
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json)
Hash identifier: Geov1jyQGnq6OoXzS0gZT+8mI/Ux3HnGg1vUwikzth8=
Subject key identifier: 58:F2:B8:8D:3F:F0:A4:E9:F0:5A:38:17:E5:A7:D3:51:05:48:99:C2
Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Certificate serial: 019F92481716530B11AC48D67D47D01406F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
Manifest number: 1702
Signing time: Fri 24 Jul 2026 04:00:25 +0000
Manifest this update: Fri 24 Jul 2026 04:00:25 +0000
Manifest next update: Sat 25 Jul 2026 04:00:25 +0000
Files and hashes: 1: 6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa (hash: Hi8ylLPtRW5cTPTLEZMSKMfBugZcDVTM9OMIUbfFA1Q=)
2: 9S4MfLquyh-qrUEKsjf9K5pPw-E.roa (hash: lDfP7Rw/AFVS5oiPjEygt8fOx4/sSpYeTHr+hNCy/Y8=)
3: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: K1Hm2U+wufQPGCbk6feVNul+5lRcCiGE9IE7374WWus=)
4: eFOj6GS3QWx3LCTCCOeJMYOedz0.roa (hash: lFu71+7IA2r5yGUrDCeoEYffOjpuguSpQXtdqb7+Xe0=)
5: eklUJS2_Djtss2ru717v4kYti3g.roa (hash: xWdnp26vNQdhZX81YBA2whAixTtQ8EpVFLanadkwW6U=)
6: j4aPOI4c0SdvtsLU5py5qGdc5-g.roa (hash: bsFiCLCrhE/1RcQacPGG1ZYum/RU+6ALQdUjZFN36Eo=)
7: pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa (hash: PQ1PKNsZxV3X6qzBGN7N3OlK5qglG0fuEcuBkRu5Wrg=)
8: pPuYN3xv0sq-4zILngE0M1s1Mlc.roa (hash: l226Vj1q1kVjY3FHXrnuQl4C8mLmZwc1nh3ACqtnaGw=)
9: q19qERCShb-Y7JAltKkjwCPGd_M.roa (hash: yoUEi5A8cMILPVY4ZsR8L+GyUOqrJ2wvua2rTehpmZ8=)
10: u2LwB7JoPATisCyMgWUoyFBE2IM.roa (hash: zUkwX90Cn5pYIidpA9DzFJzrtYHxnLfOhDQRjwe5oPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:17:16:53:0b:11:ac:48:d6:7d:47:d0:14:06:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Validity
Not Before: Jul 24 04:00:25 2026 GMT
Not After : Jul 25 04:00:25 2026 GMT
Subject: CN=58f2b88d3ff0a4e9f05a3817e5a7d351054899c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a1:ec:ed:82:a5:86:bf:39:da:24:42:20:54:
ca:3f:93:64:bc:0d:29:48:76:9d:41:fd:89:5f:eb:
be:6a:7e:a6:59:93:cc:09:10:17:48:f0:e5:46:9d:
dd:fd:7f:49:0e:df:02:a5:5e:4d:98:61:3b:c3:44:
f2:c4:86:bd:3e:7a:e9:07:06:ec:ac:f8:ac:b3:44:
06:11:09:d2:d7:b6:2b:ab:b4:19:38:4c:d0:62:1a:
4c:84:e5:64:5a:1d:db:32:59:f3:9a:c0:7c:d0:63:
ae:6d:79:85:21:b6:a2:66:9c:ae:26:76:82:60:b6:
55:10:b2:a0:b4:96:2c:8f:8a:4b:99:3d:27:d6:d2:
a1:58:a9:a1:eb:b3:84:a5:21:f7:4f:c6:34:b1:dd:
08:d3:4e:dc:b4:15:62:c0:9a:58:07:53:28:5e:4b:
23:86:b3:0b:ad:2a:02:22:15:89:32:07:d1:33:2d:
14:04:31:ee:8a:dd:b5:52:5f:35:2d:20:4b:61:75:
fc:08:ed:45:24:2d:73:12:f8:a4:b2:b0:f1:9d:5b:
