
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
File: f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json)
Hash identifier: xDQYk++UIkx1C0liLcofFNsiveM+KNPEuvP/wUV2UQo=
Subject key identifier: 25:BF:F0:22:58:65:5B:BA:35:6B:72:9C:77:7F:2F:97:A7:F0:B8:0A
Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Certificate serial: 019F8F0FFDE0C6B5169CE94E8AC3C44656B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
Manifest number: 086B
Signing time: Thu 23 Jul 2026 13:00:17 +0000
Manifest this update: Thu 23 Jul 2026 13:00:17 +0000
Manifest next update: Fri 24 Jul 2026 13:00:17 +0000
Files and hashes: 1: 3O71K1jq21K-s1uKNpoLxwxfjs4.roa (hash: 9K3ZJvCfhWt1RrhHN5T33vgZGrICVU040sK1K6zYTsw=)
2: 47pEOcmY00O0DUGgL3Q3yGiCQHE.roa (hash: TFpqFNWwVVskKy+bcbitaKF0H2oKC6z9SWwPnfz7znI=)
3: PIJcLY46PYSHoDgSOZxEPuH417I.roa (hash: srTkWvbqzoKRLCgdMr4N/amg9swAtdMCENwqQ8aPPow=)
4: Q7kbnNNnbSsZFlsov6ILXxHCTdM.roa (hash: VhgI6TuEjkaCFM/zUTKmnIt5ZWs9IQY5K9aBKoHxwD8=)
5: Uu5eZINyZZ5cw3XYuxNE-79F3yQ.roa (hash: nAVaVHwJ6YxohUATNt0J/Xnb1/Zu7QH4N9aATQyW7hI=)
6: WyQhrcQcI54FWZmH__lrHoE3FWU.roa (hash: 1vjfP6Nqw8yzFBCOkKdm5HoQUw0v3VTrGmhqLtnS2VE=)
7: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: KWb2k0sbTj+h+kDCYNcH3eOWX22A/QaDD/RXf5UOPrk=)
8: gU8hFrAdmGCPNYOjTnvshD8WKTw.roa (hash: aIL6rAim8v0vCsXPaXDt9dqDXZOi08bdb924MpXBpn8=)
9: l1MJKpxpJrooh4yYg2GeABzuRlk.roa (hash: auDKOkr78/mYWOPaTVOBS3ng5JPSWspfHkibCydvr1k=)
10: rDDIhE0qYfgop087nvS_8O3QtQQ.roa (hash: GNcKt07HGLjSb7pRK/gwNbmbWxAvVfknp/F4+LGsKVg=)
11: uQMfLgCocO-cV1Dq7f8ShCaJ1pI.roa (hash: f2D0zf6gxtDdlo1Fb2b+kXB8Dad/xNYHEZ1SOFzPCFU=)
12: xQbVNLrkghSR1KoodNn_gRkFImc.roa (hash: pt58nZViNxpnnxA6XeQ7GFV7JLxJTNDbZQ9f75iTc5I=)
13: xe57pNkOwTWSUGNF8UIEoEduU54.roa (hash: zBDWDrkIwaQkkFGZ8gEh2OgP8GVyE2SsL8caaKS4W5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:0f:fd:e0:c6:b5:16:9c:e9:4e:8a:c3:c4:46:56:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Validity
Not Before: Jul 23 13:00:17 2026 GMT
Not After : Jul 24 13:00:17 2026 GMT
Subject: CN=25bff02258655bba356b729c777f2f97a7f0b80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:b6:51:e5:c7:85:ad:45:23:93:28:15:57:
9f:d8:36:d6:e6:09:44:8a:11:ef:4e:12:8b:0e:40:
d2:f9:09:ef:d5:9a:a5:da:9b:a5:55:f1:f0:1f:d7:
16:29:8f:3e:31:c2:a6:2e:6b:9f:b4:01:16:68:c3:
89:3e:93:2c:fc:40:d2:0a:59:43:a3:c9:3e:27:10:
15:d8:90:73:7e:a5:af:00:e3:6b:a4:a0:77:05:cc:
80:e6:6f:b2:35:c8:e2:50:7a:00:9e:38:cd:cd:b0:
d3:ef:ea:9e:3b:35:15:49:ad:e6:73:de:c1:0c:40:
5b:0b:14:32:9b:ac:26:9c:92:e6:20:d0:3f:31:44:
f0:17:50:45:0c:58:0b:09:43:e2:3e:22:d4:45:8f:
c7:4e:9f:3a:ac:15:11:a9:e0:b7:a6:67:28:a1:81:
