
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
File: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft (raw, json)
Hash identifier: smOGytr2ZS7e1OmZI/HBVw2BBSzQkf1k5eBzSWMg/5A=
Subject key identifier: 0B:04:BD:B7:F2:3E:5F:95:80:C2:7B:50:58:0F:D2:CD:95:72:C8:B2
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 019F905A9858FA7BC8FF858CF55BF512672C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
Manifest number: 1386
Signing time: Thu 23 Jul 2026 19:01:24 +0000
Manifest this update: Thu 23 Jul 2026 19:01:24 +0000
Manifest next update: Fri 24 Jul 2026 19:01:24 +0000
Files and hashes: 1: 30_2SrrQt3xLpXgztAf1BYLj6dc.roa (hash: NTrKpnKBqVn0bitR0Jwanme0JvSKtMI3Yu9OWoAC8F0=)
2: 30posY3TsM2Fh--sfGLYSxzt9Oc.roa (hash: i0NTnZ+KyqqJwh0JnlpuYIHLq99sFP6hfH0tju3c/hs=)
3: 92kon1ZbPqRU1ojElvwcbSZFCJg.roa (hash: JDix+gTyhf3eCiMPRUDwwuH51sP+i0fI6zPIxZOfd6g=)
4: 9I6L8TRP3qtz3CYYh3ww5T352z8.roa (hash: 1gf4QeHFa9dKbCRpBcjsV/snv/t5NnmR9Bj8FONPgak=)
5: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl (hash: y6NEgMZyOcKv/KBShZbe2HBhSUN+8BfdjXL+SbvOmLQ=)
6: ADT8NHavskB_f-QX_biQB6s3hjM.roa (hash: g7mT0bM8U1tBgaCrO9JeZJLHUsM1LBUnAA963U3MJWE=)
7: CYj7mZQ9dKeMc_-N6UL6LjIi3lk.roa (hash: JDVFtyDyR/x/eL6c4P6MCJwlsUYUOK+LfbQasczNpvA=)
8: Cp5yS6CVdtI_QBkILVp1ijYMyLE.roa (hash: YPwRTq6Ianr0pyiyDMEVnQhaRfOWjLxD4nQBsuUMiJ8=)
9: J6A_hF4O7cxI8QJluboyBCe16v0.roa (hash: edsf8OO27RWYtOi702k6Qhe7cJI0t15sATzZb5sCsJ8=)
10: MdXllBZP0mMZ0dXI6p75TCwhxPo.roa (hash: 4XNUO6DsPpBG+M6Ws/hUL/dm11Zqlvo8pLHd9xOnlHo=)
11: PayA9942Pu3PEwdgbc9zI085M7A.roa (hash: pkpsKDUMLuKxSQ8sea1A1XeztsAXtWdezuYMLOySqF4=)
12: T13-btYFEN1DdC5NbUMiJr9ac-A.roa (hash: 7W8mRW5nKO5O7mdnYOqF5XjMLJFncda9PmRuXwHgrFw=)
13: i7jxo6_GB1o_OmBl3PrmVS4XnPA.roa (hash: 8NhSbKhEfu8jyqD1wovs3TRW3fNcgXTNne21hQm9qN4=)
14: lBbPrenKlA3Sq-uIUKDdAiDokxs.roa (hash: 8cnNfRffd7F/oZoq0DdI1sFhx5I9K/eiWM52AqJzzeI=)
15: sVAk55K1bjvD6NWoqyy6bpvKPNM.roa (hash: PMewucLZTeF6kJJLzoads50StAWlilqhYdIQchwQaB0=)
16: sysq58LMYKdBhx-ibBYNHAxQl8g.roa (hash: HwICsnv3lm+NXgLT5+1pkn50yR1pj2hwdaS9hW8jkA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:98:58:fa:7b:c8:ff:85:8c:f5:5b:f5:12:67:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jul 23 19:01:24 2026 GMT
Not After : Jul 24 19:01:24 2026 GMT
Subject: CN=0b04bdb7f23e5f9580c27b50580fd2cd9572c8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:5d:57:f6:2b:fd:08:a2:ca:6a:89:e9:75:
87:e7:68:c9:91:66:cd:9d:0c:fe:81:44:ba:33:3f:
68:c5:99:3f:98:d9:6d:80:e8:17:76:98:f9:54:a9:
91:bd:9a:2d:b3:6f:41:a5:df:94:77:19:0d:42:53:
b4:5e:15:dc:42:fc:34:59:eb:de:32:45:94:97:a6:
81:cc:fc:6e:d4:c4:bb:11:c3:88:a9:19:4b:73:10:
04:b1:8e:54:fd:72:c3:1b:cb:59:1a:0c:4a:3c:05:
66:58:84:f5:09:db:f3:42:bb:db:6f:aa:c6:5e:25:
