
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json)
Hash identifier: V09yrTjOijHuCrOLJzMEmWi1dxe4JMD7Oh3kXgIFg5o=
Subject key identifier: 93:E7:6A:97:3C:A2:AF:DE:71:D3:07:67:06:FA:4A:23:73:22:40:C2
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 019F916D8857A0318662254D64050261A3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
Manifest number: 0670
Signing time: Fri 24 Jul 2026 00:01:42 +0000
Manifest this update: Fri 24 Jul 2026 00:01:42 +0000
Manifest next update: Sat 25 Jul 2026 00:01:42 +0000
Files and hashes: 1: 1-BlSXqYyBKUdfU94NGff_PAPul4.roa (hash: 5sWUhwz5Gcq5/MhNhTcOvD2uhQ0tuUa+W9GIH9V8OaQ=)
2: 1fRolkRjd-APCzNnG-5bwuoOqNg.roa (hash: uECN6gUKiv+lFioLhpnkI4G1xAlKUZVG1VCjkCRQOjI=)
3: 2F897qCWvfh11SUzKWZ5JUV2vMs.roa (hash: BDm7sSnQsdMShImHFreyfB5QnyPZWja62eMfrLC52Z0=)
4: 3DigKmaWxP-qw4TMo5nSEFFHNlw.roa (hash: SFQibSW8pDXFPKPG5MbvdKYY13AwQ4A4xl349zx1iCA=)
5: 91LDPauwCWQ9godr-xheoc62kZY.roa (hash: pLiJYVDF484K9mWtl+JKcTe0VgA4TfPZgkN8+ZrNjMs=)
6: 9XRLK1OdgukwixTDk2AKzFzTzbs.roa (hash: GCjLjdeI8luwyn1PGNY8s6Ygk/m/2VfxU7ui9AQ53ww=)
7: 9ohNILRN251EJCEOaFSvlOoDNJg.roa (hash: 2WRd0d2oEyTbSuOnacVQb9zr84nnPee4Alvgcj+3gVU=)
8: GrLjV0K1rg-_e4Na2PiEv2R8YXk.roa (hash: 9wH2XPtuxgQ1BMZZEBYsg16k1bgpNYguMty8atBuYf4=)
9: H9OemdXyC7tAgnmNPQ8cKr4kXek.roa (hash: Y6oksDUVORVjfAcT/DowbWJFqVZVzW3cfm1/KNkAcoU=)
10: Jt1l3PmmzdbcYP2rfmhzsDtcPhI.roa (hash: zt/605nd1EgOMLhSVE8EHytRNsfa1q/ziCZNE0ebjzg=)
11: PI0GWokWQCIYbfxBSxMKrWG4rlA.roa (hash: qRwJTh2gHSy2lv6qJPXbAlMzsB4kzURHt7CqQP0XkRU=)
12: PTZMdAT0hDazMuAsVI3CEFaCfvE.roa (hash: Z9gyi8MZGuuvG1z3xCSCxfacu9FwpO6Pum1TmCZXgaA=)
13: RH_HIlkMBo61W-LSnPnGJ5s3Jos.roa (hash: 7jSM+R7ontglcAC1koxA8s1vIKZN1w9IqBWxZkjEi38=)
14: Y0JbxOj_u8eJzUeHjUqUp5ZzdjI.roa (hash: upN3TgIZvGzCE5YLEWAdPuZbKmynb15EXTQ5pfRhfMc=)
15: Y8GAhpOcUIyfO0CyQe49bNXAI8k.roa (hash: 49fIprccRJUVDzFPqcsAmiCiqNfTbqtbpr/g64iaVzQ=)
16: avrcnfB12N6L1uAItV4pxr4ZeBk.roa (hash: UCrkK/t7tVltSG/GoHf/iVcJnaXfqtG/1ac64yo7m4E=)
17: hMoYvytTC8MSE72GcaOmUQp55TM.roa (hash: QNj9222JszfBwsXWHLHqGbqHpk9emhsVOXPVoX1Flpc=)
18: ipercfJU5O8E0XasUBHV6tWGchQ.roa (hash: HApdigE0Ka0edSDTXKLYJ8nXJSrgF6YaO6XyN4xCAg0=)
19: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: NqG6x6dscHkH8O1WeSUdQIH0QeXvxmipxcWb5Z/bMig=)
20: jC80DyZfd08kqUPQfGLYtFSpqeA.roa (hash: QkkRAI+hrNUAThXm4mIodhuWyIPzbk15zdb1sYevpvs=)
21: pU_XrlPF8BXSflHv1k6RicQ4hQQ.roa (hash: Zwjahs4SIZZ7mXWd1Naf3bCGTp7nVeEdZf7T1NQzjwE=)
22: r6qKV9nEirBUwP3KmuLyUTNtefg.roa (hash: iWqKDpTKfBVdyUC9r9QWpqk9OSg69kGIRh/unEHarFg=)
