
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json)
Hash identifier: 20uLvmDDtxu73eRV3GwU3czX5L1tczEBG0QWPZ6Z7SM=
Subject key identifier: 9F:21:83:46:9F:7E:D3:B6:51:67:4F:D3:74:45:1E:C1:B5:0A:DD:09
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial: 019F91A35C23DEB337A3152737E678BC94AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
Manifest number: 19D6
Signing time: Fri 24 Jul 2026 01:00:30 +0000
Manifest this update: Fri 24 Jul 2026 01:00:30 +0000
Manifest next update: Sat 25 Jul 2026 01:00:30 +0000
Files and hashes: 1: 3Wnyz1QTSGCfnbdCaxBn0wvUFQE.roa (hash: 2t4MdegjvS7rP/iU7Hj7aColKHs5vThbvVnxW3FHn4E=)
2: 7Me5WXJix6bhmJacUAumrmlySgk.roa (hash: YrS81rUpK2c6Zib9l6JvC9RAlucS71SZij2OkYz09Wc=)
3: E_JIFXCdpHTYansz7Uag7XJbSgA.roa (hash: vrXsyINww9wzdu3W3f7WUvYM3ATh6Z+TuuA6xY/MZdM=)
4: ItZWQRkmls0VdU1nZishuLkd2eA.roa (hash: MAZ2gdn6yEjn53jWafviOI61qsnSQITSXZRf/tbFFMA=)
5: Rf1IRr7ln3MYijmbQD8SHel_MDs.roa (hash: +BoNoFKi0FqndtLU0znTacn8SBNepPAZnhdtF4/C/xc=)
6: b05E_Vve2D3HEly9RuClmeKIrnc.roa (hash: jAiLiRN3aJpdKIHHJepD10dCfO/MTNxTxutiEjOu3JM=)
7: hRvNf4cAxilQC-NZ8WqkxMmFzZw.roa (hash: aS2aTaLKTapOqcPpZtmi37UtMDJpwWKs703ZEIp9zRU=)
8: liK1oYSYzTAoS7kAatnii2Wzx_E.roa (hash: gb2CbqJOVrEPYPGiLKPKwSB2WKz26ugg+uzkt83v7JE=)
9: sr7WacAmmZWiXvAsDGzYF2vtdAU.roa (hash: w9eNa2MvhIGo2u1BISjxj71+HEaSC/goxWqp1PF6zLU=)
10: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: 00Fl6lgpckRwSPnU3JVX0UrSr3uLKqXj+brUFfRkIEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:5c:23:de:b3:37:a3:15:27:37:e6:78:bc:94:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Validity
Not Before: Jul 24 01:00:30 2026 GMT
Not After : Jul 25 01:00:30 2026 GMT
Subject: CN=9f2183469f7ed3b651674fd374451ec1b50add09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:d7:af:b0:1d:be:d8:82:1c:3e:3a:f4:9f:
0d:18:5d:f9:e0:66:46:88:22:6f:25:27:a1:65:f5:
fa:c6:5a:f9:25:53:c5:fe:21:cf:6d:67:8e:2c:db:
f8:5f:fc:5b:dc:43:14:42:20:74:40:9a:6a:65:ae:
0e:c3:3e:d3:e1:80:fc:57:0d:8d:3e:be:c7:c2:57:
1f:c0:b7:bf:0a:d8:1e:7c:44:8e:ca:f9:7c:3d:1e:
c2:85:1f:ce:12:6a:81:d4:09:5b:de:67:d2:15:b6:
50:fc:c5:56:0c:3f:64:69:40:3b:d0:6b:d1:d9:bd:
0e:32:23:04:a1:57:c7:a4:c0:11:8e:fb:7c:76:da:
c2:41:f5:51:6f:8c:75:dc:12:16:40:82:6b:97:67:
3e:b9:d5:de:fe:fa:77:51:62:4e:5d:b0:f4:7a:f2:
51:68:02:26:70:77:a4:61:55:ef:14:f8:38:28:25:
ad:38:66:06:03:50:fe:56:73:bd:bb:b2:0e:db:4d:
f3:b0:8f:06:ac:58:7d:bb:e7:c8:92:f9:16:12:8d:
