
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
File: afomI7Ii0I2TVpdQRLlAe1_qSLo.mft (raw, json)
Hash identifier: b+SF+ah2aKMTxGvOjS2h7UnC3RRPLWJ+u5lbDDMQixQ=
Subject key identifier: 87:2E:49:A6:6A:06:56:14:1F:02:A9:7F:88:37:D8:72:9C:76:37:E6
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F902356299EDD574105736DD66EE70BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
Manifest number: 42
Signing time: Thu 23 Jul 2026 18:01:02 +0000
Manifest this update: Thu 23 Jul 2026 18:01:02 +0000
Manifest next update: Fri 24 Jul 2026 18:01:02 +0000
Files and hashes: 1: 01b9RY2Fu1lHntnJT3pNtUlOxDQ.roa (hash: Vv31j2T6PEJDGj5zXrQrLiZ0MXVVZbGbZJb6hh8+CQQ=)
2: 035ln37YeqsWXEgvqkRCVHt3Ri8.roa (hash: R/WkyEtwI6D0vokhj8mKQ0vbvvnYXtwev6BJkOiTzLc=)
3: 1--siGC9v_UvUxOAFafv_Fn5B77s.roa (hash: LDHSvCANEcsAHTe65oB9R5YLbeer2QU8Ak6a9D9BBjk=)
4: 2yu0ObbMzefwvoYMAE7hgfoDBu8.roa (hash: 7IliMuEfTd77oAXdQXi1jLMCuSMXg0z01MPP8W+nMCE=)
5: 4MCAetrKgVOgziX3eUQM1qCMcoA.roa (hash: pKEGkBvTYQ30ve6Dr1u+ev6XKEMVVvkV1Qtxo8jX2fg=)
6: 5HIB4XdFvUnYx8q0lLws_OpypiI.roa (hash: SmHZRFszjS8iXB/TCR3lbdZL3Jg43B7hycjvKJTAA7g=)
7: Az605-Xi4-85FYu6feBXQ1SOYt4.roa (hash: whVjTw7Oo6IjmdNZa7tDCs1+dbsJYo3zqsCYIoKzP7U=)
8: BcxI73p8ErEeQ0hukRaoWm0fhjA.roa (hash: eNJkC6bVkAW9TwdngXUYqa/fXCyz5L/k5yc9vvGi7Oc=)
9: Fi4AB2k5RVSdMb4GHgw0ckyjigo.roa (hash: 3ZHSAL4bzQYAmn/XzcARd3JSpHYZITnPX09te0ZOJe8=)
10: HMnJVGsw1KKSHSxZYJQk0PPJv4A.roa (hash: cmHnOSBKknYL6Ik8PCsxIYH0OUFFybK95ALGrR3Wsno=)
11: HoZNHcVftjja-8LWzF2TgzwYskM.roa (hash: WYbQQFrey7c2u2+oSYYECV6iIWkitnDN5rYtWg7W/FU=)
12: HrMj_GnwQIFuTnfdxxyIjE-1fTA.roa (hash: C0n20k3l0t5enAnvei+Ir6HCzxKKQiDD91+lXP6nt/Y=)
13: Il-I_QraKvZn9F3LshcILYbL6Hg.roa (hash: jBPG9OSjW23p/4tSxkYDhOvf3qNw9HtJVamuxECSc1o=)
14: OKg9lDRnR4jN86ZPv2a9kDmE6ko.roa (hash: wivGX1Ju7hjNkdPElNOh+99tkUZ/3DE5nZF6Omx8P8Q=)
15: PIK_cDodINI0iYBstXmbPX8NmbU.roa (hash: wsh8RB6vngnvVEJooLnSoxpJFfQxV9+OAGAxc8EZhQ8=)
16: RF_oJzedGN9LU1qV2KxS5kPzKzs.roa (hash: XTT+vMGxme3MjsXfUunv0kvDQOhrCp5uohUm6aDJtgA=)
17: RrqPvUz_GYCamBFzWT4cys7iUNE.roa (hash: F67+gbhSPp0wa9EF3KodY5zDvi+U+0QuAVg1KrC+CXY=)
18: Txs6_HSShzslxSEnb_V2cEpgnGU.roa (hash: gbJLn9T5ZMo97yRRx+iLp2ECvFVQ33SP7nTRm5E5ZEw=)
19: VgOMDG7UZtHB1CKshYGZFj4Cqic.roa (hash: xzzAiNera9mLgzvG+jPZ47RQagAdP1jBC2IGHubscMU=)
