
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
File: TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json)
Hash identifier: Ip32m3yc9+Gj1apOQg8iemjd+Z+jFlCU8p28t/rwLqA=
Subject key identifier: F4:81:05:97:6D:0D:B6:BF:42:8A:92:21:4D:64:CE:A9:FC:4F:AF:70
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 019F927F589ADF15BF0EF78CFF2AE31EAB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
Manifest number: 19EE
Signing time: Fri 24 Jul 2026 05:00:46 +0000
Manifest this update: Fri 24 Jul 2026 05:00:46 +0000
Manifest next update: Sat 25 Jul 2026 05:00:46 +0000
Files and hashes: 1: LSbbMYdiIbKuzkhAXFAGLH6GBd0.roa (hash: GVdnAx+VDnNLGbmaTGIwya+qx7bw2STQGx8OmUTU30Q=)
2: O0rfOGz-McmMnU1eCY2sEgNi7PU.roa (hash: 4rQUZ3pnpaJVp0N8CW/NojdvUgqmwQuyE4ZpcBYicXU=)
3: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: MNBl+lRAU+lpqPzMtbCfbqIcvb+RQlSkwhM+w2GDhUI=)
4: UDY2HDyFl77CPOX4Htn0Pi3kyOA.roa (hash: bc7atEIrT/sE9wxUJS6KJvtPGbS/vBzLhwKBt1msWHM=)
5: caXkdOh26Ng2luhqokI4XXlYMpU.roa (hash: K5rOjRfhlR9NLMm+bd9NoV6sfAdU4dteUmtcqkGa+PE=)
6: gaATxSq9HGX7yQm--_dWZbOgZT0.roa (hash: Qix9w4DVsLBDeru6CjO9qF+q42J9rHLmd1kVGLn1F3E=)
7: gzKt63tUYAzMRiZUE4WC4FyD4b8.roa (hash: TUYmXfLyWQJoJEpWCQg5e1O7L83j3Oydl7JqN1+DDy0=)
8: jvNpPdYrQ3MflssnyijS0GZ1M3s.roa (hash: deTd1PHJQcy87xcvtVedQ3VEDL3wpdVtSrEJZUUIk/A=)
9: kWTQcrgSZmOTsMHh7K_EG0H2IuE.roa (hash: Hf4S7R+wJUfntE+MhCot7Q15rmGM0xxlIUdL/asz+MU=)
10: mr4GPzNHl1BXdqqKxPgtpJ_bvG4.roa (hash: uZhqzJ/VBEcqt1cjJm9DgjFyfds9tNiF+cC3M9YmS6Y=)
11: xw5sNJdg-fAA5SZxyPcNG8RXerQ.roa (hash: 7HX82PhpHs162aszA/TYYhyOoOkbbZJvRNVbtyXVetE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:58:9a:df:15:bf:0e:f7:8c:ff:2a:e3:1e:ab:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Jul 24 05:00:46 2026 GMT
Not After : Jul 25 05:00:46 2026 GMT
Subject: CN=f48105976d0db6bf428a92214d64cea9fc4faf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:66:b6:1e:8e:16:db:d0:a3:e2:d6:30:7d:0c:
64:bc:18:91:2f:a9:3f:87:c9:b7:da:1d:b3:59:35:
d6:2e:a0:d1:94:e0:b5:d6:5a:c0:0d:fe:59:b6:04:
5c:0f:c8:64:3b:72:2d:19:14:6d:26:a6:26:14:57:
c3:a3:b6:c0:92:1f:b1:34:f7:c7:5b:7f:62:aa:60:
3c:8a:c4:64:f7:f4:07:36:0c:f9:45:21:55:bd:b6:
3f:41:26:7c:f6:c5:5a:93:67:0e:50:65:5f:32:5b:
33:4f:cf:14:4d:47:5c:75:9a:f0:60:df:43:c1:49:
cb:2a:cd:cc:f0:e6:5c:aa:7a:7b:6c:9a:d7:c8:07:
6b:fe:46:ff:2e:39:b8:e3:71:67:1a:f7:5a:77:51:
bd:a6:8b:33:69:4f:be:ea:32:07:b7:bf:33:68:52:
db:59:54:0e:60:bf:62:d7:eb:0f:32:77:f9:59:ba:
33:05:19:1d:c6:25:bb:7c:a5:53:b0:67:67:00:0c:
41:98:de:8d:99:f1:08:d5:73:14:e8:8d:4b:21:89:
54:2f:ef:6e:b5:d4:12:1a:15:50:cd:f4:d6:23:81:
00:97:a9:ff:bb:f4:6f:ff:80:9e:dc:48:d7:a4:4c:
a0:1f:aa:22:3f:58:e4:4c:27:18:aa:d6:72:a7:39:
54:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:81:05:97:6D:0D:B6:BF:42:8A:92:21:4D:64:CE:A9:FC:4F:AF:70
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3a:ca:3f:63:2d:a9:92:19:3a:67:88:74:d4:f5:e7:db:37:
ea:c4:02:2c:34:d9:6a:81:fe:51:f1:9c:06:1c:cd:fc:27:13:
9e:a6:9d:f5:81:ab:8f:20:6e:67:28:9e:86:3a:4d:35:38:4d:
36:23:8e:80:5f:bd:01:8e:68:44:8d:fd:39:0a:eb:b8:e8:15:
09:47:56:94:9f:71:04:33:1c:a8:83:fe:76:35:b9:7b:2a:56:
35:e0:78:4d:fb:3d:59:c2:80:d4:32:f5:0b:e8:bc:f2:93:dd:
cc:1d:4f:31:06:fd:28:c1:83:c2:2d:27:48:8c:ab:52:5b:08:
27:5f:bd:14:50:26:a9:29:e8:e9:b3:f3:e7:8c:58:7c:c6:c4:
5a:11:70:7e:9e:22:fe:2a:ec:6c:0b:69:9c:28:c1:d3:1c:88:
2b:36:f3:35:ab:15:16:dc:18:85:58:75:f8:2c:b5:8c:5a:1e:
d4:18:8b:cb:1e:84:c6:4a:16:3c:61:12:85:59:b1:f2:2b:e9:
26:32:47:ff:0b:73:55:99:76:75:2f:2f:d7:b9:64:4f:71:92:
70:08:8b:f1:35:cd:f7:ef:5e:16:05:c2:61:d2:aa:80:20:16:
e4:78:40:0e:b1:75:46:99:a0:17:2f:75:06:98:ac:49:b8:b2:
81:9b:c8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:44:33 2026 by rpki-client