
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json)
Hash identifier: GcczvjPui+QHK6LTYg1pM1Is8W3CBj0Bamr8A3us2iQ=
Subject key identifier: 3F:8D:F7:1F:F1:4A:E3:FD:C8:BF:49:F8:A5:E2:33:E4:69:8C:05:B2
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 019F9022E3C66874CE08B9B2CC5BDE7BEBBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
Manifest number: 1079
Signing time: Thu 23 Jul 2026 18:00:33 +0000
Manifest this update: Thu 23 Jul 2026 18:00:33 +0000
Manifest next update: Fri 24 Jul 2026 18:00:33 +0000
Files and hashes: 1: 6mhv5UsNi48e2qDq3ejV1I51Uj4.roa (hash: DnBbdic7iw6ZxNpBPBJIWL6I3IXFvu/CiDUrM9wqPfY=)
2: 8nl0gvlvhLDwWgZwpZKGJtxc53o.roa (hash: bE4muHTPZggIWIYsSa057x00nvD31ff/lldCGfrmJUk=)
3: FRBPGcKRaduxhDywGhDdLvxwwjI.roa (hash: O6Kegk5UFFFJcpqkyEamLX0oM3JHqmMVK2Q15/ps70I=)
4: GPrNUgOp-yFfntRAITK46bjxYx8.roa (hash: tp3Wm0E6OeEViiyRYXktB8FqE/SyfwJ6JfvXOHg6tpE=)
5: JpjcVvpsRev2p10C3LQaIJ0kCAk.roa (hash: olGjGjOs+cbpB3gRjJy05Z6fBuTN4aPpcrK5updhkf8=)
6: MEHkcgqEJz7YFYdGUGWIvg3-cls.roa (hash: 1BYxRX72gkHZBwUAz+wy4Xb3C0tFku26Sl04kGiXOpw=)
7: dVmg3H_69aE6cwaIlYTR97afdPo.roa (hash: v2VeuqkOmpBJccmre5Q6qbQ+dA2g4wiozwXSU3h9sz8=)
8: n4oTLcY3Eost-Qe_enzL-hN3M14.roa (hash: yYjQpvvj0XOqhxeCs5tu9OzNnpM3sE241OTnw9VzGk0=)
9: nujuYw_3IDNNnf568BByX_04-sU.roa (hash: 60QrFQNmOREasWgP2EhaDowHIVvxXUEGB1moqh/EpGc=)
10: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: jztLSxJdrAohJjLFx8nGLqdrf1IFCxuMsyiaJxFJovU=)
11: unsDtmwuVq6UnIoMMfgu4SomBNI.roa (hash: 42NQRABPwAdQZ7WOYRrg/k8mIJxEsdJlQLE5DRl74k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:e3:c6:68:74:ce:08:b9:b2:cc:5b:de:7b:eb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Jul 23 18:00:33 2026 GMT
Not After : Jul 24 18:00:33 2026 GMT
Subject: CN=3f8df71ff14ae3fdc8bf49f8a5e233e4698c05b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:d1:9b:4c:3d:39:36:fd:58:9d:43:c6:16:
0a:24:1a:e7:24:cf:87:c0:c0:f2:2b:fb:21:7d:35:
26:36:07:7d:46:24:5d:cd:11:da:86:28:38:01:23:
d3:71:f6:03:59:82:97:7c:8e:cf:d8:2b:69:09:a2:
08:fe:31:02:30:c0:0b:17:e0:0a:04:98:b0:3b:4c:
b6:f2:c8:85:e7:ec:2f:36:4a:8b:00:e9:5a:d8:dc:
10:fb:d2:1f:6c:92:3d:97:c7:8d:a4:40:81:8f:9b:
f7:88:5a:43:79:c0:bc:ae:cd:8f:60:9f:c1:d9:ca:
2b:f2:45:e3:bb:f2:d6:b3:07:cd:f2:a5:0e:03:ee:
a4:db:74:93:45:56:15:95:8d:4b:ee:3d:93:49:8c:
9e:c4:79:b4:3b:d5:71:32:f9:c8:af:02:3b:15:c5:
ae:f1:87:15:9a:04:dd:fe:c2:20:6e:03:da:0a:69:
87:d2:bf:dc:94:26:27:4f:08:e3:c2:4e:9a:c8:15:
4e:28:ba:36:88:47:c5:c9:7c:ed:50:98:e5:9e:8e:
d8:01:92:04:43:70:62:59:73:2b:08:2c:06:cc:4d:
3a:dc:ad:aa:f4:10:7e:a2:59:45:13:ec:7c:a8:ad:
d5:a4:43:4b:bd:37:c7:38:29:e7:d2:8d:15:87:a1:
6f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8D:F7:1F:F1:4A:E3:FD:C8:BF:49:F8:A5:E2:33:E4:69:8C:05:B2
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3e:23:97:45:93:bd:3f:8c:42:25:6c:97:fe:52:5b:f3:e0:
e9:db:d6:58:0c:8e:37:46:4b:b6:56:cc:e7:5b:ba:35:5d:40:
98:52:15:ae:03:0b:54:5c:8c:b9:3c:a4:0b:d4:e3:74:d4:27:
68:e4:70:8b:90:0d:dd:3f:94:05:a3:cc:c4:d0:16:8a:3a:00:
59:dd:9c:44:74:ef:fc:54:56:2c:d1:65:54:61:70:34:97:f8:
66:ab:83:b7:bc:4c:fe:34:b8:f7:f7:0b:bb:f2:4b:c9:72:5c:
93:6b:ae:45:b3:26:6c:89:46:39:dc:3a:4b:53:03:0d:6e:97:
80:cf:65:84:bd:98:7b:c5:17:be:76:07:58:9c:f2:1f:12:60:
7b:58:87:8e:45:23:ec:b7:10:b1:27:52:68:f2:20:3c:b9:96:
19:9d:9e:62:f1:94:86:1e:40:ed:f2:98:13:a8:85:6e:b7:ce:
4b:b1:9a:cc:de:b2:56:c5:b7:b0:ce:36:2d:d6:4d:1f:38:30:
8a:48:0e:90:9d:5a:50:48:b3:03:41:79:d4:61:42:f8:38:2b:
fd:f6:6a:97:e0:e7:fa:48:90:df:4b:e5:6e:be:e4:9d:cd:ff:
5f:4a:0c:4e:7f:39:a6:7a:55:d4:69:80:6b:af:e3:83:e2:12:
94:22:74:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:40:04 2026 by rpki-client