
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
File: fDw50YmeaZv1F3QY7jgUie3_Q4A.mft (raw, json)
Hash identifier: 2teSYERdq+5HbGdfkMF9CmyMb1mE0SZUGHV8dEmpkTg=
Subject key identifier: E8:5E:05:AD:BF:D8:CE:29:06:7C:03:55:E0:01:37:A3:0D:61:E8:C2
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 019F9248EF86AC6A516170FD3836EB65150C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
Manifest number: 19ED
Signing time: Fri 24 Jul 2026 04:01:20 +0000
Manifest this update: Fri 24 Jul 2026 04:01:20 +0000
Manifest next update: Sat 25 Jul 2026 04:01:20 +0000
Files and hashes: 1: 5SEARh8FCEo871iB7G34fI2Kpe4.roa (hash: m8tzPmTHhc1WTCJBLsi032NvSAtwSGzKJid4Omy7Mh4=)
2: BBgeRSvbUJdniHYX4zOgCcL8ACY.roa (hash: PLe5zqvpsl1axyHkG+6mNC+e0kIU1k+pLvAFxSmrAmU=)
3: GINhKUhmBtKk0TkbBRxpcNSu6zI.roa (hash: AfFS2Kk3dLWfENSQf5EMy1ayLLvaFvbW7wW4mzMrY2c=)
4: GcjqtR6eaVf9zI7HkXKSnJA3w6w.roa (hash: A4MXiuxUupC9OPHA/5SoE0YyMSrNretsQcoN/Jow0+w=)
5: UxGBNLJORbA-dUtSWizJlzSR79A.roa (hash: iSbtbOdc4793QhhKCfmSFXrRr7lnZaOwHAQy1vMKWow=)
6: VI1RqKQ9FUKeH02MRHEork21o40.roa (hash: wdOOodFBuGweEJw4KzRpikC1wFqxQBn+ps1AczyBeZ8=)
7: fDw50YmeaZv1F3QY7jgUie3_Q4A.crl (hash: +Ic5r6QxsvAuPnk+uFPydLalK8lBkamZq7yfiEkAmOs=)
8: gxHDLsArjTiXKEpHJWMyRpUv3cY.roa (hash: dCObsibTUgKigew1g86RJZOg/QuYkH7A+/+pCpHO7nk=)
9: nuyOFFadfRrO-PHC8XAHyHRujfs.roa (hash: /f8gp/JEgFhNhBZOt0Zfqqd/+VO8Z7hxkEAexMPxwQE=)
10: u1nf-Thyw228svKtPSH3GG9Q0kM.roa (hash: zfCV7njN88258Q8HEPbW3g+KPAWnYoYtUU7LB/pH0+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:ef:86:ac:6a:51:61:70:fd:38:36:eb:65:15:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Jul 24 04:01:20 2026 GMT
Not After : Jul 25 04:01:20 2026 GMT
Subject: CN=e85e05adbfd8ce29067c0355e00137a30d61e8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:59:b0:d7:74:2e:c5:fa:14:e4:dc:ea:36:
3e:55:3f:8a:49:ce:07:c5:3f:b9:23:ea:d0:4e:9c:
08:8c:42:d6:df:77:3b:c1:61:cc:e1:80:9b:e2:f7:
c0:a2:b5:74:c3:8e:f4:81:97:7a:9c:f7:21:06:f4:
ea:c1:a7:a0:6d:8d:4a:b3:f4:38:90:ef:94:bb:5f:
5a:0b:bc:2d:4d:61:19:bf:d6:bb:34:9a:e5:bb:2b:
3e:0b:ae:cc:b7:7c:b6:b3:0b:96:98:4a:45:9b:2b:
0f:91:a2:e2:30:3c:99:0d:c4:73:d1:fe:a6:50:8c:
3e:19:46:08:ec:9a:a8:fb:54:da:01:18:7a:89:7a:
68:b3:57:b4:20:6d:76:fd:20:bb:71:f9:9b:86:1e:
02:04:ea:66:17:80:d2:40:3d:1b:fc:69:3d:f6:2c:
de:ac:7a:56:ab:36:4a:a4:47:bd:96:e3:6d:56:cc:
28:69:5a:4f:e2:02:74:7c:d5:b7:9b:ce:c8:f4:d1:
89:5d:55:ff:cd:59:22:18:8d:d0:f6:ac:49:3c:c5:
9d:e3:1e:ca:eb:75:88:39:43:f4:8e:97:63:f0:7c:
