
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
File: BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json)
Hash identifier: 5DynrrmSaWhcL2c8wv38uW//sCnkpuQU1+1iQgCMNhs=
Subject key identifier: C8:44:9C:26:C8:29:D9:AA:14:FA:8D:EC:69:D6:33:5B:B3:39:77:43
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 019F8FECA73A94F378C2D4BF04BC75823A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
Manifest number: 19FF
Signing time: Thu 23 Jul 2026 17:01:18 +0000
Manifest this update: Thu 23 Jul 2026 17:01:18 +0000
Manifest next update: Fri 24 Jul 2026 17:01:18 +0000
Files and hashes: 1: 1mwQP2lzMEvGw5kmGSq2Q8zki4U.roa (hash: qQJpp5KgzZdIPG7oShddMej6G09vuXAjLCnl8RBdk+s=)
2: 1y5-jpL5gzn-dk4MK4wzdHFzp0k.roa (hash: n/+YCBqOHi+s8WDRWfFnh1a6xZcIZPTt7kJsJIwPfig=)
3: 4rApJRlRNhbsTXM3GNtTv_-FUaE.roa (hash: MLIFEUQfYL+dU3SVCCpJ59J8zRwtwP9iXKmocqpNGdw=)
4: 7blUbad0lyHYKT7BdmBvmq5380U.roa (hash: qY+U0bZ6/EBhOS0YQQ7vmCYh9mixFIWmdrvvPqY0Kxw=)
5: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: UGXqBBG1Quflr/TUkTD4QlQpg481MhYnZ6wXl5h1g9Y=)
6: Ea-uq1265Ynaq0Tvr_bSxKKEoRA.roa (hash: VyyRwVBnaY4P+qhOH2Wi0cAjx6Up4dpdwhLbiAQ3CtY=)
7: Ep5McDs5t7WeZmyAgeWWCFiI58c.roa (hash: AOP9n/jwx2AwUV0sR9UZXO55UJCsgwtWlFLKT4Mnfww=)
8: IsNagTQeIBhCK_eEzJwts2JVNCw.roa (hash: 3EGVWuicI7zf/jhSqYDgo9FfBBbPEXmJZo6gLFFiDu0=)
9: Mf4shsIcdDvfGnZMAdD_3JbYLHI.roa (hash: fIqVNZkx0+PBJYyotNhU3sXFOq7EoMjw3ychtStfIfA=)
10: UNHD2yNtNAM1yLwxkb6Yi8PGDfc.roa (hash: VOWK04oeNwI2BvH04UyeeOn1Ap/fxbwci3E3SMPb4pg=)
11: UNcwmzZVzRQr8GbUBkJ92x7O5eE.roa (hash: meiM5bZ9UOA85hqFTKPoirVYKHNyJXm9Ra4fb/AWC3o=)
12: Upw0V-SDT9Y_-WbmQx-I6zkEvMY.roa (hash: 52SxqdmLKtGpI63r4YyY3Mjoft2YtbOnX1aUlWH5kpE=)
13: VOWlrP6uxrDIr-SPRswUzsamv9U.roa (hash: /dzp7Tx7zIjQ7oHAEiDUYqeue5FxJSSNt6hajAHSmwM=)
14: WQCrfzsax6n4r3v1hlQuR83C7do.roa (hash: /xxAd/ECrPZwq/l5JXhCScWy45/GJ5XDOGHFeVobafw=)
15: amFStnp6j-M9lkAATZthidSAqw0.roa (hash: 59Yb1hJ/qsJeQiwwAKrwKY2dgVW1ie3YqDOq9IPX2gA=)
16: c4rU82ROk5JHMuzWaUDAf2UpHuw.roa (hash: vdJbphjmJNk0M/0ecXI7N6QbpMoGR7yuaCxGZ6rARpE=)
17: hJcSMIo_XaCF0Or6myoUtWgtRXI.roa (hash: N1SDE1a07aO/mfcGYBo3p0KglE5WOqK+rZ9H6S+AsVs=)
18: jO7oDF04bPx0TQY6QGPjbRHTuhg.roa (hash: R8g37YojB+MM81yrSyDVisG5M/Y/Qas711OAISKe3eY=)
19: o25brRT35PQQTxAbPaDAC1qCbs0.roa (hash: rJyPNW15ukUlAPAy2zm9lVpgff4++kMCrXKJIi7Zi3s=)
