
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json)
Hash identifier: 0fXX3PZ4UBJzFSV4WoYfEEgLLTMnMsdodCsmZjvDh7o=
Subject key identifier: 3A:4A:C4:49:3A:9B:DF:B8:35:2D:12:B7:D7:7E:53:E3:D8:9C:F9:EB
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 019F94A4E39DC794E1F4CC5CE718C8CAB7FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
Manifest number: 179A
Signing time: Fri 24 Jul 2026 15:01:01 +0000
Manifest this update: Fri 24 Jul 2026 15:01:01 +0000
Manifest next update: Sat 25 Jul 2026 15:01:01 +0000
Files and hashes: 1: 1meLaYKO2Tl3bhYSsOjqpf-iDLo.roa (hash: aO+cgckrFpHbMOnuICmuB1xPZYgfmGDfrFdfNUo8hwg=)
2: 5GG9Ao4ScwCTaqCwAi8GnKy-uIk.roa (hash: BbSg6kfepD5G3rCNp1AAX9gRiwipTBnqXkjrl5sWhEU=)
3: BN0rBq-tNCIxQPqmFjFDV44qYpk.roa (hash: jKAg3bTdZuNi/EJCwdlUsNQtwlFvyoL5tw2t5y9MU1I=)
4: HO2U7d5NcmWKb9JFFOS4xst6Ap0.roa (hash: jIkU93mIxfPKkS6ZV5Em7YZjODmsWtP1r4eJlBEyOBI=)
5: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: i/xmAAKCB/61pv1tqGvDZ91STLPSZLvKfhSFe04NQ+s=)
6: MPhp410gGVKP5mkd7p544bUnjxA.roa (hash: QAd6nrSjBEFE5oh4hmKUtP3RiDgmKVq2ERPv15zMcC4=)
7: MVqGstRqvT-YowTHw8TITZTgPGM.roa (hash: ThTvEwZga99xtCX2NPVf5h3chD/MozOOE+zxnQX4tvI=)
8: PWFCC016ViMQwsbajGFaPsVXWpU.roa (hash: XU7EaVjH4kPpzpd1I6Ws6W/k6BLYUdpZHPYkfznROSU=)
9: R5nQRJbnGIfuNPFQmSy5KyUN1Ng.roa (hash: S8J2YibhrFYHi+05w7dwd4Hy2ZPqL9ZfsTP/e0tcqoA=)
10: SR_Oqw4W1f3U3vok1BVIM_3prOQ.roa (hash: xZRfZAtOOEJIXE0XPSwwSTYi/tKeXWXICqEFbpdqCLE=)
11: gu8Xb0EdAj5QQiEbcZUHWSiqy4o.roa (hash: Qu77EoHxyeTpqNbgaiHUpPIuYcauYq9nmWOzOey7QMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:e3:9d:c7:94:e1:f4:cc:5c:e7:18:c8:ca:b7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jul 24 15:01:01 2026 GMT
Not After : Jul 25 15:01:01 2026 GMT
Subject: CN=3a4ac4493a9bdfb8352d12b7d77e53e3d89cf9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:f2:b5:b0:5a:a0:69:f9:06:cd:bd:96:5b:
5f:2a:a0:ae:02:9c:df:15:5c:8f:d0:d7:b8:8a:99:
0b:b0:8e:fa:89:69:66:3c:db:de:71:91:b2:c4:c4:
94:22:56:c4:c6:86:9b:24:e0:55:5b:01:34:71:4a:
32:83:24:4d:47:07:d8:48:60:69:d4:50:a8:0a:db:
dc:05:fa:4d:1b:8b:e0:a8:9a:e9:e7:c1:c7:d5:eb:
17:d2:6d:84:f3:01:1c:19:ae:d1:cc:f8:84:52:c1:
8b:ad:1f:1c:87:5b:c3:ae:9c:87:6e:e4:3d:5d:ef:
da:f8:59:c7:44:c4:92:30:8c:33:37:a3:a8:dc:17:
07:f7:54:69:7b:0a:6f:0d:8a:49:44:5d:95:47:c1:
bf:06:02:2c:87:b9:7b:c2:08:f3:7b:4c:57:e3:da:
ae:58:41:39:3f:d3:3d:c8:dd:2b:e0:d8:45:9a:d5:
f8:26:b7:95:48:4a:de:ed:c9:04:e7:ea:8b:5f:4a:
