
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json)
Hash identifier: Fz0mo9vvgNFi3RiF4JGCKm4n0C9etum+JM9tVEvQidA=
Subject key identifier: 98:8B:2F:38:E1:45:7C:99:07:A0:81:A0:4F:76:E6:6C:96:41:83:1D
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 019E1D592ED63EC0BF512D6249EABA5E4ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
Manifest number: 0DC8
Signing time: Tue 12 May 2026 18:00:44 +0000
Manifest this update: Tue 12 May 2026 18:00:44 +0000
Manifest next update: Wed 13 May 2026 18:00:44 +0000
Files and hashes: 1: 8r1K1OM5qngui5thmoePxmjOGcI.roa (hash: Lc08lhuuRKkKxvYSfc9k1w2HHAp3Uz/xuk8BCj5oIrU=)
2: HMy1wxSppt6a370WgOiNsXQlVPk.roa (hash: nDhnb6wdJq1bcejnMDwW0L0rGJF02QbJ2F6fT5r9zng=)
3: JpNz-5mJsFq7butKO_csWbCEm5Q.roa (hash: VpAczQvbgQ1Ym4VsrRQcCrHDbx+vYYfxzFiOJ1msYps=)
4: KO2DY0u9wdedPHwObsI7cPYbfFQ.roa (hash: chzNX5SpmlEt8RciW6ST6qYzL/lzzcsJcvqyYaAMbaQ=)
5: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: SkHKRse8RN+qd07dJ1OueXBEIfd+/WVddp1bp1RVbuE=)
6: ZuS-gRLhfC_n_ype4xj8F1xzPiw.roa (hash: EZUmDI/jcW023J4DXzaS1TmCl7OpJwcwm1bJROBPAP8=)
7: _foadMbZdx4Kyy6kAY35bfy57Ew.asa (hash: f8gD+BKnO4V+AgW6MN335RkWYKE7LS8tKEs9AypX4GM=)
8: aOh1-99JcOZxqAcykG11EP2F9_g.roa (hash: 5HlRoHZPsDB8WS/Sga5nh3qNHpa39AaXfQFzVc0mT+4=)
9: fN_qyC3q0DgZifOUjvgGUIVLuLE.roa (hash: Ghng4SHLOPaXZFJc/gZf2VJ82XHj4yYptmX1zNVV1oI=)
10: mP8zF_bJOTWvXPulXS_oUR4vAd8.roa (hash: 4byK92brafemOMsopEaLGHGlykZBiRbGdrhWO9EemSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:2e:d6:3e:c0:bf:51:2d:62:49:ea:ba:5e:4e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: May 12 18:00:44 2026 GMT
Not After : May 13 18:00:44 2026 GMT
Subject: CN=988b2f38e1457c9907a081a04f76e66c9641831d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:e5:9d:63:48:3b:88:43:e9:15:08:e9:02:
1d:d5:1e:8f:2e:c8:01:d1:8f:4b:4a:ec:35:b9:87:
8b:e4:2b:e0:98:1f:16:3b:fc:0d:92:75:4a:1b:30:
31:0a:9d:fb:65:24:fe:4f:a6:60:3f:31:8c:2a:bb:
1b:24:17:8e:68:79:ef:67:8d:cb:a4:43:36:e1:92:
c8:95:c3:ee:60:66:40:f4:35:2f:1f:d5:3d:11:43:
3f:2d:4c:fe:da:09:da:9d:52:61:d4:1b:ca:ca:63:
b5:8a:0f:01:a3:9c:26:6a:ce:0c:bc:98:0f:49:fe:
36:43:75:6a:a7:48:80:3e:d5:0f:0f:60:44:14:fb:
cd:ff:e4:93:9d:36:08:11:e1:1c:3c:30:c8:85:a7:
9a:c9:05:07:ba:da:a4:27:8f:17:26:d3:91:b5:c4:
0f:a8:c1:a7:a5:c3:d3:2b:39:5c:63:6b:2b:74:5d:
5a:5b:dd:d5:29:ad:82:47:96:6a:66:03:61:4e:75:
33:0f:61:51:5e:df:ab:5e:e8:94:f0:19:8c:f8:cb:
cb:0b:ca:ec:39:3a:05:8b:ba:b4:f4:2d:f0:7b:ff:
90:19:a9:f5:f6:02:f8:f1:a7:b2:b1:41:40:39:82:
e3:be:82:66:75:69:7b:17:70:60:e4:af:11:38:5b:
00:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8B:2F:38:E1:45:7C:99:07:A0:81:A0:4F:76:E6:6C:96:41:83:1D
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:11:b5:2f:b6:7d:19:ab:59:02:b2:a1:d0:70:36:0f:ae:ef:
bb:74:73:9f:7d:54:8f:98:10:8b:32:bc:ec:ce:77:63:e6:70:
ff:62:f3:fa:d3:5f:93:53:e8:c3:54:82:6f:99:fe:9e:5f:cf:
65:4c:87:cd:75:1e:5f:4e:79:fa:48:eb:33:9d:b0:bb:7f:50:
0e:ce:93:5d:61:f7:3f:e5:4b:3d:6c:77:cd:13:a7:86:15:3c:
75:43:2b:95:88:f2:a0:e4:69:8f:ae:c7:e7:ed:74:7c:f2:a5:
7e:9b:ac:b1:89:68:e5:59:28:8c:09:66:5d:a6:b3:4f:bb:22:
f2:70:0d:c3:5c:3a:f4:c1:22:7f:90:4d:82:90:2b:29:e5:ba:
b9:07:2f:75:43:12:12:93:e7:54:4f:68:82:db:06:9c:24:6d:
d7:f9:14:38:b9:e0:6b:b4:74:ef:8c:f7:78:fd:c2:75:a6:72:
16:ff:a1:91:e2:00:5c:ab:ce:28:4f:a4:f9:23:a7:ff:d1:59:
96:6b:34:59:31:fc:3c:91:85:39:a0:90:da:ea:84:94:93:34:
18:88:57:b3:6a:6d:98:1c:e2:7d:96:b1:e9:95:13:b3:29:c5:
8b:be:cb:4d:e8:7d:92:bb:93:42:c5:44:55:65:e7:3a:32:7c:
1c:33:cd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:06:33 2026 by rpki-client