
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json)
Hash identifier: XHo6Zqd8v23AZ1a0VggO+N9fYx9oAAst3DEg76zmQYg=
Subject key identifier: 12:BA:DC:4E:2C:C3:92:33:C9:EA:DC:AB:46:F3:AD:23:BE:0B:BD:1B
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial: 019E1D904680FAD65F1769A3214754CCC0BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
Manifest number: 190C
Signing time: Tue 12 May 2026 19:00:54 +0000
Manifest this update: Tue 12 May 2026 19:00:54 +0000
Manifest next update: Wed 13 May 2026 19:00:54 +0000
Files and hashes: 1: 5CLXXKkA4JcsyDrUBBM3fxn2kdc.roa (hash: gFWbYqwKSpr3zQtON6eHRCE0iX3y63ZJZklzBNANHsM=)
2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: I0N2+rS/z8VzHV9qr/ANQYit0sha57QMwyMr4gGqrB0=)
3: DXIDJwT32OV423k4TIWwn2iDwyg.roa (hash: 1DgbvkANX93phDSb+AyRjq7ZFAZDrX3G2DhrbhrdrCY=)
4: Ex4sydFNNb9e9IlWuLzuPazLU44.roa (hash: tuvV0h/eTCcgOOevaItUPifNfonAkWlBsMN+IAbF80I=)
5: F0q3v2kkeTya7vdhm0lzFl3wBAA.roa (hash: BpkEUnq+/w6BrSZ1bTiqPBmMOt7WaZgSwy12/ipsBqo=)
6: GU71SIKDNqtDYi7P5ZGVJfaZ9Ng.roa (hash: 7ZQhqryE0L0rNOAz1gL32gj8EsSrO0yhlKkyCkXl4cc=)
7: PIBmTf3gSYM6zkI7Y8MKCCqkVmM.roa (hash: 5xE+UcziQ9DiquZ2A/57aqh1sjUE876lnNSATCS1lTI=)
8: TXBfEq-bhV4ePw8hLBP6UCEQEtg.roa (hash: gEbc+tVQGYMxTiSiJNGO8DDQrrsZOyqWJhw0Dv/aKqE=)
9: XN9ItxoiVygt3a0qQVsmKKlWk9E.roa (hash: iH4X65Vs6HtOKFxQaLyaQ9nZPsCEbiHQMEBYUWCi4KY=)
10: bba2QTZrp_1uueLnjfHPBxHS3PY.roa (hash: OYrkuz8mezgI3XbKfKRWAwnwwsrmJ+JNJd03sNYC3L8=)
11: djcMZ6pGXyKmA-lIeoWfJvgd_vg.roa (hash: 2V8x5uW66gGIUCrfVlUVt3oOyIC3Jcqdd44dr46xxaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:46:80:fa:d6:5f:17:69:a3:21:47:54:cc:c0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
Validity
Not Before: May 12 19:00:54 2026 GMT
Not After : May 13 19:00:54 2026 GMT
Subject: CN=12badc4e2cc39233c9eadcab46f3ad23be0bbd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:66:5a:5b:fe:62:37:84:8b:a1:4a:a4:a5:bc:
46:a0:3d:53:69:ad:aa:74:1f:f2:9d:91:87:c3:43:
d3:9b:67:00:a1:5b:bc:20:66:c0:6c:1e:fa:bd:52:
cf:60:ba:af:b7:a8:c8:49:e1:d8:85:b0:53:c5:39:
58:4c:fc:02:50:66:89:b7:88:01:f6:ef:f7:fa:bb:
9f:da:f5:21:4e:26:96:35:e3:11:57:e4:f2:5e:f3:
f9:e8:4e:c9:15:db:cb:f6:72:e0:96:bb:b2:60:1d:
1a:a3:63:60:59:7c:3c:44:c9:2f:7c:d3:7c:9f:20:
09:92:01:0e:07:0d:6a:8e:fd:96:c5:be:23:74:6b:
c5:69:13:2d:23:1c:c9:d2:8f:d9:2d:81:9f:28:76:
01:c4:12:0b:63:f2:c6:40:e7:e3:3b:28:fc:2e:8b:
59:79:d9:53:44:28:a6:24:d2:f9:db:35:92:6c:a7:
c4:54:fe:a6:c8:31:a8:e6:62:45:70:43:dc:ea:cc:
4d:51:89:32:04:2a:82:e5:c8:a0:8a:d2:1b:6c:8b:
6b:86:9e:95:25:8a:26:61:84:59:e0:a9:67:08:c3:
bc:66:7f:04:d6:f0:cc:06:22:09:5d:8b:d3:ab:76:
c1:ea:17:d2:fe:a2:2e:76:51:2d:0b:4d:01:47:35:
66:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BA:DC:4E:2C:C3:92:33:C9:EA:DC:AB:46:F3:AD:23:BE:0B:BD:1B
X509v3 Authority Key Identifier:
keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:88:a4:92:98:fa:44:21:78:ea:a7:dd:d1:79:44:7e:33:d0:
1e:9b:a5:c1:e0:6b:49:a3:f7:d3:7d:ca:5b:36:3a:5e:f4:a4:
52:ee:b7:e3:5c:47:27:44:0e:a0:4c:1f:44:8d:e3:f8:ab:8d:
de:80:ed:55:19:17:0c:3b:c5:b3:89:ee:7a:2c:46:9b:81:89:
6c:8e:b8:98:8a:38:74:06:41:88:e4:63:c4:ad:21:f6:db:2f:
2f:ce:3e:c2:5b:af:2b:9e:d4:78:6f:b8:71:34:12:66:9e:8f:
da:48:f3:ac:0e:5f:39:58:58:72:9f:e9:8e:54:99:22:6c:17:
34:c9:ab:63:b3:ac:88:05:c1:27:17:78:76:ee:21:bc:75:79:
42:3a:50:0a:46:ec:8d:b5:69:fe:68:a7:0b:8f:30:65:cb:ce:
54:fc:5f:ee:eb:e0:0d:83:09:d1:c9:bf:07:54:87:42:2f:bf:
e3:44:c3:a7:d4:86:a8:1e:e7:c5:6c:4e:f2:70:be:6d:b7:1b:
04:bb:0e:71:b4:fb:64:43:00:6f:ba:43:15:91:d3:f6:55:03:
af:f6:83:e2:7a:1d:77:c9:9f:00:f0:6e:57:10:38:c2:1b:8b:
66:d1:b7:f4:12:7c:86:4a:88:92:fc:46:4e:af:85:0f:85:6c:
ea:cc:f3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:28:43 2026 by rpki-client