
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
File: 8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft (raw, json)
Hash identifier: hzux/CSvDjpo6Y/eMRho/dTh0vbZJXGLn7JL8TfyOqo=
Subject key identifier: FE:23:34:86:D0:C3:C3:A8:C6:2A:5E:46:3E:D8:3C:33:DD:03:3D:5B
Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Certificate serial: 019F90916A5C76E931BEB7697A32E8AAFE93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
Manifest number: 01B0
Signing time: Thu 23 Jul 2026 20:01:16 +0000
Manifest this update: Thu 23 Jul 2026 20:01:16 +0000
Manifest next update: Fri 24 Jul 2026 20:01:16 +0000
Files and hashes: 1: 0PwBP1m5V8tHPFCHGGYOau0rRTc.roa (hash: M0W/FLJbKezFVRY+boZRSGO4f4RhltYple/V23X0j4c=)
2: 1vK1T7KdFH0hBpOuHuKe8W_luZE.roa (hash: qhZOYXpVTc+RHC0IfCFs2RzEIVYZAgoD6YvTFLHwFmE=)
3: 8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl (hash: E4zNmCYkn0BXMRygnvdCL2zK3iNl6ubmheB6EoHKBQY=)
4: JcePCXWu8_9ZZzjxfVygKM8dWzw.roa (hash: 0S4YgLpuoSBRqOUxV6YpZdqEiuMF4cz82gQj2otpNQw=)
5: Nd6V0QCloRDIZfwDcQtVL1w6Z0A.roa (hash: TIjs2IbFM1v00nTvmxBW2uHZechx9jNZhQSCyvBAeP8=)
6: O9sJ-_TKMq6bS7__E1UX2XB1imA.roa (hash: +Z6Yn/3PglFToHJ9MMw/pkkVUwEYwsRd5WZO7o88I9I=)
7: QEGryiURhVI85Y_iwFPpO1kjb3E.roa (hash: f7QZn8PJdOvgT/DCDoEpmb1SfJG64+IFdudonB3DpJU=)
8: S64PRp6HfgfeBA5dqF_nm378oSE.roa (hash: KH+IlbpUNkPXeoQclXeI5i/KLaVnfhqbd5izf4u4qTc=)
9: SHnHAD4XActufnWbDbBuCezR5sk.roa (hash: nenlz/3VAG7POjOi6mcs6RNeMaF2/86fDvCTf+cSRc4=)
10: VTvDdxCNdn_BPeZovGaO3zvHn-c.roa (hash: /82kfcvdmxFyaaXRLhtB6elmf3XA4bQBsOc05JD7WPw=)
11: XZAVpeao-MzWMM0T1IBuo6mJOhw.roa (hash: 4OhzlwI1uDhgkruwa46Ix7LBdf/mbvESkAg3CQYlmdQ=)
12: bTLlcnL0Fm_nCJarfemQWZlQvug.asa (hash: +U6OavydfvrqqdI9vdtdZM6LAnVLXxOVl7v9NGcpnyo=)
13: fYhnGLcy2_Ou27KADH18mycTzz4.roa (hash: sP66OdJ/+I0oQxB3kcnMaYSOI2OOAjekthsNq69mxkE=)
14: g9eBBErf7cGntKTfm3PnpI6Ysa8.roa (hash: L1Y5INt4k++fXqtaolFcZdxOvA8W927R6H65T4L/Fcg=)
15: vSXSp5A3lM38ZHU363V73iY2sOY.roa (hash: OEc0FstKUDyge4yjj89lJISWQxLtMasQvdcX8uQFwbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:6a:5c:76:e9:31:be:b7:69:7a:32:e8:aa:fe:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Validity
Not Before: Jul 23 20:01:16 2026 GMT
Not After : Jul 24 20:01:16 2026 GMT
Subject: CN=fe233486d0c3c3a8c62a5e463ed83c33dd033d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:00:65:5b:e1:51:0a:f0:71:4b:06:02:a6:
e1:14:cc:5f:74:12:41:92:2b:f8:90:10:c5:b4:13:
c7:b7:29:dd:da:31:7b:6d:72:19:45:21:3f:4b:63:
65:e0:57:b1:02:99:36:05:b6:c6:87:c7:47:b1:ad:
51:df:76:91:54:93:ab:7d:d1:f2:6b:ee:1d:3c:12:
c3:b2:22:6d:c9:98:0e:04:2d:95:37:92:fd:4e:d7:
0d:96:32:00:a5:a0:d5:52:ac:6e:40:98:cc:1a:b5:
be:7a:8b:cb:0e:dc:bc:29:ce:b3:f7:93:84:02:9e:
7a:b9:21:2b:27:ea:84:cf:f5:32:62:a9:ef:34:07:
08:83:75:50:b9:aa:85:59:35:2c:91:81:04:90:71:
4a:a7:83:f0:50:b1:68:4d:8a:5b:ca:32:38:ec:f1:
ea:b2:d8:ea:2d:72:43:a5:54:80:1b:6d:d4:fc:ac:
19:ed:37:08:3d:ec:a0:c1:d8:a3:fc:c8:9f:3f:55:
87:75:9a:02:62:2c:1b:0d:59:82:81:f8:ea:ef:4e:
b3:7b:e5:c4:32:4a:2c:70:d8:52:93:f5:98:c1:d2:
19:3d:cc:e6:77:32:92:9d:00:4e:61:f9:fd:0c:10:
ed:c8:16:6c:f4:62:8d:37:30:59:89:94:d9:80:28:
6a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:23:34:86:D0:C3:C3:A8:C6:2A:5E:46:3E:D8:3C:33:DD:03:3D:5B
X509v3 Authority Key Identifier:
keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6f:4a:8f:81:4e:0c:b2:4b:b2:ba:48:b4:d9:40:a4:7f:b3:
94:7f:d7:c4:15:92:e7:6c:ae:af:b3:ec:08:3e:0a:d1:95:0c:
55:c3:57:ff:47:ac:ba:2e:ae:ca:67:cf:f2:6b:30:02:3f:de:
b0:cb:c6:2f:9c:cc:31:ef:8e:19:b3:95:c8:5b:1d:bd:42:47:
d2:64:1a:1f:db:4a:21:a6:ba:59:d1:af:d7:a5:e5:f8:7a:e9:
d1:a6:69:40:da:4c:55:75:54:a7:81:11:7a:10:c5:7d:b2:33:
56:8c:b9:fe:45:ba:f2:cc:3f:9b:bf:c4:ef:06:05:ad:5c:1d:
4c:71:3d:3c:21:f7:7b:26:e2:ae:54:7f:5c:48:19:8e:4d:6d:
81:fe:df:79:10:cb:54:0a:55:86:77:78:e4:41:8c:04:3c:b3:
5e:83:57:e5:f7:cb:38:d1:b9:48:01:54:f9:b4:4b:e3:ae:6f:
04:84:be:4c:7e:1b:83:42:31:18:df:5d:3e:09:2d:d4:a9:ee:
85:20:14:54:22:ca:5b:6b:45:3a:99:96:48:ba:3a:81:9c:e4:
db:07:75:8a:43:86:74:4b:b3:72:6b:4c:e0:2a:de:c8:2b:bd:
12:5e:ea:4a:9a:dd:67:d8:a8:47:96:21:53:ec:60:79:f2:fd:
53:03:ee:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:09 2026 by rpki-client