27:0e:4d:6a:f9:60:e5:42:f8:d6:6e:13:dd:a7:c9:
d5:71:7a:b3:67:1a:a8:e3:85:6f:b0:80:56:bb:c7:
58:32:8e:3e:64:cb:6c:e4:b0:1d:70:f3:96:24:c8:
47:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F2:B8:8D:3F:F0:A4:E9:F0:5A:38:17:E5:A7:D3:51:05:48:99:C2
X509v3 Authority Key Identifier:
keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ea:16:e8:a1:5f:9d:91:f3:b5:0b:b4:b0:e0:13:f4:40:e2:
b6:7c:1f:8b:9e:ce:8b:38:83:0b:e0:f9:5a:b2:71:a9:5b:58:
22:b8:da:88:f4:f3:3d:f0:d4:75:61:f8:f9:ce:50:08:6e:21:
b8:06:a4:78:b8:95:81:77:3c:60:c0:37:d9:59:67:64:58:4d:
44:96:5d:bd:fd:cf:d5:d7:57:a8:e7:18:de:b1:55:51:3c:ed:
8b:5d:2a:d2:17:90:fb:06:01:7c:a3:e7:4c:d8:4b:cd:9b:d1:
a2:0d:26:de:e9:4c:04:7b:20:24:5e:f2:0f:60:73:79:ca:d5:
bc:fe:31:3a:dc:26:17:ec:14:26:8e:3e:69:3e:3a:96:f4:a5:
90:bf:84:b1:67:5e:59:b3:00:a5:5a:6a:06:74:b7:22:29:84:
f8:6e:28:b4:f3:8e:c1:bf:be:98:c9:4b:e2:89:04:2b:14:8f:
9d:92:71:29:94:85:1b:e3:b1:eb:ad:57:c9:98:bb:ee:33:9f:
78:78:68:60:7c:84:d2:a1:e9:79:ea:83:53:38:c1:55:13:11:
ee:65:f0:85:01:85:64:fe:db:82:60:36:39:a8:52:cb:d4:07:
89:19:99:08:01:2b:f4:b9:f8:b1:8c:0d:24:64:48:af:46:27:
75:e1:36:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSBcWUwsRrEjWfUfQFAbyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl
MzU5YTIwHhcNMjYwNzI0MDQwMDI1WhcNMjYwNzI1MDQwMDI1WjAzMTEwLwYDVQQD
Eyg1OGYyYjg4ZDNmZjBhNGU5ZjA1YTM4MTdlNWE3ZDM1MTA1NDg5OWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqHs7YKlhr852iRCIFTKP5NkvA0p
SHadQf2JX+u+an6mWZPMCRAXSPDlRp3d/X9JDt8CpV5NmGE7w0TyxIa9PnrpBwbs
rPiss0QGEQnS17Yrq7QZOEzQYhpMhOVkWh3bMlnzmsB80GOubXmFIbaiZpyuJnaC
YLZVELKgtJYsj4pLmT0n1tKhWKmh67OEpSH3T8Y0sd0I007ctBViwJpYB1MoXksj
hrMLrSoCIhWJMgfRMy0UBDHuit21Ul81LSBLYXX8CO1FJC1zEviksrDxnVsnDk1q
+WDlQvjWbhPdp8nVcXqzZxqo44VvsIBWu8dYMo4+ZMts5LAdcPOWJMhHqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjyuI0/8KTp8Fo4F+Wn01EFSJnCMB8GA1UdIwQY
MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt
ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl
LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuoW6KFf
nZHztQu0sOAT9EDitnwfi57OiziDC+D5WrJxqVtYIrjaiPTzPfDUdWH4+c5QCG4h
uAakeLiVgXc8YMA32VlnZFhNRJZdvf3P1ddXqOcY3rFVUTzti10q0heQ+wYBfKPn
TNhLzZvRog0m3ulMBHsgJF7yD2BzecrVvP4xOtwmF+wUJo4+aT46lvSlkL+EsWde
WbMApVpqBnS3IimE+G4otPOOwb++mMlL4okEKxSPnZJxKZSFG+Ox661XyZi77jOf
eHhoYHyE0qHpeeqDUzjBVRMR7mXwhQGFZP7bgmA2OahSy9QHiRmZCAEr9Ln4sYwN
JGRIr0YndeE2QA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:51 2026 by rpki-client