
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
File: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft (raw, json)
Hash identifier: jNuAArm7F1vngckno4GewFgLm8cdrlzw8cwAl3YzekQ=
Subject key identifier: C3:2B:F1:93:C2:2E:B6:7F:42:04:09:39:95:73:FD:98:58:51:33:75
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019E1F4806EC9ECF89231B0131FC8A5B44E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
Manifest number: 0D28
Signing time: Wed 13 May 2026 03:01:14 +0000
Manifest this update: Wed 13 May 2026 03:01:14 +0000
Manifest next update: Thu 14 May 2026 03:01:14 +0000
Files and hashes: 1: 1-LahbJsZBZr_Cb9GLoRRUknY_ok.roa (hash: 3vBSkWaA78OycQPV5V4Y1lrmpOPd5P5/xF01SIV5iJY=)
2: 1HcPQ5pfKmPtctEimZHE7z79hac.roa (hash: 01IfM+fb4QfgTTaJeTcZGafqZtEIOcrvm8euITSheiU=)
3: A956JOTlQ59lmcfnxZy--QUzGfo.roa (hash: RPpgTtbeiF27op+abzwfLowJGRtGnDFgjON32ZJTVfk=)
4: CLvieQcycU-jVZ0rNWe_Whtp7K0.roa (hash: GhFSAlJ6xb+CTvebpjppk9iI+LSCfFhHd2oyvaT4u6I=)
5: EjpzgiXwC7omQHNgYlcRzu_e8UU.roa (hash: MRUgtinadxY36CAXX+Sb8EbCP+mT/wSWQT2+h7ZWlcY=)
6: Fekxz83cw-qipMMKalFLm9cHDBA.roa (hash: 4P+8/TrggLqnTQMU/nWTl1kPGOuK4OJ+/hRBkU2gXhY=)
7: FjbhwRaWG8H0F9gsOugZzmYyQhI.roa (hash: eQ55wapBZou4y5GxsaxVO10r26QYB8emildRQ31E6/w=)
8: G1cVObMPOvr58gYfpMZUUg6xloA.roa (hash: kQwqsilWz22JvDZwbOTxkGaryBQcc34+YA+JEVWKuas=)
9: JYf2VJpHmRVEzNLa8FSxGlMFrG8.roa (hash: vdXXIyeKsFvWBG+HbbGuLa5wF5IPhtyQO7wpuZX4h1s=)
10: LuZReuXLJ1OuD39Eh8AnjJyH8d8.roa (hash: i8LWGzSoa4vkoY22nWh0T5O8XMQlgbg/pk2IR2Xl1Hg=)
11: TQ7ysTGQIakmu4CVTNc31GK2dfs.roa (hash: MScEjjiTLmx3/HT0srp+gqbybWKE16rip04S7ew+ay8=)
12: Tx1QRE1K0CqqbNISdem5mSeFyhY.roa (hash: TsoYEEq1X+nTDdaU6FQwegqSC4XnT5STovO4gDOXBsw=)
13: UboZ50C_e6m85Y04ZZEQFVaz2bU.roa (hash: Za+7ixivpFVxRDrXbo5D+97t0iV/6NJ0y3X8U2eMBXY=)
14: WhpdbusgONQkGfJUmuHu3hC04fM.roa (hash: dMwJ/FCdVp8IZAqayVtrT8hk8KNS++zwBXrsEJV7xwo=)
15: X0kSuarZ-g_McCBdBJMAHOmD78E.roa (hash: Gr2z6DPYOsIVXCMbomTNzbkS+4fkBpnvaCGP+zUJOhk=)
16: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl (hash: rLWRB2sFGfLJsaImKdMwzUMLVHr7mTSUDP0EBcUdXnM=)
17: aGx-mWhigRE4_KS4p7V620T7uRA.roa (hash: uYU/8IkqjXFpdqBKotX53i7emMpJhAXYS06trCmNRIw=)
18: jWhLrhE9ioMP947eBu_O1EpWlOQ.roa (hash: zqiN2GO+4eADjryw36IzQaGz8V+eCkbHjcHuBCp6yME=)
19: rKBqA4AVr8V474f1fS0u1WEme_g.roa (hash: Ztg6Dzjy4Iu5rj4fL+sFN+yMeB/hu7159PSBkLZlOq0=)
20: tX12qMYZcyU1c3r7IXHSaJ-q7lI.roa (hash: xN2ctTPtxjMiIigccibut/P5bneSpRG4NOTR23KVdug=)
21: xZUujeAFSTwArzpPu_lWFdggi9k.roa (hash: qxKigoq4FbC2Td1b3o1qFzpWqs7daeLkojwYiOlRGAk=)
22: zPteSfOjom7QWMmEMxZDi_vA-iY.roa (hash: rrGLmwvmuRirnSrr4c0rl9ZjsO4Ec7TvIhYJsaWhutQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:06:ec:9e:cf:89:23:1b:01:31:fc:8a:5b:44:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: May 13 03:01:14 2026 GMT
Not After : May 14 03:01:14 2026 GMT
Subject: CN=c32bf193c22eb67f420409399573fd9858513375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:de:98:78:7a:84:e2:6f:66:89:d7:ae:ba:
e5:30:a1:e4:32:a2:82:89:56:fb:61:9a:00:e4:6e:
a4:cc:a4:a9:ef:30:c7:58:19:b1:83:c9:50:44:41:
52:ef:e1:b1:ee:5f:23:f2:01:a9:cc:c6:b1:f2:84:
40:bc:ca:a6:1e:cc:e9:1f:98:63:9f:b4:dc:d2:ab:
38:9e:75:a8:a0:89:14:b7:35:08:ab:8c:c4:31:18:
60:5b:e3:e0:a9:41:bd:6d:a6:88:b6:b1:12:2f:e9:
67:e3:46:4f:bd:a3:39:c6:c1:7c:74:8b:2a:9f:be:
09:fe:24:42:b2:1c:a8:e9:1f:7e:75:55:31:82:dd:
62:9f:b2:9a:51:9a:81:11:b1:5a:ca:04:6b:34:c7:
94:a4:2e:00:5e:dc:96:73:56:95:13:a1:ff:c1:f1:
48:7c:d6:b8:4f:94:a8:f6:81:94:41:2b:96:1d:81:
8a:db:b3:24:d6:f1:44:62:24:45:a1:a6:24:3e:bf:
ba:67:25:85:f8:c8:9e:7e:7e:b3:c8:c3:c4:ea:a2:
b9:eb:df:19:c3:ec:eb:28:1f:07:eb:8c:c7:0a:b3:
eb:74:5a:3e:28:eb:80:d8:26:62:86:46:cb:23:31:
99:35:d7:eb:74:d5:66:eb:44:52:91:f6:24:e2:11:
d1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2B:F1:93:C2:2E:B6:7F:42:04:09:39:95:73:FD:98:58:51:33:75
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ab:1b:67:12:57:0d:f5:dc:fd:44:15:81:26:df:4b:2e:e8:
30:8a:ab:9c:09:be:84:6d:34:56:83:92:6a:f1:25:cb:17:b8:
55:45:19:8f:e6:5b:f2:9f:e1:96:87:23:4c:19:8f:b1:c1:93:
51:57:fb:90:c4:ce:7c:f3:87:53:d8:09:d1:61:e7:6c:11:ee:
6b:9d:21:33:36:11:a2:00:fc:16:d5:75:50:7e:23:81:ff:6b:
64:6b:ee:88:5a:6f:6a:0e:f9:ac:7f:12:19:87:97:da:b5:06:
ee:15:50:75:81:88:49:44:2b:5a:c4:54:74:ba:79:96:81:86:
04:62:c9:52:6e:96:ed:68:7b:a1:e9:88:bd:66:58:f9:ab:77:
a5:6f:35:2d:11:c2:48:4f:91:8d:b7:93:17:f8:c6:ec:1b:4e:
67:54:64:4d:1a:e1:e9:11:52:a9:ba:07:5d:93:bd:17:99:18:
2d:93:6a:5d:45:ba:ed:70:a5:cf:75:a7:16:44:e2:d6:b1:0c:
0c:4c:04:44:9f:9b:63:ba:79:d4:7f:d7:73:c3:b8:c7:77:0f:
a6:fe:67:78:bd:00:4f:26:e1:d9:0f:e2:8d:43:85:92:52:ff:
25:d2:67:84:6e:dc:89:b8:0b:55:69:66:01:5f:71:d4:df:7b:
61:5b:15:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fSAbsns+JIxsBMfyKW0ThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjYwNTEzMDMwMTE0WhcNMjYwNTE0MDMwMTE0WjAzMTEwLwYDVQQD
EyhjMzJiZjE5M2MyMmViNjdmNDIwNDA5Mzk5NTczZmQ5ODU4NTEzMzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8vemHh6hOJvZonXrrrlMKHkMqKC
iVb7YZoA5G6kzKSp7zDHWBmxg8lQREFS7+Gx7l8j8gGpzMax8oRAvMqmHszpH5hj
n7Tc0qs4nnWooIkUtzUIq4zEMRhgW+PgqUG9baaItrESL+ln40ZPvaM5xsF8dIsq
n74J/iRCshyo6R9+dVUxgt1in7KaUZqBEbFaygRrNMeUpC4AXtyWc1aVE6H/wfFI
fNa4T5So9oGUQSuWHYGK27Mk1vFEYiRFoaYkPr+6ZyWF+Miefn6zyMPE6qK5698Z
w+zrKB8H64zHCrPrdFo+KOuA2CZihkbLIzGZNdfrdNVm60RSkfYk4hHRRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMr8ZPCLrZ/QgQJOZVz/ZhYUTN1MB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6sbZxJX
DfXc/UQVgSbfSy7oMIqrnAm+hG00VoOSavElyxe4VUUZj+Zb8p/hlocjTBmPscGT
UVf7kMTOfPOHU9gJ0WHnbBHua50hMzYRogD8FtV1UH4jgf9rZGvuiFpvag75rH8S
GYeX2rUG7hVQdYGISUQrWsRUdLp5loGGBGLJUm6W7Wh7oemIvWZY+at3pW81LRHC
SE+RjbeTF/jG7BtOZ1RkTRrh6RFSqboHXZO9F5kYLZNqXUW67XClz3WnFkTi1rEM
DEwERJ+bY7p51H/Xc8O4x3cPpv5neL0ATybh2Q/ijUOFklL/JdJnhG7cibgLVWlm
AV9x1N97YVsV2A==
-----END CERTIFICATE-----
Generated at Wed May 13 11:29:41 2026 by rpki-client