
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json)
Hash identifier: +7UyjFFd4UAO1L5kHwoqgIzCFJ7KnQGtkMUNfjICMiE=
Subject key identifier: E2:D8:02:A0:17:6F:85:79:AE:BA:0D:F8:09:45:65:E2:72:28:4A:29
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 019F8FB500D56576AB91E203F7B2FA74AC59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
Manifest number: 1786
Signing time: Thu 23 Jul 2026 16:00:31 +0000
Manifest this update: Thu 23 Jul 2026 16:00:31 +0000
Manifest next update: Fri 24 Jul 2026 16:00:31 +0000
Files and hashes: 1: BKLkIdToQetqMN6t0fILb38dSDc.roa (hash: RhVkHdE+vukqBXIHV6N+0FaehH32ohYDLGAwN+SuRTk=)
2: CupzWU4aLHwacea9s2f26JgGU7w.roa (hash: YiVW0zn+2J0x+BF2Yslb930PEXt7HMZ5DbfmBNoWQKE=)
3: Hf9SE1c9_AO3kFICjo06WD1ExT4.roa (hash: Zcpcz8u2FNeH+3dXoD7WRhTdlszR9sgi9wm3DkRL4TU=)
4: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: bArVzCdHP89kaRatjiXTJbxSXGKvapCQi4wEtTZD6jw=)
5: InZzXVL8KHJoCW3P7j1vC_LCtX0.roa (hash: UZuietxe/VlvBF04H5Qn/Q3JuczTSHQbjD8HNRbl0Y4=)
6: V6V_NlUP57LahAmPSdJLWOxrfrk.roa (hash: PQq468qMgQ7iMbphbUgZdzLfF9PWviyerqDZHzWerVE=)
7: a6tV42bT2z7X2lsjs8cvX8HIAIc.roa (hash: NDbBw26iXwsVl/ElEophDI0QYBlkmtkRinFz/9BOzMw=)
8: ew5GxWmNdi8APxJ7DnyuV397vVY.roa (hash: scbuflEbcOaCfZ8YsAmmUBvMpXLhScUEwCDFhgE24W8=)
9: fObJjjriSFDg4fSQTq7ENWa9-zc.roa (hash: WGLV3VjdN5mD0f589CBjcyMgLQSoTV+NVe84m46+eBc=)
10: hcsvWgXQpRuMWY3WmGaGm9cGJ4A.roa (hash: dkGLaaklnk5lHe0yhu52I503lMVuY0bbx3ehGkFXyqY=)
11: i7574yuT4RZ2_MwlIM2VKqIIK2U.roa (hash: X+/UrliSCfToScMB/8/XDGdMggPWp6ennjed9G4uk1A=)
12: qOIniIo2K3_zis3JibLadioBPRo.roa (hash: 5h4shskfhopVb9L7z02A78iAajdnh2sIBdf4Kss8RH8=)
13: vWKFpPFVl35hfIog_KoQjclWrmY.roa (hash: 7m8wK3gsN1166dBeFVQxAfE0K89nsZEcg+lnonfGv9Q=)
14: wWIoMzB39ahvaptJv9NhKUQr9Cw.roa (hash: 7GV/ae9yumSfYZH3dmuAGtWW+nlGHJx1A9VViiivwD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:00:d5:65:76:ab:91:e2:03:f7:b2:fa:74:ac:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Jul 23 16:00:31 2026 GMT
Not After : Jul 24 16:00:31 2026 GMT
Subject: CN=e2d802a0176f8579aeba0df8094565e272284a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ea:38:dc:6d:77:28:ba:dd:53:0f:f3:20:bc:
aa:ab:99:5f:58:d3:86:9a:ba:ca:33:92:11:1d:fb:
61:da:c3:d0:55:da:f3:3e:c7:f9:ca:5e:fc:2a:aa:
c1:68:cb:9e:a1:0c:9c:2d:8b:eb:1e:0f:53:cc:11:
b2:34:bd:6f:01:aa:9c:ca:ed:4c:09:b9:50:10:06:
71:ec:1f:e8:5e:29:09:83:31:7d:bf:6a:01:c3:d0:
ab:15:40:d3:f8:11:66:33:64:16:f6:16:ea:1b:95:
f1:85:d5:6c:2d:d0:89:5e:67:41:48:65:88:63:cc:
ca:13:ed:30:64:9c:63:d2:7f:ae:71:9f:87:98:e7:
c8:34:df:74:23:65:f3:ce:bf:03:4a:8e:f7:31:4b:
d1:2a:7c:33:af:49:cd:ff:6e:df:f5:3d:58:e8:50:
84:0e:87:bf:6d:23:c2:61:d8:7c:06:38:07:f0:08:
c5:21:db:5a:33:1e:eb:93:d9:e7:8c:57:c0:9b:1a:
c7:e3:3e:62:69:d1:65:c8:80:da:d8:71:ac:bc:46:
7a:36:c6:cc:99:24:fc:3e:e8:06:b2:5d:ee:0b:97:
70:46:74:af:1a:09:af:f4:40:ff:0e:91:40:c3:d8:
d8:db:8d:29:8d:89:95:6e:09:74:a2:5e:b5:4e:62:
d4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D8:02:A0:17:6F:85:79:AE:BA:0D:F8:09:45:65:E2:72:28:4A:29
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:80:39:36:6b:46:5f:48:9b:93:89:c1:98:dc:8d:38:34:bc:
91:d5:ca:ee:79:68:72:d6:ce:79:2d:56:e9:79:21:ab:12:a5:
f6:81:3d:17:01:3d:31:ff:33:ad:6e:35:24:e8:40:14:34:f6:
98:a0:b0:37:4a:7c:e5:64:96:d0:67:f7:36:ab:62:d2:8b:6f:
bc:0c:ad:a5:61:fc:9e:99:84:21:62:0c:20:97:a5:e7:94:bd:
95:a2:20:03:9a:6f:15:cc:30:b7:40:f6:39:d6:36:07:a0:49:
5a:48:fa:9a:34:2a:ec:6c:0b:f7:87:d8:3a:93:81:2e:00:b6:
b7:ba:cb:d2:cc:b5:ab:b4:36:08:1b:8c:0b:e7:6e:6c:6c:c7:
28:b4:3f:27:29:ce:06:d6:36:d7:ee:84:9f:18:3b:e3:83:f6:
53:b6:6b:76:a0:8c:0a:22:53:67:0d:d0:8c:71:b5:a4:dc:0b:
05:e4:40:24:58:7a:aa:33:4d:ca:10:b9:42:60:5b:6c:03:cd:
da:24:f1:35:0e:f0:6e:84:e9:be:be:43:c9:fe:48:f8:a2:e8:
1e:34:97:9b:95:00:ff:d0:ca:90:36:62:9e:42:d8:0f:6c:1c:
a1:74:47:a8:f7:b5:3d:72:4d:a6:49:5c:01:67:91:ab:b4:90:
9b:3d:24:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:36 2026 by rpki-client