79:7b:2c:13:b4:91:8a:f0:45:38:50:6e:41:5f:42:
de:93:6d:b8:58:21:3c:f9:43:6b:3b:6c:c7:a7:3a:
00:9c:0e:94:70:19:0d:7d:a6:cb:00:53:5b:00:1a:
9a:77:d2:0d:8b:0d:5f:48:3f:5f:6c:21:bd:97:57:
c4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4A:C4:49:3A:9B:DF:B8:35:2D:12:B7:D7:7E:53:E3:D8:9C:F9:EB
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4b:e2:89:e9:51:92:15:64:d2:f5:1e:79:a2:53:ef:dd:6f:
12:2d:2e:e9:e8:f1:00:b8:f2:94:e3:a0:77:40:bf:23:67:fb:
06:ad:d7:26:46:e6:26:1b:71:10:b7:b6:5b:2f:10:e9:04:f4:
9e:b7:a0:52:ea:c5:20:f9:9e:be:f1:c9:38:82:83:90:f4:d3:
6f:3f:67:9f:31:21:0e:af:3f:78:59:2c:74:b8:10:d8:ae:d4:
2d:87:56:85:a6:01:8e:2a:f2:f4:0a:96:31:ab:89:b4:ba:dd:
4c:c0:f3:48:cb:fd:b5:1f:0d:cb:09:4c:80:10:b8:43:8d:d6:
9a:fc:ca:33:c7:5c:27:4b:d6:26:90:98:4f:d2:7e:c1:4f:c4:
78:27:51:eb:c9:2e:b3:a2:19:06:ab:a5:a6:a6:54:33:e0:c4:
be:c7:fc:85:27:3e:ba:d3:f2:10:1b:17:9a:ba:52:41:ee:90:
49:f5:9f:19:ba:b1:af:17:85:ec:79:cc:26:a2:cb:e5:87:6a:
10:4f:69:3e:82:b8:7f:f2:f4:1e:11:6e:bf:0c:d8:bd:50:da:
34:ad:ca:63:12:9d:2a:19:af:fa:7a:37:e3:db:21:fe:04:e5:
81:8a:42:8d:bd:ac:b7:cc:7c:28:ac:74:46:c0:7c:cc:ab:dd:
d3:35:43:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpOOdx5Th9Mxc5xjIyrf/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4
OTk1YWIwHhcNMjYwNzI0MTUwMTAxWhcNMjYwNzI1MTUwMTAxWjAzMTEwLwYDVQQD
EygzYTRhYzQ0OTNhOWJkZmI4MzUyZDEyYjdkNzdlNTNlM2Q4OWNmOWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEvytbBaoGn5Bs29lltfKqCuApzf
FVyP0Ne4ipkLsI76iWlmPNvecZGyxMSUIlbExoabJOBVWwE0cUoygyRNRwfYSGBp
1FCoCtvcBfpNG4vgqJrp58HH1esX0m2E8wEcGa7RzPiEUsGLrR8ch1vDrpyHbuQ9
Xe/a+FnHRMSSMIwzN6Oo3BcH91RpewpvDYpJRF2VR8G/BgIsh7l7wgjze0xX49qu
WEE5P9M9yN0r4NhFmtX4JreVSEre7ckE5+qLX0p5eywTtJGK8EU4UG5BX0Lek224
WCE8+UNrO2zHpzoAnA6UcBkNfabLAFNbABqad9INiw1fSD9fbCG9l1fEiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpKxEk6m9+4NS0St9d+U+PYnPnrMB8GA1UdIwQY
MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt
NDBiNmQ2N2ZjZDk0LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0
LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUviielR
khVk0vUeeaJT791vEi0u6ejxALjylOOgd0C/I2f7Bq3XJkbmJhtxELe2Wy8Q6QT0
nregUurFIPmevvHJOIKDkPTTbz9nnzEhDq8/eFksdLgQ2K7ULYdWhaYBjiry9AqW
MauJtLrdTMDzSMv9tR8NywlMgBC4Q43WmvzKM8dcJ0vWJpCYT9J+wU/EeCdR68ku
s6IZBqulpqZUM+DEvsf8hSc+utPyEBsXmrpSQe6QSfWfGbqxrxeF7HnMJqLL5Ydq
EE9pPoK4f/L0HhFuvwzYvVDaNK3KYxKdKhmv+no349sh/gTlgYpCjb2st8x8KKx0
RsB8zKvd0zVDwg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:40 2026 by rpki-client