20: X6GDvsh_wT4Bzq3QdVomARBsHOw.roa (hash: urWTsIN+xxnNEPbJOMCoifFltW+NmhF15UAZYa0NG/4=)
21: a-B1eF8bX3q8DFUBeQ5ww6i7i7g.roa (hash: 9frCu7ndcC7bDDjZ+NFrem18KkQFSf9jJ7NMejNua+g=)
22: afomI7Ii0I2TVpdQRLlAe1_qSLo.crl (hash: N2sq8xDt34N7qTjxEmYFl/c2JqGMqZInxoC+oXK8i/Y=)
23: bYRPNTCOMEmRi6pRGIqF833I-9g.roa (hash: 9Srf/yc4WPXYXqjKVX7LPywlcq8OAZ7JMmRdXXnb2oc=)
24: gLDg5wMg6SC_pUFobFAIg1PePE8.roa (hash: +vkIi4zezkFj5sHevBIL/3+BvZs6Qyrwqf9sfJ/UqQA=)
25: kIboR4QgmfAIaRZxJyA4OskOO_4.roa (hash: hv6Xi3tRRRD+BBRVihVt2befifvoeUqJAbapAtcXzA0=)
26: nqNiVlcnTsEAzaX737y8-4ABceE.roa (hash: exmeRmprROseDzh2DPQ445sV4HkcVczO7R6fRKpDb0E=)
27: oKt2Cid9yLvhIC5MK3q_6cG1q5g.roa (hash: i3gzQ6XHE8PbwTvwhvxi9lLYpqn8rRftO7aMWIOG900=)
28: q0v9xLBgr75QZWxQbxIDsm_5auE.roa (hash: qOcGp9/tV8D5cBFVGmxsTN9zUnDfYAT6E1ABiK0+n00=)
29: rc3oRKtt_90HxvD3LaPWU6Xr7EA.roa (hash: 29YVA6UeJ1gESTqULKlwFc5LGe3kSzimUyOz6HnaNbI=)
30: sIjAOtdWNZFJ1L7t6oTrXjd2hTg.roa (hash: dZ67afs0E26jtSXGJwEB7GzsGE9DKlrkIzAjyaWF/bo=)
31: v1eEtmAqh7DLq6r5odUm3kae1oc.roa (hash: Mr2A+DP00TZTbOJcOBNPWcOqmgh2Ko+qAajSURN8csY=)
32: zsmBCvMBFiLh5zI01XSmpVHLzac.roa (hash: py2QFHBhaxOUQ3FH29RNTtBqgRB2pECPvs4I/DnYCyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:56:29:9e:dd:57:41:05:73:6d:d6:6e:e7:0b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 23 18:01:02 2026 GMT
Not After : Jul 24 18:01:02 2026 GMT
Subject: CN=872e49a66a0656141f02a97f8837d8729c7637e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9c:d9:a9:91:e5:1b:19:9f:d6:f7:46:57:3e:
ec:43:5a:eb:f5:23:19:fc:26:66:7e:29:7a:b5:74:
29:bb:49:da:56:5b:c0:f2:a9:a2:c1:65:40:69:01:
b2:6e:b1:86:c8:15:87:ae:2c:b4:d1:41:a3:8e:68:
ab:08:8f:a1:75:c6:8d:eb:9a:81:06:a9:72:34:45:
11:19:b2:bf:80:7c:1c:97:ac:31:e7:f8:a5:08:22:
a3:d2:8f:21:03:ea:89:dd:2f:6b:06:61:3b:bc:d1:
b9:b5:5a:0c:d5:f6:78:3e:ce:fa:17:a4:79:03:d8:
4a:ad:8c:00:d9:1c:23:ea:43:58:ab:c9:78:b5:4a:
54:c5:57:f3:4e:ff:00:6a:56:ac:db:40:99:b0:82:
01:ff:cb:89:63:8c:e4:4e:0f:de:8b:cc:2e:2e:33:
83:de:f7:97:c4:23:84:f4:c0:04:bf:07:d5:04:6e:
f0:55:8c:f2:b1:f4:a0:42:46:3e:9a:b6:7e:a6:39:
8d:ce:34:86:a5:a7:83:10:06:fd:27:fe:b8:69:49:
4a:c8:de:e3:44:32:24:e5:f5:3a:9b:fe:5a:9c:ce:
ba:04:d9:0e:d7:2a:cc:cf:09:da:81:6c:e9:ac:68:
8f:a5:97:86:59:2d:85:c8:43:c0:f3:92:83:dc:4c:
d5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2E:49:A6:6A:06:56:14:1F:02:A9:7F:88:37:D8:72:9C:76:37:E6
