
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
File: 8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json)
Hash identifier: XtruNxLptSzHIT1M/3ls+XBZwbHzvGo/34mXFXcOH/Y=
Subject key identifier: 37:05:DA:56:AF:D2:4F:A4:32:65:F0:7D:6E:5A:CC:E4:6C:5D:43:EF
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 019F8FEC00793EB3F279B07EF6D7F442B40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
Manifest number: 13EC
Signing time: Thu 23 Jul 2026 17:00:36 +0000
Manifest this update: Thu 23 Jul 2026 17:00:36 +0000
Manifest next update: Fri 24 Jul 2026 17:00:36 +0000
Files and hashes: 1: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: AMf8nFyNgsDK/mbFNBBuY0zTKJ14qe+7YybERLP+GHQ=)
2: 8Go9HdfslzEYYhsG162QyXxlPrg.roa (hash: Z3SgqSpV46u7mlUHzliku+RypQp4wBZXxjHASyqRXL8=)
3: 8Nrd_fmZeNL0BSH4rv9CXgqM66c.asa (hash: K5I1pf6HiAifVMzN9jkKOGVybg6UiRdsC7/R2MM8fPE=)
4: H39SCmBhfIAL4P80AMbv9vc00_8.roa (hash: cOtYtuq75jARRK/4tVOM91mG7sEB0LZ3Ph2khyzi9O8=)
5: HVUz-pGSDFLTZZg2T2E4peiELEU.roa (hash: wezVJrmcFZ7JTwvDKwpa7PsKgNm5GHs3DhA4vBq4DQY=)
6: HYEI0JEwrvGeEpfpFZTeCg5EH8g.asa (hash: ARMsZy0uoDJPAUtmO4+hjp62F/uBIE4HsM0N2UwPbqY=)
7: K_c7eVlzPkp6rhiHCxnA36F4-xc.roa (hash: 6S2BWd2mNzmFbAB+J2b2FN4NJksfT7p6QVbD3sv/VL8=)
8: T13_FpAETOo3zpDz-m5p4Yo43tU.roa (hash: qg17lmbhvQRAnJl5UzZbEihU9vs9JAWpSUDuAPfFKjI=)
9: WtD6mKlfmpS7KMd25I2nHKzWkGQ.roa (hash: 8kdIDFqVwJHFysKGYVAc28Ycb8D240Eugchj4O4w7C4=)
10: Xf3bZPWk0_bi28_oQ2232QrSJQQ.roa (hash: ffz/L4K0R9hVyQDyQ+n17EfkZ224IbQsJdVzmjU75wU=)
11: _rHhp3dSYrAKOlnkapqRB1yefkc.roa (hash: oed1XeIiLPoYidtZJ6x5WeunpoTBMJO8BbUCjhaG6qE=)
12: ek9-6det_a8IxIqHsWia7-WY-A4.roa (hash: w03N+IHDbJSsXXRy6rZBj/rl7phalEGurLQVXj4bedQ=)
13: hmPo_o1Wwb_fc_jDeTYw0RTyias.roa (hash: buOdy6wcshKPWdUb86nMrSnh3bWvA83WVFp55tOqeX4=)
14: kE6tecKZ0fG9qC_JtCBXfpG4g1A.roa (hash: CDpFmGMaqgiUJFuGVEP8AvEce972KDkWrlC2GvXzIOA=)
15: sD9_KvYGNd0gSG9dqlTzmRlJx9g.roa (hash: cpPGHuiYhlqjVa2ZLptrQ2LGEEYQM6YwJPoAsBdLFRc=)
16: xjJ15D14LS-olVuJZ7jEwkrPC0k.roa (hash: x/bc5dXq+6Lyq8Lw/fVl1pcZIUuQ/Nrr00RhE1xkTLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:00:79:3e:b3:f2:79:b0:7e:f6:d7:f4:42:b4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jul 23 17:00:36 2026 GMT
Not After : Jul 24 17:00:36 2026 GMT
Subject: CN=3705da56afd24fa43265f07d6e5acce46c5d43ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ac:37:f9:a3:8d:ec:cc:8c:4d:27:d8:d5:f2:
4f:43:4f:1a:e8:f1:39:07:0b:f2:cc:96:a9:2e:1d:
15:38:65:18:83:32:15:be:46:64:f6:49:26:73:59:
fa:e2:91:13:7f:3e:ae:4c:7d:20:d4:d6:74:fa:be:
aa:01:b3:37:36:1c:04:f9:3f:41:04:b3:a9:0f:2f:
f5:c9:c3:0e:2c:fe:93:6b:56:1e:dc:6a:15:80:11:
3d:87:ee:59:a2:1b:b9:fc:73:3a:01:08:4f:6b:e9:
be:43:84:15:69:d9:40:1b:4b:ca:ad:0e:1a:1c:c9:
b2:20:59:4f:8c:74:5a:38:a7:87:16:13:84:ff:a4:
66:14:88:fb:4a:76:8a:fb:da:e8:da:f7:8f:ae:46:
2d:f5:21:89:1f:41:18:89:4a:8a:d6:b0:c2:4d:17:
9f:75:88:9f:89:eb:58:ef:57:8a:46:fe:75:a2:8c:
9f:92:f1:e0:d9:72:4d:c2:07:2e:e8:1e:7d:74:7b:
ff:70:b1:c9:e1:6b:29:27:d6:a8:cd:72:90:42:9c:
4f:c2:75:16:f4:c4:4b:d4:27:1b:d7:a0:8a:d2:86:
d5:17:01:7e:7b:da:66:09:56:0d:36:ba:45:f6:5a:
86:5a:1c:18:f3:74:d5:d7:45:f3:f0:8d:6b:ab:df:
d4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:05:DA:56:AF:D2:4F:A4:32:65:F0:7D:6E:5A:CC:E4:6C:5D:43:EF
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:90:c4:59:54:ad:7a:09:69:44:be:ba:2e:18:d8:fb:5c:87:
af:11:f1:1d:fa:57:e8:09:04:67:44:98:b2:65:0b:1f:b8:e3:
46:83:2e:dd:d3:bf:86:a1:4a:74:26:87:27:81:b0:ba:3b:ee:
a3:6f:b8:24:22:41:9a:b2:35:29:c0:47:63:6e:93:64:2a:2e:
05:bd:9e:07:98:d1:5b:61:f4:02:bd:67:28:db:9b:af:77:c3:
6a:11:61:9d:b4:60:b7:22:37:72:91:0e:2b:59:63:09:b8:20:
d7:cc:dd:47:a2:dc:37:6d:10:18:12:c7:33:b3:53:1e:b4:65:
3f:af:45:87:5d:aa:03:c2:5a:08:9f:09:51:a7:bd:1c:91:51:
df:2b:f8:ff:66:1f:d7:9a:bb:c7:75:25:06:5e:66:1f:4f:c7:
c0:45:0e:59:3e:56:bf:e4:12:a9:cd:b1:f0:6a:74:86:05:88:
6c:78:2c:98:22:f8:13:04:24:a3:68:9d:3f:3e:16:cb:74:48:
62:fb:bd:b2:6a:06:ec:77:85:3f:60:0b:61:52:39:58:de:c3:
71:35:f5:85:33:33:61:d4:75:88:83:8b:7e:30:8f:ee:49:77:
56:f6:50:fa:33:d3:54:a4:3a:18:4c:46:d1:9d:67:c3:10:b1:
88:1e:13:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:13:23 2026 by rpki-client