57:d1:61:a1:75:a5:e4:f8:81:a0:77:27:c5:23:b4:
21:44:c6:cb:ff:eb:5e:6c:eb:32:62:89:7d:94:e1:
e7:27:30:99:b3:5c:fb:7e:95:59:05:dd:02:32:d6:
8c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:21:83:46:9F:7E:D3:B6:51:67:4F:D3:74:45:1E:C1:B5:0A:DD:09
X509v3 Authority Key Identifier:
keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9d:c8:3c:b2:0e:d8:b0:fc:05:1c:9c:e8:c4:cf:13:b0:f3:
ee:7e:8a:8a:5a:1f:c7:0f:19:15:1b:c9:76:67:76:f1:cf:23:
f4:f2:ed:b4:9f:65:9b:5b:3a:30:15:63:c5:ac:23:17:ec:69:
33:96:70:82:ec:da:c0:53:ec:44:7f:4e:a9:7b:c5:91:aa:dc:
32:b0:61:58:49:b9:97:c6:fd:5f:0d:c2:5a:71:ab:2a:6a:4e:
26:38:c2:74:c6:8f:2c:24:56:08:0c:6c:8b:64:af:5d:76:50:
e5:77:d7:88:b4:2d:b4:90:14:0d:d9:05:a8:74:c4:a0:bf:5d:
4b:02:b7:5f:63:84:4d:f2:2c:1e:c9:57:f6:dc:e5:4f:ed:39:
43:ba:58:57:a2:11:cb:ef:ac:d7:d3:c7:ac:af:1b:ba:fe:c4:
5e:ff:66:2c:18:f3:87:d6:0b:6f:87:6f:f9:e2:b2:9c:fa:75:
f9:9f:6f:fb:ae:04:7b:32:d4:3f:1c:c8:a3:bd:8d:d4:03:fc:
9a:84:85:a5:08:6a:b4:cc:7d:fb:32:34:a6:7c:88:00:c6:e3:
5c:30:e4:f1:02:c7:13:fd:01:3c:1c:e1:ea:49:17:c0:b0:f4:
ea:4f:0e:1a:8f:a3:83:e5:69:af:87:8c:c1:ca:bd:ab:c9:92:
24:f4:25:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro1wj3rM3oxUnN+Z4vJSuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw
OTliYjgwHhcNMjYwNzI0MDEwMDMwWhcNMjYwNzI1MDEwMDMwWjAzMTEwLwYDVQQD
Eyg5ZjIxODM0NjlmN2VkM2I2NTE2NzRmZDM3NDQ1MWVjMWI1MGFkZDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1XXr7AdvtiCHD469J8NGF354GZG
iCJvJSehZfX6xlr5JVPF/iHPbWeOLNv4X/xb3EMUQiB0QJpqZa4Owz7T4YD8Vw2N
Pr7HwlcfwLe/CtgefESOyvl8PR7ChR/OEmqB1Alb3mfSFbZQ/MVWDD9kaUA70GvR
2b0OMiMEoVfHpMARjvt8dtrCQfVRb4x13BIWQIJrl2c+udXe/vp3UWJOXbD0evJR
aAImcHekYVXvFPg4KCWtOGYGA1D+VnO9u7IO203zsI8GrFh9u+fIkvkWEo1X0WGh
daXk+IGgdyfFI7QhRMbL/+tebOsyYol9lOHnJzCZs1z7fpVZBd0CMtaMnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8hg0afftO2UWdP03RFHsG1Ct0JMB8GA1UdIwQY
MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt
ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi
LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe53IPLIO
2LD8BRyc6MTPE7Dz7n6Kilofxw8ZFRvJdmd28c8j9PLttJ9lm1s6MBVjxawjF+xp
M5ZwguzawFPsRH9OqXvFkarcMrBhWEm5l8b9Xw3CWnGrKmpOJjjCdMaPLCRWCAxs
i2SvXXZQ5XfXiLQttJAUDdkFqHTEoL9dSwK3X2OETfIsHslX9tzlT+05Q7pYV6IR
y++s19PHrK8buv7EXv9mLBjzh9YLb4dv+eKynPp1+Z9v+64EezLUPxzIo72N1AP8
moSFpQhqtMx9+zI0pnyIAMbjXDDk8QLHE/0BPBzh6kkXwLD06k8OGo+jg+Vpr4eM
wcq9q8mSJPQlIw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:53:55 2026 by rpki-client