20: r7cKixH3TdWYvxaPAQWsrvQ0hGo.roa (hash: 32j+tbL6tHhdIao29pkYwJtz2jR2ax5EQIkmfU8MT1g=)
21: sYV0gC_bNED6JuRG9OZx6sd2sNM.roa (hash: QkoUdyv92zyYef/ePnPDsDyA2gvOpaAc95PPopYOtrE=)
22: znZ9-PpEUCF0s_0ZbvQNPq1vxXU.roa (hash: iiZjOv+cR17NVqfjRFVC6YAKx+dYOIyRDtOVPnnsLmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:a7:3a:94:f3:78:c2:d4:bf:04:bc:75:82:3a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jul 23 17:01:18 2026 GMT
Not After : Jul 24 17:01:18 2026 GMT
Subject: CN=c8449c26c829d9aa14fa8dec69d6335bb3397743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3f:a5:fc:08:b2:fc:ef:ab:48:48:5e:33:ab:
30:0b:cb:1b:43:52:37:5e:9b:b6:90:c8:8a:2e:f5:
56:0e:f3:67:cb:91:54:31:f7:89:43:eb:7b:0c:31:
68:62:fb:75:19:e0:ae:08:6e:a1:ea:f2:d7:94:7d:
d5:f3:5e:69:44:c4:ad:e1:31:f5:ce:35:6c:a3:2f:
72:58:a8:93:7c:f0:0b:e2:47:71:a1:f0:10:b2:3c:
c5:28:d9:ac:89:49:2f:bc:90:8d:b6:69:e1:b1:9e:
40:05:00:9c:ea:9c:5b:33:2c:be:89:59:05:8f:5b:
05:27:86:48:dd:9f:c0:d1:55:31:f6:93:6c:af:f0:
cf:ce:31:a6:f0:36:55:85:d8:a7:9d:b2:8d:86:42:
d5:43:6b:15:e5:4f:e2:5b:74:5e:64:f9:3b:0d:fa:
4b:a1:25:15:2a:8e:f6:7b:cd:56:88:c6:d2:cc:1d:
1f:e3:6c:95:aa:e4:93:12:93:41:80:65:c9:d7:3f:
9e:37:1b:99:11:80:06:ba:02:1d:7b:e6:01:b1:ab:
3e:cd:1c:44:5a:dd:0b:43:56:20:f0:aa:5a:b9:f7:
5b:f1:90:eb:e1:a0:8c:09:ae:7a:cd:c3:e9:2d:66:
bb:35:02:71:0f:79:2b:d1:d8:39:c0:ec:55:15:4e:
1f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:44:9C:26:C8:29:D9:AA:14:FA:8D:EC:69:D6:33:5B:B3:39:77:43
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e3:6e:66:24:7a:4a:6b:17:18:b5:f4:e9:59:24:0a:f2:0f:
66:cd:3a:3c:c6:17:90:b0:96:42:1b:c8:7b:cb:d2:ae:d7:0d:
0e:2d:fa:75:37:46:d7:87:0b:e2:e4:bc:d0:ef:f4:7f:ea:7d:
0d:f5:e3:46:c0:6f:86:d1:bc:a5:c2:1a:82:74:7f:9f:a5:92:
1b:52:78:e3:66:ac:21:ed:d4:21:7c:dd:70:b5:47:fd:b1:86:
de:16:99:b4:f3:13:b8:bd:71:1d:5c:67:f3:a0:ea:5b:b7:b7:
34:6d:89:75:5a:3d:13:58:3b:b6:ac:2b:b0:29:7e:16:91:e5:
c9:9f:c5:d1:22:37:fb:9d:00:5b:66:81:9a:e0:69:00:a9:0b:
cf:2a:38:31:51:6b:bc:f7:58:33:e9:54:47:48:84:78:48:5c:
9c:f8:d0:91:75:f3:53:29:2b:2f:1d:be:ec:1b:b8:a0:77:cf:
36:0b:fe:0e:39:c9:ac:4e:b5:93:1f:e0:48:e1:d7:bf:ec:b7:
74:3b:db:8b:41:45:91:d3:63:59:41:34:7c:0d:b2:01:74:7d:
4f:10:65:03:f1:98:c9:de:53:b9:8f:9a:ca:f6:ef:87:ba:66:
36:3e:19:d2:de:45:40:73:85:6c:b6:f4:a3:6a:49:89:19:3e:
58:6c:f6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:15 2026 by rpki-client