23: xJkF66cCvGxEcbXW72kYSvCe9pc.roa (hash: 8ukNpwANOCXSCFQousC6/SlMGWqDu4dvIjSPXAjmXlo=)
24: xQPVpv6oDfVejRnWElQGbmYJcaY.roa (hash: y3RHPAzs8tten2VXnVg+llQRjecqqHar32AXcJuIcWg=)
25: xg0VuiXqoXiww-GJ9D2_ljEA2vs.roa (hash: uA7hO9E7hUzauisNryngMo6HASraVHp6A2BgzZx4YIE=)
26: y78xNtcYu21c47h3KufgEPgZVnE.roa (hash: MwiDwZITS/z04aTqMBZZx2J7qe1RkzKld+egFNWQZro=)
27: ycFTntx4cs4onGaGpj0o47JW98Y.roa (hash: Ttb49ZN4wbdVcFXW70bm/uwe/p5I14QSBI+L4GbrQys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:88:57:a0:31:86:62:25:4d:64:05:02:61:a3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Jul 24 00:01:42 2026 GMT
Not After : Jul 25 00:01:42 2026 GMT
Subject: CN=93e76a973ca2afde71d3076706fa4a23732240c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:8e:32:46:3b:9f:8d:ab:cb:74:76:09:f2:
50:8c:2d:74:fa:d0:98:cb:6e:02:f6:62:9f:87:05:
e1:75:dc:db:74:cd:cc:12:38:33:23:36:2a:83:60:
63:14:e8:4f:35:8b:a6:69:5c:77:8d:a2:34:6a:d8:
ed:75:dc:57:ca:d6:84:fb:4a:45:b1:72:b2:d2:66:
08:31:c0:33:08:98:b4:dc:94:75:d3:aa:61:27:27:
f3:58:67:01:8e:c0:81:ba:86:a9:fe:18:b5:5c:72:
fb:20:0f:f5:c2:12:43:21:aa:17:b7:ec:e2:aa:58:
58:91:8e:80:3f:f1:3e:22:5e:d8:3c:45:5e:f9:c8:
b6:de:42:e2:54:1e:76:84:1a:52:f8:ef:fe:f2:bc:
85:18:ae:5f:81:c5:f3:a2:b6:78:af:7d:d5:fe:50:
0c:be:c9:13:74:d3:db:3d:6d:a3:20:25:8b:a3:68:
3d:08:ed:31:85:3d:30:42:eb:c2:63:38:11:da:df:
81:cc:a9:78:06:c8:29:ff:83:bd:28:24:d3:4c:26:
f6:3d:71:17:39:86:cd:9d:dc:e6:aa:4c:c7:ef:b1:
fd:91:0e:f9:21:24:0d:b9:cd:4e:7a:ec:c3:0f:62:
e4:79:c3:15:12:e4:f9:28:f8:9f:33:76:c3:7a:6d:
2d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E7:6A:97:3C:A2:AF:DE:71:D3:07:67:06:FA:4A:23:73:22:40:C2
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9e:6d:78:c7:0d:64:fe:0c:05:be:67:0b:9b:63:38:4a:c4:
e5:c0:98:83:16:7e:1b:f9:98:2f:f2:4d:d4:13:25:b8:60:52:
e2:ee:25:ff:19:e3:26:72:2b:39:23:9c:fe:24:be:24:b3:69:
64:84:32:50:29:f8:53:ad:23:e3:ae:7d:16:40:f3:6c:6a:3d:
e1:fe:06:7f:f9:39:2a:4b:2e:5f:bc:af:f3:89:37:eb:f9:b3:
7d:c8:23:34:6a:12:dd:1f:ee:b5:49:41:d8:b2:9f:91:23:c1:
82:22:bd:9e:80:6e:e7:e2:fb:c8:88:7b:b5:2c:56:95:6a:57:
63:af:67:8c:38:45:58:c0:ea:0a:e3:d0:b5:a2:f3:57:bb:fa:
2f:f3:13:5d:de:0f:81:3f:22:d1:22:ee:2b:51:09:f0:04:41:
0d:a0:1b:26:a6:73:1f:7e:08:b2:4e:99:63:11:8b:31:1c:c6:
c7:5c:60:86:b6:e3:48:59:97:76:a1:c2:c2:79:7b:2f:32:1a:
1b:bc:9e:f8:b5:0f:8a:e3:81:af:64:9c:31:58:10:03:c2:36:
16:7a:1b:0e:be:9b:0f:21:a2:83:d2:ea:a6:39:5b:a4:60:1a:
66:a5:58:39:42:dd:65:92:8e:89:e9:84:47:72:4e:ca:eb:e6:
c8:29:27:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:07:48 2026 by rpki-client