
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
File: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft (raw, json)
Hash identifier: EDRgk/Bg/hKPzE03dh/sqIbMaXinBqXRJ9SF6d0AajE=
Subject key identifier: 57:B7:57:06:8E:7F:1A:F5:E9:0A:10:C3:66:FF:73:D9:B3:93:4F:13
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 019F8F7FA16C85984406B944B1888511FC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
Manifest number: 19E3
Signing time: Thu 23 Jul 2026 15:02:14 +0000
Manifest this update: Thu 23 Jul 2026 15:02:14 +0000
Manifest next update: Fri 24 Jul 2026 15:02:14 +0000
Files and hashes: 1: 67pKVcBP4g1ka7BHnXY8o1GjatI.roa (hash: NHI8d7vH5tjpxPomV3eBVCOa5aQTAvgW0GwAOx6HDCM=)
2: 6oyqxH6fbfCjScGv2qC0XiD5gCU.roa (hash: X2pwG2wmLfB4M+6njFbtbY0lJjAJiNG8E4ePk2t5PZ8=)
3: BG7hZwdKTnkeh7F43mqTspITrC4.roa (hash: 9w3fRT22xu3zZICYpxgXI0CEKv6s/N6rtv0UUVT3l1A=)
4: E3UcI6HbofZm_snwFtZqoqwg5-4.roa (hash: d4QiFFj+amh2JyYpNEFn0n/k8uKNUlkfpX81m7S5ZMs=)
5: EHRfsqdBqIv-_jr_ZiggJSyGQh8.roa (hash: GuBt3vwa11J5qRXuLm85netCILaHs5EboKmysMN31gs=)
6: Ig2ees5HLfOePoZmV44oy1ypzFU.roa (hash: Xt9yas6tqq8RhgQUndyXvcQyGrhriLDFS4gSQyBaGSk=)
7: KsuuqZuzWciosvKgFRPXzNp2Gcs.roa (hash: fH9tuqcfvS+JzHyWBgJi96fMfx/uXZQsaH9PlzbW4JY=)
8: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl (hash: xJBJDH2H0hyE47NwExs751yUctENp+v+pA80gvAe5iI=)
9: gAqwEcTCZcYoTWX4c9WWfhoNMgI.roa (hash: vAiaSmq1X3G0blOObiQg/SKw+90F8oGpc/icVWBJSss=)
10: k0wZqmhMQI1_yKbqeg-OeoA8ghg.roa (hash: okOMVmkk1MoA9VfXhi+YW9SB7pABGOjg3hztcxMcS9k=)
11: nzPG4vwX1IeVP2cSHRY5OFKnn24.roa (hash: OLyA9Gv/rl69xwJleWIyqhvz9X35ZOv/7WlzFp3vKrM=)
12: qMM2yBBqAUZtpJ-UlQnkHWnMjy0.roa (hash: TpFOiG67I1bJklLN/pt/Lsphs7nPRwEpTIL7MabwCy0=)
13: qOQMcO_XSSMHONHJzrh7779P3jo.roa (hash: ade5av8pqt7Ksv1kVj/c8U/iRecFohg4Rxixd7NnxeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:a1:6c:85:98:44:06:b9:44:b1:88:85:11:fc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Jul 23 15:02:14 2026 GMT
Not After : Jul 24 15:02:14 2026 GMT
Subject: CN=57b757068e7f1af5e90a10c366ff73d9b3934f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:93:dc:2c:6d:62:98:89:ae:09:53:f7:74:
05:b5:99:2a:6e:61:3e:27:c6:52:f3:be:dd:a1:53:
59:91:11:84:9c:78:10:d0:13:90:47:bc:55:81:e5:
35:af:37:dc:4b:7e:e5:ef:70:f0:0b:fc:cb:53:16:
10:d5:47:d4:74:a8:74:0c:62:0f:68:e2:b2:31:56:
ca:37:5f:31:1c:97:f5:7b:56:0c:6a:cf:7f:0b:ab:
56:9e:95:74:e5:8f:cf:3e:e9:96:81:ad:3b:8a:b7:
37:80:d9:d9:3f:df:55:91:fe:03:16:11:3f:40:15:
de:43:68:52:09:e0:59:c6:38:f3:c4:0e:6c:7b:24:
f8:5e:50:7a:f9:ba:85:a9:25:50:0d:fa:4f:5b:28:
55:03:fb:7b:c6:5d:7d:77:f3:39:9a:e8:72:c5:1d:
dd:dd:e1:31:43:00:fc:37:58:b5:d0:69:bf:e8:86:
5b:a4:e6:63:0b:b3:e1:e8:02:26:90:a2:7b:dc:84:
bb:6b:f0:c3:56:9d:f9:b5:09:f4:7a:64:8b:df:09:
c9:b2:46:20:26:a4:1f:fa:11:33:e8:ad:f2:09:ff:
bd:e6:b7:ef:f5:1b:d6:10:c6:5d:30:f1:2c:ae:e8:
5c:8b:a5:91:fa:a0:0c:79:5f:d6:ac:50:7c:cc:e9:
8c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B7:57:06:8E:7F:1A:F5:E9:0A:10:C3:66:FF:73:D9:B3:93:4F:13
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ca:e9:f5:7f:a3:63:b3:63:ee:3c:bf:73:b4:95:71:53:a6:
23:48:0e:c2:44:83:f1:58:8c:3f:a0:61:3f:e1:0d:c6:a3:fd:
c4:df:57:de:fa:b4:46:73:da:b5:18:8a:22:26:4c:ef:f6:90:
ce:cc:86:e6:64:37:91:76:a3:e4:67:d4:52:e8:b2:4e:7a:4d:
1a:f3:8e:2b:b3:87:5f:3e:44:2e:f9:dd:bf:2a:aa:01:19:a9:
f3:2f:5a:08:75:b7:fe:c1:ae:57:20:6a:5c:ae:3b:5b:5c:af:
46:30:0a:02:60:43:d4:ee:0b:d7:1c:c2:ff:13:73:32:bd:62:
08:43:56:88:fd:8a:7b:e3:d8:63:0e:3d:d9:9e:c2:9b:c0:32:
df:e4:cd:90:4a:19:ae:92:8b:49:6d:1e:a9:01:40:12:22:5a:
76:75:fc:2c:2b:cf:49:c6:9e:70:2b:e6:6e:b4:63:bd:8d:64:
dd:60:2f:03:90:7f:1d:c6:1d:83:72:9a:59:cc:1c:80:7b:b8:
2a:ca:06:07:47:c1:52:95:b5:72:2b:0f:fc:d3:f6:cb:9f:5c:
5f:d4:d2:98:b2:42:88:3e:cd:2b:e2:8a:dc:10:a2:dd:80:68:
1b:07:82:81:f2:be:e2:aa:ae:9a:ad:d2:a9:63:34:28:92:e3:
05:8f:88:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:51 2026 by rpki-client