
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
File: FgVYAbd153QwYyFFX9Rj-9knPEw.mft (raw, json)
Hash identifier: a0h5RAIphBdyOqI7Q7K7cNRrsq6Jof3fYXSLVACei4E=
Subject key identifier: CB:C4:03:E9:0A:45:BC:98:38:3F:D0:DC:8F:A6:98:F2:8D:44:42:3D
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019F94A4CCDC3CF81D9A1C6B5876C59AD053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
Manifest number: 07C1
Signing time: Fri 24 Jul 2026 15:00:55 +0000
Manifest this update: Fri 24 Jul 2026 15:00:55 +0000
Manifest next update: Sat 25 Jul 2026 15:00:55 +0000
Files and hashes: 1: 5OzN6WkMQZ2893QvQQeh1zQeMBk.roa (hash: UEFbm/VDQuWhrH3Z6+8u6iL7/RytxiYEwzXkpU4JDLs=)
2: 9lpk2brynM2xPsQoD2BpQ_zryUY.roa (hash: 5503yAKytxSCjrZG64w1D2L5jLnQ2qWaYtDDiQB0YCw=)
3: BK_YNC-4CZnLpU2MN5D2SU1_Nww.roa (hash: 4wgC/AlBtg0IhhyUhxOmG6AUSQksH1PWPid2yPZTqaY=)
4: DeXRHNQguHL5MnAkd4vLEkBdPuk.roa (hash: jikgNispZLFdYZRRNfLqNGOKvltI0BZLoTS7Ocsy8To=)
5: FgVYAbd153QwYyFFX9Rj-9knPEw.crl (hash: 6XxGEtbS6Dl352THR5JlZKdQ2UdbhlJnNu9wZiNqYoM=)
6: Geij325V4WM5RPtPgsMxg4NWK9A.roa (hash: WjGJT3tzXkp6yYst7FryVAv1gkDAqJyeqvTYVUvUsUw=)
7: ICFYqu77x7I38XLSO8ssUz7L2Vs.roa (hash: dMMfHQ8neHfvmT2WRB8flQYBAjRbWn4Uktvrdq2TvDk=)
8: NVG3gQx-M4fHtifzv7Gyok8fpcc.roa (hash: /yXcKa69rk23MJXdzFX1OFbHvmWVWxkOlwFrDG248nc=)
9: RjTmN8HMf7x_UmglxDEhp9feldQ.roa (hash: FCQFOL6JXeSqN4gUCj0DUzq8bOvziLhFb5d4EzXrbIw=)
10: TclUbrd6975ZeDAbyyXvRMcYLoc.roa (hash: lBIrCaTQlgzFumRqzWpz5o4xFc6w43WTF6xdzbBQNaY=)
11: XSfH6TkOWLKUaJiwEVKslm53W7k.roa (hash: R4rmSWlYOJP+yHbi/praA3gZ9kPC7hWIxosq032+G6I=)
12: _kGEBUGq7kLWBkMzztsmxUt8Yac.roa (hash: aHzwke5AaVNef0xFHBn6zKYduyTSoACw0f4GdOnv2LA=)
13: _y9_oZ1j9QVoa3Pm6QWHGmvccL4.roa (hash: 0GxSZz5/AYTFV7FMif3LWKuWNI9TyrkDP3Z8t3AIe88=)
14: a1gVEKKTftm8RFl4rZhQFY0OyO8.roa (hash: Hnw9r4+kKuPwcpnlnTqy2eDwjMjpPBIyp4q0R4PbHX8=)
15: aqiBrEg-iKFR9AZa1xcJa27xMh8.roa (hash: dBYZHrjqoynYw+4Tgz+CPKzSHIlth9jMY838qtkzwqI=)
16: d2KfiOCFI_CHiAtNAM6oRrogzts.roa (hash: aGnK5W2VWJxKvb8pA/bvp+T8gfh4IxqlBIoaRp1QR/M=)
17: dn6G1pY2LNbKrUDJw7SxMUtrFAI.roa (hash: wPo7zgIgs1nz24VCLDjd5mZqRSRNNELTR2RI/qtTA14=)
