
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
File: Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json)
Hash identifier: aCKcKhnUaqA8DbKQA3S20oLWMtuYmZd23aS7uVrFJes=
Subject key identifier: A3:44:05:5F:8D:F3:76:EA:C4:05:68:21:29:F2:EF:E6:CA:03:1C:75
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019F946D8C72F9CE00F689EF64EC3C8BC989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
Manifest number: 0D30
Signing time: Fri 24 Jul 2026 14:00:35 +0000
Manifest this update: Fri 24 Jul 2026 14:00:35 +0000
Manifest next update: Sat 25 Jul 2026 14:00:35 +0000
Files and hashes: 1: 1vbf4idXUPCWVm0PjanUNDzo3LM.roa (hash: /Im6rBlfP/hqnXVPz/7A/iNYH4vUpjF3xS/bQj/oQ5Q=)
2: 2KGI0ncnRfDhkkE_GeDt4kg9A6A.roa (hash: D03oFEIOCPyMTFkWyGOuVN6dyHDgUfDh2sP45/yVk0M=)
3: 99pLW5NSdSWyy1K_KuBziUqycLU.roa (hash: iIMALiQte4M3j2/lLwOQNkJ4eCV7WxTe0kTN8g67L1E=)
4: BVH6b7o32zruo819dGQ7RJqUDl8.roa (hash: xnWOB/u8pFkczKp6SQPwHh+agMf57JcMqkeEhSQno3k=)
5: CFRA8brf5sE4J0Vi_mv81svugxI.roa (hash: uvljp7f/z0E6aDzdRUCbiXg1uxB0BXMPXZAh/OfcnR8=)
6: GDpxYSLxVItp_NOPYubGX5UYZok.roa (hash: VWyhjhW15PBvlxYZCfYoqEw7FI0WMEXJbvw8jcCf0xQ=)
7: O95FYcJt2MJqQBJC_AIOSexxhY0.roa (hash: 0fj+Bm1xvWakTGbe1RmNsauUNwiHSCe1QzuuMJQvQKI=)
8: R2Xs7XqXEclO85JXT59oGHv2UUY.roa (hash: nIFGF9nru9tSwOgFOZOY266TEUqFgtMmSxtUiekx1us=)
9: SRu3Oj_JR0Aqw1_pXOqCkyqZiNM.roa (hash: OXGfPj6oOrbejLX45mK4NILgwBe4FcCaUI2RA3UNsvQ=)
10: UGOdZFnWOaDTUW1gBJTVRUvwwsg.roa (hash: 31f0c90jHRTJFbEadEWirIAL83TgIDaQVunpcdqq/Lc=)
11: WBXZwfjVQMhyPd0wAfSbxYfJifA.roa (hash: 7Zi1rF/rVFpFWu59NAjvAspfxDVu7Q9niDEtiwGb2YM=)
12: WLD8giJwlV_VlnnPyLzzRGD0ZiI.roa (hash: lZpSSUF3j7oFZ9xvIx9PXEappD+S6NL4/bWk3CCPoR8=)
13: YnEzVxxydocNJgTIMFRXPna0zB4.roa (hash: ZgavJWzGoXn3e/0BfVR/irboVRcmVNTc0rTuF6DBaG8=)
14: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: 4mtVifP2yPHxQDadKZIm8Ii7ZLfkeViM+Xyg6KECQhg=)
15: fja8EDLSj-GXWp-ja1-kSk00taQ.roa (hash: fV9XPVZHv5y/fbzPwaa+4kN4atFK0nZgUPlx8b1imXU=)
16: o1UYE1jV5PblyZO2iNZ4-raUgSI.roa (hash: 27dqGZSaERzz4YwOJ962/KtMY8HRkVITXFCH3q2fZyY=)
17: qUJVzkvCS28CT-LmqvhYZclQCzE.roa (hash: BntXpT1OhjVzTBdajvz/YjJOLIAqWeZhu5LfIQJSn34=)
18: ulmVQiOp1gOs49EtEkyImPsqtd0.roa (hash: f351U+o3k5FK4942+J3BTuz1lhxg1e9CRMaV4iDlrp0=)
19: vAi4XnPWVuNggeUtAfCEZXDontk.roa (hash: RYl6h4oTJftpVOEqSn4HEPzTH4/b0niM4jxD4+euYtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:8c:72:f9:ce:00:f6:89:ef:64:ec:3c:8b:c9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jul 24 14:00:35 2026 GMT
Not After : Jul 25 14:00:35 2026 GMT
Subject: CN=a344055f8df376eac405682129f2efe6ca031c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:17:4c:6d:8b:1e:41:49:24:ad:21:b4:bc:
01:44:e9:ea:85:0a:4a:2d:f5:14:f0:85:6c:cf:d5:
7c:80:69:97:d4:34:2f:2c:e2:1a:25:be:44:ff:eb:
0a:3b:e7:e5:f2:67:38:41:f1:80:ef:49:b8:bc:57:
86:00:40:6b:68:e0:d6:71:7b:a8:a5:d0:77:53:84:
