
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
File: pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json)
Hash identifier: fkRFeqdPbrahQOjpbInZc+naA6Wfae7RurS7IF6MRu0=
Subject key identifier: F6:C4:62:0B:75:BA:32:A6:7A:3D:E1:94:B7:B9:2E:AA:F7:21:40:46
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial: 019F916C385A4C4DEDA87483C3DB2EFAE339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
Manifest number: 0D2E
Signing time: Fri 24 Jul 2026 00:00:16 +0000
Manifest this update: Fri 24 Jul 2026 00:00:16 +0000
Manifest next update: Sat 25 Jul 2026 00:00:16 +0000
Files and hashes: 1: 0jPQz2jIHrU0FvHsrF-XRZUhtzs.roa (hash: W/W8DjgReH/V+5pe/5+3BKwvc8dz5PRxxtmAIvZ373s=)
2: 3h4R6YLSiEPNhWmPNTd7KLX1X3U.roa (hash: LjFP5plUCIY5Si52J4E1UiGHvt4F3YfbtrTK+AdpPww=)
3: 5-J1fvpVb5dSg5m7dEENTI_oJOo.roa (hash: Bf76p0mhCDufIxhGH9tYyhZ/kCkHidGNBcKyGnHkKdg=)
4: AD3DllK0spDacTrZOzUoNjsaEXY.roa (hash: E0XWVs3lhPoRvEa16ZsuDhIGmQin6DlhoQyYSbyhShU=)
5: BM_HgvB1ieY5WUpFTxU63_9kGNo.roa (hash: iddaFlVd9smwAlHjBr7dZr+J/UTaU0dMdguVDg9n9Xg=)
6: HVCa9r5thWjsE4kAoaBRSlvTvK4.roa (hash: QayBo0rlXlFxr86ACWyOG/yDe9UFq1WxBL/y2YeNVL4=)
7: RHDQQEmbcOrqTmjc99mQ-Eu0900.roa (hash: x+3xhE8Ho8gzcy+Ei5kfiLpvFaz62BymEv0joq6kEPs=)
8: ScPX6tqlw5o1ZcCYpkNMnCrj72U.roa (hash: OWPE9KkCxV1y82ynMwT7Wfz+7H4kVGPyxV8fArKWLm0=)
9: WdQ6he_P5F-cOEeRR1TiPU-zU-s.roa (hash: vQjmo6B5bhn28fdIrHICw7DprEul1mU/rEs6H7jrIrc=)
10: n6eR2WfCXImcpQbWii3OXMfT1io.roa (hash: 9i7i+fHrN+OULt3g7OjkSiNbFJDZzaQ5rh/6y0F1XFE=)
11: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: bSDIcyuktjomGuZVvBmzCkYHsXH/CPlDW4XvC2Me2tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:38:5a:4c:4d:ed:a8:74:83:c3:db:2e:fa:e3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Validity
Not Before: Jul 24 00:00:16 2026 GMT
Not After : Jul 25 00:00:16 2026 GMT
Subject: CN=f6c4620b75ba32a67a3de194b7b92eaaf7214046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ee:ae:87:16:04:08:71:e5:4f:c0:26:a0:ad:
80:16:88:09:69:fd:fe:b3:e9:17:0d:b8:23:ab:8e:
17:69:52:36:5d:56:a1:4e:01:1f:81:2e:88:b6:77:
13:f9:07:a8:31:a7:05:7b:87:54:c5:8e:f2:7d:3f:
14:4c:d6:c9:b6:3e:f3:2a:03:cb:2f:f5:18:40:59:
f2:12:32:66:4b:08:a9:58:6f:ce:ca:e8:f4:a4:f5:
6c:e4:57:4c:4f:eb:4d:d3:ad:cb:1f:82:f9:5e:a8:
df:f9:59:a9:b4:6c:f1:e9:14:b1:88:32:2c:6c:d0:
72:92:43:88:87:22:87:fe:40:37:37:b9:26:a7:3b:
3c:c8:8f:52:40:e3:aa:b7:97:63:8d:1b:1d:e9:28:
bb:45:c3:34:60:da:80:39:b7:b7:79:fa:e3:75:9c:
0d:66:18:5f:fd:be:33:18:17:2b:c4:b0:2e:04:1d:
e2:80:dd:56:00:8a:0b:34:fe:8c:05:96:99:98:72:
