
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
File: z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json)
Hash identifier: /q4q8kur6uEFE/Tyz+rivuONwioJpbRVDntaHDos8ZI=
Subject key identifier: 36:E1:41:61:62:AC:DA:5E:DA:CB:5F:21:2E:D0:59:8C:36:E4:68:EA
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial: 019F94A4FC6491E5452A519F4F97F912E919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
Manifest number: 19DC
Signing time: Fri 24 Jul 2026 15:01:08 +0000
Manifest this update: Fri 24 Jul 2026 15:01:08 +0000
Manifest next update: Sat 25 Jul 2026 15:01:08 +0000
Files and hashes: 1: 2KQ5ZpfUylUAta7ExfQtvEHkS4E.roa (hash: /7rSc6G6wbTQgfr6iC9XwInfsvw0txiwcKpJmnw/K7U=)
2: BgUnjCgAPDOfR4z_FTd_TpHVJ0U.roa (hash: heMoRIVQ8DTd9ArcP8LzeG/e00sDzEjtg2TIan/SctQ=)
3: Hhm4-xXrJa_SdRnbJRHBG-1HmF8.roa (hash: 2g901f2mJ95YUSaapsTP70+dUsRcUfZNWLYXTjA8fL8=)
4: LBK2m0x43uiy3CDrXewo6CElebE.roa (hash: Melk19K0g3bAymWD/+lvWlNHh7zUQK9z4QHwwE2U65g=)
5: NOCmADB0YfK3LWDGeRgeFYCfPBE.roa (hash: xAuAZnTz2KJs/xd23BdN6vcZ5UZS82kmFT5uSD3/ME4=)
6: PLUJiaThhf8vD4EoQGrmDtWUb0E.roa (hash: Ua3H2xX0J2QbkZIMHCzW8qMZcFmI3y1PNsZ7jGLEkQo=)
7: Q0_TTJ70K_PUBlOuwEh20FJ9gVg.roa (hash: KTqGXYAG8vVcFM7tQyAq5GIJNdRRd5/01ktBU+ZaPWk=)
8: RJy0_gErJZBzBgAp03Ym2G21A8g.roa (hash: 1Cgh17v2P9NMqOn+8E4Hl2KRYgZQoFx9YjOwa8NDWuI=)
9: Yt-w69_I1wza2CvDEypwz6EYLMA.roa (hash: T9k6Uc+A+ePGrkY6SKOEbGhVQItgNDio3FncjOloEKs=)
10: c3bKBXQu79Jy3dO_Hl07eYXslQQ.roa (hash: lJGAiR7fMIYg94I1p5YOTlfAqnFVCGIz11XSv3uLwPE=)
11: ifWB4vc9qFtHVpS0YI5P2BXL05w.roa (hash: 72Jjs1xc2pL2LvIq/8wmACvnX6p0xGHA2swVmmlBIwU=)
12: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: X9TUyL4AryiG3+mPaXBsaYoqtKOiy5pMYlx+oVY1I6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:fc:64:91:e5:45:2a:51:9f:4f:97:f9:12:e9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Validity
Not Before: Jul 24 15:01:08 2026 GMT
Not After : Jul 25 15:01:08 2026 GMT
Subject: CN=36e1416162acda5edacb5f212ed0598c36e468ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:bb:63:a3:c9:8b:71:dd:83:4c:b0:f0:aa:
c7:e7:f0:d9:62:cd:05:c4:52:2f:dd:12:ee:95:fb:
e1:97:b5:4b:3c:ef:3d:8e:14:0f:01:c6:8d:1d:a0:
34:3e:b8:2d:23:f6:e5:1d:c8:05:18:54:23:9d:7d:
26:d5:1a:2e:04:5c:10:5e:4d:5e:d4:6a:0b:f9:b9:
ae:55:2e:1b:9d:3e:c3:8b:ec:62:50:f8:f0:03:6c:
11:c7:ef:ad:8a:f0:4b:35:78:c0:c5:b0:a3:af:35:
a3:8b:c9:cf:48:94:58:ea:fe:b2:8d:4c:47:ad:8b:
6a:e0:c9:08:71:95:12:29:5c:b8:21:61:2f:c5:5d:
c2:da:0f:58:a0:8f:67:19:33:5e:09:0d:56:9a:dd:
48:7e:ce:eb:c2:af:51:91:b5:f1:7d:81:5a:86:47:
b4:d7:8b:3a:ad:30:a7:a6:b0:c9:e8:1f:ab:72:72:
c4:9a:cf:35:1c:9f:3a:5b:86:30:d6:c8:e3:2e:dc:
1b:e3:82:d7:72:ca:fe:3b:36:f3:fc:99:bd:e4:81:
45:b1:d5:3d:c9:7e:2b:8d:58:ba:aa:44:b1:19:d3:
22:da:06:23:9b:72:74:33:1a:4f:d1:f3:3f:04:35:
fd:c9:57:1d:a5:8b:97:b5:2c:be:63:04:ed:c8:17:
d6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E1:41:61:62:AC:DA:5E:DA:CB:5F:21:2E:D0:59:8C:36:E4:68:EA
X509v3 Authority Key Identifier:
keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e0:88:76:9f:7c:6d:8b:51:31:38:d0:b1:17:d3:56:88:01:
56:54:32:41:dd:7f:92:1b:a8:d3:01:e8:e6:26:3c:36:29:72:
5b:d2:cd:0a:d6:48:df:68:aa:f0:9f:68:e6:43:b9:e5:69:43:
09:8f:bc:06:30:a7:65:40:83:7b:3a:be:77:61:d5:1a:46:9d:
a3:31:c4:43:80:e7:48:04:8e:4f:44:b3:83:db:45:bb:11:33:
01:df:f9:f2:22:28:81:7e:2b:75:30:27:19:be:c3:bf:e1:05:
0a:d0:68:85:f0:e1:78:73:d0:34:b5:4a:74:fc:8f:5b:a5:3a:
dd:92:3c:b0:a6:dc:2c:ba:94:dc:46:9b:52:05:c9:fe:66:db:
77:b6:86:bf:73:a7:b9:62:5f:70:40:d7:98:5b:29:79:26:62:
c5:9f:1e:59:dc:69:75:cd:bc:9b:e0:5f:df:19:46:8f:17:ff:
a5:ee:d7:64:cc:6a:c3:06:98:83:81:5a:14:fe:18:d8:6e:b8:
c2:26:40:aa:06:0d:ba:18:f6:ba:ab:d8:c3:da:f0:66:48:49:
ee:a1:7a:74:db:87:2b:21:45:5b:4d:3a:c3:9c:34:69:e2:fc:
44:46:27:db:60:0b:42:63:e7:fe:b9:d2:b6:58:78:d1:15:9f:
c1:cf:67:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:16:56 2026 by rpki-client