
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
File: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft (raw, json)
Hash identifier: QAt+8DC0mEWICPZTpxbqmIPKZjaIA1WqpvUpEtVK/dg=
Subject key identifier: F4:B4:95:37:55:44:58:C4:EE:49:2A:39:E2:36:B1:1B:C6:51:88:AB
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial: 019F92ECC285E6F9960A5273730283F4A9A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
Manifest number: 19D5
Signing time: Fri 24 Jul 2026 07:00:17 +0000
Manifest this update: Fri 24 Jul 2026 07:00:17 +0000
Manifest next update: Sat 25 Jul 2026 07:00:17 +0000
Files and hashes: 1: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl (hash: FoZ9BpTQ8X1h/RG7QxOwfbb3+M/a+Qb5RsxSKSSu2Do=)
2: B2_FH3MtZlTaOE61buYvXBJKW2E.roa (hash: 55aVAj571Q8/h0HvcQ8YQch6oVhSxMht9hvb0pWG9xs=)
3: EEeXG249QHXtZie6S6hEWpfPs0c.roa (hash: j08Df977nprNp/2GNZ8F6Ri2LTHGQNefm3+Va3aCg1U=)
4: MGuxpogPtwMAFTldHDnEUIBskKY.roa (hash: aRVSa83OdI8eRXcO3WQLPs6YeURGIYliffVNH5moLlY=)
5: OKgmTupzmnhPk0hOIeK3giJ9QaM.roa (hash: vJ5CbfHEFcPbyEC4jXFH5FpTTJogOrELHCnjQEMwhv0=)
6: UuScKKPZU-rxDshW6inBZKRJIH0.roa (hash: oIb88lrmIIDaodPcRGV8PcCWp69cVR7+uTDhUXF8D0A=)
7: ZW_uWUofk0PVk5ZvUH4CXwMQf9k.roa (hash: nMPGS72S0ymOk8yKU1XMgfQYFC4FprUwCeSnvYRogMM=)
8: g_sMt-IMPWFoRArZv0JnssQdxVE.roa (hash: i/F8rrQv+RNHw3Z6W9+3AF4oOHslAP0uqvWz8gg4Un0=)
9: tNc2jSWdykqlG-PkB4v9MVhio4k.roa (hash: k9a+KYr8wPbQKXd8Zqw2THkgTe3lauXtnm8eqnhZ3Nk=)
10: yn0AIXSmQUy2ZdVLfREbNPEMx98.roa (hash: 0/gDR8MJ30pXw1A6bmuJms9g1333tYlKxF2lIJS3jtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:c2:85:e6:f9:96:0a:52:73:73:02:83:f4:a9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Validity
Not Before: Jul 24 07:00:17 2026 GMT
Not After : Jul 25 07:00:17 2026 GMT
Subject: CN=f4b49537554458c4ee492a39e236b11bc65188ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:29:f2:31:44:06:37:26:ef:f9:d0:ca:44:
b7:84:fe:06:ae:c1:fb:5b:1a:78:91:df:3f:ea:20:
f8:44:2e:c8:49:fd:26:22:f1:3a:1d:76:d1:9b:8e:
80:33:ea:31:1e:72:ab:88:ae:6a:02:ad:e5:77:fd:
37:43:70:c9:d4:84:4b:4c:6c:e9:8b:ed:1c:cc:42:
2c:b0:89:9a:6a:dc:f0:ba:ed:14:c8:79:0e:91:41:
19:8a:60:1e:83:9e:06:97:fc:2d:71:a7:cf:11:5f:
69:f2:ac:37:dd:1e:70:c7:12:83:88:65:d0:90:da:
85:38:9f:0b:59:87:c1:0f:e1:f3:2e:73:a5:51:80:
1a:bc:bb:a9:bb:73:f9:76:a6:ee:0f:56:10:a9:3c:
4d:b4:50:f2:b0:80:d3:fa:9e:7f:8e:ce:92:55:45:
53:7c:fb:98:fd:ad:d9:62:b8:e8:85:51:45:06:e0:
36:ed:6b:59:53:d4:56:1d:ff:74:4e:82:64:ba:fc:
dc:d8:6b:4f:5c:cb:78:3c:e4:46:ec:f8:89:29:f8:
1d:f1:57:94:4e:e5:84:8b:11:e0:bf:dc:49:47:e7:
7b:11:70:b1:f4:81:80:38:97:ce:76:72:37:df:fb:
72:f0:58:d7:e0:80:d0:f6:99:96:e4:9b:3d:c2:90:
69:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B4:95:37:55:44:58:C4:EE:49:2A:39:E2:36:B1:1B:C6:51:88:AB
X509v3 Authority Key Identifier:
keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a6:70:be:22:e3:da:89:e1:15:bd:f2:1a:f2:6a:7d:7e:8c:
5e:9d:b6:eb:8b:51:39:cb:71:ca:a3:8b:5c:a5:93:e9:e5:00:
14:5a:e4:88:00:28:26:2c:d7:7e:8f:d9:a1:7d:93:14:44:a3:
78:2c:04:2e:12:89:4a:06:b1:43:a4:47:c3:33:df:13:b4:0a:
5a:fc:5d:4b:dd:7c:9d:83:21:6f:64:62:3c:b4:73:3d:ff:0f:
20:48:49:bc:f2:fc:b9:62:cf:24:11:eb:42:65:7c:b9:ef:95:
04:74:73:fc:5f:4c:ff:74:61:ec:2b:67:eb:a7:a3:73:07:aa:
02:c9:dc:fd:a9:06:2a:f0:55:8f:8b:48:89:93:77:78:2d:19:
64:92:c3:3d:f5:6b:7b:15:c8:0b:f6:80:b0:2e:46:3a:cc:26:
dc:b2:36:e8:17:b1:75:1b:fb:ce:a7:80:14:d7:1b:f3:67:8d:
05:a6:ae:2e:5d:37:e0:13:a5:71:ff:18:db:0e:e0:06:60:ab:
f4:25:78:23:02:5a:4e:fe:a3:29:47:c8:5e:10:22:d7:c5:a3:
d8:d9:f4:24:b2:4b:aa:d1:72:87:0d:7c:34:93:95:02:04:50:
f3:33:24:05:e6:bd:13:88:1c:fa:97:72:78:92:26:ea:a1:f6:
9a:36:4d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:09 2026 by rpki-client