
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json)
Hash identifier: P4+6uvu011EP3VkxUcQSoA5EPvUauVjsXl2ng7z0wTo=
Subject key identifier: 7A:68:2C:54:47:2F:36:69:88:5C:34:5A:37:89:FA:EC:22:34:89:E6
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 019F93C936B66340FF60CA185DF5B3EDE3E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
Manifest number: 19CF
Signing time: Fri 24 Jul 2026 11:01:05 +0000
Manifest this update: Fri 24 Jul 2026 11:01:05 +0000
Manifest next update: Sat 25 Jul 2026 11:01:05 +0000
Files and hashes: 1: 1pNjMggR1gYBaftihFMx8w1rMhE.roa (hash: PULZtkL3C3zDaM8kMCwf21Yb0UEXTXjrHY8fh/1iHFc=)
2: BH6ERj2EK1Gwrfo5u9qhco6CgYM.roa (hash: HBZO37pz26No65orIL67yFB8MvBngZCIHxDCzlTkjJc=)
3: C-hiHL_GzbD5a_s8Sar_hmP-Vyw.roa (hash: hyN/ftVawg2QF6kkYn1VlnFyi9JVIm7PN5l5sJloEAU=)
4: CiXCz7OWck5adEg6z95YRceHxmU.roa (hash: EasCRjc+VBWg+tlVvV7czSSDbpGCqgxTM2n5TXY0Ipc=)
5: Wc1vP6_SY_r3YRWRNCEYvgmMIEU.roa (hash: DTSBhlEZWBIgKWeFJQfKtS9sYqKdFbuY0AXldEHxAZ4=)
6: eo5H4o3ZZ3iXbDapo6cBEE7NS6M.roa (hash: X2Eq1j8xxP8127RbRQQH82ZQaRO794u+GIRwZ/G/1eM=)
7: mK3OtIQBuc5E_Igw6gzRMSv2d3c.roa (hash: DMwAvTUmsGM0zrMHUTJobXjFU2+cLUzH4tvhaMwkiwc=)
8: nUVyELULlyE5fyAdMqySIUcD1Kg.roa (hash: 7IAppAs9x9RzUF7a3+rIPbPjrq3AFXyVcrF/g7C0QPU=)
9: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: pRJdnndrfjxhkR9mA/rWJhPKwI7/ymDewrNA1GyGsUk=)
10: taXjOwEPFjUj9cMa7Gq70xb_Xw8.roa (hash: amO1PgtWxEDUcYd/ZIcEzv+wLt54N13hJwoq+TKEsJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:36:b6:63:40:ff:60:ca:18:5d:f5:b3:ed:e3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Jul 24 11:01:05 2026 GMT
Not After : Jul 25 11:01:05 2026 GMT
Subject: CN=7a682c54472f3669885c345a3789faec223489e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:45:66:70:44:e5:a2:18:e6:5c:84:ff:ed:32:
f3:cd:a9:1a:18:9b:f5:c3:c0:35:db:f2:ca:bf:86:
67:58:5d:cd:e5:a9:71:eb:91:d3:68:ec:2c:3e:12:
bc:e3:75:ba:1d:2d:bb:0b:e3:e1:3e:42:44:9c:6f:
87:83:90:c4:87:e4:5b:36:2f:23:01:0c:cb:39:71:
5a:51:15:99:18:12:f4:ab:30:9d:25:29:37:d9:e6:
fc:c7:f2:94:9e:db:fc:90:67:17:4c:d8:a7:b0:be:
bc:ba:1e:d2:c6:a7:56:35:92:8e:3b:ab:ed:65:2b:
ce:b9:53:02:30:4f:de:f0:c4:14:5b:21:d7:6b:e8:
e2:dc:b2:6a:d3:a0:e0:83:78:31:79:47:84:78:0a:
66:b4:ba:bb:64:76:fe:6a:5c:21:f7:7f:c4:42:21:
f3:49:dd:6e:de:66:90:93:b6:cf:ca:99:09:99:ce:
4f:80:c2:87:fc:8c:f3:2d:53:5b:b7:e1:be:7b:50:
3d:55:bc:99:19:ac:c4:9a:b4:97:e5:1b:c5:72:68:
b3:9d:3a:86:38:39:bb:bd:ad:ca:7f:34:a6:c8:52:
5d:92:28:5a:93:91:ee:46:3e:7b:62:4e:dd:c8:b2:
06:d7:29:28:47:7e:1d:75:09:a6:a4:0c:70:47:36:
52:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:68:2C:54:47:2F:36:69:88:5C:34:5A:37:89:FA:EC:22:34:89:E6
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:01:d6:f9:78:de:b7:09:2b:9c:d0:77:6c:75:ea:81:4f:01:
92:20:7c:fb:63:b9:60:d2:6e:78:55:64:d9:fc:27:0d:45:65:
4d:bb:bf:0a:d5:01:cf:e8:2c:2f:be:ed:00:0b:13:1e:50:6c:
db:09:2e:6c:10:0d:16:5a:ae:e0:f6:a9:dd:97:20:b6:88:01:
6e:c8:b2:1f:b7:5c:78:a3:3e:8a:2b:98:f2:35:bb:87:6a:c5:
1c:02:97:ca:d7:cc:f9:f7:8c:d4:fd:89:fc:a9:b2:44:ea:51:
d4:c2:d3:d3:cc:10:4e:a1:fc:8e:dc:22:6b:d3:af:fd:8b:b1:
36:64:9d:c7:1c:0e:7d:35:08:d7:21:40:83:15:38:c6:eb:22:
4b:66:ba:2c:d3:93:b1:92:31:21:61:4f:1e:60:17:9d:20:d2:
e3:60:f0:47:06:4e:ca:c5:81:d2:da:a1:16:7c:b4:d4:7a:2d:
46:fb:9f:36:1d:bf:a7:6f:ad:23:94:9f:5d:2b:66:30:a7:87:
de:9e:ee:4c:94:c0:63:20:59:69:89:55:36:23:c3:ae:03:7a:
14:95:96:71:f1:86:95:24:09:02:e2:3a:9a:42:95:0c:98:a7:
a4:d0:50:01:83:11:f9:52:16:a0:51:84:3d:67:e4:8c:db:ed:
50:8a:c3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:16 2026 by rpki-client