
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
File: FjB9KfVUPyHqMAm5Uj_nG48Taco.mft (raw, json)
Hash identifier: Z9SH271YkruTAvi/TE3t42xd4KCGeoItYG3D9Rxr3SM=
Subject key identifier: 95:64:80:57:CC:F3:39:A6:A8:5D:5D:7B:E1:1A:AA:55:9E:8E:DD:8D
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 019F9059F793E4D7EE01912EAF6601E9A159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
Manifest number: 19FC
Signing time: Thu 23 Jul 2026 19:00:42 +0000
Manifest this update: Thu 23 Jul 2026 19:00:42 +0000
Manifest next update: Fri 24 Jul 2026 19:00:42 +0000
Files and hashes: 1: 43xKNj8d1J5ZbdUCB9huFf51dlY.roa (hash: 0C77rsfbABsBAgXhMhHrXliF4EtBR+zdrxbfWGDutkA=)
2: B8WZmrTIa2ia6GnyZAc3UYzn6nU.roa (hash: aDzq92qdJqLonxrkAlG+0ptE83HlOqTUO72kLOAz1Z0=)
3: FjB9KfVUPyHqMAm5Uj_nG48Taco.crl (hash: Fbu8zNiTOSrhjwKJyS0dl6WLwNroksLBRplEBvIJvm4=)
4: IgfAmjFLqVW-uCkvUtRuUz3fQFI.asa (hash: 1m1DNwPZO7HOKfXGKGJtUoAVRSnQcqTWcdbAqBMwcJk=)
5: Mqx-zb562ywYV8pX6wNPPIxwnPA.roa (hash: OtbembzOi1Q67rhuvfY9lENyB3xApH7b2U9zu5YCpzg=)
6: NAB7jeRg8xs-PO6aq-mV0JJ8Kt8.roa (hash: BsmxkgNXTeP+5y0lVg3F5Vd5iIuPFhBIw5y8AiZA+lg=)
7: OFmVOiCQetrNkOtmu3zCnKSHdbQ.asa (hash: Hjgzl6kCFsNx4hG5pItQKTRXXfWNO1jZJVBkNf2hlCc=)
8: VsDKu8p7jOW_6XSjzPi6HRYFCeE.roa (hash: meHtFxM6jSoAy9Y7SaMHGYbPp+WrlG0Kpg1DeuyayZE=)
9: X01sfTguEZRlbViMsVbdLRhWtwM.asa (hash: ITEiwLtEtyei9oziGBBYKolA2UiS65//73HaFywy0cU=)
10: ZYc4R1ZUoLFLDb0ExiBMqNZo4PI.asa (hash: hLDXFm9fYXyP3hsrCVS9C7xEpV87H1Pnzgc7QhcK0xY=)
11: bFkaQMapJshDo2hgXls_q4kXpds.asa (hash: Sdg8D0zVBbo49fzIHdCt36EnpRZv3zi4DnsZ64hwpRw=)
12: dAyDeUp51SPbYS8fxmJNG0482Ng.asa (hash: 6/i5RS8ShUMSXbYzZlVqHGyL8kobjym9yxw0gdprH7E=)
13: oxOGLICEA4GzU1uD1B6su4tziyQ.roa (hash: TvZctkDtv5gSKLWgki0lkEZNOjTs1UPnuilELJQxzxc=)
14: plAxktASIb4YACIP-hXXxq1vBPQ.asa (hash: YS1t0iZi+tG5TRUgxqQhrFYuMkSCCdM92QwP+HVjJ7w=)
15: xTbA2Nqn_OGftZ3ziVysvYIrYsc.roa (hash: AKh2Xxbl7XMpoBpUm83TcjMuEMCZWE9rKYeV/5q4Gew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:f7:93:e4:d7:ee:01:91:2e:af:66:01:e9:a1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Jul 23 19:00:42 2026 GMT
Not After : Jul 24 19:00:42 2026 GMT
Subject: CN=95648057ccf339a6a85d5d7be11aaa559e8edd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:ef:8a:04:c9:b6:83:be:7e:e7:0e:53:42:
8a:57:29:4e:13:16:07:1e:30:3b:e5:26:7f:2f:35:
2b:ac:12:52:b4:7a:d7:c0:52:21:4f:c0:e4:3d:bc:
f0:e2:7b:8f:82:e6:33:a5:6a:d1:e8:41:23:2b:6d:
04:29:8e:fa:56:6c:45:d5:14:40:27:0c:a5:c4:14:
c0:45:65:e4:bf:00:da:5b:13:81:f4:e2:8d:3b:ce:
f1:c0:86:8f:2d:72:c9:34:c3:7e:85:91:a4:9d:92:
6b:5a:e5:1d:8a:97:50:c5:e9:0d:2e:3c:67:69:c3:
3e:b5:aa:00:12:20:6e:c0:35:cf:e1:e0:bf:4c:1a:
a4:4e:f3:5d:71:26:3b:c9:07:68:a5:b9:f0:50:1a:
76:77:09:68:82:bd:58:d1:44:13:3a:0b:b6:2d:dd:
9d:c9:f3:99:b6:70:d0:25:cb:1e:a9:8c:5b:12:df:
e7:ca:f3:c2:80:d4:92:18:89:bc:d7:8a:f6:e0:13:
14:8b:ce:72:f0:93:03:3f:b3:5b:f3:23:ce:51:b8:
e2:4d:14:61:5d:29:ae:e2:73:40:1e:d2:44:54:99:
62:1a:4c:0b:ee:60:e5:db:17:c6:b6:20:93:9d:83:
09:c6:c8:db:70:d6:fa:94:05:5f:64:43:78:50:1b:
a1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:64:80:57:CC:F3:39:A6:A8:5D:5D:7B:E1:1A:AA:55:9E:8E:DD:8D
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:b1:d0:c4:3f:db:8f:5e:47:20:e1:2b:51:6c:5b:20:f2:54:
52:21:58:99:54:50:a6:01:b4:0c:34:ab:8d:28:77:c7:95:8c:
a4:1d:49:e4:2c:6f:a0:0c:3b:85:34:86:5c:59:d4:85:39:ca:
8f:9a:ef:da:7b:e8:0a:db:1e:76:9e:3f:e4:27:70:ab:02:5e:
fa:4b:cc:68:af:8e:af:05:88:80:ac:83:08:21:d0:2a:bf:34:
06:ce:cf:9d:c3:6b:0b:1f:34:c9:71:b2:36:36:f3:26:59:f7:
f3:5e:3a:21:3f:3a:46:c7:86:c1:10:db:d1:c1:91:69:fd:12:
9d:78:12:ef:e8:be:e5:a6:80:7a:33:04:b8:b9:9c:6b:e0:19:
34:ef:0c:3d:f0:17:d2:7b:0d:79:b6:1a:91:9d:a2:3a:7f:85:
d5:de:36:80:2f:5f:9a:10:5f:6f:9e:53:a0:a0:bf:17:02:4f:
60:0e:af:2f:a6:54:13:5c:65:4b:e0:29:6e:5b:85:cf:4d:d3:
8e:92:38:06:14:f7:c3:3d:85:fc:d7:4f:81:83:c5:ee:d8:a8:
65:8e:91:33:27:95:64:9e:1e:91:9d:ba:07:3e:50:ad:a3:5c:
de:05:59:44:99:23:8c:1d:a9:c0:36:ca:a0:dc:7c:80:01:69:
34:3f:5d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:23 2026 by rpki-client