
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
File: pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json)
Hash identifier: 06vQzwFUmbn1khaPeMobvf1NhQIlS2fmpdSTfeG6XAM=
Subject key identifier: C4:78:58:17:DC:EA:59:47:2E:5E:45:F0:79:2D:4B:03:12:D9:37:D8
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 019F92ED1D32A0237797EB93D125395C67CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
Manifest number: 124A
Signing time: Fri 24 Jul 2026 07:00:40 +0000
Manifest this update: Fri 24 Jul 2026 07:00:40 +0000
Manifest next update: Sat 25 Jul 2026 07:00:40 +0000
Files and hashes: 1: 0JgDt3i_Pnuh9krPjzNeMq8un4E.roa (hash: 8rurD+AjaAV28krVdAh9BeQ4Bjdsbjm+BdrFzIixPG4=)
2: 1itGHFvjoNbs5xoAGU32cy0ec1o.roa (hash: t9DoFpID6R0VUAuMrF0Dz11ojJdiar1HFSpo+0mx3N4=)
3: 4Ujn1cM40AuK7d3M8Vb_toVHYvc.roa (hash: boLdcfFoR2CjpOaduwRGVC1N1M0qA5GCcr4Mvx/naAo=)
4: 7cFFSltaTzKar_lekHqmoQLmOjY.roa (hash: qmBTDHWY1/L+M5j3+Gq1o691+G2ktSyrcJHxvmERmfA=)
5: A0L_daKBfMV7nYJH9utldIZIYsg.roa (hash: c+FA8gvn4grDiZWDzp4xkA96h3MUDZQgiyzCt836SH4=)
6: BbqP_agnvXa4OJUdOK9QaQVVfQE.roa (hash: BytDPBfW+z3MMKn/T3Ezt+s/7on4WxSdnNftScXHcMg=)
7: FRwF0B0Gco4ROslaw5WQ_fteoU8.roa (hash: iwJlFs9CAGbFjQwYdduqrf+rBjoBjoUCcq+hhgbfg/Y=)
8: I5X54DPx7uauNQUcDefAh5kZut0.roa (hash: 8TsQWHSq4ji09j4n0lKP6UovicqKlcYG3YyDhHypqMc=)
9: ISp9QWuwBFWNWpTGWXKpOjrISzM.roa (hash: Z0OOUOdiG9qXCPvPHz7h4VNlbk+VhRmjlt/+Mjs7gCw=)
10: Io_4XzUPcXRxIinpmHUjhwf3fnw.roa (hash: PhYzR0IaxGgGRS8zLIaSr+Golc4Rgs3HH095CF1z0oY=)
11: MDJT-FAiPn_9DLYknk3j3rwfX9Y.roa (hash: t+GUu3cNGl4VMAwSsB6UVCGA1fy1PDPTWxWQhD0/oiI=)
12: Png3Vrdf7Rwvr6R60_UAOFstFhs.roa (hash: OwWHd5ARDEN0zJZ49iwTOpMY+6vycAIPXKZOSrVAHwU=)
13: QODPrlG-VFZOgZAxUGIjQpc2hgs.roa (hash: XwW86R5AwanY37CTPsNgWsJGKeOgg+VqgPHo62gPeX8=)
14: RaUqydxuVYMlyGD1qIP3Rz1-fCg.roa (hash: gWHNmFjPVrWp2UD6ztHPa+UHuG00aGXzZkvk8ZPWwWk=)
15: RgulTuZMFpRPKFFFd9iPrWv4ijY.roa (hash: H4zGvEX4msDBOcT88fZZX2ZMTrjk6+XMq/KcjDj8npU=)
16: RwWAdM2GIRIcYQbBPUmWVwH1U3o.roa (hash: X1u1g1/pf3uA5ljDrjqZKp/m+4xP9A3tl5fJOBJfvoY=)
17: U7Xzbmk0KKfocvxydq8VmFd5g0g.roa (hash: pPelJCCZZvo1A7j45CGl9+CiBnagu4yj9KWZxHJJWkc=)
18: V9DWrwihcQ7ZFKupThtMHNHamdQ.roa (hash: TolCTYmtZTtv2APrLqNfZtHWCxAsjiE7k18nwycldeA=)
19: V_VULBThI1SWyMzlduk_v5YT_-M.roa (hash: 4K3qqngjQDm7OwkvFF4NbH9BZck83XCd1/K8P6OeAw4=)
20: YrMngOCV1qYUZ2G5L0RXdbOK7Ls.roa (hash: hRmDSB2XVzgwKx2/p0YzSDUPDkJ5hlG/bnoU+nNpOPU=)
21: ZbOlnPA6eBi7lfnx-bMIDhnPlTs.roa (hash: 5nftwGk/Uz83q8GaAtwNqws3YmEvcE0dicM0TAYf3go=)
22: aG716DD0CIzYw_sjaqN49_ZDCFo.roa (hash: coSqlgZMR/vBDqAtbIH3D2F3cwarBnvEjPRCTKgXYS8=)
23: cA5JMvfVav4vIZItfGqaNwh9e5o.roa (hash: yR2XFmEbZmO4CBX8f4QWlsjNhSh6G9A18+yJWj3nzH0=)
24: cMVR_b_QBDVweUJSfI-BhE8BMHo.roa (hash: 5OkF4JXRoQO4/NuG+eaOEGFi4SIzgJACKazez2e+UPI=)
25: c_Y24ajzoAD5RlfqVgA3exca5lg.roa (hash: IFM8k/a5xafsnTSxH9J3BD1nHcUW3xulixu5BnLcwXY=)
26: cu6MjtszrBqCo3h_SmtsNHkmMvE.roa (hash: 7i5XYcZRSc2pl6AvojBH/+hEi/ppPd1TZtrZ8yaqsXk=)
27: hqCozSBIFrgOnfBvc04cLMGl6jo.roa (hash: hM1gf3lHt2gai6o5rvakzA9ssqT47EQ0Thnp6IIUJ6I=)