b0:bd:b8:cd:41:0e:fc:e5:56:be:9d:ca:dc:ba:73:
05:f1:b4:8e:22:37:ef:54:a0:47:e0:f2:25:2e:fd:
12:56:44:db:ff:d1:6a:5e:79:81:8f:bb:c1:ff:9b:
f9:cc:11:78:22:2b:c6:11:30:01:29:d0:b0:fa:4d:
69:b9:98:01:2f:fd:9d:50:1f:7e:1d:37:a1:73:d2:
03:e7:76:0e:a1:db:b7:9a:42:f2:c5:6a:ea:1c:22:
8d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BF:F0:22:58:65:5B:BA:35:6B:72:9C:77:7F:2F:97:A7:F0:B8:0A
X509v3 Authority Key Identifier:
keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:8d:3c:7c:c3:dc:73:de:90:50:c3:cf:87:ab:27:4d:d1:e4:
94:de:6d:99:2d:22:3f:b2:79:21:38:a8:35:9d:87:bd:83:78:
eb:55:89:c4:01:bd:46:3c:52:9b:58:14:42:11:48:a9:5a:b3:
7b:02:32:cd:72:74:3f:a9:fd:32:61:bd:e8:b5:49:e2:40:2f:
f9:b5:fb:ec:0c:39:1d:0f:af:b6:d0:98:27:31:1d:bd:f1:68:
c8:e4:e2:1a:51:bd:d2:bf:10:dd:1d:93:45:96:b0:39:61:4c:
3e:af:9f:9a:b3:c6:28:5e:8d:19:85:7a:c7:12:2e:11:0e:02:
d5:c5:97:b1:61:94:e2:59:39:1f:fa:9c:31:39:47:4c:40:06:
9a:bc:70:0b:be:49:3c:7d:6d:27:d1:75:1a:ed:0a:39:b7:88:
e9:c7:4d:71:86:c3:74:c1:b5:7f:70:d5:aa:a4:06:0d:1f:e2:
af:87:6b:b0:3f:95:a8:44:53:9d:0a:c6:a9:7b:8d:5c:32:82:
29:28:7e:52:d1:93:14:c5:ec:71:c7:e3:50:c7:c5:e2:b5:17:
f3:dd:67:33:b2:8c:a4:5d:4d:13:78:eb:6a:75:b0:c0:ba:8f:
52:52:46:f2:a7:4d:fc:98:07:86:ac:48:42:02:f5:ba:1b:a8:
bd:21:7a:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PD/3gxrUWnOlOisPERlayMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0
NzQwOGMwHhcNMjYwNzIzMTMwMDE3WhcNMjYwNzI0MTMwMDE3WjAzMTEwLwYDVQQD
EygyNWJmZjAyMjU4NjU1YmJhMzU2YjcyOWM3NzdmMmY5N2E3ZjBiODBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMe2UeXHha1FI5MoFVef2DbW5glE
ihHvThKLDkDS+Qnv1Zql2pulVfHwH9cWKY8+McKmLmuftAEWaMOJPpMs/EDSCllD
o8k+JxAV2JBzfqWvAONrpKB3BcyA5m+yNcjiUHoAnjjNzbDT7+qeOzUVSa3mc97B
DEBbCxQym6wmnJLmINA/MUTwF1BFDFgLCUPiPiLURY/HTp86rBURqeC3pmcooYGw
vbjNQQ785Va+ncrcunMF8bSOIjfvVKBH4PIlLv0SVkTb/9FqXnmBj7vB/5v5zBF4
IivGETABKdCw+k1puZgBL/2dUB9+HTehc9ID53YOodu3mkLyxWrqHCKN3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCW/8CJYZVu6NWtynHd/L5en8LgKMB8GA1UdIwQY
MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt
ODliNmMzMjMxNWMyLzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy
LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABY08fMPc
c96QUMPPh6snTdHklN5tmS0iP7J5ITioNZ2HvYN461WJxAG9RjxSm1gUQhFIqVqz
ewIyzXJ0P6n9MmG96LVJ4kAv+bX77Aw5HQ+vttCYJzEdvfFoyOTiGlG90r8Q3R2T
RZawOWFMPq+fmrPGKF6NGYV6xxIuEQ4C1cWXsWGU4lk5H/qcMTlHTEAGmrxwC75J
PH1tJ9F1Gu0KObeI6cdNcYbDdMG1f3DVqqQGDR/ir4drsD+VqERTnQrGqXuNXDKC
KSh+UtGTFMXsccfjUMfF4rUX891nM7KMpF1NE3jranWwwLqPUlJG8qdN/JgHhqxI
QgL1uhuovSF6ag==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:32:04 2026 by rpki-client