
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
File: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft (raw, json)
Hash identifier: v5s13644h3+upvgYKOX19HV+4C833yGwjSeZ6HRYhC0=
Subject key identifier: 87:89:A3:75:8D:C8:A1:7F:4A:7F:FD:A4:F3:DC:62:98:C3:B8:D7:13
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 019E1CEBB4F51D73A06518B526F5E8F6AC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
Manifest number: 191A
Signing time: Tue 12 May 2026 16:01:09 +0000
Manifest this update: Tue 12 May 2026 16:01:09 +0000
Manifest next update: Wed 13 May 2026 16:01:09 +0000
Files and hashes: 1: 1KzAL4WrD5dhhGZJOCxuUIPFwOk.roa (hash: aO9dX9fJ0rrae7yQKAQfFledrNyIupTZnT+cq07JYUA=)
2: 2fnNi2RG50nUnV2NcaaKxkNfurs.roa (hash: YjCnMRPFuN3k5TRvL6rGrwmbFWVhQVPPpGvWD61uUkg=)
3: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl (hash: 4wcyNVPx4Vf0fTBSABBU2pXgiVe4xWZ65GIuo5grL7w=)
4: 88YNLmciNd0j13-H2-rZxVQMdGQ.roa (hash: PZ0hEGC0oEs598gQ8xeAY2EzI4szP3Vs9gNvciW2BKM=)
5: AnqEtz5hZkYAy4yO8qlLikZWRJw.roa (hash: j2OhR3ENDnTZP9Lf8x78QsTXcfAZEG3FS513keiFcpI=)
6: HQdRd7-uxpWaApI_yUxbm_9_dzg.roa (hash: i48eXcWynnm44Ui4IjxVTSgQ+VI6di3z/zykGcaGJUk=)
7: OCuIuLoTyx6UI4cRdqXTZdZqrRE.roa (hash: NtYeBn7vObBSrZet17ESmCNvYRE2bEdCvdV04YI1os0=)
8: RBopAdVF60vgkqykUfTCW-bkIG8.roa (hash: QhamcW1yECyAqJIZtVxwyJIdNVMOgAFF2TzQ8FAjUVo=)
9: RahkU4tOoQngjkSl9mhdDwc4pFU.roa (hash: JWZJdzvFdiQ85WtuycaeUgc1cy9Tzhri/PcDTONVm3Q=)
10: Rsj6R_5dXiHi1eUSKzpDKZzkTiE.roa (hash: nMPA233TUV9gqlw8aP+/RPCmhirOQucfaoSyNAu6fXc=)
11: YUsCKqNl16pDs_8KVE5VLmDFj5M.roa (hash: enLSqBELUYJ70Ss/6MuXxuUTa0RNR44fL5GLxYESEBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:b4:f5:1d:73:a0:65:18:b5:26:f5:e8:f6:ac:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: May 12 16:01:09 2026 GMT
Not After : May 13 16:01:09 2026 GMT
Subject: CN=8789a3758dc8a17f4a7ffda4f3dc6298c3b8d713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:48:fd:5d:1e:59:a2:4b:ae:f1:05:0e:70:
63:52:e5:be:10:b9:b4:b3:78:af:bc:a9:67:4b:24:
bc:be:9c:8f:d3:47:f4:dc:38:14:6c:4d:d5:eb:53:
dc:7c:7f:d7:0d:f8:04:88:eb:1e:cc:ac:7f:30:16:
7f:ae:d3:a4:ed:92:09:8d:5a:c4:ad:91:6b:b0:c1:
f8:e6:8b:22:42:69:3c:52:bd:56:73:22:78:2d:36:
62:71:2d:12:93:99:a3:aa:2f:bf:75:40:16:3f:ca:
4c:18:c4:1d:66:d1:3b:85:b4:67:f7:34:2f:7e:55:
50:bf:78:31:03:e9:70:4a:8b:9a:4f:53:ea:f9:c9:
8b:60:fb:9c:7e:81:03:51:66:be:51:b3:b6:2e:08:
b4:60:14:48:88:da:67:53:9f:8a:92:db:85:03:af:
5a:50:87:47:ba:81:4d:42:d1:2f:93:7f:de:b0:17:
9a:94:22:00:1d:dc:82:15:1d:43:7d:76:b5:0c:97:
d2:ee:47:e3:31:47:f4:f2:7c:4e:cf:ce:ff:a1:31:
41:65:2a:f9:46:07:73:13:9a:11:e8:93:5b:c5:b2:
c2:00:8b:cb:91:f6:a8:69:2c:40:50:9b:3c:51:d7:
57:2f:d2:1b:f3:6e:fe:32:06:79:b9:a6:90:d0:34:
96:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:89:A3:75:8D:C8:A1:7F:4A:7F:FD:A4:F3:DC:62:98:C3:B8:D7:13
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:93:18:94:61:ba:ba:69:4f:2b:11:47:d3:1a:8d:93:57:ed:
fd:7c:7d:6b:4d:3a:5f:80:72:cb:54:0c:aa:0c:20:58:51:01:
37:f4:0a:a0:a2:6d:89:8e:25:5e:e5:8b:1d:c1:47:40:27:d1:
5a:a1:27:cc:5e:5c:dd:f7:f9:18:50:30:27:c7:db:2e:92:1d:
28:f8:57:da:f5:87:7b:fa:f3:47:c1:6c:af:f9:bd:1a:12:b3:
cf:f1:4c:9b:6e:ff:9c:f6:28:5b:58:c4:de:6b:25:27:ff:8b:
d8:79:69:66:12:f5:04:0d:82:98:6f:cf:9a:0b:b7:4b:37:51:
29:86:b2:e4:ed:41:6a:0a:1d:1d:7f:e0:7c:f3:53:d1:f6:68:
ee:b4:c6:96:64:c1:3f:cb:74:31:39:9c:30:47:85:5a:74:9a:
fe:68:ff:a3:5d:bd:21:99:bd:9c:af:29:d9:3c:e8:59:15:34:
8f:5a:b4:09:b7:60:6c:e0:32:92:52:6e:41:97:a0:5d:ff:5f:
a9:7b:2e:95:76:57:47:36:a6:8b:1f:47:ee:bc:44:f1:fa:be:
d1:27:59:81:ee:a9:86:64:84:a3:c6:aa:4f:05:d8:ca:56:77:
bc:7d:36:b1:7d:ec:de:3f:9b:17:74:d1:6c:2b:bd:9e:b6:ac:
9f:6e:99:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:22:44 2026 by rpki-client