
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json)
Hash identifier: GtUCgigQtlR69XpOjS/9oVbUR+IscTfUHDiUekpi06c=
Subject key identifier: B5:A5:08:D2:1D:40:FA:EB:14:1F:5A:FA:78:4D:6C:8E:E0:01:7D:5F
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 019F95B7257DF4F89522A43BF14E382DE6AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
Manifest number: 1042
Signing time: Fri 24 Jul 2026 20:00:35 +0000
Manifest this update: Fri 24 Jul 2026 20:00:35 +0000
Manifest next update: Sat 25 Jul 2026 20:00:35 +0000
Files and hashes: 1: 0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa (hash: TfGSU8XCSgVMZOD41y1990e2kIyriSC3XmqU7n3kfvE=)
2: 1M4CR97G2KsXmA_zCbIkIXY9AHc.roa (hash: GDf20c7QMRCTOktQNho+ECo62hgqNJJUdQUlkUBsHZE=)
3: 53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa (hash: Rge2VTZzY9AJwofj3q/Q6jFmREW3CoHsGJkonCRjf/E=)
4: 54lg5Z3PwYcVlmy8U--OorXyIRU.roa (hash: p4H+ojtQvC4UXZDuYUx4ZnC8qPB6jzl83dV6d963YfA=)
5: 56x7RPvCFIkavkJq-b6E0Tp0YGM.roa (hash: MJmTuMsh03/hjb1Nv8Xb2bBkZIsz6aS9Hf9MlIMOLjI=)
6: A20W_5_G6C-OdgoqlsDfQ4OCw2M.roa (hash: FALYlcnA+YtKlalF7N3tNk7RIjxbvPOkk+v0cemQh20=)
7: BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa (hash: MVsrvMO39kJoc0mZmN7diOxB9EcjZr9Z1pn5l5VbIw0=)
8: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: IBzzZBQMZLt6JLH/gmzymXFS23KAz1uTqNjNLId+sbs=)
9: FgNKNW5B9puTce7TwiHPk7LKkM8.roa (hash: vwSEzoXOmoqMUtBgzMgDVlO/tkSbCfgKY6cTiF3Xr7o=)
10: I0pwg9CZMHqLfBbOSZRcrUCAXac.roa (hash: ez3uTbsX5XWKgBxDLIribBBe6QXM1/Sf5/DyeWPZIME=)
11: P8CPGWFsawUMl03GCUpKnxbjjlE.roa (hash: GAHel1W64Z9n1z13wYSseROdcgB58qy+711XhLs0e+w=)
12: QJ1xM-I48uzO02IgPeNQyuOaUqA.roa (hash: 6rMIGe2ob2Y14JHRw4XfL4QGb3VCibvSBGXwMtcGqqg=)
13: VHCbgB2ATThahBAQ0_Wyxf0owhM.roa (hash: hCVwSy59RxrE+Tg9Np1iqXmZk/e5opFjdQ7TOzl8JOk=)
14: a1bxge9RaAQ4hUbIUGzCCu-i2F4.roa (hash: a1kP5I90YhkZZI2m2BFKJdlp4Oz3OlMvq6wsOXlcI4c=)
15: aASnsFjaGSv1507L70pG1D3Mylw.roa (hash: oa7lWKQuw6P6CITW8+9RNGq86p0mYNRQt2gm7DcEnkk=)
16: aE7dmxNnMqlbMvLqgzOsP-ooEsM.roa (hash: yRZuNFGwI8VBm9671WQ3wPUuTbQ9RDPs60a0RaW0q3g=)
17: cFgdjeeP9MpYfV_2AUL1U_5M24c.roa (hash: 7BBXQ8Fn1Y9T8QvfmXuLGCX/jZRN0auG1tMDaE9RoLs=)
18: huTbYgpqurqxYkSbrMBeRshoxjw.roa (hash: XOmUVP6KC3R9djF2wr37Vopd4+qc2j38WB+awNW8Kn4=)
19: njGiyS1riv8o5Tx4DTboEJsmuyA.roa (hash: Jvb2eyKp3aYHDbslRvWJdCfA9jI/WLkz3iYOmnC0IPo=)