d5:43:b0:43:3f:c7:15:9e:37:aa:4e:a3:3b:3d:e0:
15:96:ed:ae:91:eb:a1:27:29:1c:25:cd:df:e2:14:
4a:67:18:86:eb:23:58:82:83:43:88:f2:1f:d4:79:
09:c3:2e:f5:a6:9a:ba:41:ca:e5:98:a0:4e:63:7c:
23:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C4:62:0B:75:BA:32:A6:7A:3D:E1:94:B7:B9:2E:AA:F7:21:40:46
X509v3 Authority Key Identifier:
keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3b:d8:96:5c:16:6b:94:e4:37:d1:6e:16:e6:47:e7:4c:02:
28:fd:7e:04:fb:d0:a0:55:2c:ad:d0:c4:89:6e:33:7e:d9:1e:
39:51:c9:49:a8:8b:08:48:a4:e6:c2:6b:77:08:54:c1:39:35:
3c:1d:af:87:0b:aa:a5:f0:15:f3:2d:19:be:60:2a:29:a6:35:
6e:19:c2:7c:0d:b6:fc:be:be:b5:eb:4d:d7:57:94:e4:48:fc:
ad:39:14:8d:60:ec:48:b9:4b:7c:8e:8a:ba:5f:7a:3e:0c:d1:
ae:95:07:29:88:d6:93:c9:4a:bf:db:16:93:ce:4f:74:79:30:
dd:b0:b7:db:79:7c:a1:03:2c:ae:27:c0:4b:3b:bf:85:61:65:
7d:a0:d9:84:32:c3:11:0d:dd:96:ae:f7:67:98:b2:1b:c5:4e:
b3:18:57:e6:8d:df:23:a4:05:58:c6:43:ff:d1:bd:02:f5:4a:
31:59:cf:bf:07:3c:04:03:fb:8c:af:fe:fe:c9:6a:87:5c:5d:
21:f8:89:24:4f:b3:82:53:e8:23:43:0a:9d:92:5a:5a:e2:dd:
9b:9f:9b:a2:82:4b:98:44:2a:dc:50:ae:b5:fd:b2:3a:9e:c0:
2b:d2:e1:0b:56:c5:7a:63:db:54:5a:07:3a:c2:81:8b:35:87:
a0:c8:b7:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbDhaTE3tqHSDw9su+uM5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk
OTIyMTIwHhcNMjYwNzI0MDAwMDE2WhcNMjYwNzI1MDAwMDE2WjAzMTEwLwYDVQQD
EyhmNmM0NjIwYjc1YmEzMmE2N2EzZGUxOTRiN2I5MmVhYWY3MjE0MDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+6uhxYECHHlT8AmoK2AFogJaf3+
s+kXDbgjq44XaVI2XVahTgEfgS6ItncT+QeoMacFe4dUxY7yfT8UTNbJtj7zKgPL
L/UYQFnyEjJmSwipWG/Oyuj0pPVs5FdMT+tN063LH4L5Xqjf+VmptGzx6RSxiDIs
bNBykkOIhyKH/kA3N7kmpzs8yI9SQOOqt5djjRsd6Si7RcM0YNqAObe3efrjdZwN
Zhhf/b4zGBcrxLAuBB3igN1WAIoLNP6MBZaZmHLVQ7BDP8cVnjeqTqM7PeAVlu2u
keuhJykcJc3f4hRKZxiG6yNYgoNDiPIf1HkJwy71ppq6QcrlmKBOY3wjbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbEYgt1ujKmej3hlLe5Lqr3IUBGMB8GA1UdIwQY
MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt
NDkyNGZhMDAwYjdjLzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj
LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjvYllwW
a5TkN9FuFuZH50wCKP1+BPvQoFUsrdDEiW4zftkeOVHJSaiLCEik5sJrdwhUwTk1
PB2vhwuqpfAV8y0ZvmAqKaY1bhnCfA22/L6+tetN11eU5Ej8rTkUjWDsSLlLfI6K
ul96PgzRrpUHKYjWk8lKv9sWk85PdHkw3bC323l8oQMsrifASzu/hWFlfaDZhDLD
EQ3dlq73Z5iyG8VOsxhX5o3fI6QFWMZD/9G9AvVKMVnPvwc8BAP7jK/+/slqh1xd
IfiJJE+zglPoI0MKnZJaWuLdm5+booJLmEQq3FCutf2yOp7AK9LhC1bFemPbVFoH
OsKBizWHoMi32w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:57:48 2026 by rpki-client