
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json)
Hash identifier: 29tuO4GhHR9ZRhFY68LCI0VMW5B00KpJZ749vyXYX+0=
Subject key identifier: FD:35:B6:4D:35:FD:3C:B2:39:8C:9F:33:C7:EE:F3:AE:38:90:9C:26
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 019F91358E09397F308053C1A686B3009919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
Manifest number: 19DB
Signing time: Thu 23 Jul 2026 23:00:33 +0000
Manifest this update: Thu 23 Jul 2026 23:00:33 +0000
Manifest next update: Fri 24 Jul 2026 23:00:33 +0000
Files and hashes: 1: 1-QuFrP2FCGdb0e2Ii_z6LaU8br8.roa (hash: rbKcnlSwgT9Djc5Fqvy3u9yC2cYZiJQ7dfTu75ri+mI=)
2: Kn1XIiFvEGGy9jGV0znKGyVVN88.roa (hash: S6dp6R29PAVMF1jsj22PyQ1rploMZXbrpKsVzrPCS0A=)
3: LVf00OwBfRzfAd6G6KBKwIxU48Q.roa (hash: Xvect/bo+Wr+aXHUQYsyRoqwRvv8UXPXPU1oErWXh0o=)
4: c0--gsBa0iR2Bq4yXoW3wsT1ZQU.roa (hash: N/tir1ikaaQzeua5SN0NNzW44/svT02GC4QfKmsuXFg=)
5: i_sg361hESOO6WvkWK2Qx1qnr_o.roa (hash: grkv5sxl6QC67Xl6GRfRbX76QTIOE0y5InqEToBe4KU=)
6: jDLgcLSuJX7PNQqFfW9rGKaqs0I.roa (hash: gYuzALxJxQy3dIl1B+tjxYOVPb7F/ttrTik4SzmNvpo=)
7: nP4kyr3JdbGjZpVgHpw36qMxTPQ.roa (hash: QxXL80gZjutBzTVwYv0W0HB8GqSHL6xx5f7Es0Ckqj8=)
8: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: JJ704zBNXOT9a7Bw9rIqw79seU0IT5PAAa1d1po5aJ0=)
9: uX2HFPa-1T3UMzqcLHxJG1wYem0.roa (hash: mt3IsY/c70SVPfG6w+VGWzHhy8025Nd/iJv2s56ORTs=)
10: xkw2dJ1kdWsWVrDQa7ecIv1ZfEE.roa (hash: TlO1SGSzKaGyjfYONLThtWXquMMxH3GzgJNd8bMLo1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:8e:09:39:7f:30:80:53:c1:a6:86:b3:00:99:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Jul 23 23:00:33 2026 GMT
Not After : Jul 24 23:00:33 2026 GMT
Subject: CN=fd35b64d35fd3cb2398c9f33c7eef3ae38909c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:aa:1f:aa:2a:c9:ce:ea:e9:b2:7d:14:e7:31:
96:12:a0:03:6b:46:e0:fe:db:7c:90:98:d0:ac:87:
a0:5e:db:65:e4:3b:08:4e:b5:1d:47:d6:20:d5:5c:
52:a6:08:da:ab:c7:41:b7:5f:00:08:96:ae:b9:0d:
ad:71:14:f0:e7:1d:e5:df:3a:86:95:11:00:3e:54:
6f:ae:d0:eb:95:42:db:29:5f:32:f2:fd:76:96:21:
3d:c5:7c:74:29:16:30:f2:c2:82:7d:3f:a0:71:9d:
6c:21:51:92:4a:cd:7d:62:f5:f0:0d:d0:e9:d0:b2:
60:f4:8b:0b:82:b3:2a:a8:bf:7e:39:8a:8d:2d:1c:
d8:ee:09:2c:54:cc:5b:e3:cd:1a:ac:b4:bb:c6:1a:
9a:cd:0a:26:90:f7:d5:f2:bc:d6:be:72:7e:91:12:
38:56:50:63:40:53:20:4e:1e:ba:ee:76:f7:99:d2:
a7:08:78:8c:24:dd:6a:0d:80:fb:02:72:0a:d7:29:
67:4c:32:45:05:b2:1c:c6:0d:c7:5b:d1:96:5d:f4:
69:83:7b:83:aa:cb:fb:d8:5a:3f:28:f8:7b:fa:3a:
1a:1f:58:37:aa:b8:e7:19:20:00:17:d0:81:34:40:
f0:fc:86:b0:70:2e:54:61:79:3d:0c:bd:41:d9:2d:
f8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:35:B6:4D:35:FD:3C:B2:39:8C:9F:33:C7:EE:F3:AE:38:90:9C:26
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e2:25:92:5f:84:a9:86:48:d0:fa:ee:13:b2:f9:52:eb:d3:
6c:21:bd:6b:5e:8b:66:c6:44:f6:5e:8e:61:51:63:28:7f:1f:
0e:b0:d8:8c:9d:25:ed:46:81:1b:2e:2b:66:10:56:9b:55:5a:
90:74:54:30:12:59:c1:a9:09:df:44:83:91:a2:1c:15:1b:1e:
6e:a3:a6:6c:d2:b6:3e:6e:ed:96:ad:f3:87:1f:de:a1:b0:4c:
78:62:26:6e:57:4f:7f:c1:6a:02:3e:b9:8d:be:b6:72:8d:82:
5d:dd:3c:ab:f5:79:8b:53:ab:36:b2:21:bc:7d:2f:fc:85:f9:
d0:52:10:7c:b8:fe:82:fa:fb:96:f4:8c:33:58:ba:02:0e:83:
47:27:8a:c8:e0:bb:1c:c3:c7:3f:6b:c9:6a:89:27:d4:ff:f0:
88:55:9a:e6:3f:ae:78:82:51:7d:e6:87:bd:12:8a:ce:c7:0b:
4f:31:05:1d:dd:d6:6b:f9:3b:14:16:d5:07:51:20:8c:72:d8:
46:d4:a9:c4:52:c8:4c:ac:1b:88:46:e1:8b:da:f2:66:7f:2c:
54:56:30:8b:89:50:79:d4:48:66:6b:66:b7:9c:1b:68:12:d8:
d3:2f:59:70:fc:a0:2a:ae:b3:27:7b:1b:b5:63:c1:11:2b:2c:
bb:16:ee:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:51:49 2026 by rpki-client