
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
File: bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json)
Hash identifier: o9MZsH0+QGdL4ynIPCs7MU1RcAIskWPa8uBToftKj0g=
Subject key identifier: 65:CF:9B:B3:F4:53:D8:C0:2B:35:F3:08:80:4B:98:7E:7F:0A:72:88
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019F92ED3CC0D68D065B95EB9E1D5E371E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
Manifest number: 1ACA
Signing time: Fri 24 Jul 2026 07:00:48 +0000
Manifest this update: Fri 24 Jul 2026 07:00:48 +0000
Manifest next update: Sat 25 Jul 2026 07:00:48 +0000
Files and hashes: 1: 0r3kkbCIc2trczoA0tV0PpuHTqk.roa (hash: hYQwD9eKL8aadDbtj9scQfTVqsN0ThTdN4voLWbulpc=)
2: 1-HMehk4Z5593y_16dRGWIQyy-Ng.roa (hash: EurbSdpdbDWY2LP7kxCHMWSabQW2ttzuwZ+l6NbR48o=)
3: 7BOKK6Tl9KRbFdrQtKoSEGrM2ns.roa (hash: 0WZmcRa658Us5LFqpepkQ3ZD0Z3AX8LDSbJ/uzthFek=)
4: CDjWTyoS71DXASo2Nj7eHKZDgBU.roa (hash: 0MjLF8Ccc2qdY2KgDxvd+hMdzbz7ozx3zfAkryxvvg0=)
5: J1bOpzfz9N73oSFlFV1z4QDm-64.roa (hash: h6M5XtZ8RlW37k6FxTv2spT98MJgWMzY1tvdNHQE2Vg=)
6: KVv7_M50V2iyBxYsG_dQpH_S9tQ.roa (hash: RkhZYcx1K+qPGt8mNSXPpba3hYgNZEfnfscSk3pS5x0=)
7: KXN5i1ksyLJ3gWuszNVJ4lkPFkA.roa (hash: yrzgi/xgwBaka39UCK/DNXA3vvLMwfJcozcKOOGIcnk=)
8: KdrCfLVD5w7yEsbqRNIHxnRBV1U.roa (hash: 7kkTNpurW7ovwPOEHHf7JVghG0bKfPeVVb6gJUM+74E=)
9: LRk25r9LuPknCpeQnQqi40l9kvk.roa (hash: 8X9g5sy6dgew6Yf57K9el1CFQfJCMTfnKxpcyCAuf/Q=)
10: NRslGXwzqXLsPOGISDrIoXtcmqY.roa (hash: DEaiL5GBQA1ssRMigPA8Fc7/Qa4ewlIX8LGF5gSXnqI=)
11: O1La2Mo1MYQY3pYzpawz3q36YWQ.roa (hash: 9nFQCGf5z1AV/WxHQinreWL3Ers41lsBCvkG3xts94o=)
12: Xk9NYhdXTr3rd3NYRXydtLgFRbs.roa (hash: 5i33Vv91iUeFK5+uzl8a/uVNcXnYM4QXT7Iz6UOmTNs=)
13: YKk6KvjeY_RwM6-fGT6G4_ZJVx4.roa (hash: CjTmvkWgMsl3+rELzvl+uMCWJONzTqE5DK9lcYaQMF0=)
14: _-CNKE2_7z_kM89zZk_UMMjhAl8.roa (hash: Fyok2cPZyLmptoNn7yS8WruQ3n7BVYZFEv5nHH8YA4g=)
15: _yYeoQViTIjqsYE0h5QCAQRGd04.roa (hash: ZBg3y/n8GjKrQaC1IigA7ZREsnmFDIrXAnas9eg3WXo=)
16: a8icz_iV0I-bqil-bMRlOH1Nr5g.roa (hash: tNDWlSbeDLoMRL90ewXHPXUG9G9kPAmkJbfvaEeyj78=)
17: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: ROxMvGlcg4F8cIMkKFNAAVmbb22de7k1FPgDZS0An4M=)
18: f4NJeyU8mkRiFYvmGYpOpcDwewU.roa (hash: Ov55FNUpg10FNgHk1tVb/BcXZfkE1RirhMmKU+WbpP0=)
19: m8JrVpoNYFe6r8CVAdMoHF3wnCE.roa (hash: JPLFA7c7BuHIJXMiW+CczCcnzd/BQTgVn9malVbSP1s=)
