
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json)
Hash identifier: yct3TjLOQsAkml99FtCXtrLAlBdRw/FzOlU5xrq2S/U=
Subject key identifier: DA:CC:A4:22:CB:45:33:6C:95:05:11:09:77:85:06:05:95:FF:B3:E0
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 019F9090D260C3F0AE80D9AEB385FA98CE82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
Manifest number: 0E8A
Signing time: Thu 23 Jul 2026 20:00:37 +0000
Manifest this update: Thu 23 Jul 2026 20:00:37 +0000
Manifest next update: Fri 24 Jul 2026 20:00:37 +0000
Files and hashes: 1: 8r1K1OM5qngui5thmoePxmjOGcI.roa (hash: Lc08lhuuRKkKxvYSfc9k1w2HHAp3Uz/xuk8BCj5oIrU=)
2: A1CXr4dOt7xuCmQiPBtgt3iWtAo.roa (hash: GtPqaBuYk/tZ5YQVdapU19lv8Ijc7CBMwLU16C7BxnM=)
3: HMy1wxSppt6a370WgOiNsXQlVPk.roa (hash: nDhnb6wdJq1bcejnMDwW0L0rGJF02QbJ2F6fT5r9zng=)
4: JpNz-5mJsFq7butKO_csWbCEm5Q.roa (hash: VpAczQvbgQ1Ym4VsrRQcCrHDbx+vYYfxzFiOJ1msYps=)
5: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: inIPXwOUsu0TjTS0t8fFwRteb1BdMsibLToUfJvxiBA=)
6: ZuS-gRLhfC_n_ype4xj8F1xzPiw.roa (hash: EZUmDI/jcW023J4DXzaS1TmCl7OpJwcwm1bJROBPAP8=)
7: aOh1-99JcOZxqAcykG11EP2F9_g.roa (hash: 5HlRoHZPsDB8WS/Sga5nh3qNHpa39AaXfQFzVc0mT+4=)
8: eqKnQgR3Z3QzGQfveZTC-r9HgHg.asa (hash: zwc2/cXGVh90A6S8KR+/k+8p7KQXn9Hn6gTyZ7Bdy4M=)
9: fN_qyC3q0DgZifOUjvgGUIVLuLE.roa (hash: Ghng4SHLOPaXZFJc/gZf2VJ82XHj4yYptmX1zNVV1oI=)
10: mP8zF_bJOTWvXPulXS_oUR4vAd8.roa (hash: 4byK92brafemOMsopEaLGHGlykZBiRbGdrhWO9EemSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:d2:60:c3:f0:ae:80:d9:ae:b3:85:fa:98:ce:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Jul 23 20:00:37 2026 GMT
Not After : Jul 24 20:00:37 2026 GMT
Subject: CN=dacca422cb45336c950511097785060595ffb3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:6c:ff:92:01:5f:c4:d0:7b:24:35:21:ff:
9d:e0:31:ce:f8:1c:dc:12:66:f0:f6:3c:62:67:bf:
8b:09:4a:25:7f:d4:b4:ae:ef:1e:c1:19:8a:ba:58:
9c:ae:ce:5b:56:0f:44:b1:ad:21:94:cd:90:f3:bf:
1d:ce:94:6b:1f:1c:dd:6b:64:37:8c:c3:ff:30:45:
84:ae:c6:20:47:8f:c9:26:a8:13:1b:cf:2f:bd:91:
58:f2:7a:b9:4b:75:51:9c:80:b8:6b:1c:43:9e:2e:
04:97:f9:22:d9:ce:3d:1b:89:fe:06:51:68:ad:fa:
08:5e:98:8d:09:af:b4:33:f9:9d:92:fd:c0:0c:14:
61:c8:49:50:b1:a1:91:0e:f1:38:8a:60:10:2e:80:
34:67:91:45:64:2c:26:7d:ed:ca:e8:27:bf:c1:f1:
86:cc:65:a5:06:c2:aa:8a:91:02:5e:89:ba:4d:35:
55:de:7a:16:bc:b8:1b:92:3e:87:1f:e9:b5:16:4f:
de:e9:f0:47:d9:c0:7f:71:31:ca:d6:00:47:0e:74:
1a:a3:fb:ef:41:13:da:80:35:63:db:9a:bc:04:7a:
cf:6a:5e:71:6a:f4:1d:ef:bb:2e:b7:8c:5f:3d:9d:
6b:4f:5a:63:0e:d3:6f:d4:da:0b:29:4c:92:51:82:
44:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CC:A4:22:CB:45:33:6C:95:05:11:09:77:85:06:05:95:FF:B3:E0
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8a:ea:db:fe:2c:cf:a1:99:ca:71:d4:33:c3:90:4f:53:e6:
f1:de:f2:1b:a0:c4:f8:be:30:f5:fa:af:39:be:c9:58:b3:f8:
01:e8:27:93:3e:23:f8:6c:fb:20:3d:d6:cd:ba:e4:24:c8:76:
aa:b4:9e:4e:1c:30:f3:c3:39:87:a2:ba:2e:64:28:b6:bf:cc:
27:2e:a6:03:ac:2d:6b:7f:7c:f8:5c:8b:3a:18:9b:78:be:1c:
b9:d3:38:ec:ef:ee:aa:f7:22:12:46:0c:b2:29:bd:a4:6c:62:
a6:e0:e1:cc:e7:12:49:f8:3e:7e:cf:48:1b:0a:a4:82:9a:4c:
07:38:1d:54:60:6c:f7:28:7c:6d:c0:60:e4:56:a2:ef:57:c2:
b8:18:a4:0b:4b:37:fe:ca:a6:c5:0c:ba:3d:59:2c:07:8e:ca:
ca:d7:25:60:dc:e5:c4:0d:70:f1:f2:03:29:37:18:9a:e2:bc:
0f:8c:5e:53:86:5f:47:93:3e:1f:04:1b:a1:83:fd:d6:7e:5c:
61:62:d6:98:9f:2f:7b:1b:17:82:6c:de:f4:9b:ab:a7:f2:56:
5f:09:68:13:6c:48:90:32:8a:1d:3b:35:c4:44:63:54:d4:eb:
54:1f:9d:0b:81:86:75:b1:11:ea:5a:67:3e:31:49:74:80:2d:
30:e8:ef:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkNJgw/CugNmus4X6mM6CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Y2UxNzljYmUxM2RkYjE0MDEyOTg1YTA2NzEwMGVmOThh
NTU2MDEwHhcNMjYwNzIzMjAwMDM3WhcNMjYwNzI0MjAwMDM3WjAzMTEwLwYDVQQD
EyhkYWNjYTQyMmNiNDUzMzZjOTUwNTExMDk3Nzg1MDYwNTk1ZmZiM2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA229s/5IBX8TQeyQ1If+d4DHO+Bzc
Embw9jxiZ7+LCUolf9S0ru8ewRmKulicrs5bVg9Esa0hlM2Q878dzpRrHxzda2Q3
jMP/MEWErsYgR4/JJqgTG88vvZFY8nq5S3VRnIC4axxDni4El/ki2c49G4n+BlFo
rfoIXpiNCa+0M/mdkv3ADBRhyElQsaGRDvE4imAQLoA0Z5FFZCwmfe3K6Ce/wfGG
zGWlBsKqipECXom6TTVV3noWvLgbkj6HH+m1Fk/e6fBH2cB/cTHK1gBHDnQao/vv
QRPagDVj25q8BHrPal5xavQd77sut4xfPZ1rT1pjDtNv1NoLKUySUYJEoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrMpCLLRTNslQURCXeFBgWV/7PgMB8GA1UdIwQY
MBaAFGfOF5y+E92xQBKYWgZxAO+YpVYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEt
NjJjMDFkYzY5Y2NhLzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEtNjJjMDFkYzY5Y2Nh
LzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABorq2/4s
z6GZynHUM8OQT1Pm8d7yG6DE+L4w9fqvOb7JWLP4Aegnkz4j+Gz7ID3WzbrkJMh2
qrSeThww88M5h6K6LmQotr/MJy6mA6wta398+FyLOhibeL4cudM47O/uqvciEkYM
sim9pGxipuDhzOcSSfg+fs9IGwqkgppMBzgdVGBs9yh8bcBg5Fai71fCuBikC0s3
/sqmxQy6PVksB47KytclYNzlxA1w8fIDKTcYmuK8D4xeU4ZfR5M+HwQboYP91n5c
YWLWmJ8vexsXgmze9Jurp/JWXwloE2xIkDKKHTs1xERjVNTrVB+dC4GGdbER6lpn
PjFJdIAtMOjv3Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:03 2026 by rpki-client