
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
File: KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft (raw, json)
Hash identifier: BTeRWE3BT6F7ND1jFh9oGwlOb5MFXDOSN26UnfLAns4=
Subject key identifier: 07:C0:1E:3E:D1:A3:B8:8C:1A:A5:59:71:DE:50:C6:56:F4:25:75:62
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 019D2B4EA5F97A410776FEBAAD10113336C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
Manifest number: 0D6F
Signing time: Thu 26 Mar 2026 18:01:07 +0000
Manifest this update: Thu 26 Mar 2026 18:01:07 +0000
Manifest next update: Fri 27 Mar 2026 18:01:07 +0000
Files and hashes: 1: 2E-MME-lm4K0uyBTuIg5ZM5-8I8.roa (hash: JzkT3L/H7HMV5VqAPBU8OB3GqfswpWq+Tu8hcXApBv8=)
2: 5ELvi2prTaHlQQw-aKR9uMwtFA8.roa (hash: 8uiks0UyE3YVuRlbo43yM8bQQXEWa2U0fKuakGVSNAU=)
3: D7_QPk2qAFTVuCWwAG0izANeaRc.roa (hash: n5F0AgHZRQ1JYqQ0higj9UJBRqSdojfEHkwWOchuMIU=)
4: KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl (hash: zgnq+1C6sLZ5ei83khgjoaPRrTCjVO/WN6+SjEqWR1g=)
5: PV9nn29yp2PBBJ08DH1Hzy77tzk.roa (hash: W2PgmiS8Op18Md9+/XFq6wqhLS1g6P/+ZLsWwjKbTR0=)
6: RB0GL9giB0u7zxwi4U8zR08ihPw.roa (hash: Szh3L0AtY1SzUtQRUTJ6CEK6mqyoxGEDQuesq2qnd/s=)
7: YzFna3l-BC64_Hy9sCXon1GnhcY.roa (hash: mHlEQsM8xLD+TBDwkEVeJd4jeKLg08Jp/4wsw9FdVUw=)
8: _6a-RWXCtiM85tk-pFSkSlcUUfI.roa (hash: B/tQnvdBFH+M+nv+Nk2B9RYqRSdNR6S1bMjLWiTjAJY=)
9: tKg8bmmm6waKS3dVDFR2D0N_Kp0.roa (hash: NxiPLV70KM3UlDzotgKT8px4zwsMhil8u+4mX6+fcsM=)
10: xqE2x6TB4ktJqDhDRIstav0I34M.roa (hash: a5jdOMPc2+BN/CePheTtmvryp7+c0nQR8BLYlcgEO6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:a5:f9:7a:41:07:76:fe:ba:ad:10:11:33:36:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Mar 26 18:01:07 2026 GMT
Not After : Mar 27 18:01:07 2026 GMT
Subject: CN=07c01e3ed1a3b88c1aa55971de50c656f4257562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:92:3e:5f:81:39:b3:26:60:a5:c6:ef:62:60:
4b:3a:5e:c5:a5:ac:5d:23:0b:02:97:7f:c5:db:ea:
e3:9c:23:6b:2b:de:8f:39:2a:7d:73:70:05:0e:a5:
a3:35:89:7b:cd:9b:06:f4:66:6a:b8:a1:a5:36:c6:
71:55:56:32:b0:21:3a:81:12:50:f1:97:bf:e9:e1:
8d:88:df:e8:c0:b1:a9:a2:3c:a5:84:19:db:55:8a:
a4:ab:03:43:65:a2:79:db:56:bd:5e:7a:36:c0:ec:
ca:f5:77:01:5a:47:b3:2e:c9:c0:1b:d5:6a:d1:d4:
94:15:80:9c:07:90:cb:58:62:a5:cc:87:fd:05:25:
c9:f0:82:29:46:ed:f2:ab:ce:47:3a:c7:79:28:9a:
9c:b4:99:8f:01:56:15:d5:5f:5e:d5:81:8f:25:b8:
0a:49:95:7e:64:4d:f4:14:75:de:30:05:44:49:20:
49:a3:78:cb:f0:57:98:b0:39:a8:86:48:e0:d2:2a:
c5:b7:c0:73:88:d5:5f:9c:26:ae:18:1d:98:be:f9:
4a:0c:f8:9c:07:46:dc:59:97:51:02:74:dd:41:fb:
04:d7:07:2a:8b:34:79:45:99:94:97:d5:1c:20:b7:
ca:91:bd:e0:2c:57:51:9b:91:a9:36:0f:71:1c:56:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C0:1E:3E:D1:A3:B8:8C:1A:A5:59:71:DE:50:C6:56:F4:25:75:62
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:bc:fc:ac:81:c6:1d:b4:fe:6e:a7:d2:ef:99:7f:06:5d:93:
4f:3b:06:7f:79:95:92:a4:80:7e:12:b1:81:c9:a9:1e:e5:dc:
b9:26:84:25:f1:1f:3b:40:02:0d:cd:55:49:84:8c:96:ed:89:
d5:85:a9:7a:ad:b2:14:56:23:51:22:86:bc:b0:2e:3e:21:02:
38:b3:65:bc:c1:fc:11:ed:3a:ae:5d:48:67:14:e8:78:46:9b:
07:75:28:49:7f:41:9b:50:10:e2:87:3f:c4:8e:3a:5f:84:b8:
fb:95:37:ab:b9:08:ee:f4:ad:67:ef:d5:5b:da:db:5f:be:12:
ae:e2:06:e2:41:99:71:2d:59:4b:8e:7d:ce:a6:98:a9:7d:19:
e1:07:63:a7:4d:f6:9c:f3:2f:1a:f5:30:f7:0a:36:5a:ea:bd:
d5:54:75:07:29:14:3d:9a:66:a0:6e:d3:80:be:6a:5a:63:54:
44:58:5e:27:99:30:f9:26:b9:46:06:bd:71:3f:d7:dd:8c:5b:
9a:93:aa:fa:02:b9:6d:45:f7:2d:66:3a:8b:b9:db:56:69:b7:
93:cc:e1:03:68:d0:b7:6b:6d:fd:05:4c:e1:7e:f3:b4:10:3e:
cb:4a:38:e6:14:ac:4d:75:1f:06:d3:6f:db:0a:fc:69:86:ad:
b3:67:e0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:58:09 2026 by rpki-client