28: jIR7D-Y-6T9frrNQ_jB8OH3dvBM.roa (hash: 55N/2/rlO8cGYdBy6UjnVeslx4/hwZ35mqqVL8TRjTA=)
29: kplCRBMvz5FDjN9xs4gY-4Of8uI.roa (hash: hjMts3DkdNISVUxYtlx0WSdzxZDEcJo7GF5tm01HxYk=)
30: nPz-o0NMmg3ZMjn3lPMLPMpeS14.roa (hash: +nCIzLIahMHCgAiHoBvORWwAy+FTcigMvBYOrLAV22U=)
31: nzlaOINlB5NKeARZuU4upJ4rUbo.roa (hash: wvp+ZL1hcpwpL9YZftKiuaMhKzGKmWKjnp5JIlUh38E=)
32: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: 0NXt1mfOoDchU6uu2N9ZN/lnwMhIcnHtSrBHcHpelBw=)
33: rUz6HCWdiJSjjuELK4f4q_4RBwc.roa (hash: uEA3pVSZxMGWGhwdpljknpzc1pOZ1ehqti0T1frlNo4=)
34: s-krzjzxlyWMOaQcgv5asypyFx0.roa (hash: u+SEy60rPDcFIkNaLxbLV2wMnuLL/3Dxezgfctkb+TY=)
35: uKkVWLDRYXWhA8sUpH0phWL72us.roa (hash: v5Do4C/r5p09LluvO5T2+dRXbWmKv56RqUrsJhNmJL0=)
36: udPHT3MAHWQfgnKd8mzuLRmrdow.roa (hash: R7o1ivace6EgMLJTJx+PqDPGE4a4R22iqkQzk7fDc0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:1d:32:a0:23:77:97:eb:93:d1:25:39:5c:67:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jul 24 07:00:40 2026 GMT
Not After : Jul 25 07:00:40 2026 GMT
Subject: CN=c4785817dcea59472e5e45f0792d4b0312d937d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3d:cd:6e:b3:f8:eb:37:e6:4c:74:40:df:6b:
a8:d4:50:bc:64:fb:88:d2:47:64:98:b9:0b:60:bf:
6d:22:11:0a:e4:ed:18:59:0a:51:98:a9:a1:12:94:
c6:d5:56:3c:79:e8:82:17:6e:39:4c:f6:f1:31:96:
5a:57:23:33:8e:6b:1d:cc:4e:1e:37:71:61:b7:c4:
d9:06:56:c9:2c:ba:0d:34:98:f1:69:77:4e:b2:56:
d2:02:a1:38:44:4d:86:68:ff:3f:fe:f5:50:84:66:
64:20:bb:7b:ec:17:b0:ea:6e:b9:87:7f:dc:61:12:
14:ce:7c:5b:fc:86:14:e0:0b:d0:65:00:82:7a:fa:
dc:93:da:c4:20:34:81:f3:5f:e5:6b:e7:c2:44:67:
30:a6:96:e6:e9:9d:0e:f1:e7:39:df:fb:9c:6f:ce:
1f:a0:f9:8c:e9:5a:b2:9a:ce:42:da:f8:01:45:b3:
75:cb:63:f9:d3:c2:d9:31:e5:af:5c:46:6d:56:8e:
e4:0f:fe:ff:b6:5e:f2:85:40:4b:36:10:d0:4e:b3:
71:1b:b0:33:54:7b:f6:f5:07:48:37:89:79:28:40:
e1:fd:3e:ed:b2:3c:7c:e3:e1:17:a1:f9:12:52:21:
57:20:00:e8:fc:2e:79:9c:9f:ff:ca:7d:d5:62:e8:
d0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:78:58:17:DC:EA:59:47:2E:5E:45:F0:79:2D:4B:03:12:D9:37:D8
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ab:1b:d9:b8:23:09:e7:ff:48:61:d1:01:c1:ac:c9:e8:e0:
51:fb:76:cd:10:b0:f0:62:aa:a4:54:c1:d6:38:e3:2b:b0:7e:
19:11:56:fc:b8:b3:06:fc:e6:96:fb:b1:45:3b:17:95:b7:1f:
a6:e4:49:70:29:ee:f0:39:cb:77:a4:ef:db:c6:fb:17:05:cc:
12:60:09:7e:00:6a:1d:59:88:0d:bd:f7:07:16:f3:b9:77:96:
0e:11:28:90:2f:5c:c9:b1:f0:0d:39:f1:17:f6:e6:ff:1e:78:
d9:2f:c6:a7:6e:d3:4b:47:64:6b:20:90:ce:47:12:21:bb:c9:
43:29:f8:8f:15:75:43:97:2c:1d:10:ed:c5:f2:ca:bd:03:d3:
b3:ae:35:0a:18:69:87:c8:98:1f:0f:ea:cb:ac:06:9d:1d:02:
43:32:83:35:d1:98:6c:55:b3:12:d3:4c:94:cb:f6:45:e9:72:
3d:1e:26:61:b8:cc:b7:14:a4:c5:ed:ac:c9:e1:f0:d2:04:c8:
1c:9b:ad:d6:2f:a4:ef:0c:b3:6a:dd:70:48:6c:6b:9f:e8:23:
f8:65:f9:28:eb:64:18:4e:c2:bf:c5:7b:e3:f7:c4:bf:75:8b:
6d:d8:b2:80:70:b6:38:7f:62:70:8e:0e:4c:9f:81:6b:6a:b0:
f7:71:61:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:03:52 2026 by rpki-client