
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
File: kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json)
Hash identifier: mAKhWMZKnElpd7lXwE/1nfhlHAOmIaCWHP17t2Z8EJU=
Subject key identifier: 1C:CB:2E:74:42:50:A6:AE:23:45:79:F4:62:29:77:80:82:D4:FE:0D
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 019E1D90410EA95F77FB5FAFCE5A50B2D146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
Manifest number: 1923
Signing time: Tue 12 May 2026 19:00:53 +0000
Manifest this update: Tue 12 May 2026 19:00:53 +0000
Manifest next update: Wed 13 May 2026 19:00:53 +0000
Files and hashes: 1: 2rYrAzNGLRy2kebzewAymxyAgFI.roa (hash: 7lRGKU9DPcDtXv+u0hXbpyy4aMqg0Uw+oprnJUe2LzA=)
2: 4oMfwBT0VCqApq0Mz9B5u8oEdgY.asa (hash: B40/yiGXsK8OX28pGDLWCXmBEnfMWxpGQtWVYUoy2PU=)
3: O0zW5TfYvBKPM_06y39fr20GlgU.roa (hash: o9IJqdu4tvBH89+q/ixOEY64sxONXtm+OJZs9bCwOus=)
4: R2FNO1Ygep-crgCBZOCm6rPiC1g.asa (hash: ApEGVteE4lW6zOIWL6jC0gxWXUXXinVHVBq0ULy5NCg=)
5: Xij9xh5DddLLuqwtCNwg7qmWYfY.asa (hash: 3EqZun6qc3DEqBJqVt9g499WWwGeNostKOQ4l981464=)
6: Y19P_g-vBYYPjku8AAu-CeAzWW0.roa (hash: 0p9ZYZuTWuetqmVFdCZJU25sYbQjPpo04+Hro2GGGZA=)
7: bt7v5S1iGVK94mqOZQHRX86O4nE.asa (hash: swB8MgNoQmF6xNb6V+G76LxIip8Z23hDxriDFCYhY6o=)
8: fL71-L22cKxM7CZQLZouesgJu3U.roa (hash: sUDVv41sxROa/YEaIzj5YrqXpRn04S1uEQsUbtMaqsM=)
9: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: UkVPnNq6+vdLmqqnskkd19woj4IUhLwhw4PoiYeSvqM=)
10: nWTiWDUsZBq6y-Llds3TNYkdAzA.roa (hash: lu7dgyssWpWTBNpOq8brqIrMrxMRYIWthZEExVfrpEk=)
11: psPWwnT647exV4ggiJz8vloBaHU.roa (hash: P5hGKQcqsDsWZRv7ouHrUVvJ+SAHh8mal8JYlkQ7E8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:41:0e:a9:5f:77:fb:5f:af:ce:5a:50:b2:d1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: May 12 19:00:53 2026 GMT
Not After : May 13 19:00:53 2026 GMT
Subject: CN=1ccb2e744250a6ae234579f46229778082d4fe0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:9f:49:e8:50:c8:da:13:69:62:b7:2c:60:
19:bf:92:a0:ac:01:9e:4f:7e:38:df:b5:e9:13:65:
7f:63:3c:6b:5b:b9:56:f4:c6:58:d9:e0:b7:8e:21:
62:b6:93:52:22:c1:86:cc:88:d1:a6:eb:d2:cb:fd:
50:9c:1b:07:91:e4:55:03:d0:2a:50:63:cf:83:a1:
07:bc:ec:15:a0:bf:48:c4:6e:2b:6e:76:96:19:e6:
0d:12:7d:41:c6:a2:7b:80:a0:f8:95:1c:de:20:df:
f4:36:0c:b4:c5:04:fe:f7:6b:f7:36:12:34:08:4a:
66:df:4d:e6:7a:ea:52:ec:35:90:9f:1d:54:e8:73:
26:c4:61:60:65:25:cc:3a:17:52:f4:a9:b6:3e:af:
f6:97:83:20:b3:c7:ff:de:5a:4a:e5:b0:3e:1a:94:
ea:dd:9c:c0:39:d0:80:a4:1f:63:f4:08:c4:dd:04:
6a:a1:b8:64:e7:96:03:1f:dd:bf:5b:45:5e:58:e9:
e6:5e:b8:6e:4e:cd:b2:e3:09:6c:20:93:91:14:d4:
a5:99:03:30:63:cf:0a:e9:4e:e5:4e:65:64:4c:d1:
c9:3c:d2:f6:6c:ca:1d:f1:de:c7:ca:df:01:e2:fc:
59:e2:0d:59:d2:78:5a:81:62:1f:66:a3:70:0e:5f:
65:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CB:2E:74:42:50:A6:AE:23:45:79:F4:62:29:77:80:82:D4:FE:0D
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:68:cd:ce:73:5b:76:62:a9:86:b6:65:54:b4:80:d3:ca:9a:
82:51:0f:63:69:5b:6b:f1:f0:45:fb:a9:4f:55:97:3c:8c:53:
c5:a3:19:49:40:02:0e:52:25:1a:57:6c:b0:d8:b9:44:e1:ca:
c0:23:d6:d6:15:e4:15:a7:af:13:4b:0c:31:6d:8a:e9:9b:ea:
8e:4a:71:a2:77:fd:85:19:c0:5e:44:cb:02:57:de:9f:99:60:
80:f2:d6:6a:5f:61:b0:0a:06:28:42:87:2c:eb:cc:b6:ec:6d:
c7:f4:cb:bf:67:b2:6f:cd:ed:17:82:ad:f6:0d:e8:e1:b4:ca:
42:bd:15:e8:8b:c5:cc:8a:f4:38:ad:a8:6d:be:41:4c:a9:9f:
ca:93:9b:b6:bf:1f:e1:f7:d8:54:b3:09:ea:ba:cd:b2:d1:e6:
08:d0:3d:f6:81:44:a6:c0:95:67:fa:39:2f:bf:78:ef:30:45:
16:83:2e:b2:03:f6:ea:2b:7e:c2:e5:70:48:78:43:eb:ae:35:
86:ff:dd:56:7c:70:2a:81:b9:f8:bc:6c:83:d4:10:07:a7:2f:
03:df:bf:67:2f:f0:cd:ae:fb:c7:6e:e5:8c:bf:eb:b0:e4:64:
78:bd:db:12:ab:a3:26:8c:cc:61:e3:03:29:6d:ab:d6:8d:03:
6c:9e:ed:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkEEOqV93+1+vzlpQstFGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2
NDM3MDEwHhcNMjYwNTEyMTkwMDUzWhcNMjYwNTEzMTkwMDUzWjAzMTEwLwYDVQQD
EygxY2NiMmU3NDQyNTBhNmFlMjM0NTc5ZjQ2MjI5Nzc4MDgyZDRmZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEKfSehQyNoTaWK3LGAZv5KgrAGe
T34437XpE2V/YzxrW7lW9MZY2eC3jiFitpNSIsGGzIjRpuvSy/1QnBsHkeRVA9Aq
UGPPg6EHvOwVoL9IxG4rbnaWGeYNEn1BxqJ7gKD4lRzeIN/0Ngy0xQT+92v3NhI0
CEpm303meupS7DWQnx1U6HMmxGFgZSXMOhdS9Km2Pq/2l4Mgs8f/3lpK5bA+GpTq
3ZzAOdCApB9j9AjE3QRqobhk55YDH92/W0VeWOnmXrhuTs2y4wlsIJORFNSlmQMw
Y88K6U7lTmVkTNHJPNL2bMod8d7Hyt8B4vxZ4g1Z0nhagWIfZqNwDl9lDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzLLnRCUKauI0V59GIpd4CC1P4NMB8GA1UdIwQY
MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt
M2IwYjRiOGEyOTgzLzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz
LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2jNznNb
dmKphrZlVLSA08qaglEPY2lba/HwRfupT1WXPIxTxaMZSUACDlIlGldssNi5ROHK
wCPW1hXkFaevE0sMMW2K6Zvqjkpxonf9hRnAXkTLAlfen5lggPLWal9hsAoGKEKH
LOvMtuxtx/TLv2eyb83tF4Kt9g3o4bTKQr0V6IvFzIr0OK2obb5BTKmfypObtr8f
4ffYVLMJ6rrNstHmCNA99oFEpsCVZ/o5L7947zBFFoMusgP26it+wuVwSHhD6641
hv/dVnxwKoG5+Lxsg9QQB6cvA9+/Zy/wza77x27ljL/rsORkeL3bEqujJozMYeMD
KW2r1o0DbJ7tzQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:34:28 2026 by rpki-client