
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
File: r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft (raw, json)
Hash identifier: 0uza1zbftf63anJM9WBqXVEvqT3qp9u0XkXfrZYfg3I=
Subject key identifier: 86:2F:AF:FF:ED:20:B0:5B:07:EF:5A:CB:C0:2E:7C:F4:0F:46:36:15
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 019F8F7E24C6D29E1AE08773088DD83097AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
Manifest number: 13A1
Signing time: Thu 23 Jul 2026 15:00:36 +0000
Manifest this update: Thu 23 Jul 2026 15:00:36 +0000
Manifest next update: Fri 24 Jul 2026 15:00:36 +0000
Files and hashes: 1: 1-IJx4nelfGjFuMYLqOK7id9irxU.roa (hash: b5aVl1cJIc1BC2UfHdl9ea+y66xvZtqK+4BK5mmAqH4=)
2: CnxrWW9MQbA3OxKH-Q8jpaMZj0Q.roa (hash: I2lPd7hD8IUUjVTMDWiwz4fKXB1nPb5e6pLyv73hBK8=)
3: Eqmef-fTn9NYQY7xZznBlyZF1n4.roa (hash: CIQuiGAfVrQ7ckL7hoIedbZW1Y/7JzYFdGkSQM+CDZk=)
4: Lkpu54v6ux0vfrMmr2dvF4EUmIY.roa (hash: 2lIxKAyj2wAnIHlH+oCwYSCBBNm4zlmBFuipn6Ti/Cc=)
5: N_Jp-G27wqAqsqkajDg53k_oUEE.roa (hash: NpaEZ0EEykOhPXCywjsGGExbKvpF7O0B2ojyn6pZCPc=)
6: NlmgJH7T2Nyh5LwtrU7zGve9sZA.roa (hash: 3Wjbtflt/jjOunqkUKEb+3Cki8OMoGu4zLrIQR/qwZo=)
7: cUb3XTogvovrYjpVGeHi0SpRJUA.roa (hash: LdHfjZ1stTUnmvHrBTIHeQNXmr3GpKVFfzvqxr7MXf8=)
8: hVE5Yop4VxbvBIWpUfceFvrMB2g.roa (hash: 8ClHdxsk9TEH5ulm4Fgh/I2Ueg7yI7/7dLDb3VHPBxY=)
9: r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl (hash: E0GRT1H2GQmWG15GOiV61EJd/181ftxdJGDWurH0b58=)
10: w83Lz7bG7qWOCKPvzC-7J-e6eIQ.roa (hash: K0HhmDqy6GK1v3887SfyLFxrwfrFJjolkhIBVfrw66c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:24:c6:d2:9e:1a:e0:87:73:08:8d:d8:30:97:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Jul 23 15:00:36 2026 GMT
Not After : Jul 24 15:00:36 2026 GMT
Subject: CN=862fafffed20b05b07ef5acbc02e7cf40f463615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3a:6b:79:c4:c2:8f:5c:88:e2:b4:1e:86:60:
97:24:98:1e:48:24:60:19:fe:c7:ea:3a:7a:1f:5d:
b6:d7:ec:00:21:c5:b1:6c:ad:22:bb:ec:20:c3:48:
db:2f:5c:21:3a:87:ed:21:92:5b:c9:7d:4b:0b:4d:
f8:d0:a4:08:36:5c:a0:66:f9:c4:a9:b8:da:f6:40:
4f:3d:ce:2c:6d:94:6d:49:05:37:6c:58:7e:cd:c9:
21:18:7a:f0:ef:18:2a:11:1e:54:97:15:0c:da:0f:
cb:9f:bd:a8:eb:b9:ff:10:25:3c:d2:a2:a3:82:4d:
96:8e:8f:e6:b4:c0:9b:fc:83:27:25:d2:1c:d4:96:
87:12:3e:e7:ef:f8:30:38:ed:ba:c5:22:f0:0d:ea:
6d:8f:d1:1d:c1:3f:6a:f5:7b:10:8d:78:7c:b7:ec:
13:87:ae:32:f6:d7:a8:44:10:a9:78:b2:50:15:75:
52:bc:0e:33:15:3b:9c:bf:8d:c1:1b:07:8e:7b:85:
5f:ac:f4:af:92:08:de:62:8d:c1:92:73:c0:66:2c:
c5:86:6e:ad:81:3a:53:04:95:0e:b6:1c:cc:62:cb:
98:df:48:97:ec:f4:3b:f0:b0:fc:ef:50:88:70:39:
cb:1b:1c:10:59:f9:60:d7:b6:d4:c7:c8:6e:f7:5b:
f3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2F:AF:FF:ED:20:B0:5B:07:EF:5A:CB:C0:2E:7C:F4:0F:46:36:15
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0c:85:30:0e:5b:fd:b6:25:9d:ae:69:88:45:2f:ba:34:be:
82:75:7c:4d:23:4d:7f:07:cd:1f:43:db:1c:b8:42:a1:c2:f5:
13:2c:28:b1:12:ae:d4:e4:dc:b5:34:bc:d3:3f:27:a6:e0:88:
61:86:ad:85:34:ad:7d:8b:c8:d7:f6:7a:68:59:47:45:3c:7e:
da:9e:e9:13:d6:c9:1d:69:3c:96:eb:ee:ff:d6:d4:b9:97:06:
94:c3:a9:99:e9:a6:95:99:d7:35:70:43:c4:87:1b:c5:a7:35:
63:08:b1:68:c2:b5:7c:b6:b9:cf:6f:0b:a8:c6:17:02:72:28:
10:e8:9e:20:65:cd:65:51:22:07:c5:8d:16:96:d2:9e:ee:bc:
35:dc:f7:90:b5:99:a6:01:26:3f:47:ab:aa:b9:b1:18:a4:15:
ba:82:19:9c:98:39:98:4d:b0:6e:a1:bf:77:7e:52:31:eb:da:
ac:3c:70:ec:8e:a7:da:a7:2f:46:c0:30:3d:81:91:c2:59:aa:
91:3d:1b:7a:08:33:f9:20:1e:01:d9:02:32:07:89:eb:31:9f:
4a:a7:47:59:f7:37:3b:21:fe:a3:c7:86:dc:83:fd:c4:6f:0d:
fd:86:f9:ea:cb:27:f3:57:97:5b:7c:6b:c4:0c:ee:fb:fc:d6:
2e:d1:32:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:25:27 2026 by rpki-client