
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
File: P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json)
Hash identifier: rsr8KUXwyJCy7hLkxOX9kK7ScyPwQWzuGXcivDsriOU=
Subject key identifier: A8:B7:13:D8:4B:56:10:42:BE:60:F1:08:82:F7:FF:B5:1C:C4:FC:71
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F90FEB845C5EB5AE233120C73CC7FBE1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
Manifest number: 1A7A
Signing time: Thu 23 Jul 2026 22:00:40 +0000
Manifest this update: Thu 23 Jul 2026 22:00:40 +0000
Manifest next update: Fri 24 Jul 2026 22:00:40 +0000
Files and hashes: 1: 051Xmiqt0qlbgt2iWQsJfHNeeg4.roa (hash: zcizvOs4E2k8KfnlE+4ukm6Gc3KbGCxqDrC8ZSQYAPk=)
2: 1-tLa3uQlKqYPUDXiozjHhnGEtoU.roa (hash: JVBp0Qb89/mhP12xiMfYCu073UdqTnLDo0xQ4I+RS08=)
3: 1-wtzjvrNbSXFtl-Du4Vp8ANI0qI.roa (hash: HWSxT5ef2VgW9p6awE9gvEUJX5QnSWl9sjDiEgwfnBE=)
4: 14H-LNkPVbf1P9syu0gSDZX0QuA.roa (hash: 0sR139VBAEgTBXJuZQLHKc7RqftEBg36UvCit9+wB4Y=)
5: 24akyMR_PPjN-8iURmGLIi8Hhzc.roa (hash: liVOUJ/Ipi/txROB9UIQmB6tFXMZEqiD6/HH7+bKdHE=)
6: 2RVScBFmLrguvZKcAVopID1IIw4.roa (hash: fMtmwEeBJcU9F/MSODJEfgSMoBu55I7dpytdfwBJCTo=)
7: 2gHgEKsKoZSB0yOJg5gmQnI3MYU.roa (hash: Dl7qDmE/jLoe0abkFXvtN9m8R5QtVl31hRq+JZMxUtE=)
8: 4laAR0F7wlTO7vDDQTy0D13KxL0.roa (hash: QLmezVQCfyx+ql2UEt6zzy7UABZFvPOrKrdiS+wXWX4=)
9: 7g4r1oWjvlSPhlhcBPNRGCxJbuM.roa (hash: f3W/aXX2oWLOcz8n9AblRDokKEiMNGrTfCRmoGI/Lgg=)
10: 8cJlsHm0dVDV2ACL1UhTAh_wZXg.roa (hash: LnF2FnCPrAFRzWaaVfy6M3SOCgPNybkqYgz2G8nzbvw=)
11: 8dFZKR72cphf0s7LqinMgRYYIkc.roa (hash: e27YNEiHBqFxjcXUVxpMm6Jq4acNXbMD4K9l38nrYxc=)
12: 9xf7IWEflzujgmw2tsn_FARmi4w.roa (hash: f6AK6JKMeGD679lYzG5x++jDC+1TvkO4ezRO4cNQaqs=)
13: A_Limg3OLYd13ZlGUJbwD_dgooY.roa (hash: AheclwiuL8WgcNGkcsG2buEkjItkhZhagDjGjEY7ta8=)
14: ETO1DQMQEwbLKsop70f_IRqpjvo.roa (hash: W+oCWHNVENtoQwyY4yZkPcwzYYlyeqnKwiYZfApMNAQ=)
15: JBkdQr71ZwI-CMBh5fHGRvyAuOg.roa (hash: KO2lQMGAVrB1sHStwhv5TL7iRvYYwXg+bjMEQiUA/+o=)
16: JL63CBvhwqPEZ24EicyTnRw9mXI.roa (hash: oCFS8hp0fLsMJw21lXQxSmeqk93E3ApIgbPSMTVR71g=)
17: Kspb3Y-3TqVkeHkqeGqXqk4OQWA.roa (hash: 6ep+ieeLgHqg5HT8yEOylVhvojGIS+IXzOftgEonsw4=)
18: LOd13ZpXkaKfeUJbtyR1jxJvQ0Y.roa (hash: IKhHdSXcnOEQUOnmtFdpxEVHcZtf7CeOvuipXxIU+8M=)
