
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
File: HUOiSEVp0g4_U8F757n7KcNO5b4.mft (raw, json)
Hash identifier: D05ABClysndhaHk3V/vG1umHY6TFrlXE7vkXg5f7pgY=
Subject key identifier: 3E:C6:66:73:E1:FF:04:ED:D3:7B:4F:4B:44:A7:A0:6E:C6:3A:D3:FC
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial: 019F9059B64709E1970F6F896AD3CAAA7AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
Manifest number: 06EE
Signing time: Thu 23 Jul 2026 19:00:26 +0000
Manifest this update: Thu 23 Jul 2026 19:00:26 +0000
Manifest next update: Fri 24 Jul 2026 19:00:26 +0000
Files and hashes: 1: 1-5PJEN9Zlj95GybZ6SDZCDM9Ux4.roa (hash: Iy5yXXvGVPR+2adaggKxnJKpE+OnqOlK+rwcp8Q3SZ8=)
2: 30dkveMmzQoC--vIo2-VkK-wZoI.asa (hash: YEsva8h0Cx1XqT9wd/RInpTp2lVj0U8gXWpYKxW5QKU=)
3: 3ASB5zCrDemZKSAs0Zx9k2F_c8E.roa (hash: 0vj83vMIqnpXNhmG4mayWQ/wJnUNYY8OdPbnu2KwES4=)
4: 3WX-j8yaj6S7bT3Wd-eKDTs2bck.roa (hash: ROUy1/canafAxMaZALWpdI2/vdOpAfp8YS+6dty2rmw=)
5: 5JXq104FYzVfyXXDzJAAFJW2oSU.roa (hash: QBSTq0ftAdHw8K8kTH1q6gST/SRrdjkonrYKEiBUX1g=)
6: 9ttx5z1p0nafCOgRUVjmK-BpGYw.roa (hash: PrMThTVmSUvAH78i4T5Fgu+fRaplo4n7qwVqwxukIvs=)
7: BEhnA8HlzocKBTFbTGvomzgDLXw.roa (hash: mgS7+wib0aUsSecsF7X4olbYLZrwELJ+ASFG23dhOnM=)
8: FFTswa_igYJ7f0HzTKbNka6JBO0.roa (hash: jitod76XW7UxyurG9G0zIroGd7su0NLAELoZff3WaTA=)
9: HUOiSEVp0g4_U8F757n7KcNO5b4.crl (hash: 9Csng4SxZQ8HXS68kZJe22+YQ+5nKNGUsqQfo6J0rq4=)
10: IL01vDMB3Kf9_hBJlwIm5Li2mNM.roa (hash: Y+8L81Vu5KRN/HY3Cg3TLtlVW7bT4N11Zre+CT8WYKA=)
11: JleZX8if8WA6QvsWXYtqxQfBCcs.roa (hash: 1ll4zDHOZ05sGRKZZ3BGPEykyJEMaM9UeWgswVdnjIU=)
12: N3w35B6tJjZBnG0TN049ln5pJ7s.roa (hash: s8TVxsDKxlSUH4tgci4aH3x9HRphwx/toiD82zV03+I=)
13: NjqAS56phIFTEiKBVTRmrN3WBY8.roa (hash: umrFlXJkBxsfwL4GX6/fEeuG83MP4Q8vA7igYpxacmI=)
14: SQvNoFC8mFg4IUMQKBfVp8NnnFg.roa (hash: mzz3e9Y3hMvRecd47TF+bM6eQvbkg5bJu6xf2RyQZp4=)
15: UAg-lvUrA3pIOde0diAUpR2UidM.roa (hash: 1kpFDgrIlgt14TuAZasJeZ5bfTPc/oBkNiktiRjkFbs=)
16: W8I_idCkalQgPt3zPRafZ7zdG9Y.asa (hash: XyO0X/V8GssHY7K5eOx+Kfra7ZStOnq0x/bI6zsMvbs=)
17: WAXt2WMEO5cBuMrwsGsqVBjWUPA.roa (hash: GlzXILsF+JcJcxfYLpToMyEOPpjWZmyYuo748X7dvz0=)
18: _siVgVasG94LnpkyKuH-iEOHhwY.roa (hash: YNf7bDVOomZ3mTsQenOpAjeZ/FlkRQTvPNx8h0gZfEw=)
19: b-G-n76UplLDML9ZYaCG4jf9KfY.roa (hash: 0zoirdXafxrobAC7OR+ynQby1MZQpAcCBCyGFMfHAQs=)
20: bGhjO_TlM1MQryfy6uCOOW98qU8.roa (hash: 3vFjot7XrftGag9PpmZqtnmIjwjNv7hhUabTVeeBipw=)
21: dBrnX8_98iFuWVrHOU52Q1wSEaw.roa (hash: +3ET58K23eX4vtwsNdX0TYNPsJEkZj/XezMR0jBc+EA=)
22: e8o9eE4Ll42uOW4-5Vfvz5NDkIs.roa (hash: 51N+vFv/j40ASUl/9DN8HQurrtN+zYKS6P9w8wpKe6o=)
23: fliT7CSN0P7IrthmgvKtOYpdfus.roa (hash: QUoQumbQ45G7hWmpRNJQSWIwGg7+LCw3mLegafNHnAg=)
24: gNGCtakJ63HNmb2cUTy0u-qp3f0.roa (hash: 6bq9JK8sv1GmS2NkhZSO0stGxzDjR88qEWqAWE8rgeM=)
