
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
File: 02AMuv0m_uUGT8ifMB38jjwdPKU.mft (raw, json)
Hash identifier: AJK42Zcf+ZdBRgOzVxgrxED81Yw9xt9InlJNQhpRSLc=
Subject key identifier: 64:4D:00:0B:F6:61:7F:6E:AB:74:28:D8:C2:08:3D:2D:9B:DB:A1:D5
Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Certificate serial: 019F921104BFF5CBB6DA66B4410A4DE1E4EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
Manifest number: 19D9
Signing time: Fri 24 Jul 2026 03:00:16 +0000
Manifest this update: Fri 24 Jul 2026 03:00:16 +0000
Manifest next update: Sat 25 Jul 2026 03:00:16 +0000
Files and hashes: 1: 02AMuv0m_uUGT8ifMB38jjwdPKU.crl (hash: yCKx5bHNc40eQYyAcg/SwckmMWVKdVH6Ar7Cv0EbDho=)
2: 3KHb4LyjMb7GTQzfARliH9VGTGI.roa (hash: u+uDt3VaqBj8WsuUzznZC8YIOei+XhXe+h41yVBm6d0=)
3: 461xArYNzHoC1nVBFiDZR5u9vDk.roa (hash: 6q2TnpiTZXieMRIqi2VPrqkjbo1r/JTnD7UrhdGGs1c=)
4: 7uRg_T_oiggw4J55UfjOrhQbRRk.roa (hash: Zvntcukjv/uv2VGWPB49suxGMeRDIq3Yqb/Srhl+YdA=)
5: 8WV_PwWdGHGoltPCGvUZ5Zdt0u0.roa (hash: bgI/tjUhh3faNiwUz0lFyl3PrQvPxHShPGJ4WWbVK9U=)
6: 9uaqn-0k0V9eihEbl_1qKZiHOsI.roa (hash: lX7dZ9C+1SMN2ATw1cyM18wsI8aOAPBbMUKXBKlIvtI=)
7: EIEUE3ETjR42j8AzPFmGaM3QPUA.roa (hash: dke7pHoGAOXmMbmMcGhOKmr8OHRiGFf0Ci92knKXCs8=)
8: UPuwaOxvAn_WKqweTSAjA0k5KMc.roa (hash: 1l216jqafFRv6rwVNGY7SG/c/eKsgMl5lwtfNPrMUB4=)
9: lQGqNWtAEeW1v0ZoaLS6zM2cAKg.roa (hash: CWDgSSnIsyWB1Z7WNe/hpRHqTHPu2VcJNOHIRuOk0WE=)
10: sZ1Q72ClTj5f73HDar0G-SATsrU.roa (hash: jrtQOenli72Qacdq88MxRlE81nSBmCwOeAYmo/28Pbg=)
11: zgJ_G-9np5VpQcmCxgQMVjklSkQ.roa (hash: 5Tc0Gy3iK8Ur64lX58sfY70FGviygZFZEFyBRuvFACw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:04:bf:f5:cb:b6:da:66:b4:41:0a:4d:e1:e4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Validity
Not Before: Jul 24 03:00:16 2026 GMT
Not After : Jul 25 03:00:16 2026 GMT
Subject: CN=644d000bf6617f6eab7428d8c2083d2d9bdba1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:02:12:d9:ce:35:1c:84:e8:ab:11:02:bb:
eb:1c:13:89:11:78:80:61:b1:1d:c9:94:72:4f:ae:
59:d7:b7:ec:d8:17:72:10:ca:8c:0b:d6:0c:23:29:
2f:d6:20:5a:dd:18:25:e9:70:df:fc:63:78:cd:6c:
cf:98:f1:55:1a:8e:a1:fa:51:8d:c0:da:68:1d:86:
b5:93:e8:fa:ec:83:19:c0:38:95:e8:d1:98:bf:30:
09:ee:aa:a9:e1:84:b9:68:62:23:ef:61:5e:fd:cc:
21:b0:28:e2:40:fb:19:dd:ff:73:d0:58:22:2b:7a:
95:ea:72:e3:d5:04:f7:66:39:7b:a2:9b:73:14:dd:
1e:8f:93:f5:20:10:a7:26:34:d0:23:fe:11:f4:3c:
d1:46:d0:98:fa:48:60:65:6a:61:a0:b2:39:e2:fc:
1d:ee:60:a3:43:9c:1c:bb:ba:5c:3b:7c:e1:3a:1f:
b5:cd:14:21:9e:5d:8b:a0:17:72:cc:b8:36:5b:51:
89:15:58:4a:3c:84:46:a3:d1:6b:e9:83:7b:43:a1:
b2:e6:74:25:eb:f1:01:2e:ac:d5:b1:5b:b7:a4:1c:
0b:12:91:9b:07:cb:e7:44:55:68:8f:bd:3f:79:95:
11:05:7e:13:ba:18:ae:a1:5f:e2:af:a9:0f:ed:9a:
c5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4D:00:0B:F6:61:7F:6E:AB:74:28:D8:C2:08:3D:2D:9B:DB:A1:D5
X509v3 Authority Key Identifier:
keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:89:43:53:27:e1:cb:3d:aa:a1:b8:8c:d7:30:71:f5:73:05:
c2:5d:3c:89:13:89:80:2d:ca:ae:a1:62:e8:cb:62:cc:e6:19:
36:69:ba:09:21:b1:42:5e:40:92:f7:0e:00:1f:3f:81:96:89:
f9:14:17:1a:66:4a:3f:39:01:14:1b:a6:ac:10:7b:49:44:7d:
2b:26:c5:b0:d4:3f:a1:1a:7d:63:f9:33:23:49:3c:e9:77:95:
e9:12:58:10:8d:50:63:8b:63:06:4a:37:a9:c2:ba:e2:f0:0f:
07:8c:53:f6:9e:d4:44:63:af:49:a9:a9:aa:6f:e9:96:7d:3d:
f2:94:a5:7c:24:d9:f9:89:62:32:25:eb:42:65:48:8a:13:f0:
47:fe:e8:75:7c:0a:6e:1a:08:ce:99:3e:e7:f6:7a:b6:c2:99:
17:ca:58:4d:9a:93:c6:c8:b8:24:57:7a:f2:fd:c1:be:03:e2:
00:e3:46:f6:7a:39:ff:d0:36:97:84:37:09:8d:61:0c:fd:65:
1f:1c:b4:ef:f7:9a:40:d6:bd:98:fc:84:e6:1c:e2:1c:dd:78:
ab:e8:00:21:08:6f:4b:9e:d0:2f:1c:bf:2a:e7:b1:e2:82:6a:
1b:1c:0d:7d:2d:d2:2a:ad:b5:b1:23:22:15:b1:e3:1d:09:4e:
86:40:78:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:55 2026 by rpki-client