
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json)
Hash identifier: jHyRs+zAaP1xJeqMuG/M1WAZYkr+TJgW72xNLmoO72I=
Subject key identifier: 29:55:D7:08:8F:C3:70:2F:5A:A0:8A:07:B9:C9:8A:A3:DF:1D:15:1B
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 019F9324564143545E7EEE22BDF486D5AFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
Manifest number: 19DC
Signing time: Fri 24 Jul 2026 08:00:59 +0000
Manifest this update: Fri 24 Jul 2026 08:00:59 +0000
Manifest next update: Sat 25 Jul 2026 08:00:59 +0000
Files and hashes: 1: 1-QuFrP2FCGdb0e2Ii_z6LaU8br8.roa (hash: rbKcnlSwgT9Djc5Fqvy3u9yC2cYZiJQ7dfTu75ri+mI=)
2: Kn1XIiFvEGGy9jGV0znKGyVVN88.roa (hash: S6dp6R29PAVMF1jsj22PyQ1rploMZXbrpKsVzrPCS0A=)
3: LVf00OwBfRzfAd6G6KBKwIxU48Q.roa (hash: Xvect/bo+Wr+aXHUQYsyRoqwRvv8UXPXPU1oErWXh0o=)
4: c0--gsBa0iR2Bq4yXoW3wsT1ZQU.roa (hash: N/tir1ikaaQzeua5SN0NNzW44/svT02GC4QfKmsuXFg=)
5: i_sg361hESOO6WvkWK2Qx1qnr_o.roa (hash: grkv5sxl6QC67Xl6GRfRbX76QTIOE0y5InqEToBe4KU=)
6: jDLgcLSuJX7PNQqFfW9rGKaqs0I.roa (hash: gYuzALxJxQy3dIl1B+tjxYOVPb7F/ttrTik4SzmNvpo=)
7: nP4kyr3JdbGjZpVgHpw36qMxTPQ.roa (hash: QxXL80gZjutBzTVwYv0W0HB8GqSHL6xx5f7Es0Ckqj8=)
8: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: cmyoOJa5V7900YltvrIfSVOlsGofu46iJlcPxHMmBnI=)
9: uX2HFPa-1T3UMzqcLHxJG1wYem0.roa (hash: mt3IsY/c70SVPfG6w+VGWzHhy8025Nd/iJv2s56ORTs=)
10: xkw2dJ1kdWsWVrDQa7ecIv1ZfEE.roa (hash: TlO1SGSzKaGyjfYONLThtWXquMMxH3GzgJNd8bMLo1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:56:41:43:54:5e:7e:ee:22:bd:f4:86:d5:af:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Jul 24 08:00:59 2026 GMT
Not After : Jul 25 08:00:59 2026 GMT
Subject: CN=2955d7088fc3702f5aa08a07b9c98aa3df1d151b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:76:ac:68:ef:1f:46:b6:96:59:6f:f4:f5:
68:85:8a:86:76:bb:1b:09:cd:8b:64:17:a8:4a:65:
b9:41:cf:02:2d:73:a6:7e:ce:2a:44:e4:ad:da:87:
ac:54:fb:12:95:ea:95:c6:50:8a:2d:f3:06:6c:95:
55:f2:30:81:14:67:9d:be:c6:68:20:ee:a5:cf:c4:
50:75:38:e7:2d:25:8b:6b:21:1d:ad:bd:cf:dd:f0:
2e:28:82:cb:1c:95:90:2a:2a:cc:11:5e:86:59:31:
7b:ab:07:eb:23:9e:f0:f2:be:27:19:0e:4b:17:1a:
63:d3:89:e5:3d:b8:29:2c:f0:d7:3d:9a:6d:76:05:
f6:ba:06:1d:61:55:c0:36:ed:6f:71:d2:32:0e:5b:
94:a3:08:dd:93:cb:58:12:4b:61:c2:74:ae:8e:31:
7a:15:8e:5f:52:09:da:48:19:71:48:fa:39:00:cb:
85:b2:30:81:b1:a7:e2:a4:bb:3d:27:2e:ee:24:e9:
1c:a5:6c:bc:e9:4f:96:98:19:c1:24:f8:8e:07:17:
5a:94:20:2b:a3:06:a7:94:17:c1:ae:84:fb:fa:b4:
9e:aa:96:2c:f2:48:af:e1:ea:58:8f:2a:de:b8:8b:
81:98:94:64:e6:c0:32:d3:0d:3b:c3:16:60:fb:32:
66:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:55:D7:08:8F:C3:70:2F:5A:A0:8A:07:B9:C9:8A:A3:DF:1D:15:1B
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b9:86:2c:64:6b:e1:c4:51:f7:21:6f:45:45:e8:25:1b:15:
7b:68:14:79:b6:e9:ad:58:dd:c9:cf:88:ee:24:d1:2e:7c:d1:
85:81:fb:80:21:b0:18:60:42:47:d2:06:7c:d0:6c:07:13:f6:
1c:fb:57:31:08:7b:d0:aa:da:9b:68:76:c5:dd:a7:18:f4:67:
ce:cd:e4:19:25:fc:fd:03:68:b9:ee:a7:5c:dd:d5:34:1e:70:
f2:20:6e:47:98:07:03:da:34:d9:f7:f6:28:3c:72:8e:ed:6a:
b0:11:7c:eb:6d:00:64:ec:e9:2b:7b:d1:a3:29:c0:6b:6d:4f:
db:c7:72:d0:2d:76:6e:9d:00:16:ab:14:d5:e4:6f:74:fd:ad:
54:28:b2:71:4d:4d:d9:c0:eb:e0:55:81:ef:cb:8d:eb:f7:e7:
56:3e:87:72:a1:32:97:49:c1:8f:60:c1:55:97:35:6f:2a:ac:
0e:2a:bf:8c:68:a0:9c:f4:73:3a:93:e5:d3:31:c5:d4:0e:fb:
e6:46:e2:2e:54:e2:9a:fd:eb:a9:db:89:f6:85:16:c9:65:10:
5a:07:37:eb:ca:80:d9:55:5d:bd:57:b0:cb:20:c4:6e:66:7b:
38:4b:33:b5:6d:48:e4:9c:e9:3f:00:cb:22:d4:bb:c1:17:a8:
27:75:3e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:56:31 2026 by rpki-client