25: gaPdTUi6Zv6lDCLDjVNSeOj00TA.roa (hash: iddnFzVd2NO0LQ+RrEgnt3+9d3P9fueV4LLcUDR95FU=)
26: jQR0uLQdeCmk1jWnOWmGdLH1K24.roa (hash: MRWUwUp7MToQoBTZG/7GhmrXZOlcSzC2aLA99n1InXw=)
27: mrFztnv8Kfb7yJhZvxUSHMp__q8.roa (hash: QVL/wxxs5Db8S0AcSXC68a3V1OrVioU5o6PR478XfGo=)
28: oacHEmo910_7FyFGjXuLGPuPf4w.roa (hash: 5yXvh0dr2O8Z495Ml7vtmfwFXDGTeO1Z+hG/BEJhEPg=)
29: paD1BPZjWTHybcQ4vrsY_ps4XCI.roa (hash: lQg77lyx9OAdTCrugz62otTkN8DkRaywe+CQcDmWoEo=)
30: x2F-aA7j3hCD_v3kf_KQT1UcABA.roa (hash: cojgCaOFTZkckHxe1r8Zk9LrAv/VUW0HDYue21C7/i8=)
31: zsyPeh8m8sjguCrl4OEWWZFzySo.roa (hash: TcB5Dwpz6Z4jJ4wGIGEdlsvXaH5/dLHAqc6cpVGM8N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:b6:47:09:e1:97:0f:6f:89:6a:d3:ca:aa:7a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Validity
Not Before: Jul 23 19:00:26 2026 GMT
Not After : Jul 24 19:00:26 2026 GMT
Subject: CN=3ec66673e1ff04edd37b4f4b44a7a06ec63ad3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:89:6c:c7:7c:9d:71:40:af:76:f7:33:af:
eb:73:35:7d:01:52:ff:3a:ea:cd:b5:56:3a:c3:93:
64:f2:2a:d3:22:21:7d:66:e7:0c:b4:e9:a0:7c:d6:
04:ed:f2:24:88:20:76:56:e9:7a:e0:d5:ae:1d:ee:
2b:1b:47:66:f4:57:61:20:4b:b6:81:3b:a7:6f:bc:
2d:a8:6f:3c:9b:a2:00:75:e4:f0:77:47:43:17:ab:
1c:fa:42:c9:10:bd:6c:7c:91:15:0f:ca:f5:7b:6b:
bd:4c:46:3a:e8:24:3c:33:32:e2:42:3e:a1:10:cf:
67:f6:06:0c:c6:95:94:78:36:71:4e:37:a0:8e:64:
52:3b:7c:7a:da:ba:d2:7e:11:a8:79:3a:55:3b:c8:
27:c4:6c:ca:63:32:82:1d:1d:03:46:c3:cc:52:5a:
8a:ff:5a:9d:85:25:39:a2:b9:70:cf:6b:ae:7f:b1:
89:dc:2e:c4:29:76:44:7f:af:2c:d4:f8:75:a4:4c:
c1:c5:b9:86:cd:6d:99:a9:6f:cd:08:f7:30:5f:67:
94:2e:38:1d:92:e3:44:06:df:63:ce:03:9b:3d:4e:
3d:72:f5:f8:5c:a1:6f:bf:47:ff:56:fa:de:2e:d4:
5c:63:f7:71:13:68:94:f4:3b:69:97:e4:10:5a:63:
29:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C6:66:73:E1:FF:04:ED:D3:7B:4F:4B:44:A7:A0:6E:C6:3A:D3:FC
X509v3 Authority Key Identifier:
keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b6:87:a0:fa:75:25:f6:3d:18:c0:55:b1:cc:7f:92:40:3e:
bc:58:a2:58:67:ea:0a:71:84:e6:f9:8f:a8:48:5f:7b:43:1a:
f5:47:1d:74:27:4e:1c:39:32:66:d7:55:d3:62:d4:e3:e7:7a:
fc:79:d5:b7:e7:46:c2:7d:ba:bd:89:3e:2f:c4:a4:c9:a1:45:
5a:05:82:9b:84:01:cf:a4:ca:aa:f1:97:b9:4a:56:b9:36:33:
89:69:6f:99:4f:68:78:01:ad:2c:59:38:fc:3d:b7:4d:84:43:
6d:65:5c:5b:52:9e:b8:f9:8b:e7:16:e2:8b:b3:64:4d:22:68:
c2:aa:b0:82:56:b0:9f:52:4f:cb:b1:f5:fa:5c:1a:3c:47:5f:
ea:af:a0:6a:d2:62:3b:92:16:be:1e:cf:06:6f:15:16:9a:81:
bc:d4:28:2d:88:af:a7:b1:66:cf:7d:bd:b7:56:03:9d:78:de:
a1:6a:64:ce:55:86:71:8f:d6:0d:03:9d:d5:57:8f:03:d6:16:
d3:9b:ce:4e:43:db:16:34:82:c2:b8:ee:a4:87:63:0c:e0:e4:
72:7c:e8:be:70:a3:4c:07:92:8b:90:09:9c:26:58:85:b4:1a:
da:51:5f:12:e3:d7:e5:3b:55:da:d8:d0:d1:67:e2:39:12:54:
2e:31:31:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:05:47 2026 by rpki-client