
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json)
Hash identifier: 1FgY8Jrp4PXp1XCZG4/AVTxztwDqRQFRqvcVbjCeujA=
Subject key identifier: 13:BE:B6:C0:26:CD:89:1F:23:E3:EF:B1:54:05:BF:FA:0A:F1:2E:56
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial: 019F8EA2D0C2131A8EEB8BE3EE96791E1D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
Manifest number: 198E
Signing time: Thu 23 Jul 2026 11:01:02 +0000
Manifest this update: Thu 23 Jul 2026 11:01:02 +0000
Manifest next update: Fri 24 Jul 2026 11:01:02 +0000
Files and hashes: 1: 0Co-4aPRt1mKhrjgNM3WUZdgXoI.asa (hash: OeNQYBhoPfaKZ8nvkbEq0E8aoRp5VdVHMz/gxZSMaaM=)
2: EXzeT1cNVQGrjDsUzW2UlqVdii0.roa (hash: 2mlpTBow4YOyuDssqjl1WEJ92MzDwM1udN0xfPDqww0=)
3: KaSYpHw3cgGmrc-y_KSdFLRvQjg.roa (hash: ngPn6nZOVUPCBtCKw0ufmBalbahdWHN3HV67pN56iBs=)
4: OmEoVv1hXlPAq7CNGemEHtoyCq8.roa (hash: 6Oxl07RE77xSOspyGrQX/nCyx5aobEqs28whvRim2nM=)
5: S3iUaJCc_acwdYntYs5xpD57Hbs.roa (hash: tcMMYIuMQX8llmY4X5nBERI+tJvSh0Ywu4Hfd+8wVHo=)
6: XEuJUbSaH7V7TR9Hm3H838oW62M.roa (hash: 6F0LWMrDhYqS4VjPhiF+6R/mdAzINXaIxftWMKZVOpA=)
7: XSUEp2ewELHmYwH52rXsSNXdWOw.roa (hash: YFKsQwoEE2JksK5/us9CiKgJv/xGESxAM1454M2S6rE=)
8: Y4Ju69pl9WjiYV9lWp9audfApt8.roa (hash: Gl1GkwHB6Z8deSvqoRDw7UqcxI8zxJVnp+wWJEZz2jc=)
9: _bgOMIgl5YD22GLFhIayF5W0H98.roa (hash: YVz2Tfwx8C1mKqc7gEOvJyA8kHNkiPYcjmBTfZn3ppo=)
10: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: RqJ3NPVE/kgBf0gGWgALbMRK2eQ+3ItTlTV33v2pFIg=)
11: gdXy00VXftWIDW180JVG0J7ko64.roa (hash: Mqi2FwypjABIeq2Jh4oC6KTGiPlkVF54aa5+tKkk1yo=)
12: i447kXV0W4Fpt-iPvHlJibEh4qE.roa (hash: rFvI0GyPBU1XtWp0i4L0CFa9xuzoPkzXxFcU9z+mJ4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:d0:c2:13:1a:8e:eb:8b:e3:ee:96:79:1e:1d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Validity
Not Before: Jul 23 11:01:02 2026 GMT
Not After : Jul 24 11:01:02 2026 GMT
Subject: CN=13beb6c026cd891f23e3efb15405bffa0af12e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:33:e5:bb:83:95:53:0e:d6:fd:58:14:db:
e7:31:28:f9:28:1d:c8:ee:c2:40:97:cb:41:75:04:
2a:75:79:05:52:fd:67:43:29:a2:18:1e:18:3f:69:
22:ed:6e:5d:12:26:bf:95:60:8a:a1:d6:1b:6e:99:
2a:b4:f0:54:92:52:49:2e:9e:23:55:d2:49:0b:3b:
ee:e7:c4:5a:58:ed:0d:7f:42:ad:2c:f2:59:84:6b:
18:63:c2:20:7b:df:07:4f:26:ef:85:75:87:b9:75:
94:ce:c2:c9:0d:3a:92:22:ef:13:e0:d5:51:16:b4:
8d:59:87:53:7d:6c:8f:41:0a:89:0c:cc:40:a2:7b:
27:84:0d:37:2b:2a:6c:f6:81:e9:22:f2:ed:a4:94:
e0:06:57:51:81:1a:c6:48:e9:1d:9d:db:da:80:39:
1d:5c:ac:09:12:bf:73:d4:22:00:1c:eb:89:bb:35:
02:0c:b4:6e:eb:ef:10:ed:ad:5a:16:02:6d:18:7d:
b8:ee:df:ac:38:67:43:c8:cb:ac:bc:bf:b9:0d:fa:
dc:0d:5a:0e:ca:ae:d4:af:14:9d:6e:bb:a6:85:34:
1c:8b:a5:a6:9f:a6:2a:55:18:3a:4e:c3:7b:bf:eb:
88:d6:56:e7:40:5e:b8:3c:37:2b:f1:f2:54:8a:3a:
27:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BE:B6:C0:26:CD:89:1F:23:E3:EF:B1:54:05:BF:FA:0A:F1:2E:56
X509v3 Authority Key Identifier:
keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:31:83:97:de:1d:8c:b5:49:fb:9d:a5:db:ff:fe:da:06:e8:
88:c1:17:e5:23:e1:68:cb:b4:3e:58:42:23:ae:20:10:4d:b3:
57:06:cc:69:93:7f:a4:02:3b:d0:26:0a:47:45:d1:04:5e:04:
0f:09:a4:83:ce:bf:ff:f9:af:67:3f:a5:16:8a:82:4e:f4:ca:
26:87:26:28:61:9e:13:be:19:16:78:a6:ff:52:65:6d:59:98:
5a:f8:bc:14:20:0d:dd:cf:a1:b8:bc:a6:9f:4c:bd:dd:61:f7:
55:dd:fe:2c:3e:fc:06:45:69:4f:c0:4f:ff:e4:b7:01:a5:fb:
ad:64:04:6c:74:86:40:ef:57:77:e5:95:dd:7a:75:62:38:26:
76:12:cf:2a:48:99:ca:4e:c8:99:36:56:56:b3:db:53:76:3d:
89:c6:36:c5:c3:0b:84:fa:b8:89:8a:af:74:57:5f:9b:47:99:
ed:c7:26:8b:50:47:a8:92:a7:b2:8b:b2:cb:81:2a:9c:7f:82:
57:7d:be:9e:06:b5:d1:27:3f:85:7b:51:48:d0:fa:fe:1b:75:
3d:0d:87:cf:62:6a:95:51:06:7f:75:b5:10:1a:4d:ee:ac:b3:
e6:a2:3c:a2:63:6d:20:79:b9:77:08:2f:84:30:ae:2e:42:bc:
32:6f:bc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:13 2026 by rpki-client