
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft
File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json)
Hash identifier: H9Eadt9/Ly7QEuijyfRnrmVV1DLuUWsdZ6qZn+mydgc=
Subject key identifier: 56:0A:A8:6C:15:C2:96:46:9C:CD:9F:F5:CF:8A:A3:59:21:9C:0D:C0
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 019E1CEBDB6B871FA77BAB1E13951D8FFAEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft
Manifest number: 190D
Signing time: Tue 12 May 2026 16:01:19 +0000
Manifest this update: Tue 12 May 2026 16:01:19 +0000
Manifest next update: Wed 13 May 2026 16:01:19 +0000
Files and hashes: 1: 1-ccn--iq_ToEq-Oamkl9Luwspkc.roa (hash: +u0oyCBAW71aNY4BwmQ52QOilFQebxXv8bzootxTVNU=)
2: 5MS9Zy98YuF3Bcrl6mc6yIWJ4-M.roa (hash: b+PbHQ1e20uIzoz27PMH3G/dgeCEzPhT1xUbwe84ub8=)
3: 863a8A9lI1u9XrhUEHNCbgA_EM4.roa (hash: s8aH9qc4ALlhdIevLKorthvT27qew3YZnY2zui2yIks=)
4: 95n53MPAl62Bp8gdAx6GUcBNH6s.roa (hash: SFJj356Hap+M3guGi+p9KYnj5vkCtgLdD7PsVKZ7QL0=)
5: Adh10SfAMsK7XIENnMUTzkYMUd0.roa (hash: s24oidV66DuvBTW7O6p2t70lzMwu9lbI3jK2mIwlhKs=)
6: JiUg0kU1PSuNHKsUA2KSNScv8s8.roa (hash: 3ZAQiyyrgoPYw51cxNpeaspKkodxmry7TXFI3ERIuNE=)
7: QviPBhLr-CXgt9EbTIrGj_yt3o0.roa (hash: A2iZoqo4X/JrmbpOlsLJJidbfz0mL9O7JboFIKE1auY=)
8: n2rh1sLNAvS8TApOyLLtUmfkJtk.roa (hash: YnymBYUK6ZS+GcYBXKPIPAN5Vh2ciMW3IvH4r+uuS68=)
9: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: pWKLWcdPlRNN2vIwWI0AIOvfgLfQ9+5TTt+b0W032GQ=)
10: qC9TRPDEBU4tH34KGCdE-GtaQVo.roa (hash: x+3EdF/VTAf945Szb8jBK7kDYlIbSVdzVeYTbe6GNVk=)
11: vyNX_G3sd7VABBUb1_l_0mQ1seo.roa (hash: MzK7zdnu+4qWNgnGDp5G7j7MAy7ijjxyFcd9B9ucLvU=)
12: wKCBiDDf1e8BicVavixrgdQZibE.roa (hash: MHYVnslYQOZS9IPfWLJkmMuhLwMjuzTKosW1ejMPRAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:db:6b:87:1f:a7:7b:ab:1e:13:95:1d:8f:fa:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: May 12 16:01:19 2026 GMT
Not After : May 13 16:01:19 2026 GMT
Subject: CN=560aa86c15c296469ccd9ff5cf8aa359219c0dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8a:91:66:aa:ec:2e:35:d5:a5:4a:eb:f5:a4:
07:c4:fe:82:a5:09:41:0a:25:ce:e8:9f:5d:45:12:
d6:c3:51:e9:1e:2c:e3:93:8c:fe:68:e2:d4:db:a7:
5a:a2:a0:18:ed:79:f1:04:55:a7:40:18:c3:a2:60:
64:04:db:b6:d7:b7:dc:05:8c:28:91:bb:b5:f5:65:
ae:88:df:3b:f5:42:0c:c3:eb:43:65:98:52:51:18:
8c:05:2e:d5:41:60:a8:8f:cb:32:c9:23:2b:b5:84:
e0:d8:21:31:52:69:3b:52:db:b2:b6:35:0e:71:e8:
e7:83:10:21:01:4d:57:17:4a:9f:db:b2:44:b8:1a:
01:1c:91:d6:30:9e:bf:f7:0c:68:81:6b:ef:ad:9c:
27:ab:20:fa:70:c6:b0:8f:07:40:98:fc:9d:29:7e:
b8:23:31:25:6c:6e:26:34:ab:ee:c5:20:54:b7:d9:
e5:a8:4a:85:6a:c9:8f:cc:be:0e:b4:06:cd:c5:67:
b3:0a:ba:13:66:f1:df:71:29:26:75:a1:ab:d8:07:
9d:62:d1:b3:6f:79:19:27:53:02:40:88:67:eb:5b:
26:ca:a9:e2:34:66:c2:11:43:04:54:d2:1b:d8:61:
41:b4:3e:91:73:c0:16:a0:3a:51:11:24:b4:e0:76:
e3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0A:A8:6C:15:C2:96:46:9C:CD:9F:F5:CF:8A:A3:59:21:9C:0D:C0
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c0:3b:ec:87:7d:95:a1:47:d6:41:4e:7e:a0:35:3f:76:e0:
b0:16:c8:d7:9d:2f:db:d5:54:ac:95:1d:f4:e0:23:95:27:b7:
b8:da:a3:5d:8e:42:7b:f9:44:eb:48:f8:73:9c:f3:f0:28:a6:
2e:cd:2e:4f:0b:4d:3f:28:22:0f:33:12:86:47:95:74:56:6c:
da:c0:25:2c:3d:e6:8e:86:65:af:01:9d:99:d2:77:77:8f:a2:
1f:f2:1b:17:79:5c:8e:6c:e9:6b:d2:c3:e6:94:ce:29:93:ac:
57:6a:48:86:7c:7d:ce:c2:3f:83:35:83:89:e6:ff:f5:aa:cb:
8d:65:8c:a3:e3:2d:68:2b:a7:41:4b:72:b9:19:82:5c:85:22:
96:35:05:3a:19:ee:59:38:67:ca:6f:ea:c7:f5:89:9d:14:ac:
04:a5:e0:f0:20:23:7f:98:96:fb:fe:48:fd:4d:94:a6:24:02:
81:3c:2c:1d:68:8c:de:69:a1:0d:69:de:ae:25:a7:09:e5:59:
46:f8:91:74:ce:ef:d2:8f:fa:33:ea:05:71:c6:e2:3f:3d:d1:
18:f2:67:e0:f7:80:c3:a2:5d:2e:be:c9:1e:9f:b6:4f:3d:30:
b1:57:1f:f3:86:fb:a7:58:b8:dc:13:ca:8e:1b:3f:01:d9:17:
3e:9f:9a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:35 2026 by rpki-client