2a:a0:41:63:9a:54:e7:83:f2:00:ec:a2:53:45:f4:
0a:f9:c2:d6:bf:d4:de:d6:4c:93:46:57:67:15:92:
b6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5E:05:AD:BF:D8:CE:29:06:7C:03:55:E0:01:37:A3:0D:61:E8:C2
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:76:06:37:91:44:b3:db:c0:c7:ed:81:3b:f6:b1:47:78:f0:
ba:44:ba:88:a5:67:29:91:57:f0:14:76:28:fe:41:ad:37:57:
32:4a:2a:f7:a4:42:35:1d:1d:b3:5e:45:3d:60:b6:46:f7:fc:
a3:e3:8c:bd:2b:0b:4b:81:9d:f6:4c:10:38:4e:69:bd:7f:28:
d2:ca:e2:ad:f8:c4:fc:18:b6:5c:90:5f:d4:69:c4:a1:97:a2:
11:ef:54:65:c6:63:e2:b1:1c:60:ce:a9:7d:3a:49:05:0e:6d:
11:ef:a9:5b:51:33:0e:3a:1e:01:0e:6a:ee:df:a0:21:46:2d:
da:0b:dd:85:d5:04:bc:77:26:0e:d0:7d:ea:56:77:97:07:c5:
d3:aa:a4:46:45:fb:12:10:d9:70:90:e7:7a:00:31:4a:b3:09:
96:77:8e:a2:dd:6c:39:f3:ed:3a:d0:17:fb:c8:f9:cf:35:7e:
eb:64:0d:4b:1b:2f:51:70:2b:64:5b:6b:d6:d3:63:d5:59:58:
65:8b:2b:6a:87:76:27:46:11:fb:f6:39:81:bd:08:70:ea:03:
79:6d:cf:34:9f:53:bc:69:b9:54:dc:d8:72:84:db:e7:9b:f4:
51:2f:ee:c5:51:b1:d0:4e:0b:8e:cd:8c:7d:c7:ed:50:04:28:
ed:1b:c0:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSO+GrGpRYXD9ODbrZRUMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2MzOWQxODk5ZTY5OWJmNTE3NzQxOGVlMzgxNDg5ZWRm
ZjQzODAwHhcNMjYwNzI0MDQwMTIwWhcNMjYwNzI1MDQwMTIwWjAzMTEwLwYDVQQD
EyhlODVlMDVhZGJmZDhjZTI5MDY3YzAzNTVlMDAxMzdhMzBkNjFlOGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqANZsNd0LsX6FOTc6jY+VT+KSc4H
xT+5I+rQTpwIjELW33c7wWHM4YCb4vfAorV0w470gZd6nPchBvTqwaegbY1Ks/Q4
kO+Uu19aC7wtTWEZv9a7NJrluys+C67Mt3y2swuWmEpFmysPkaLiMDyZDcRz0f6m
UIw+GUYI7Jqo+1TaARh6iXpos1e0IG12/SC7cfmbhh4CBOpmF4DSQD0b/Gk99ize
rHpWqzZKpEe9luNtVswoaVpP4gJ0fNW3m87I9NGJXVX/zVkiGI3Q9qxJPMWd4x7K
63WIOUP0jpdj8HwqoEFjmlTng/IA7KJTRfQK+cLWv9Te1kyTRldnFZK2YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOheBa2/2M4pBnwDVeABN6MNYejCMB8GA1UdIwQY
MBaAFHw8OdGJnmmb9Rd0GO44FInt/0OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAt
MDYzZmNkZDNhMDU3LzEvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAtMDYzZmNkZDNhMDU3
LzEvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnYGN5FE
s9vAx+2BO/axR3jwukS6iKVnKZFX8BR2KP5BrTdXMkoq96RCNR0ds15FPWC2Rvf8
o+OMvSsLS4Gd9kwQOE5pvX8o0srirfjE/Bi2XJBf1GnEoZeiEe9UZcZj4rEcYM6p
fTpJBQ5tEe+pW1EzDjoeAQ5q7t+gIUYt2gvdhdUEvHcmDtB96lZ3lwfF06qkRkX7
EhDZcJDnegAxSrMJlneOot1sOfPtOtAX+8j5zzV+62QNSxsvUXArZFtr1tNj1VlY
ZYsraod2J0YR+/Y5gb0IcOoDeW3PNJ9TvGm5VNzYcoTb55v0US/uxVGx0E4Ljs2M
fcftUAQo7RvA0w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:26:36 2026 by rpki-client