
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json)
Hash identifier: C7sAvKzJbDK0r7MiNdbL5Pb3DTRzmYTTFylCtAeURUU=
Subject key identifier: 97:02:60:BA:9A:DD:3D:35:0F:CD:B5:19:A8:FC:29:8A:6C:D2:52:D8
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 019F916CBE3C3A93D576BB3D62F145B2CC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
Manifest number: 19D8
Signing time: Fri 24 Jul 2026 00:00:50 +0000
Manifest this update: Fri 24 Jul 2026 00:00:50 +0000
Manifest next update: Sat 25 Jul 2026 00:00:50 +0000
Files and hashes: 1: 0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa (hash: VbJf/zpJU+nEIQciqPz/B0PK4md21WWEaGREZ1xeby8=)
2: 1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa (hash: EoOuCir1JdYOzVmD9C+0aCRnn0E0kdYzw6esRGPxmMQ=)
3: 53-Empt8fqhopJ7cOY61y1UNXLc.roa (hash: YjL+5qe2020D+DOQyVjhX1FTLXsdUT9QvCPVPeb6WkY=)
4: 6fl2PyZRjLFdwSBx3r61hkXya8k.roa (hash: D61QyHJ6S5T1IxCuN2yRBjSfJTg/+aLEQXnYgmdlUDs=)
5: ANtitpMQT-uK7LHD0X0IbBsKjWM.roa (hash: 5c2CNK7pBthzGV4Sg561qpwP1GJzRFFkA4PDWmW+aSg=)
6: Df8h7qloFeTHYGavNQ4pJHpP5CU.roa (hash: 3kk9LrOCm1NH+leIgX8QEU4SIoLjtl1E1AbkJm7CLGc=)
7: IDuIILf-M7RgIDs4AJSYtPxrGic.roa (hash: Nv2s82WUeiBOVGtaFJF3rHfW4CDw9k2CQ7WS0TmM93s=)
8: ITKErq6hul380zQefCl7nGu5iiw.roa (hash: ThIKSMsSMV9/7c4Wu+9DRro9qpNPtMCBXl8IA6+T3z0=)
9: N3LKuwLRuVKYuFWiGYpHH9iTJDU.roa (hash: +3GE+YLKYRUGq2ir////J+cfvpEdtk9nror7A4YJdrQ=)
10: R-8E5zauBsFTDGfod6Tef2eLm4M.roa (hash: ClvLXgh4oJn2dvcbOHZrF6o7ap5IhqsfDX14XxeUfO0=)
11: a149HuY71oYMfosTA9HCL8g-pdI.roa (hash: FHyu/0R9GDUP3gmfU9JfTLPTviTJTT8eGmQ8uq/ZlfA=)
12: bTookxgPSxSd_gnM8XNiIJ3mpr8.roa (hash: qaTVa3H72kXabxQBE9N2TN7e2tyXH6RWDJSNci8VjEs=)
13: blYq_pKFV_IJYUCGIJ3ZWpeEWIs.roa (hash: aV35UJJhFzqPJKc16YBKA5F2EyafDubx6D6p0nLFPAk=)
14: dh0HxZTX0gUx4atQo9tXgidUMLc.roa (hash: C/NbxOhBDbuOgCOrG7xkr9yc1xlWN7ZS9mwZEOk3C7w=)
15: ehRbssTu-uCbiOQmcMxAxNH82GI.roa (hash: aYjSWmwkop/Ic11eCu/RIPvn387xQFE72I0LsyWzzf0=)
16: fD0zMeFpTdbjlyII0WXNlsdWjwg.roa (hash: 1nJ8LKFZY40ZGZ9fyCE9tTFmLCEjP6khJLvEfhwNXts=)
17: hYygt2D_2n1pYi_NTrG2nkmeaiI.roa (hash: dQrBwFPxwSf58rNos8WFJkrSXg3GQyoC4p0wWkx0CkU=)
18: khIatClzzDAzsXKofHk3CzFjNwQ.roa (hash: VqTvtGjsJjhyzOsm3Z+fa0f8w1YFBA58VD7S9gC+DFg=)
19: ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa (hash: O3k8tfSgOWL0eFoLFOr80zr8e1hwzB6oN6psmB5jVbw=)
20: l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa (hash: 0ZLcxVq4SbMJb/Tzs+R0ez5dGHPb27PKXrdMSol7/iI=)
21: lh0U2VbssLYHQuI_GeDtu-78fs8.roa (hash: argvv+35DPV6sAk39FUkOQj04x5r0LiO2lKQbHUbgZU=)
22: o2CtVQw5GkFX89PhUjlW0skEA5w.roa (hash: m4/K5u0ohrJNEPA+u5iCk/BUETlDCODb4D0JMGKGkg4=)