2e:b3:8d:85:07:cc:f8:27:69:4a:fc:13:24:c5:30:
84:8a:ff:18:58:75:50:71:96:cd:db:06:99:1f:5f:
c2:fa:e3:94:19:2a:15:e2:bb:c9:27:8e:0f:41:aa:
ae:4b:4d:5f:eb:22:f8:78:db:d9:12:14:44:0b:7d:
c9:7c:89:d6:63:fd:e6:9d:a7:d6:f1:cd:aa:cd:c7:
c2:2b:7b:fd:7d:b4:e8:55:43:32:c3:27:1a:82:80:
24:4e:04:36:fd:b1:82:ee:a5:5b:1f:b2:a7:93:bd:
3c:a6:b5:dc:5c:7b:26:70:8a:6e:d8:3a:38:73:97:
ec:2b:e2:df:4d:b3:71:1d:17:52:9a:e0:b5:d8:eb:
ae:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:04:BD:B7:F2:3E:5F:95:80:C2:7B:50:58:0F:D2:CD:95:72:C8:B2
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:2e:ec:1a:84:a5:4e:5c:ba:66:56:40:14:0c:a8:cd:71:ef:
dd:66:84:09:d1:8c:71:66:e7:8b:25:34:30:91:10:e0:5d:44:
0b:de:cb:ec:e4:98:84:11:88:cd:42:44:5e:0d:82:2f:b4:39:
e4:e6:77:41:c5:10:b6:e2:c5:aa:f2:a3:50:10:a0:9b:f3:1e:
94:31:c7:fb:d4:f4:36:f5:3e:37:83:66:90:b7:66:a1:ce:f9:
b9:b7:f8:1e:f6:c7:24:26:6a:ef:8d:e3:d2:57:c1:99:b3:10:
01:58:03:1a:64:90:c5:2f:b9:ea:c8:f5:43:de:2c:21:e6:a0:
c2:85:b9:f5:ed:54:26:f6:80:4f:ed:f3:da:96:02:bb:98:a6:
ad:84:53:f3:28:44:8a:eb:67:cf:b4:dc:66:77:29:f1:49:c8:
a4:24:83:ba:b7:fc:7d:e8:5d:56:e0:de:c1:2a:b2:3d:6b:1f:
31:39:e9:b2:82:48:8b:19:5f:0d:c9:b1:d7:ca:03:27:c7:7f:
12:90:a9:37:01:a6:8e:c2:e3:76:5e:bf:88:84:f2:94:00:8e:
86:15:ee:40:f5:9d:39:3c:7b:bb:8d:ab:e1:2c:ce:d0:95:12:
b3:8f:78:f3:5f:66:ca:fa:17:b1:ea:70:c0:a0:48:13:2f:bd:
96:86:8d:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWphY+nvI/4WM9Vv1EmcsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5
MTk3ZjIwHhcNMjYwNzIzMTkwMTI0WhcNMjYwNzI0MTkwMTI0WjAzMTEwLwYDVQQD
EygwYjA0YmRiN2YyM2U1Zjk1ODBjMjdiNTA1ODBmZDJjZDk1NzJjOGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUZdV/Yr/QiiymqJ6XWH52jJkWbN
nQz+gUS6Mz9oxZk/mNltgOgXdpj5VKmRvZots29Bpd+UdxkNQlO0XhXcQvw0Weve
MkWUl6aBzPxu1MS7EcOIqRlLcxAEsY5U/XLDG8tZGgxKPAVmWIT1CdvzQrvbb6rG
XiUus42FB8z4J2lK/BMkxTCEiv8YWHVQcZbN2waZH1/C+uOUGSoV4rvJJ44PQaqu
S01f6yL4eNvZEhREC33JfInWY/3mnafW8c2qzcfCK3v9fbToVUMywycagoAkTgQ2
/bGC7qVbH7Knk708prXcXHsmcIpu2Do4c5fsK+LfTbNxHRdSmuC12OuubwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsEvbfyPl+VgMJ7UFgP0s2VcsiyMB8GA1UdIwQY
MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt
MmQxNDNkN2I4NTNjLzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj
LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuy7sGoSl
Tly6ZlZAFAyozXHv3WaECdGMcWbniyU0MJEQ4F1EC97L7OSYhBGIzUJEXg2CL7Q5
5OZ3QcUQtuLFqvKjUBCgm/MelDHH+9T0NvU+N4NmkLdmoc75ubf4HvbHJCZq743j
0lfBmbMQAVgDGmSQxS+56sj1Q94sIeagwoW59e1UJvaAT+3z2pYCu5imrYRT8yhE
iutnz7TcZncp8UnIpCSDurf8fehdVuDewSqyPWsfMTnpsoJIixlfDcmx18oDJ8d/
EpCpNwGmjsLjdl6/iITylACOhhXuQPWdOTx7u42r4SzO0JUSs494819myvoXsepw
wKBIEy+9loaNIA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:26 2026 by rpki-client