
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
File: 6LPu0cespjbWJFhSuALg5zdU32M.mft (raw, json)
Hash identifier: ClhTBDBmlv8ZtSUR2AQCV5DwmUe4fhdW7e9wGEQtu7U=
Subject key identifier: F2:6C:E8:29:CE:FF:B8:25:A5:F2:CF:82:79:92:C3:C1:21:7C:3D:47
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 019F8F7E9A83C81920CFC563E3F0048813BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
Manifest number: 1A0C
Signing time: Thu 23 Jul 2026 15:01:06 +0000
Manifest this update: Thu 23 Jul 2026 15:01:06 +0000
Manifest next update: Fri 24 Jul 2026 15:01:06 +0000
Files and hashes: 1: 1-kcyVO0wBbIqiHoCanbi5B57LdE.roa (hash: BGB2bnAjuAAmuuwOZBoZCyhnZHILmc5FvmErc7Y7ZxI=)
2: 5aXtBFrEaFxc7NvgU5mY7H-wj0k.roa (hash: gUBkEzyP8iaytHOreWTExUHiIR5ZQICj5DGtFxRPQDE=)
3: 5aZWyJBLIHcU6RZHhhqPqFmCtrk.roa (hash: 13nxKMdVKVjzMHdAUhxbH/qaDgQty47l+n7Zxmnvz20=)
4: 6LPu0cespjbWJFhSuALg5zdU32M.crl (hash: gt7Um+9cBviUvHUb3vkFrXpkEtljJSUR+G5ZbBV72Qw=)
5: 7CXsCgAfCOJLALBOGkx3gQa_WW4.roa (hash: BPY9s5jDNjWqu3tOt7+z02RZaquMjrvdU5SFJ4t+o2c=)
6: AhkbSOCLS4yDGPwazoLZAIwOBYI.roa (hash: Rph2+pIbfLaRmdGdlFiwGaZxjiSbSPI579nxiE9oIDc=)
7: DuYZ-H2sVttInwcrjvBsEkIUdds.roa (hash: Lhr2x7vqwrufK/M/sxNyImyNWEig+QhwP0mdSLVXqow=)
8: NIU89FpzziKoMc5cbTweubNW-EY.roa (hash: lqU5gy4dvFoQO8yJfigM/v+crHcxqNMcgHf6AXZWC70=)
9: gErETpLkL1Wulh1Sd26eyD56QTQ.roa (hash: 8oSrkQlx9IB4UN1/Zqqdf0UUPBBcBw5//CQWtwVqrR8=)
10: kRR25rBX48JUtOH-FpsShSIWmXY.roa (hash: 8cCQUGZZCH+0u7+J+1+9zU6qHLN1KaTdcE26nn3foFo=)
11: rPJFcb1bbnSRWQeisLihRA2U8DE.roa (hash: 1spujrMxgoaPkVqQwrlwvlZzeX8aZS/csEfhrBQmQys=)
12: tLKsS9rHMqeh-IFPdFpCYdg8ROM.roa (hash: EG0Tu5j6vFe/p0ZOO6/JOj61PT4A02/SojBmqacBkr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:9a:83:c8:19:20:cf:c5:63:e3:f0:04:88:13:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Jul 23 15:01:06 2026 GMT
Not After : Jul 24 15:01:06 2026 GMT
Subject: CN=f26ce829ceffb825a5f2cf827992c3c1217c3d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:02:60:fc:61:3b:dc:b2:b8:25:7a:89:8e:
69:57:ca:50:cf:c9:19:cd:c2:5d:24:cf:1b:e9:bc:
a5:4c:16:8d:4e:9b:5a:37:db:00:c1:13:49:4b:34:
cf:13:b2:34:d5:56:0b:be:ba:2d:8a:3a:b9:5e:5c:
cb:23:a6:fb:be:b8:cd:06:24:8d:4c:46:55:f0:dc:
31:ee:9a:6f:0b:de:9a:48:bf:9f:64:f2:1c:70:79:
0f:8d:0f:99:18:1f:8c:d6:3d:d2:6f:07:2d:6d:44:
88:e0:32:d4:87:80:70:a1:fb:ee:4b:83:54:48:ef:
11:fa:66:1b:98:62:15:7b:39:3b:70:3b:52:d8:c5:
23:8e:d6:8f:86:70:64:99:36:51:8b:8c:d3:4c:ed:
04:e2:75:20:30:1a:c1:b9:f4:13:ef:0a:f4:00:c8:
49:ad:f8:8d:5d:ad:81:0d:3e:80:71:1e:a7:57:31:
d7:1a:ec:b8:ce:36:46:62:36:4d:c6:2e:5b:ab:c7:
22:a1:de:12:b5:55:ad:5c:a1:ae:a4:31:69:0c:85:
e2:0e:05:86:a9:13:04:27:7c:3a:57:b1:e0:42:62:
00:3f:94:fb:2e:61:f2:e5:10:0a:3c:9a:8b:10:db:
84:3c:c0:e7:ff:b1:7b:78:fc:59:58:73:82:78:9b:
a9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6C:E8:29:CE:FF:B8:25:A5:F2:CF:82:79:92:C3:C1:21:7C:3D:47
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:38:30:fe:0f:97:4e:cb:70:05:a8:81:d4:f7:df:8d:f3:de:
f1:c5:4c:a2:1b:84:38:c6:ed:83:5f:0f:0e:fc:75:81:3d:a5:
84:e4:d6:dc:41:c4:98:ae:0c:bd:f8:7e:74:00:90:ce:9d:b5:
13:f0:c6:b9:bf:7a:76:35:dc:0e:bd:bd:c3:61:a9:27:10:3f:
b3:c6:df:36:4c:bf:e1:67:4e:fb:4d:e5:ec:0c:0f:72:e8:30:
73:63:de:7e:1d:e5:cc:77:5a:3a:43:a1:43:21:97:d2:6e:5f:
4f:1b:24:ab:c3:3a:f5:7d:d2:7b:dd:f5:5a:e5:f2:3e:20:92:
d7:f9:8f:78:75:6f:49:76:95:e5:55:de:b1:d1:ac:f9:b7:b3:
8e:2b:ca:06:87:66:ef:a1:7d:9f:0d:97:62:02:f8:0f:1e:5b:
31:b5:d8:16:bf:7f:b3:8e:a0:0f:f4:8d:74:ec:ab:d3:ed:bd:
a5:94:26:cc:3e:42:33:e3:77:d3:d0:15:02:db:f8:6d:c9:88:
ca:a8:5e:c3:e0:e7:9f:ad:74:76:6d:00:0b:b2:ba:37:01:6c:
1c:a0:7c:a5:30:62:03:dd:97:86:68:7f:6c:0c:53:e5:93:81:
be:cc:0b:68:1b:43:e9:4a:64:de:94:71:01:da:6a:b4:79:6d:
05:8b:d8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:32:39 2026 by rpki-client