
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json)
Hash identifier: dq2w/0VPyseWrLHl8y+Zfes13a5jXy328jOWXM439uE=
Subject key identifier: BA:A5:E0:42:E6:97:66:AC:11:6A:59:F1:46:04:9B:56:E6:5D:1C:31
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial: 019F9059EC7F8857CD2BA09073A323EF03C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
Manifest number: 19E4
Signing time: Thu 23 Jul 2026 19:00:40 +0000
Manifest this update: Thu 23 Jul 2026 19:00:40 +0000
Manifest next update: Fri 24 Jul 2026 19:00:40 +0000
Files and hashes: 1: A0jJG1saLwhFpwXvphN5KLkIp7E.roa (hash: zfUzOQxZDjIQpzcBLbTZxhWmdADgguB1bEK9a5hzld0=)
2: BHJrH90HA7e2j36fHZGtluntvoI.roa (hash: Y13mf0+6dWn2wsiZuzG7gygvh4nWO0T3oCMxSoXnKls=)
3: IUNo-G5ABIhSuSWdeiVCc3h9D4A.roa (hash: LzcrEnLFMAnlZ+5zqbHv6+pvv/Iv59lNp1OzlwME3F8=)
4: Pwm-W2XqZjbGSCW1vqwh0IMaZZc.roa (hash: MOGwB7iZKu1QkN/hiCIWIk9cs+bF15Y23HgeypcVdhw=)
5: Ym_r5R7AgsPIh7eaekC6oldM6_k.roa (hash: MQ13sclCLXk6CekwcrbM2XLxGacYKR6i5DDlylJjh8w=)
6: _4I_-jCH3XR23JxHVWzlSOPi3_M.roa (hash: tqFTpY9AJoIMPhinhdWGv8n5l6XDT7XH/JbG8DY2pa4=)
7: kz88XGl4i-o90qHpgWaNT6qB9F4.roa (hash: iFw0bXeL0s+Rwtq0iRLlZLd1+3x1hxhmoVT6WC3MudE=)
8: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: MnaNxZUdT+CuzhwUFF5Xh677QxMrjDfKR47aNouV110=)
9: sqmM075pYoIhRN4MwnW9o487rF8.roa (hash: I1CZglIvCm1ewemqOSJLikUmJGVYj4wQzxEvNc+9woA=)
10: vCq8VVeEIofiFQLrkv4khGyN3iM.roa (hash: +sZQ4wGcyHE3djaR6nEoYJEVQLBZat/sIPQiTRwtVBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:ec:7f:88:57:cd:2b:a0:90:73:a3:23:ef:03:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
Validity
Not Before: Jul 23 19:00:40 2026 GMT
Not After : Jul 24 19:00:40 2026 GMT
Subject: CN=baa5e042e69766ac116a59f146049b56e65d1c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:79:ca:16:f4:7f:94:48:4e:7f:d5:1f:4a:95:
d7:94:04:a8:7e:27:a4:de:c0:7c:4b:97:be:7c:e6:
7f:11:60:ac:fa:22:40:12:ff:fd:90:f6:b9:57:46:
e7:21:9a:86:08:bd:62:bb:76:9c:a7:39:f8:60:6e:
f7:fd:db:17:7c:6f:a9:0a:59:60:ba:c2:ae:b1:ba:
91:f4:47:fd:a7:a3:45:6d:4d:2c:2d:f9:2a:8b:4d:
2a:63:73:6a:cf:03:93:af:68:c5:b1:3f:55:0f:26:
d0:66:b6:e2:3d:05:0d:13:7c:cf:28:fb:ca:42:ea:
b1:cf:d1:8d:3c:26:64:93:71:c2:0d:fd:e9:2c:7c:
2c:13:cb:7a:3a:19:ae:96:c0:bf:cf:f8:ed:7b:61:
99:1b:53:22:c4:a1:7e:ea:96:38:e1:29:13:72:be:
2b:31:2a:67:63:79:11:03:84:bb:b5:fa:34:35:a3:
7a:5f:54:ad:e1:ca:f0:a3:14:98:a6:91:c4:15:55:
a3:71:f9:fb:86:b5:a7:6e:23:a9:9d:9d:2e:84:7c:
0f:85:54:43:8a:77:28:b7:77:34:aa:1f:08:7c:5d:
19:05:bd:66:2a:7d:f6:02:50:be:d7:86:84:af:61:
ea:14:08:20:b4:7b:4b:c2:c6:dc:fd:0f:37:c6:72:
7b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A5:E0:42:E6:97:66:AC:11:6A:59:F1:46:04:9B:56:E6:5D:1C:31
X509v3 Authority Key Identifier:
keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4b:e7:3c:3a:ee:f9:08:e0:a7:4d:fb:bd:a2:30:7e:d4:05:
a2:95:5c:2a:fb:f8:f1:2c:f9:d0:4d:d5:ae:5a:b2:d0:36:dc:
87:88:d1:56:03:a2:ea:2c:39:13:bd:82:9d:3f:f5:f9:0b:4e:
69:65:74:8b:fc:a3:a6:46:07:58:4a:fc:8c:7b:68:4f:63:cf:
8d:ff:9b:cc:99:d7:94:c0:60:1c:e3:6a:1f:85:44:c9:b6:fa:
05:13:76:7b:a7:20:84:cd:ff:2f:be:a1:25:ad:0e:35:8d:fc:
89:97:d0:09:62:cf:cf:55:50:54:25:59:28:b1:39:ef:1a:69:
be:80:64:89:9f:62:73:04:21:66:eb:33:a3:52:ef:40:08:16:
14:25:25:2b:58:f8:03:fa:88:e8:af:9d:5e:06:31:3e:01:92:
25:48:74:07:3c:17:73:db:41:08:63:e4:56:9e:5e:df:20:ba:
a7:a4:b8:78:5e:8f:00:8c:4c:52:72:ee:98:e9:00:d0:0d:64:
07:ec:ee:89:6c:43:21:7b:97:e0:37:07:a2:6c:f5:10:8c:26:
a9:98:d2:27:6c:c3:db:96:33:c9:97:e6:6f:a3:22:e4:2c:57:
c0:c1:c0:96:1f:a5:d4:b3:53:f1:40:ec:f7:a6:7b:7b:b7:7d:
e2:5c:5c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:46 2026 by rpki-client