
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
File: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft (raw, json)
Hash identifier: ECzMubwpLAngAbnF7i2aF2HnabfT3dmEaP1h7dbBE8E=
Subject key identifier: 92:33:71:85:72:07:5B:48:18:18:87:1E:3C:7D:59:B9:EB:B3:78:33
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 019F8F476092FECAC7018E8F003DC49BD74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
Manifest number: 19DA
Signing time: Thu 23 Jul 2026 14:00:47 +0000
Manifest this update: Thu 23 Jul 2026 14:00:47 +0000
Manifest next update: Fri 24 Jul 2026 14:00:47 +0000
Files and hashes: 1: 1--f8TOFOHJxy913_bnxbbB_I8Ps.roa (hash: wDKAE8eJy4a/Xju9oL+J32sQIgyfZxer9kQNnDKALh8=)
2: 1-jH0g_JDLp_7206NgV5uijHSTJE.roa (hash: LRjP11l8Yg7jbG4bbfhfNEvQDZIpDubQ+TvWhkwjrcQ=)
3: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl (hash: WJAntnGtR3bMuxGoVjIaqL5cKIAuoYFbk6OzdYJEu6A=)
4: 1-zOd1kumaIlRrXPMfMdhndo9duk.asa (hash: J313kMfLz/jeTLF4rt+b3BkZqWQAyhsRwo4qFMMY3+c=)
5: 3GG8eWEP0AsTR5hlJBndfjSVqXE.roa (hash: OqQ6t5k1StJuUPb2wymY353zmLAJ5m9iQ1cfSGHhatc=)
6: Ew6t29Ei1xqX6fCJJvzPjV0QQx8.roa (hash: JiMbHLWrOkAjKxV/HgN8hcqfDizA3AaG0pNVT8kgBVI=)
7: OS72UUjy1jIbO6SLm4_mGk1QjoA.roa (hash: JCjobLuVUg3x2yIR7Yj0jA3s02kdH2wYADkCYAZAm6M=)
8: hlYcdx1ybU4O_N_wWLe8kEQOPAA.roa (hash: g8sRkVv7AmG02gcDiKwncGvtRS2uuD1b8FmdkJIrmVQ=)
9: iY5E0iZ2YmwSRo1oZbuozkzcREs.roa (hash: XAB0LIhnvafntszSPTz4cfq/KAQxwohiu0F5a96UkOU=)
10: icspBYCC63q1vNy_EsXnZosS_IU.roa (hash: 3NUI/DqhsJ55TwYWG35Se4xjLYr3z+ZTAvaw34Ss74M=)
11: qWmrXkuHj_sWsoWUwUEWOmRpZO0.roa (hash: MHfvuh3eLEasmU8bZ+QtTWQpVIX8pvTM+Puzp/lNHV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:60:92:fe:ca:c7:01:8e:8f:00:3d:c4:9b:d7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: Jul 23 14:00:47 2026 GMT
Not After : Jul 24 14:00:47 2026 GMT
Subject: CN=9233718572075b481818871e3c7d59b9ebb37833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d0:48:ed:b4:06:6d:3b:a4:ab:39:e8:9c:6c:
41:7d:4f:a7:13:ed:33:eb:8f:af:f4:f2:79:bc:e3:
99:31:3c:ee:2c:9f:21:60:6e:39:00:4e:9e:c9:1c:
e6:17:10:2f:eb:6b:fb:20:23:86:3c:56:36:33:7c:
cf:70:bb:39:b6:bd:4d:8c:44:b5:58:b5:16:ce:14:
de:57:c5:01:42:b3:64:7e:ec:a0:34:fc:46:f9:b0:
ef:c4:73:01:06:48:84:64:92:5b:4e:fd:fc:31:82:
c5:13:2c:f0:28:ea:5c:4e:9f:c5:0e:18:2a:4c:93:
c3:da:0d:e7:dd:a9:4b:3f:7e:b8:99:91:ec:84:73:
18:29:7c:c3:77:b7:af:1e:7a:8a:25:f4:68:e2:6a:
ca:24:82:42:94:2b:a1:5e:15:ad:b2:a1:18:fa:f9:
bb:c2:1f:9d:4f:f7:7a:fd:bc:e0:10:44:1c:dc:c2:
d7:88:a4:a1:94:f3:34:1d:09:29:b5:01:29:cd:65:
90:6d:e3:c7:41:07:bc:a6:ca:e5:d4:5d:94:12:6c:
8f:3e:c6:2e:d9:11:ad:36:ff:4f:a4:7d:75:21:70:
c5:52:55:d1:43:7c:24:66:8a:de:79:62:45:40:7c:
7d:d6:e3:1f:c9:0f:ef:8f:1f:8d:d5:1c:c3:06:5f:
2f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:33:71:85:72:07:5B:48:18:18:87:1E:3C:7D:59:B9:EB:B3:78:33
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:66:8f:9c:92:98:cd:54:00:dc:cf:8b:66:ad:58:49:9b:3e:
9f:8a:05:83:f4:25:d0:73:ce:aa:c9:0f:8f:07:e7:02:b0:5b:
b1:3d:e9:8f:84:0f:05:bc:0f:80:5d:6b:15:23:3a:fe:1d:21:
a1:f1:16:37:02:a0:73:3a:df:66:0e:62:d8:80:5a:36:5f:88:
06:68:12:e9:4c:ab:7d:bc:f0:b6:d5:24:89:ba:11:a2:4d:8b:
fb:46:34:cf:dc:7b:76:c0:20:02:13:09:ff:8e:20:dc:7a:c9:
d7:1a:87:45:5f:d2:bf:f4:00:0c:ce:75:fd:4f:04:b0:fa:ad:
82:91:61:36:7d:c4:7b:db:60:75:05:63:fa:ba:16:cd:8e:68:
fa:04:6c:bf:1a:e0:a1:7e:65:ac:6d:9c:f6:52:ba:17:df:5a:
cd:a5:0a:0f:1d:09:eb:a6:82:8b:7e:ee:75:07:ec:4e:d4:2b:
79:c2:d0:70:15:ce:83:ff:19:cb:07:ce:78:5e:ce:94:62:19:
54:6c:5d:cc:3d:0e:28:6b:76:65:ee:ec:32:ae:d7:c1:95:2d:
89:1e:da:12:2a:05:af:a6:b6:88:2a:58:57:2f:8c:ff:6d:91:
ff:02:95:cf:cb:dc:93:4c:cb:4c:33:53:ab:87:19:3c:c9:54:
14:4a:8c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:36 2026 by rpki-client