20: tbUhg7rUfXFYYfYb_lSW_GU4nIM.roa (hash: iEf9/3LdpD/pQVMxYUZBzp5gwic0pOcGWaOr9ht0nlk=)
21: uxXpXBJ-D42p6U9p0a0HPfcVtCc.roa (hash: 039KJGIrepNrUhPHQkdyjtfEPU4TOfPGiPFKu2opKXQ=)
22: x2-UOiQ1JkGjRhg5Y3BKO6HEghI.roa (hash: Sqa+wceVkaOOyPhxXULzb2svO17UJ0RHxLUOfuxIaDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:3c:c0:d6:8d:06:5b:95:eb:9e:1d:5e:37:1e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jul 24 07:00:48 2026 GMT
Not After : Jul 25 07:00:48 2026 GMT
Subject: CN=65cf9bb3f453d8c02b35f308804b987e7f0a7288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1b:35:6d:48:50:3f:a3:00:ca:83:7b:b3:44:
30:40:10:a3:8a:67:65:cb:46:dd:54:90:3d:0b:92:
75:fa:36:c0:19:17:d1:f9:0a:fe:14:5e:5b:29:8d:
f5:6e:d8:9c:86:28:c9:dc:06:82:a2:61:ef:13:6c:
bc:3b:cd:26:be:2b:23:76:34:4d:a5:99:d7:ff:1b:
7b:35:88:8c:30:6a:a8:48:7d:c5:c4:28:d9:42:1e:
dc:a4:7b:48:6b:33:aa:79:a5:cc:67:35:66:8e:76:
14:26:80:24:93:bb:21:7b:91:1f:ec:40:6b:f3:eb:
5c:a9:ac:44:71:08:2e:c0:8e:ed:1e:69:b5:c7:ef:
53:cd:f4:db:09:bf:6c:11:5c:1d:e0:d3:f3:23:93:
25:11:3e:3f:31:16:59:f1:e6:33:e2:3b:c1:34:26:
83:42:d4:17:97:98:be:56:76:6c:b2:d2:3c:68:c8:
9b:05:e9:e3:1c:14:85:b4:4e:d5:ac:03:82:d2:98:
2f:6e:85:53:f3:89:34:ff:bb:6c:8e:35:36:5f:2d:
ce:dd:bf:22:ce:67:32:93:36:3b:b0:08:39:bc:29:
8c:e6:d1:15:66:9d:2d:4a:4a:d8:70:75:50:8c:5d:
f0:43:b8:8f:0e:07:c6:d4:5e:86:58:a5:18:8b:d6:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CF:9B:B3:F4:53:D8:C0:2B:35:F3:08:80:4B:98:7E:7F:0A:72:88
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a4:67:6e:77:c6:6b:ec:bf:db:2a:3f:f9:3a:08:8a:43:86:
08:f0:23:cc:d1:43:90:ba:59:5d:cc:d0:ab:b9:bf:96:b3:9e:
0b:88:f7:87:35:33:c8:7c:ef:05:4e:35:00:65:eb:48:70:1a:
bb:fc:1f:57:24:66:ad:61:84:07:79:bf:e9:41:e0:2f:84:a7:
54:e1:e0:35:92:57:31:45:63:2a:c5:02:2f:c3:ca:cd:1e:be:
d3:3c:9a:40:7d:73:f8:68:58:c2:10:d2:86:97:48:a9:be:48:
98:3c:62:25:7d:c2:92:87:7a:fa:88:ee:9e:9c:b2:90:5e:0b:
f9:d0:80:ab:77:9b:a3:0d:34:95:42:06:e0:13:62:c8:e0:9c:
33:03:c3:fe:a7:fb:a2:71:da:a6:b7:1c:64:5b:af:ca:08:ce:
89:14:09:de:ab:13:c1:f7:84:3c:c3:09:ce:54:cb:ce:27:67:
bc:23:bc:d4:d9:fb:21:e3:1c:88:bd:4b:b5:53:0e:16:62:26:
2c:f5:5b:d3:91:8e:0f:8e:aa:6d:45:02:ff:56:b6:5c:1a:24:
b1:ea:a0:da:a7:9f:61:be:13:a0:7c:53:76:10:1d:f9:ff:7e:
09:03:18:76:37:d5:00:8f:a0:ef:67:90:10:0e:dd:e6:f2:20:
c8:b6:31:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:28 2026 by rpki-client