20: q6AprXpiRcVl5ELQQP4HzyoPU1s.roa (hash: y1TzMFIAWDqXBEbPleIWHolHXjF7gfy6B7SVOuVhNiA=)
21: rJ1qNlWDYbi69BE2ZEKvQVltAts.roa (hash: 9qgzkGC4YfmPbthdBZ7B/utLfGFA/3aVgJMfSvBGTpc=)
22: t5l7KHAEWqvhTIwVkhIeMMidR-M.roa (hash: A1nvslLXHKOUrzLO45L1cBt57BRFdo4XXdQju80rlCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:25:7d:f4:f8:95:22:a4:3b:f1:4e:38:2d:e6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jul 24 20:00:35 2026 GMT
Not After : Jul 25 20:00:35 2026 GMT
Subject: CN=b5a508d21d40faeb141f5afa784d6c8ee0017d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ee:6c:a6:c2:ea:3b:2c:ae:a0:1d:c4:bd:41:
ac:bb:59:f3:c3:8c:ef:b0:5d:68:71:f4:41:80:e6:
cb:37:80:c1:16:35:46:93:87:b1:ec:55:15:3c:85:
9e:46:22:50:f4:94:7b:1a:95:96:e2:64:dd:d3:ef:
a2:5b:0a:d0:46:58:1e:24:10:5e:c0:8c:49:d9:62:
af:68:40:17:ac:8c:a1:d6:09:47:91:fe:27:9b:b0:
3d:1e:cf:78:f1:80:e8:6b:0f:fb:74:65:80:a5:d4:
df:c5:17:49:c9:06:08:19:7a:24:a6:87:ee:f4:9c:
5a:bd:b5:15:91:19:77:40:e8:af:16:bc:58:f8:b3:
26:60:18:d1:31:da:54:2d:4e:35:de:23:3e:72:93:
8a:3f:3b:6f:d2:b7:68:1d:4f:cf:7b:b3:e6:9c:3d:
92:01:11:7f:63:c5:0d:78:0d:3d:ba:21:10:73:b3:
9e:a3:e7:fe:95:18:ad:00:6e:e6:16:d0:28:aa:eb:
80:54:cb:ba:f1:1a:b2:a3:26:15:60:6b:1b:64:32:
7a:5a:ac:37:b1:9f:86:7e:3d:2f:13:91:d5:74:cb:
89:62:fb:96:74:d7:14:c1:9e:c2:17:85:9e:ae:e2:
25:8a:29:c2:b2:0b:4d:3d:ed:20:77:31:e3:5b:4b:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A5:08:D2:1D:40:FA:EB:14:1F:5A:FA:78:4D:6C:8E:E0:01:7D:5F
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:28:21:68:6d:9c:7b:32:ba:05:47:fc:18:b2:a3:b2:11:e1:
6e:3f:ac:0b:88:51:f9:a5:b0:89:94:33:6c:b3:3e:81:57:0f:
44:a6:b1:8a:36:33:c4:9c:3f:4f:54:ff:c9:7c:e9:af:f7:01:
61:f6:21:87:a2:02:95:de:02:a4:02:54:c8:fd:e9:21:fe:f3:
72:09:69:69:b2:44:05:c5:f1:3f:c8:a2:1c:51:2a:21:9e:84:
bf:1c:62:7a:ee:a4:44:e4:db:14:b5:10:5b:0d:11:8e:c9:7f:
ff:e3:73:1f:4f:97:c0:45:45:04:4b:1d:02:d0:98:5d:9e:8a:
e6:94:c7:2c:73:fc:e0:40:35:92:fd:e2:60:10:5c:93:a1:77:
3e:1b:da:ee:51:e6:ee:22:23:a4:4f:d6:ed:63:c0:a8:e3:80:
d9:1b:7f:10:d1:fb:27:54:78:82:9e:f7:c8:9d:9e:46:0b:ff:
6f:b3:0d:19:f2:85:40:d0:eb:af:10:cf:a1:f5:01:e2:97:eb:
1f:ad:ce:c7:34:80:1a:3f:b2:38:52:e1:f7:2c:dc:92:c7:1b:
44:3b:4e:6f:32:80:0a:d5:dd:4d:7c:87:29:24:2e:e2:8f:e1:
46:94:d8:0b:8c:2a:32:ab:10:91:1c:1a:0b:ad:24:b2:8f:57:
1e:c1:65:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:55:17 2026 by rpki-client