
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
File: b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json)
Hash identifier: H/Qdr1CmVWlyHcrQjXxdi7L33J0MbJ1UIy9nJPA+z3E=
Subject key identifier: 74:11:87:66:7B:4E:C0:A9:AB:C0:0D:F2:A4:DE:44:07:1C:C8:EA:EB
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 019F8FEC152EAA4A9121BC9574628AD1D42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
Manifest number: 115D
Signing time: Thu 23 Jul 2026 17:00:41 +0000
Manifest this update: Thu 23 Jul 2026 17:00:41 +0000
Manifest next update: Fri 24 Jul 2026 17:00:41 +0000
Files and hashes: 1: 4aCYY0RGaMja-Pk9etkR8koJ5JU.roa (hash: p1rgNiymQ5hiACbuTSCO2Aa2mJXgovikostXrp6lnp8=)
2: 8Hr1uTYn9-iLvJsHdtsL5Jf3hZg.roa (hash: ALf2f0JzISd3UyPZWmsk9XvraX01Mwn8kdYoc4TunL8=)
3: J__1HHACshyPBDOUFdqrFfiSJ_s.asa (hash: P4+NQewmqawZRA1cbeRpbU6AVi0HkrkZVkGActNtwQ4=)
4: TUnjPhJqb6nHWdMSJm2IQNPN7R4.roa (hash: yclmIClXa122Jcmp1p7RvivtWXCLIncvPj+GO52o/+Q=)
5: WOAffnwybG4qj9V7edyDhpSbDkQ.roa (hash: ycSdSma33JvpNylbgkwuYkr1DaAfpIkfLpSIfBA6Am8=)
6: WXUROIq4F1W-zbMEwZGC0-4ns6A.roa (hash: RQDdQUCiW8kBw09hGsbRZq5XM/aEA3ZM3OJ8FztuujY=)
7: X1bpbfnEeWysnkVlNQYpli_JB9U.roa (hash: z2gfYvH3Y3eC1HsP9BRSds53oOJzBhG8NMfygnzQq2s=)
8: Zaa1ETdAWKfFJ07i5VWdeKJq1Y8.roa (hash: HTBLtFAfHFVHfxP1ldP56H7tmRP+j3VLoPGVIHLY2sI=)
9: ZryCLfhsn2tbfNcOOBqTDrmtBr4.roa (hash: s6nWvNWtX9EXW2C5iu+kYBDobKWsqyYEDZBG1jZg8kw=)
10: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: LwukXaa9W/huKqmPV5DGPglpzKLg3yVi98CBoXY4vuk=)
11: gxo_Krn-tQ_Z3uSlx4SQJvS2R_Y.roa (hash: v4kU1V7WuMllKhANWEP+pXEZ9tPT1PxzJDS6a6AIcxI=)
12: izUqOzkgV80kX13uodr4HRwOgCk.roa (hash: 5mRb3lHKYzDHswUR2bwMvvBTVHkJPpANvR5EfHuWzzg=)
13: ryfEVRKZnK1jVhVaw9sfrzHqLCM.roa (hash: r6enxmx5xQGmlOEDSFrMxun8mtTQGChD+RDV9jYpnaQ=)
14: xakVfcHMl_3waxWLag9wjIyIEyY.roa (hash: 8zAufra/LX45mNIP6WBoxyrn6rEShlzjSf5RR8HSpQA=)
15: zqTDWnmSlSWX01iiSNinTnu0Zp4.roa (hash: ZNxewe66vaT/4odCrv5OwpxaOR47BEPKOgzkNOaHMeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:15:2e:aa:4a:91:21:bc:95:74:62:8a:d1:d4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jul 23 17:00:41 2026 GMT
Not After : Jul 24 17:00:41 2026 GMT
Subject: CN=741187667b4ec0a9abc00df2a4de44071cc8eaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:79:0a:56:ad:f7:f7:0a:1d:4d:4a:78:ae:9d:
77:89:bf:6b:e3:62:1a:c8:d5:1a:d6:8a:d1:ab:e4:
d3:37:14:64:b3:d3:ab:29:0f:09:cb:f7:c6:74:da:
44:e9:43:5e:5c:e2:a7:75:99:80:92:d4:35:af:1d:
11:9b:79:62:2f:f8:51:65:1e:1c:88:32:9c:9b:31:
e7:1b:15:d2:26:8b:df:d2:62:9f:df:0e:49:c8:ec:
0f:5f:d0:fc:85:23:0d:44:56:d1:51:44:6c:6c:69:
68:05:9f:69:65:24:d7:02:6d:d7:b7:95:16:7b:df:
00:22:5d:39:94:20:06:48:d7:5f:95:46:14:c5:2b:
a5:ab:39:fd:08:f2:67:64:2a:7e:e0:6e:35:7e:b6:
d4:da:6a:72:db:b9:4b:86:dc:f4:4e:8d:be:90:76:
f7:13:42:97:95:f7:63:4c:f0:fc:09:c4:dd:b6:ea:
37:20:5d:64:e0:65:db:b4:cf:b1:0d:29:bd:2a:5d:
9d:87:f3:49:59:f4:04:6f:96:9b:83:e8:45:08:47:
82:bc:ac:35:a6:96:4e:2b:0a:0f:ac:f0:2b:bd:88:
b7:88:3c:c4:28:21:e2:06:cf:08:35:db:0a:a3:66:
7a:25:7c:a9:73:44:a2:e2:76:9e:af:f0:0a:29:5a:
a6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:11:87:66:7B:4E:C0:A9:AB:C0:0D:F2:A4:DE:44:07:1C:C8:EA:EB
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:55:68:0b:de:9b:06:57:ec:ec:c8:67:23:30:c1:24:a4:29:
2e:da:dd:d0:4f:37:f6:a5:52:b2:88:22:86:3a:93:3c:13:c7:
b4:9a:00:9c:95:bd:f1:19:b3:54:76:f4:97:60:24:48:4d:ba:
dd:62:4d:95:83:aa:4c:e5:78:2a:60:c4:34:03:ae:d1:77:cd:
5d:d8:79:9c:30:1d:1a:16:ad:f3:56:bf:90:a0:45:06:c7:85:
73:af:5f:ee:22:ea:3b:8e:10:bc:02:c7:2d:ca:90:27:9d:5c:
7d:b6:3b:67:7a:90:94:3a:c7:40:e4:53:55:7f:0e:21:3b:d8:
89:25:b6:00:71:bd:b8:99:7b:dc:2e:7a:95:36:85:6c:b2:3c:
f3:11:09:81:ea:a9:71:2b:d2:66:b4:fa:98:e6:73:c3:b9:7f:
f7:2c:fc:c9:eb:8a:c4:4d:e3:05:97:89:dd:cf:14:ac:d4:3a:
32:35:07:75:41:e7:04:6f:06:60:bd:9e:56:53:a5:85:27:7d:
16:ad:2f:28:00:33:34:9a:11:75:ad:3d:2a:48:6c:ac:cd:25:
d0:c1:51:9f:98:63:32:39:c9:76:1b:27:eb:d9:59:4c:16:18:
a9:14:83:89:6f:ec:2f:2a:8b:4a:fa:c8:89:e6:83:c1:a0:d0:
fc:0a:75:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:03:00 2026 by rpki-client