:46:8b:d6:98:14:31:f0:
ce:24:e6:e2:6c:3d:4b:e5:b8:e4:02:fd:17:b1:12:62:90:d9:
78:07:eb:9c:dc:0c:27:36:ad:63:c3:fb:03:dc:47:48:be:ec:
20:bc:f0:66:4b:54:0a:9f:63:34:73:9b:c6:8d:11:5b:6c:a9:
32:f2:a1:d1:75:5c:81:97:e9:00:ff:ef:dd:0b:ef:fa:89:9a:
04:98:92:c3:c1:0e:0b:ac:79:d4:e5:af:c8:7f:c7:e2:a1:58:
30:41:77:61:74:04:c4:29:ff:d0:6a:31:97:79:0b:ec:fd:8f:
66:56:77:2f:4c:7d:8f:df:47:8f:0a:b4:9a:ff:86:df:a4:47:
47:7e:33:c6:33:a7:ed:dc:e3:9c:2e:9a:0f:41:e8:4d:41:0f:
8b:d1:6e:2c:f4:d0:27:0e:88:e1:b8:a9:fd:d9:24:73:9b:85:
60:25:c7:ad:ac:20:54:98:b8:ed:04:15:87:50:76:08:e4:d2:
f1:e9:64:64:33:a8:4c:a8:d4:fd:f8:8c:8c:1e:e6:67:57:cd:
10:82:79:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:27:43 2026 by rpki-client