92:d9:d2:56:d4:31:87:1e:bc:d8:44:58:d6:e5:de:
f3:68:ba:0a:1b:01:93:31:0a:92:30:e8:02:d0:ae:
30:d6:13:87:1b:cd:3c:e9:f6:c1:80:17:09:07:50:
11:6e:92:19:0f:00:c2:ec:8b:46:c7:3e:f2:c7:b4:
6b:8b:af:45:2c:8d:6a:3c:3d:23:3a:c5:f5:93:5b:
40:e2:47:61:b8:d6:1a:d2:b1:9f:90:b3:bb:df:72:
a1:36:90:fb:b9:c8:b3:16:f4:90:ba:90:9a:1f:9e:
61:50:45:65:da:3c:1d:32:09:cc:12:9d:12:86:54:
8f:a8:60:4c:b5:e8:09:07:ac:90:ff:cc:aa:1b:95:
fe:02:dc:09:a3:b7:2f:99:64:c4:fb:00:b4:5b:ee:
45:89:29:59:f5:62:6b:fc:e7:d2:dd:72:6b:0d:58:
0c:21:0f:13:88:46:6e:3a:4e:01:7c:03:eb:f1:ce:
4e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:44:05:5F:8D:F3:76:EA:C4:05:68:21:29:F2:EF:E6:CA:03:1C:75
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:03:e4:51:a1:85:a7:42:2e:32:42:7e:08:93:a9:9f:2a:84:
ef:0c:17:2f:2c:43:50:84:3d:dc:84:04:dc:9e:14:76:94:72:
70:e9:46:22:87:f2:d0:13:cf:45:f4:f4:ce:a9:78:99:22:38:
42:1e:5f:ac:fa:0e:ce:bd:d7:31:54:55:9d:11:60:2d:5c:26:
15:47:90:54:10:54:b1:65:0c:ac:32:5f:40:7c:c3:22:ca:a4:
ed:ec:b6:22:2e:99:47:69:31:47:6a:75:a0:cf:0b:97:81:7b:
a3:5e:8a:ea:b8:c4:18:4d:b5:99:72:ed:60:07:9d:2f:d9:78:
06:3c:c7:44:78:9d:75:b0:27:f2:99:8b:b7:d1:3a:8c:df:22:
97:4a:b8:d9:4e:e3:74:5f:ad:e0:3c:d7:ce:01:88:e3:92:ae:
cb:65:c9:30:96:14:75:23:db:cd:3f:57:cb:b1:91:24:95:6e:
51:02:4b:e2:a4:9e:3d:d9:37:5d:f4:15:9d:3d:45:bb:a9:f3:
3d:bf:2c:1c:18:b9:44:d5:c5:3c:8c:34:9d:1e:fb:8d:38:b6:
7b:65:28:2d:66:42:48:1d:d4:b3:f1:db:0c:37:75:21:34:bc:
19:52:02:0e:61:71:60:1e:33:cb:a0:11:aa:3b:10:a7:f0:af:
a3:ac:d3:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UbYxy+c4A9onvZOw8i8mJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx
ZTllNjUwHhcNMjYwNzI0MTQwMDM1WhcNMjYwNzI1MTQwMDM1WjAzMTEwLwYDVQQD
EyhhMzQ0MDU1ZjhkZjM3NmVhYzQwNTY4MjEyOWYyZWZlNmNhMDMxYzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnAXTG2LHkFJJK0htLwBROnqhQpK
LfUU8IVsz9V8gGmX1DQvLOIaJb5E/+sKO+fl8mc4QfGA70m4vFeGAEBraODWcXuo
pdB3U4SS2dJW1DGHHrzYRFjW5d7zaLoKGwGTMQqSMOgC0K4w1hOHG8086fbBgBcJ
B1ARbpIZDwDC7ItGxz7yx7Rri69FLI1qPD0jOsX1k1tA4kdhuNYa0rGfkLO733Kh
NpD7ucizFvSQupCaH55hUEVl2jwdMgnMEp0ShlSPqGBMtegJB6yQ/8yqG5X+AtwJ
o7cvmWTE+wC0W+5FiSlZ9WJr/OfS3XJrDVgMIQ8TiEZuOk4BfAPr8c5O2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNEBV+N83bqxAVoISny7+bKAxx1MB8GA1UdIwQY
MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct
MzU1MDgwNDE2NTJkLzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk
LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwPkUaGF
p0IuMkJ+CJOpnyqE7wwXLyxDUIQ93IQE3J4UdpRycOlGIofy0BPPRfT0zql4mSI4
Qh5frPoOzr3XMVRVnRFgLVwmFUeQVBBUsWUMrDJfQHzDIsqk7ey2Ii6ZR2kxR2p1
oM8Ll4F7o16K6rjEGE21mXLtYAedL9l4BjzHRHiddbAn8pmLt9E6jN8il0q42U7j
dF+t4DzXzgGI45Kuy2XJMJYUdSPbzT9Xy7GRJJVuUQJL4qSePdk3XfQVnT1Fu6nz
Pb8sHBi5RNXFPIw0nR77jTi2e2UoLWZCSB3Us/HbDDd1ITS8GVICDmFxYB4zy6AR
qjsQp/Cvo6zTQA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:51:51 2026 by rpki-client