18: eLvozgAuYfxaIGoHirLhqZjYV6A.roa (hash: ZUBOvdPe1xW/PCbTW1HvwAv+AhE++2YwPZTLvVDoPjk=)
19: fT5RRSA7pYFmUqyJ5T-gWaj1olk.roa (hash: rJof0lgyDLnpsks9qHJvaOJA2mGjhW1JNLu9CMyexnQ=)
20: g9AVu06_Q4WU5cWW9_ns2zOeruY.roa (hash: MshMHXaQOpksxof8uOqYOWVufG7jEPpOyFRZONQHAc0=)
21: ld67joj9v_zM9_tZso1t8wGiMSM.roa (hash: xvopnCuUdWmVK8QrNOdd4mAsv5Icpn4OWN9IOiXh0x0=)
22: oehIIoaZwZTKKEJpI7pzoDQzJOg.roa (hash: iIVEnI4TyBaI6WOcZK2wpHlkxlOZIo7j2YeYWbFpavQ=)
23: opqnkFHoEXKhvq7OyH14rnf0YP8.roa (hash: peA61QsKsh1y16MIgAYhAd+NF8dzDFvXn+YtYDv8l2w=)
24: pgwGH_17ikEwMf3MSqbK3IV4Cq0.roa (hash: f7JKzP80aFNEtVInpJ0ZAyyv7JxQqcN6q5Cb3slS9Uk=)
25: tVOX2uf11NejASRvEd8XuTvbYz4.roa (hash: 4/hQ/jdm5dv3t9r3Ns+INICr4iM1pFkFIGNBqvYO3YM=)
26: z9XB5hGgaOmBuEO-Dz5QRBmeAks.roa (hash: 2ECBZl5uI+4aqCeiR9AYAgadSZzAc8zxKgfahb2aHj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:cc:dc:3c:f8:1d:9a:1c:6b:58:76:c5:9a:d0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Jul 24 15:00:55 2026 GMT
Not After : Jul 25 15:00:55 2026 GMT
Subject: CN=cbc403e90a45bc98383fd0dc8fa698f28d44423d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:17:90:8c:92:ad:8c:ba:b8:80:f1:88:32:
9b:0b:1d:3b:62:e0:c0:ea:a5:4c:60:01:1d:d3:95:
57:10:4a:03:ac:3f:af:44:55:51:f5:a6:8d:02:5b:
1f:bc:39:4e:ce:48:8a:f5:5b:8a:e7:31:e3:10:cf:
57:ba:9c:fb:29:21:a0:10:78:15:b8:79:79:04:23:
7b:8d:67:7d:55:4c:60:8f:ca:76:50:7f:a1:f5:21:
c1:2c:93:25:83:aa:7c:a8:5a:37:27:12:e4:86:18:
6e:5c:62:25:cf:a5:9b:82:03:51:e9:cd:ce:af:23:
ef:ce:41:f4:be:1c:b3:05:e7:27:69:6d:82:40:b0:
4e:d4:34:76:2b:6a:0a:06:5f:d0:2d:45:23:fe:e4:
a5:10:be:70:9c:1e:f7:26:6d:b9:24:91:45:1d:3f:
39:95:7a:3d:8f:8d:bc:3b:97:ea:be:c5:97:26:bd:
86:06:04:25:a1:4f:6a:ec:fc:b0:ea:82:99:9f:45:
c6:9d:58:94:4f:ba:8e:8b:17:a0:14:4a:46:6d:6c:
74:b3:4b:54:05:44:b8:26:54:75:1d:c9:0b:3a:ce:
4a:e9:e5:13:a6:fd:78:75:6d:36:24:ea:08:c8:d4:
d1:ec:11:02:28:23:86:fa:66:09:ec:63:a7:8a:c3:
fa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C4:03:E9:0A:45:BC:98:38:3F:D0:DC:8F:A6:98:F2:8D:44:42:3D
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:be:3c:09:2c:f3:74:b7:6d:67:c7:09:5f:3c:39:e6:3c:71:
fa:db:14:6e:6d:5c:8b:dc:77:f9:fe:78:4d:4c:0f:20:99:1b:
f0:2e:ee:14:51:fe:7d:63:7b:09:eb:61:88:ce:92:e9:6f:9c:
4d:f2:10:76:f4:f5:83:c4:6d:c0:cb:a4:03:32:40:0b:2f:12:
5d:55:0f:0d:fd:d7:ee:ed:37:3b:41:5d:15:ca:17:b5:c4:7e:
7c:13:af:1e:4e:b6:6f:5a:a1:81:28:a5:3f:52:16:51:66:18:
16:04:36:89:50:7f:70:87:12:b4:c4:ce:9b:ce:44:f0:ea:65:
41:b9:ce:63:2e:89:29:50:b2:bc:83:be:2e:3f:b1:10:58:47:
09:19:91:72:c5:36:00:00:75:10:2c:15:4c:d4:f7:f3:04:f8:
15:2d:46:6f:c6:56:37:d2:3d:f9:58:50:6c:ed:39:54:b9:50:
ca:19:0f:38:53:6d:cb:84:8f:9a:12:a0:1f:3f:93:04:73:a9:
95:bc:4d:20:9b:e3:ab:fd:3a:ec:d0:48:d4:a7:7c:4e:3e:ee:
05:42:8b:3e:52:5e:f7:e6:0e:0f:0a:d2:16:2b:b4:2b:95:8e:
b2:b9:82:aa:9b:94:f9:36:ac:fc:77:d6:ae:d4:aa:ed:90:4c:
15:99:77:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpMzcPPgdmhxrWHbFmtBTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky
NzNjNGMwHhcNMjYwNzI0MTUwMDU1WhcNMjYwNzI1MTUwMDU1WjAzMTEwLwYDVQQD
EyhjYmM0MDNlOTBhNDViYzk4MzgzZmQwZGM4ZmE2OThmMjhkNDQ0MjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgcXkIySrYy6uIDxiDKbCx07YuDA
6qVMYAEd05VXEEoDrD+vRFVR9aaNAlsfvDlOzkiK9VuK5zHjEM9Xupz7KSGgEHgV
uHl5BCN7jWd9VUxgj8p2UH+h9SHBLJMlg6p8qFo3JxLkhhhuXGIlz6WbggNR6c3O
ryPvzkH0vhyzBecnaW2CQLBO1DR2K2oKBl/QLUUj/uSlEL5wnB73Jm25JJFFHT85
lXo9j428O5fqvsWXJr2GBgQloU9q7Pyw6oKZn0XGnViUT7qOixegFEpGbWx0s0tU
BUS4JlR1HckLOs5K6eUTpv14dW02JOoIyNTR7BECKCOG+mYJ7GOnisP6UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvEA+kKRbyYOD/Q3I+mmPKNREI9MB8GA1UdIwQY
MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt
MTM1NzE3ZWYzODhhLzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh
LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADr48CSzz
dLdtZ8cJXzw55jxx+tsUbm1ci9x3+f54TUwPIJkb8C7uFFH+fWN7CethiM6S6W+c
TfIQdvT1g8RtwMukAzJACy8SXVUPDf3X7u03O0FdFcoXtcR+fBOvHk62b1qhgSil
P1IWUWYYFgQ2iVB/cIcStMTOm85E8OplQbnOYy6JKVCyvIO+Lj+xEFhHCRmRcsU2
AAB1ECwVTNT38wT4FS1Gb8ZWN9I9+VhQbO05VLlQyhkPOFNty4SPmhKgHz+TBHOp
lbxNIJvjq/067NBI1Kd8Tj7uBUKLPlJe9+YODwrSFiu0K5WOsrmCqpuU+Tas/HfW
rtSq7ZBMFZl34A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:25:59 2026 by rpki-client