23: oy53UV29ZxGHyA7mlLseXZBnge8.roa (hash: zmREFQtkqLZ8wJLGEuvGnLyo+ZygeKXKKyJIbyBcMM4=)
24: qSnbVpCUTBo3CbEFeEaAeBg12KU.roa (hash: lUFBwmvXAt5o1tXZm7PlCC3E71TOjkaQgtMQg6Erswc=)
25: uhWP65iIcvZTsGSiBTIcefinHZQ.roa (hash: RDsU+on83wZCchaROnKt/rVWQYfzxwy4j90xxJ6pfyg=)
26: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: 2IoXfHYAGjEBbrPk11ux06h+cwAW7g6VyLwC5rNdmZk=)
27: vuod5WTfo-bMzWgcehLtUNsV8iQ.roa (hash: S3lLxKRzTk1ObgBCNRSt9Y3FAylgCuMuERfb8CAqXtY=)
28: xSEYJ36rS-kznLQUl3DFtM3R1jM.roa (hash: 3mFKbERmZQc21I9KRtXeu1S3oH9xaIQQ0cmDzkgXhUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:be:3c:3a:93:d5:76:bb:3d:62:f1:45:b2:cc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jul 24 00:00:50 2026 GMT
Not After : Jul 25 00:00:50 2026 GMT
Subject: CN=970260ba9add3d350fcdb519a8fc298a6cd252d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:e5:eb:a2:e5:d4:4b:04:7c:8e:b8:48:00:
bc:28:22:3d:58:36:57:de:9a:d8:ec:24:4a:24:6b:
f2:a7:bd:d0:c5:96:40:db:6b:90:99:01:aa:8c:08:
0a:d0:8c:51:32:b9:0b:d5:58:03:94:bb:9b:fd:ba:
04:05:29:42:17:10:13:9e:bb:4d:4a:af:e6:42:fd:
d6:46:5e:06:0c:0e:eb:42:c0:75:72:3b:be:20:b1:
b7:8a:db:7a:2b:bd:e8:a6:ce:21:3a:17:be:81:a8:
9f:2c:b7:40:bd:92:37:36:67:19:2a:36:82:8c:f7:
19:40:9e:0d:9c:c0:4b:5b:f4:56:df:5d:4e:ad:0d:
59:bd:a8:22:1c:73:cd:03:89:85:ee:f4:24:7f:35:
12:82:f3:a8:fa:57:13:49:6c:93:36:5a:08:2e:10:
93:56:9e:32:76:73:3d:b6:b8:bb:4c:dd:0a:8a:d0:
80:80:4b:84:e5:f0:82:a7:7d:76:fc:1f:c7:01:04:
db:6d:26:af:81:04:e0:3d:66:cb:3a:97:ce:0d:ac:
09:8d:8e:31:5c:c2:ed:aa:09:01:0a:73:f2:d8:39:
f6:54:02:3e:21:26:26:0b:5f:6d:68:46:48:f5:84:
f4:b2:6b:1a:c0:16:77:19:25:da:4d:e4:65:ba:ba:
1e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:02:60:BA:9A:DD:3D:35:0F:CD:B5:19:A8:FC:29:8A:6C:D2:52:D8
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a2:0c:05:76:0a:f2:07:6a:98:1a:3e:67:a3:79:7d:1a:aa:
0d:7c:99:1e:1e:0a:73:f8:8d:ac:8b:27:7d:c2:9d:40:84:17:
92:f7:8b:97:c6:fc:9f:fb:11:9c:dd:68:2c:0f:98:08:32:f3:
5b:c9:a1:b5:14:65:7a:e1:c7:e5:ae:a2:d9:62:5c:38:be:26:
05:79:9c:1a:43:18:c9:fb:a8:09:a2:16:5a:08:67:4c:2a:70:
10:a0:cb:9a:fa:40:aa:88:39:07:92:00:93:0b:6e:0c:cf:ee:
f9:c7:1d:3b:c5:8d:01:46:e2:2b:ac:fa:4b:72:a3:8e:40:bc:
62:2f:63:50:66:8b:2a:d4:8a:77:fc:9a:d5:ec:fc:1f:d4:d3:
18:4f:15:78:25:83:fc:4f:50:0e:45:13:6d:99:57:d6:cc:be:
01:c6:1c:7f:ed:4c:4b:23:ec:bb:20:2f:ab:e6:e9:f9:0e:ba:
f1:6c:45:4d:53:17:4c:34:7a:89:e8:58:73:3b:f3:fc:55:24:
73:38:bc:1c:36:2c:fd:18:5b:67:e5:0a:ff:09:cd:08:1f:e7:
8a:b1:52:02:75:9c:69:d7:24:38:ab:e7:0d:1a:e0:7e:19:8c:
38:fd:cc:57:11:ec:26:52:27:14:0e:b1:95:6d:16:8b:4e:e9:
b4:dc:89:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:09:27 2026 by rpki-client