
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
File: 6AHyPOghwmTWdydTbsGDU3WUxfI.mft (raw, json)
Hash identifier: CIV/DiH1YyMlDzChB5RYMGvHyHacSbIFW8dwgPp+qj8=
Subject key identifier: 32:F0:DD:1A:39:2D:9B:A2:29:D3:B3:57:19:99:15:8A:DD:CA:2B:2B
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 019E1EA3DEBE2F8907C0BC0AB2A0ABBCDABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
Manifest number: 1911
Signing time: Wed 13 May 2026 00:01:56 +0000
Manifest this update: Wed 13 May 2026 00:01:56 +0000
Manifest next update: Thu 14 May 2026 00:01:56 +0000
Files and hashes: 1: 4Ad95JRvdeXEOh1-p8DSYxoEeas.roa (hash: Lh5iJPxcP6pYOkGhzgCKScjKfILFOR4uaZhpWxHfUC8=)
2: 6AHyPOghwmTWdydTbsGDU3WUxfI.crl (hash: G0iOm8CC/wQD5/fcP9Q8tKfA5ec7cYBpI6ucplqiGmk=)
3: AHUKnErfTdd73p4bYOK90XDEM78.roa (hash: 5EaqsItxZ1BQsHU9Kr2YPy6oSupY2lc793z7PhSn48k=)
4: AbY1YkxSFpgyQmaox0DTvnAaAZQ.roa (hash: Pa1IL9mamM/yk2/roqlTQznqixyuJZ5qqNij4nNn7EU=)
5: FU6qfDeRGLTUUYPJh9COMZcbYuQ.roa (hash: TB+QrpXIIEHGgswGPR+KyYTjrwKORb9/h3q/s08f8O0=)
6: GXUGbRUgHF_wrrQsRndE_u1ZPF0.roa (hash: iTsepqpyUm1VVT1XwxzGIWO+pPFlI7X8SSW23YloZhc=)
7: Iu4tkvX9eFepODgJW-D4xKTDxjg.roa (hash: tI+pzuy6NJ/herD8mWytW/brnOXFysFlcBWfh+iy2gQ=)
8: MQ91-_M3HdTKmtUzGxeTt_hx0bY.roa (hash: kaHa7BtTHpBWORAytG3D7pjT5GuCQBg9FTm80u8Ki/o=)
9: PebWzmmguc5-4aQZe_HKUETdWLE.roa (hash: TQfr6FtdSj9u4LPbpAXmyw42DJTb7tOsjyKKAu7N3CI=)
10: Ps9C6gUFgHi7aaKL-5LqKG1lRNk.roa (hash: r74jkZOlx1JZBy0H3IDqp9qZgEG3W+yD8/XxGtvJxmk=)
11: XGfCqgFXc4zN3NEcVdkR_AbqEZY.roa (hash: vrm/Xdu7IdXpfwhj+3D9vsHsNrXWechY8Kxx0iPqPOM=)
12: ZBh08H6VA6CHko16OZIamGu1xf8.roa (hash: k9NrPgoQfkYKCXaBLD0TbREzH8yEwImKG9PJRAocjEM=)
13: aDenCe1KG3TyvEfzC3K0RLYBIo8.roa (hash: O79f1hU9h1ztutsgUtFAtX9An++mnwkM5DagmosPmKk=)
14: bvnYLjO4XnZpQwlp4A4LeramkVU.roa (hash: m98GrPDwOLEJ7ds6AJ3l5MrgQAx4G25F8NpI1kHjfRY=)
15: mFqx7FR9CXpnw3kdZUPrFGbJD1Y.roa (hash: /sd6E/lm/3IAT+F+ugKfMXjWXgoBW3+GutVYmu82Uk0=)
16: mP2GOcaU1PjclhV4W2iGXN0sBnY.roa (hash: AXKGTP6zGRcR7DI8dH98N4TRJhL4YCD6kauJs0pK9YI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:de:be:2f:89:07:c0:bc:0a:b2:a0:ab:bc:da:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: May 13 00:01:56 2026 GMT
Not After : May 14 00:01:56 2026 GMT
Subject: CN=32f0dd1a392d9ba229d3b3571999158addca2b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ab:7e:4f:bf:84:a3:81:7a:b2:fa:2b:6d:c7:
19:68:74:91:08:79:a6:30:e2:f4:b8:a8:3d:32:d5:
c9:26:4d:9a:d8:2e:b6:ce:b7:15:ea:10:d0:13:48:
ba:44:de:2c:9d:e9:8b:dc:d1:07:55:b4:6f:3b:31:
c2:8e:26:b8:d1:ec:61:a6:6e:ee:9f:ef:c9:44:90:
76:72:bc:79:ff:66:98:b6:99:9f:26:e6:3c:5c:88:
32:ab:46:cb:84:92:74:a2:d6:df:9f:b8:db:0e:25:
58:a7:fb:03:7d:90:b0:ee:be:01:97:bc:4c:77:bc:
24:79:77:44:eb:f7:a1:6c:7b:2b:60:d4:04:7e:05:
7d:ad:3a:97:2e:11:bd:89:09:96:22:dd:24:06:fb:
e6:03:ac:cc:f9:29:43:37:68:4b:04:bb:7a:05:45:
1d:59:35:38:41:52:99:8d:87:8e:69:b4:97:2b:a3:
75:5f:3b:13:db:0e:bf:6d:ad:1b:21:fc:72:43:4d:
f4:28:8f:b4:1c:18:20:98:83:5f:21:30:d9:b2:55:
cc:f4:43:6f:32:eb:6d:f2:e5:51:1f:45:d1:61:9c:
a0:1e:51:fc:7d:84:99:f4:7d:44:55:d6:d0:a3:cc:
d1:83:3e:4d:d3:5e:49:7a:5a:30:16:e5:09:d7:eb:
53:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F0:DD:1A:39:2D:9B:A2:29:D3:B3:57:19:99:15:8A:DD:CA:2B:2B
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e4:0c:ac:ce:cf:43:ed:e0:83:d9:ac:5d:87:c2:8e:26:ee:
d8:5c:93:d7:88:48:c8:3d:83:f9:94:02:b4:93:ca:be:38:fe:
6b:6c:63:f3:92:ee:e0:30:04:a2:34:05:74:ca:9a:bd:64:bd:
89:99:89:44:f1:4a:cd:a3:b0:28:a0:b4:11:00:cd:39:ce:f0:
d9:65:49:e1:83:27:58:ed:f4:68:ff:cd:42:c5:a1:24:1e:43:
16:bf:02:30:56:b2:6a:cd:39:2e:c4:a7:40:00:b0:7e:5e:2f:
1d:34:e8:73:07:de:c3:82:79:aa:e5:ee:87:cd:10:f7:c0:65:
e7:f9:18:8c:71:b2:f2:5d:7a:93:f7:2f:33:fe:89:7e:c5:2d:
cb:fa:67:77:f6:05:44:18:d9:c6:56:b4:5a:5d:5c:37:0e:f0:
e2:e8:ba:3f:7c:9d:c9:f7:7c:d6:a7:28:1c:56:b0:3a:cf:e8:
2f:19:64:7a:68:dd:50:5d:e1:ca:ff:9d:c2:3a:85:ff:18:98:
7f:2d:30:97:01:05:89:39:c1:88:44:5b:7a:3a:28:8a:fa:e8:
90:26:a2:39:e9:fc:a3:aa:80:55:72:cd:13:01:53:3b:c6:c4:
02:ae:36:65:1d:13:ea:27:2c:6e:34:1c:51:c4:73:e8:75:aa:
12:73:d1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:18:34 2026 by rpki-client