19: OXmdplbNmQib2l2reBSTrU4L_PA.roa (hash: vuEIsii+dFtqe9HP/V9IK24UtjZr6nf8P7Rlt1fMhoA=)
20: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: lU/3bYWdl0kMr0ppym4r9eIns6ebnSKWUv5XBcxDQJg=)
21: QFIFjY-TvdhFpu5liSbZap-Vvrw.roa (hash: ++dcv8XUbXJ+JM0rFaYwn+vsJq/alYRvMZD3jyve1ks=)
22: SiarQ2TxRzr8itmuRAYLtAX-QzQ.roa (hash: 8XW+4yaYwXUOorPxqs2KPD6l7RdxPUrXyqX6O82hTP8=)
23: StvAsE8dqcbcJCGc9s0d-K3IMUw.roa (hash: gIggPBm4zeijGxMTzdgWV5ekCK3aV4Cyh43PttmoHL8=)
24: UoFV35V7SZwvvNBJAgeo6Gv7r3o.roa (hash: arnQa5+zyWRNt4ppru9EEoPbLcDB2HcooQOj4l8fQFM=)
25: VYo918jh-i7rJwHE82ZPQwc45P0.roa (hash: upWdBHigy6D1tAgLScglqnlFKHDlTGPxQKZWr5SD6eo=)
26: Vxa3gxIRBuzpvmC_LtYioiwPkS8.roa (hash: SmaXCWbuVQWDYA1WmhxKxyYko6Urx/bhXRz1ez20W+M=)
27: Y6ImGVFmS5obOGtb7VS-5RES8ds.roa (hash: 5dw889Z3clPV/mha7vYDDn4q7WZv7n9gkeTOdly28Rw=)
28: YF43X1-q2B-Uj0oUuLYoZXyjNc4.roa (hash: n2I5ucmpF7lWc83VwA13sO4NXWBvGl+URpKpUJ+cEw0=)
29: _2Ua11sWzPO5DBlFQv8tb1tAVlA.roa (hash: LUsDXZFiK9FtK6EnFC70rYFOjc6L5qWymh1S/jDGElE=)
30: _6rvmtNmrnvGKiw_iyKO5Jb6UsQ.roa (hash: 6mJhKXkfTm6Z9f3tQOF1JBIIXDGP02J3lqdrEbYkL5w=)
31: cu5GFgpwfQEyzS26nXv6k9rJNLI.roa (hash: PvnG+bCRsjef7AzlsnAC7/rY5Eg1jXxPdEvS5KrmsKo=)
32: eaRU8ArJ7pd71GW8eGNZdKDKSzg.roa (hash: UMgWTM4VW3d6SEyYOSZSzAnOp1pFMK895I+iWlLcwOk=)
33: ldNAN0mfpVi6CZXqHPWFS3596EE.roa (hash: q8HafsshHQV4Ck59kSD3LSIBdSsnhwXt5UddZDp3vtw=)
34: mvHb-8Z0ycvMSJhWupwMRR4wA-E.roa (hash: F0CUWvlAdOp9w97cQi4qF0fyu4dYrDSQJRdTIKAGQEQ=)
35: nINyubjIu33geaoAM2ygk8-OXIM.roa (hash: teOxeh4o4zZnuTWriyDSWtH89vqt0w3l5G0p6/GrNok=)
36: nhvlBTexMzYdSopGwC7dgxpQpMI.roa (hash: U2+w8OKlz7AZDKQazAR8t2cIc3asaqKSW/usz9u1R1s=)
37: pJUNLwWtEptjt5DB91VfVf1ogI0.roa (hash: oSeqIzwGYJ8PJBctq0lGeA6kcX9bfJwo5235nbRUPRA=)
38: qWwgzCH9K8JWgnDsCo6SBO_wFC4.roa (hash: 56LC9PWT2zD1vsuWut3ozyqt1WI7tzVhIC16/hTn/HM=)
39: rExjMR-P95Bzz5RS6p1JgM8JSNQ.roa (hash: 4LNpkWN8dEzxfyUg6mtreEZRcnf507vtfHeANuOXjg8=)
40: sowEHuyCg98-_nRKaQkJf-fVgEs.roa (hash: oeX4pQ1F7WFsfTOBD0YtMDT1xhl2JArmAYEp1mUoROI=)
41: u6WZ0gjUYg9KzTP7BRY9Du-KEb4.roa (hash: SMkvUlI2T5oc05LZlQuumKtLHa+vf18Pqccm9PimLVc=)
42: uSOK0eX4TYuumH5Ic2rfeIeTvuk.roa (hash: 1WexEmtWrn8mQtb7UJqhpFZgWTvHiJV0taQVnveBTR0=)
43: xkOjBQQmnRM7wGsI3bxYUlzAZbE.roa (hash: eCK450RJgJyBdGmpyTMZoH4wm4stUV8ppgjNpt+6t5o=)
