
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft
File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json)
Hash identifier: x2gAjQgP2C8jRHBqT0QYkFjgWO5EftCeEbm/Fc2IKGc=
Subject key identifier: 87:6E:C7:33:F6:EA:73:9C:CA:39:C3:59:3B:30:08:EB:8F:06:A7:09
Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Certificate serial: 019F91DB19F7C6B57178B36B5C6A608883AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 02:01:22 +0000
Manifest this update: Fri 24 Jul 2026 02:01:22 +0000
Manifest next update: Sat 25 Jul 2026 02:01:22 +0000
Files and hashes: 1: 286ljgduSQ23zXxMskYIQVpjxXw.roa (hash: 7kRo+hhGrmwGIHUv917EDTqyatYEBV1hJSeuWZhlap4=)
2: 4PDvFK89C4F409g_XmWPwr7q1a0.roa (hash: 9lF1IQm65iaYh5J0JpeOleT0SuGGi5cwQEdnoe/v5JQ=)
3: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: hIO8xPBM2D403lUiHUzH8g1Xo6ygzQI+hJ+B59bV2ZY=)
4: XpUefWEiJeIsRivUE_i8Xfs2GR8.roa (hash: PBHeI5NfF0k/v47sxglrYiZdodvTKkFHSpMBQlDcdXc=)
5: ZIFHSotu32VSRWz3yy7p-c2LO-A.roa (hash: HtmF/vHud7OvPwqTimOkx4Bd9iGAFPGDNsHwtbVJBZ0=)
6: Zc2NwjC7aoT6KGmTlpJCVRtAAxM.roa (hash: Lw8AgQnNa+u3srZTik73U4zlVyuicSwiTs/U27h1T58=)
7: a0ljWjjOMmlqv-KUZ9yfJ5o3o08.roa (hash: HgXqjfFgX4E4spO/gFoOPoWjpP4kI1tcmHiNguLieIw=)
8: bPL_MeYosxpJav1FZrlBnVGpssY.roa (hash: xbaf1MsiC38LB8r3yBiWSr3FjpTVnJNfGoxcFxBJEYM=)
9: oP5ts0FtfK91btZ3P7x-bBdVAcw.roa (hash: Hav/3aYz5+a57hb3pfiEZH2IAAqH/VmCtBV7UH/ck2A=)
10: tXhbIuVpYeE_jd1CU4lv2cgwfnw.roa (hash: lxyF6ei0/QTcu7Po0gkCzFazsZNHVkwJorFWOFgBWYI=)
11: vjXTFvPzZIb1zeRSL_kprTEdqbI.roa (hash: JwHjdybMdJ5oxvKoHkQM559e6BBUTavDx0DxnmOgdS0=)
12: yvxp8xW14Xp2PiR7kJbkc75G14A.roa (hash: o93DGCCTavhE3gLHe6hFNvurmN1iNt5bMJ8d0jqfGPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:19:f7:c6:b5:71:78:b3:6b:5c:6a:60:88:83:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Validity
Not Before: Jul 24 02:01:22 2026 GMT
Not After : Jul 25 02:01:22 2026 GMT
Subject: CN=876ec733f6ea739cca39c3593b3008eb8f06a709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:5a:ce:83:5d:a4:88:01:71:c2:8a:4a:9b:
e5:b7:1f:c2:56:7d:77:7d:43:b6:4f:e4:15:64:bb:
8b:f7:ca:ed:c3:d1:1b:8a:81:5b:49:6b:b2:a3:45:
26:e1:96:a3:d3:77:e5:f0:74:8d:2b:5c:58:6f:00:
50:8a:35:dc:ae:40:b9:f7:be:e6:00:a8:46:89:71:
26:dd:a4:69:f0:35:00:1b:27:30:18:f1:14:5e:d6:
5e:93:da:68:da:19:7a:6a:bc:70:7c:d8:bc:23:3d:
e8:5f:85:3f:39:23:00:7f:80:5d:1d:49:75:23:c6:
b4:da:17:8d:8f:e4:18:39:99:68:83:d5:66:a5:3d:
31:27:5c:d8:52:de:69:3c:23:0b:21:2d:ed:3f:49:
a3:7d:00:20:44:ea:e8:29:a3:72:6f:bd:85:38:4e:
c7:1f:3f:44:ca:7f:42:50:5c:5c:97:d5:38:59:4e:
b7:90:7d:fb:ef:67:a7:a9:0d:37:d2:f2:aa:0b:c0:
28:59:31:5a:eb:c0:70:c4:6a:90:3f:a9:a1:1a:b5:
84:aa:c0:90:b2:ac:8a:aa:12:48:6b:7c:86:a1:fa:
37:07:6a:6d:a6:ce:0b:95:21:35:46:20:74:b1:39:
8d:ff:b8:29:d9:7a:7d:9e:b4:af:5c:16:40:a2:9d:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6E:C7:33:F6:EA:73:9C:CA:39:C3:59:3B:30:08:EB:8F:06:A7:09
X509v3 Authority Key Identifier:
keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:82:1e:a4:cb:59:9e:17:31:ae:2e:26:ae:bb:71:3e:e6:f4:
eb:12:cf:c4:cf:32:ee:cb:98:a6:0b:ea:15:8f:5e:80:a0:37:
78:36:d2:76:32:dc:6c:1b:42:1c:53:eb:fd:db:22:c7:71:5e:
09:0a:24:2e:3b:a7:de:fe:93:82:1c:1f:94:86:3f:3b:67:27:
cf:2d:63:fd:f9:d3:66:be:83:60:08:6d:ac:2e:2f:3c:1e:66:
b8:63:6b:71:f6:ef:e5:9a:a2:01:e1:b9:68:e1:16:ac:ee:89:
74:07:cb:70:24:84:30:d2:7d:3b:11:a7:ff:8c:87:98:81:46:
1e:9d:dd:9a:fe:c1:0c:4e:17:ad:6d:4b:b9:13:c5:64:7e:2c:
56:fd:f9:e9:80:bf:80:db:51:ae:1b:a7:7c:21:70:d0:ae:1e:
4e:ad:32:eb:01:c8:e4:4e:6f:0d:79:3c:e5:a6:62:a4:04:8e:
09:19:ad:22:dd:62:32:47:0c:03:c4:24:68:04:c9:a5:7f:17:
49:35:07:33:26:f9:37:d2:e5:f9:41:3b:f6:97:b6:44:bf:a2:
a0:84:df:48:08:75:22:dd:25:b2:2a:cc:cd:75:11:a1:5f:ac:
a8:fc:1d:dc:93:1a:a7:2b:fd:c6:21:21:7f:94:ce:9c:ab:73:
4d:82:6d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:22 2026 by rpki-client