
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
File: RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft (raw, json)
Hash identifier: IqQQ/UJXYBs6hBp0giMFt9fJ29hz8VCYPySYnMi3YaA=
Subject key identifier: 8C:07:E2:47:DB:96:1B:18:05:7D:59:C4:81:8D:16:B4:CA:25:A5:EA
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 019F9391889EA928CC8E93C2A4909CB17CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
Manifest number: 1AB8
Signing time: Fri 24 Jul 2026 10:00:16 +0000
Manifest this update: Fri 24 Jul 2026 10:00:16 +0000
Manifest next update: Sat 25 Jul 2026 10:00:16 +0000
Files and hashes: 1: 2K2LRFKVS5G4UBpi02aIHEwaYbo.roa (hash: vp6Q5byh4sOxsLn6+xnbICkzt50Gu7I9DJlz9grAs68=)
2: 4EHQchkmRvw4hrIZwKVmoTVrXcE.roa (hash: KpqMiHj1SwCn1wHf9cbF+sIlJ2SNrDY7ghIe8T7leBk=)
3: 5Z3398bPjFZnkQuZgIZdGWDznRY.roa (hash: xmJ4QribTdZo3tMhYvYOnwRRxONh8dhYrIwoBT29TpE=)
4: 60n7OcQD1rVkRE8LPW3kEfdX9gw.roa (hash: N0mQsLvGMMdhDPTL/se4j6fwbJ89Tgbu/0d6LhVYRLs=)
5: 7wjZdZfOK--9J0iW5gkpY4jz3Vs.roa (hash: wQ+RvHew1IVetOV7JWzo86gEVS8H0+zXRGq3DJBrmWc=)
6: 9iM7YuqWIbTP1jDWJnvJ3Bq7Q0Q.roa (hash: fsZlnOQR9nRVkMGwqtj0xSg8Xg6dl3hOvSIpUTk2D6w=)
7: Ca0jUIwklC0eyPP5hzRAn17FR80.roa (hash: fAEP7LfFj7fDAZrrdBBsvg+Mn25B+1e7F/BBuqO131w=)
8: EPwl8m_4qnHfbdpohqEPL96FCA8.roa (hash: FC/VvypcMirKAoVs4a1mrptO5b709xlEgfldyqGdEhQ=)
9: FN70esTZXn5X2vP3ZcEnYIks9AM.roa (hash: 1ow9uwWZ1DORgXwnTVw8JvTT23AJVzQa+9quYRVEN6M=)
10: Kq7QJSlg_4QY0R7RaYj4Ti58qcw.roa (hash: bBRpWE7OiUMYeqNpou2p2Wpdx4ns4UHX64/R4Kr6c+U=)
11: Ku0mjmxusSrMXfgvlmL_Kh5j0kI.roa (hash: zSTvo+JocKBb5Nbg9XIvSqJL+1z6V1E34a4hrkcK8t0=)
12: M2P5NHOr1VNdgU_pG36AXasq6n0.roa (hash: 0BcfiTpnoAKg2w/PTa9f6dvzV2U3+YYKy/UwXHMH75Y=)
13: PNU5dT-FRZhCGuEDnFsX7GuO8MU.roa (hash: 5nuXPVsdc9izSwCCuB+1KPJnkougYuwEFE0ABa/v1lw=)
14: RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl (hash: sdN0mIM9KGJf2C88LYSXl7oZfGqeoXeMXpbO3whrrbg=)
15: S7h5Fby9bbpxdXYmDtza_SDSYtg.roa (hash: IOxFJnKliiuzpHTvfCVgOBtXgnXsZ5cTLcWr06Mhmmg=)
16: ShGZf2KqimtbKzToWYg54Tsrrwo.roa (hash: I51c/DNMfjZlsvQm5k/7jwF4EguCQj/kTUTXhZ80zs8=)
17: UBprnGDgUIQGgKvWmIS8_yQFiII.roa (hash: jDsEX8R1Ij/Kl7yB4Ey14j2vt5dE21hu/30hNI0mPyA=)
18: UGZ3vMnUVhnMHprA-js3vspKmwo.roa (hash: n4uZoakF4GvbWWZaqJL1srzglcS0eKby+fyHBjJ5GXk=)
19: WIe_yXnGz2qxmkA-Jl4unhtVXd8.roa (hash: JDWlYllOoFXRzwvexL0+Z+xQJXmvy5W2gSffNKHemAA=)
20: WL6q68-uoJAeV1AkxAgPdtwWoyc.roa (hash: f7/E+EUbjnh6BcH/3q+PZzjcsDtZuhmuT+6PSPvWfAM=)