44: zBCFp8o_tuV_kBEsIWt5fFeZCzo.roa (hash: s6zrZhzWsfkGNl0cC1SAmvMa2Etx9RUnwtHCxzJ2ErQ=)
45: zQXVrYEwwy5l2qY9Yl1wT7p06iQ.roa (hash: 77rICbTLzf6YbndloP5V1m7TdTvpRVmsJmjzeBw1ClU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:b8:45:c5:eb:5a:e2:33:12:0c:73:cc:7f:be:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 23 22:00:40 2026 GMT
Not After : Jul 24 22:00:40 2026 GMT
Subject: CN=a8b713d84b561042be60f10882f7ffb51cc4fc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:ec:3c:3c:5d:42:34:d7:7b:12:55:66:0c:
a5:ab:80:4d:5e:32:1e:88:c7:1c:4e:56:f9:38:6b:
dc:f0:6a:81:a5:ba:e9:61:91:45:b5:0c:e2:75:c6:
10:21:60:df:0f:8e:c4:9e:b1:9c:5e:d8:e1:26:10:
8e:ef:70:fc:28:41:5d:16:b0:6c:28:88:d8:55:60:
10:fb:91:2f:e5:fe:99:d4:2e:5f:51:3e:8b:25:c8:
4f:cc:a7:74:9f:51:66:89:89:fd:4c:8c:3a:e2:df:
ec:40:cd:14:60:79:56:c7:6a:29:f1:87:ea:ad:d7:
81:0b:b8:82:07:e5:0b:84:1e:c8:1e:53:c7:b9:fc:
d4:76:c6:e0:f6:7b:19:0b:ea:1e:e0:9c:75:f8:86:
59:fb:e1:43:de:72:20:cb:ec:0b:33:de:c1:8a:cb:
83:26:30:64:1a:c0:c1:47:e3:ad:02:b3:2b:76:99:
90:52:41:fc:f6:c7:bc:0e:ed:10:1d:e3:a0:c2:b5:
68:0a:5f:fd:82:1d:63:59:cf:87:a3:2b:eb:5a:76:
38:22:5e:1a:f5:a2:b7:94:07:f9:02:2a:ed:42:81:
8b:5b:23:ef:7c:9f:34:db:ae:0a:e3:97:77:99:92:
b3:36:77:4f:cf:10:28:2a:1e:d2:4e:2f:f5:53:30:
e8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B7:13:D8:4B:56:10:42:BE:60:F1:08:82:F7:FF:B5:1C:C4:FC:71
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a6:56:e2:c7:a4:8a:2e:d9:ce:e5:47:6e:30:d4:ec:c5:c6:
5f:00:c3:aa:ed:40:11:99:96:b3:67:1f:59:56:19:ec:ce:f1:
69:77:da:a5:a8:fe:c5:a8:4d:dd:65:f3:e4:b5:28:bb:3e:e8:
d7:0b:3b:f1:1d:0c:53:71:5b:c5:1d:99:62:e5:ef:7f:01:85:
3d:18:c1:b8:d3:f2:5b:d1:e4:c4:dc:ba:11:36:5d:1d:54:c6:
4f:76:4a:51:3c:b1:59:b9:0d:26:d3:b0:7d:97:08:41:31:46:
51:a3:dc:f3:ec:cc:13:2f:60:2a:60:e6:f4:44:0a:87:9c:60:
c1:08:3b:84:a7:cd:75:ba:64:23:95:bb:93:a6:ac:00:9e:06:
e9:8c:5a:5d:06:68:ee:92:fe:4d:c1:85:54:d7:fc:65:13:69:
d6:e5:cd:1b:65:9b:62:ed:f6:74:58:d4:1d:71:b3:8f:e6:f0:
32:1a:1d:ed:16:6f:7c:71:92:db:9f:f9:8f:1d:04:0a:64:96:
74:e9:7e:1f:07:54:78:7e:ac:36:1e:a3:a2:57:62:09:2b:85:
bc:1d:8b:28:92:c2:d3:af:2d:7a:2f:07:fe:1b:30:97:11:ad:
62:69:bc:6d:c5:26:a6:f3:32:6b:ec:60:e5:3d:03:2d:b3:08:
12:8d:35:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:40 2026 by rpki-client