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a3:ae:08:da:cc:6d:f8:b8:82:9d:b9:1b:90:d3:91:2e:5b:
e2:91:10:58:9d:8b:c2:ce:2e:87:de:5c:b5:b9:af:f9:4b:e7:
b2:f6:4e:0d:d8:04:95:67:6d:82:90:fd:bb:8e:f1:61:cb:78:
cc:18:cc:fb:41:67:d7:0c:1e:74:0e:91:9a:9b:0e:a4:b5:f4:
93:91:75:9c:9b:9b:01:9b:60:91:e8:d2:e3:d1:ee:0b:26:68:
b4:e3:9f:87:82:9d:c5:51:a8:d6:d0:1f:99:8e:57:b4:d8:07:
fa:c9:60:a8:17:58:dd:2d:a8:a3:b8:4a:0c:1d:70:32:28:fa:
4b:0d:cf:72:10:23:18:9c:b3:d0:70:ec:65:02:2e:46:fa:ed:
15:06:bd:1d:69:91:94:5e:ad:52:59:59:ce:2e:23:88:11:2b:
5b:a5:a5:86:e8:7c:c9:f1:6e:70:e5:84:85:21:88:bf:99:95:
df:d4:07:cf:72:6d:7b:83:2b:c2:91:1e:41:fd:f6:89:80:95:
50:f8:81:95:c0:3b:6f:29:df:c2:f7:69:2e:30:94:85:c9:56:
80:41:7f:56:a1:5e:3e:e5:03:ac:43:9c:9e:e0:4e:98:77:a4:
3a:fb:92:28:1f:a5:96:65:b1:78:cd:a6:a6:73:5a:5d:84:af:
72:87:02:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QI1Ypnt1XQQVzbdZu5wu/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZmEyNjIzYjIyMmQwOGQ5MzU2OTc1MDQ0Yjk0MDdiNWZl
YTQ4YmEwHhcNMjYwNzIzMTgwMTAyWhcNMjYwNzI0MTgwMTAyWjAzMTEwLwYDVQQD
Eyg4NzJlNDlhNjZhMDY1NjE0MWYwMmE5N2Y4ODM3ZDg3MjljNzYzN2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5zZqZHlGxmf1vdGVz7sQ1rr9SMZ
/CZmfil6tXQpu0naVlvA8qmiwWVAaQGybrGGyBWHriy00UGjjmirCI+hdcaN65qB
BqlyNEURGbK/gHwcl6wx5/ilCCKj0o8hA+qJ3S9rBmE7vNG5tVoM1fZ4Ps76F6R5
A9hKrYwA2Rwj6kNYq8l4tUpUxVfzTv8Aalas20CZsIIB/8uJY4zkTg/ei8wuLjOD
3veXxCOE9MAEvwfVBG7wVYzysfSgQkY+mrZ+pjmNzjSGpaeDEAb9J/64aUlKyN7j
RDIk5fU6m/5anM66BNkO1yrMzwnagWzprGiPpZeGWS2FyEPA85KD3EzVzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcuSaZqBlYUHwKpf4g32HKcdjfmMB8GA1UdIwQY
MBaAFGn6JiOyItCNk1aXUES5QHtf6ki6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYt
NzJmYjk3ZDU5Y2U0LzEvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYtNzJmYjk3ZDU5Y2U0
LzEvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKOuCNrM
bfi4gp25G5DTkS5b4pEQWJ2Lws4uh95ctbmv+UvnsvZODdgElWdtgpD9u47xYct4
zBjM+0Fn1wwedA6RmpsOpLX0k5F1nJubAZtgkejS49HuCyZotOOfh4KdxVGo1tAf
mY5XtNgH+slgqBdY3S2oo7hKDB1wMij6Sw3PchAjGJyz0HDsZQIuRvrtFQa9HWmR
lF6tUllZzi4jiBErW6Wlhuh8yfFucOWEhSGIv5mV39QHz3Jte4MrwpEeQf32iYCV
UPiBlcA7bynfwvdpLjCUhclWgEF/VqFePuUDrEOcnuBOmHekOvuSKB+llmWxeM2m
pnNaXYSvcocCfQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:04 2026 by rpki-client