21: Wy81KMy0DL_6tpJOi6ANUYyTUv4.roa (hash: d27KgsDg+KuUKh7rpBYfZ/yBm4hBx4SDfoftiDo2y/8=)
22: af2hi8V_6XBfDLcR66UImjT0iRs.roa (hash: kN5giEt8lpaRlzktqhTZf2jIXA6thsWMrbPgPzbcxSc=)
23: ah0jiQnxjyeZK5he6RdTUE-ipnY.roa (hash: JJj18HJFbOb1f81VJKQKUC1al7turx0OrE/9nAccLK8=)
24: ewMk8U-CtYsjt6E6j_tG33Bkeds.roa (hash: ilAg19RjRWMFfvWl4ecpGWCs1APQudEqMJ6oIH0eDTA=)
25: fmuRuMynV3t-W1T59fbCP9gm_2M.roa (hash: 6pRpct2vh79WehrYAlgUzvTdvNK24YaVVaa9iZsg5+Y=)
26: h1AkFWiuF4C5x1jcp2idszcxtwU.roa (hash: RmjmZFo+6GsCEI0vzQijS30wCaveF6IUR5KU8O6+YJY=)
27: jXJPIagQB7xJy4c-VYsshQQ5ZU8.roa (hash: LZ2zXEnHEosFY9V/e5cqBzDV0kKFDDyZWuhh0GN0XAw=)
28: lcM9VBsMX8XlCXtWIYOwxsgyfcs.roa (hash: 5oIPhkO6h+85iz0pQDQy9IOXsl5pzQuFQs9T8Q+5gKM=)
29: m3rFClN8OrN1kUgzbffmVeYXm_g.roa (hash: gTzP3qQCo24jaH53JEi/3E2xk77hA7ta7BJO9SMqoTE=)
30: rkBhirDw6cwGmYoKR4iC3hOackU.roa (hash: YwBhd1vKI0Ytq6+5JsB0zVmdhHIcO9WNEw9TuJr99XA=)
31: ruijiG2c7OWNAbZg1DzBzUw2h9A.roa (hash: gl727KrmeoI8zfQ+pdZJ+FzEFZTT7EufSZa415R+/6E=)
32: ti7bPeHvjZr74P5AX8xhgt4EPEQ.roa (hash: eVY7BIMaC5K37OTehz4aGSdkgJfotwmNYaS0DnArTLM=)
33: tyGZCQrGLjpgKj4WkbXHS2b4tMc.roa (hash: ItE7bOguG+BdS6odPM38WwfaltkIQcsRe3Hme/srpYs=)
34: wRvPE_LWNx2kIT2wAO2XbZUAglY.roa (hash: MxpajBbFFulzyH8dwfNbDFeDhL15/nETBO2IKZQO1kU=)
35: xFV6naJ395ubjh_EqiAHvE__j48.roa (hash: dsSN+lLUWUY5SoV96p6VvWfy7nH7ZF5X9LmWDzJivP0=)
36: yuafb_GLP5geRNFsOXeHzGpXUtw.roa (hash: rNqK+URhLKI6w5EH1rntR8Xc3oY7jxanp2xGnYspLAY=)
37: z5afGA7OaWu712VRFeG9Gp0k7GU.roa (hash: V5K2iL/FYfaNf2E5t5hua1uBnZXWpXH1Eus7Qaw8bpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:88:9e:a9:28:cc:8e:93:c2:a4:90:9c:b1:7c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jul 24 10:00:16 2026 GMT
Not After : Jul 25 10:00:16 2026 GMT
Subject: CN=8c07e247db961b18057d59c4818d16b4ca25a5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:d8:c1:44:f8:c7:b4:21:ed:f5:53:10:23:
fe:54:38:b4:bd:69:c4:d9:2e:7e:e8:2d:a8:92:0b:
b3:d7:f3:65:be:16:00:41:a2:04:7d:1e:c6:e6:60:
d0:c8:e7:54:23:52:de:38:2e:cf:07:18:03:1c:12:
ed:67:aa:f8:f5:d9:15:d3:69:33:52:e5:53:94:db:
bd:0b:f5:b1:37:f2:ab:36:4a:bb:76:4f:9b:e2:21:
f6:4d:c8:2b:79:e5:e7:72:6e:9f:ac:ec:c5:a0:dc:
cc:d0:19:56:1b:85:13:77:f4:f8:ed:4b:f2:07:00:
81:dc:53:d5:74:39:ed:ee:d8:73:42:ac:a3:cf:5e:
c4:ba:07:32:60:b1:21:e5:12:4d:87:1f:ab:63:b2:
0b:41:bc:35:65:06:1f:89:96:4c:45:62:fc:56:fe:
41:86:f0:cf:a6:b7:bc:c1:53:b4:70:52:eb:fb:89:
f6:67:a9:33:42:26:28:6d:26:ea:81:3b:05:bc:52:
c9:65:07:42:7d:32:c5:8c:1f:4d:0e:35:6b:ca:99:
91:f0:61:99:de:66:08:00:3c:c3:2e:5a:a2:fb:0d:
d5:58:e7:33:b5:fb:1e:7e:1c:17:92:a7:45:cd:9e:
f8:fc:1e:c6:7f:b7:d9:d5:f4:bc:f5:f3:69:c8:be:
fb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:07:E2:47:DB:96:1B:18:05:7D:59:C4:81:8D:16:B4:CA:25:A5:EA
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:60:aa:68:50:46:4f:0f:cf:13:1b:16:05:33:e8:b7:47:a7:
73:03:c7:e3:80:6c:60:eb:5e:f2:f0:98:93:36:82:8e:a4:d2:
f0:22:d0:3c:fe:22:df:bb:01:b9:55:2b:d4:1c:a8:3b:ca:15:
54:d0:78:21:de:0c:fc:0e:19:80:7f:f5:44:29:90:aa:d2:46:
12:f1:14:fa:ac:04:a2:57:7a:21:67:21:01:92:f0:fa:7e:9e:
9b:39:e1:21:d1:b3:b2:46:da:f7:0c:43:c1:91:f7:bf:dd:f0:
16:7f:58:cc:97:02:94:13:c6:80:a2:d2:36:57:cb:07:4c:bc:
1c:11:2a:8e:a2:ca:7a:76:c4:cd:99:87:de:1d:3b:d9:f8:6f:
0f:ec:d8:41:01:5c:c2:9c:64:9d:0d:dc:13:6d:de:40:69:28:
b2:21:48:ef:72:02:ab:23:5e:01:c4:e2:67:dc:38:26:85:62:
83:87:c5:1f:18:51:36:b6:60:b4:b7:74:0c:65:e8:2f:93:1c:
7b:2b:01:36:b7:6c:e7:fd:68:b7:c9:80:67:65:20:7c:5f:11:
02:ff:b7:d4:ef:3c:e7:b2:dc:41:83:45:9b:0a:c3:b2:bd:6a:
eb:53:97:ba:bd:d5:75:fd:8e:c0:76:eb:b5:17:fb:43:c2:4b:
0b:05:04:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkYieqSjMjpPCpJCcsXz1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjYwNzI0MTAwMDE2WhcNMjYwNzI1MTAwMDE2WjAzMTEwLwYDVQQD
Eyg4YzA3ZTI0N2RiOTYxYjE4MDU3ZDU5YzQ4MThkMTZiNGNhMjVhNWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD/YwUT4x7Qh7fVTECP+VDi0vWnE
2S5+6C2okguz1/NlvhYAQaIEfR7G5mDQyOdUI1LeOC7PBxgDHBLtZ6r49dkV02kz
UuVTlNu9C/WxN/KrNkq7dk+b4iH2TcgreeXncm6frOzFoNzM0BlWG4UTd/T47Uvy
BwCB3FPVdDnt7thzQqyjz17EugcyYLEh5RJNhx+rY7ILQbw1ZQYfiZZMRWL8Vv5B
hvDPpre8wVO0cFLr+4n2Z6kzQiYobSbqgTsFvFLJZQdCfTLFjB9NDjVrypmR8GGZ
3mYIADzDLlqi+w3VWOcztfsefhwXkqdFzZ74/B7Gf7fZ1fS89fNpyL77QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwH4kfblhsYBX1ZxIGNFrTKJaXqMB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2CqaFBG
Tw/PExsWBTPot0encwPH44BsYOte8vCYkzaCjqTS8CLQPP4i37sBuVUr1ByoO8oV
VNB4Id4M/A4ZgH/1RCmQqtJGEvEU+qwEold6IWchAZLw+n6emznhIdGzskba9wxD
wZH3v93wFn9YzJcClBPGgKLSNlfLB0y8HBEqjqLKenbEzZmH3h072fhvD+zYQQFc
wpxknQ3cE23eQGkosiFI73ICqyNeAcTiZ9w4JoVig4fFHxhRNrZgtLd0DGXoL5Mc
eysBNrds5/1ot8mAZ2UgfF8RAv+31O8857LcQYNFmwrDsr1q61OXur3Vdf2OwHbr
tRf7Q8JLCwUEsg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:09:41 2026 by rpki-client