
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
File: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft (raw, json)
Hash identifier: 9Ot8H9zzRIVpdmteTpHCeinm1Hu/mJL8YSrIG1kvw/c=
Subject key identifier: 24:43:F9:7B:B3:02:33:A9:E7:55:80:76:08:9E:BD:19:01:9E:63:3B
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019F902339FAC2ABFC07859FC5380543CE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
Manifest number: 02C4
Signing time: Thu 23 Jul 2026 18:00:55 +0000
Manifest this update: Thu 23 Jul 2026 18:00:55 +0000
Manifest next update: Fri 24 Jul 2026 18:00:55 +0000
Files and hashes: 1: 6pKfmev0hnHoQYvyLlxq6lN61Ac.roa (hash: oED6iNOIvqNMWfh9ZbIfZ0p3WvaM7LQ4X8hPxL6izFc=)
2: F7OazNxmHQIZG_1NbQyBZDuRfp0.roa (hash: kfyCu9kGmBZWf6iCvzc+imifHO9IEOu6CS+tqE1Bls8=)
3: IGonrweKcV3pBiFmxgMN0Hhq74c.roa (hash: YkHvQYVpbz1V6t76f23kYkJHWGSnZkMw7J+Y7FV0iWY=)
4: ZPkrtvVur46cS-5w8dwIkAjNZYE.roa (hash: vPaByPHtcOmoXzXWkiUeeFN03AP9nPQMC4Ibqh8NElg=)
5: ZvN7c-NtqYH-PaeLJUmdEPO5iC8.roa (hash: RkOPQkujkcLmBf4maBg9uGkdxV/kCwgeqMyADPSii/E=)
6: bGlKraIhhwlevroXgB4rLlo-YME.roa (hash: oIkXDeJlSani/t+wUjX7TTQDY2OjVB6ERk95GxJeYN8=)
7: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl (hash: 8zMrXZFizAh8HBpWbs/uXKvV2NDDoxYeEFv4hUqXkBc=)
8: nu8XADsimCod0_uWl8egJ3aFHEw.roa (hash: H55dZSXKTNI4+9o7BFR1/GCpspjJcbHLdvt5EmFjk+U=)
9: q1_uvTwS2odl5ebIbbIhhY5492k.roa (hash: rcptFlj+yIPXEnP3ZQnKAkTZfAlxMM8LHnpHcZGEHWI=)
10: qo3RmaJil-tmg6e3jCPqKh_xFAo.roa (hash: DLtprsoHKdJkHToMaxiYCDgKpyQfT89HL7h3BW0fsgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:39:fa:c2:ab:fc:07:85:9f:c5:38:05:43:ce:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Jul 23 18:00:55 2026 GMT
Not After : Jul 24 18:00:55 2026 GMT
Subject: CN=2443f97bb30233a9e7558076089ebd19019e633b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:84:49:57:d5:78:87:b1:f8:c9:36:31:0e:5d:
ee:ef:9a:b8:f5:1a:d1:53:c7:c7:2a:f3:75:b3:d5:
60:b2:24:05:5f:2e:09:ba:45:e4:71:fc:8e:cd:4f:
25:4d:24:7d:02:9b:4e:a3:21:31:ac:4c:02:fe:4d:
60:4f:fd:aa:3b:f1:64:e3:97:db:8e:ac:d2:0e:3f:
ab:48:96:9d:e1:39:a9:b7:94:5f:4d:f3:d8:45:1e:
0c:52:98:d9:d6:fd:b8:37:dd:77:5c:d1:04:26:66:
c7:90:7d:7f:4d:1c:43:31:e5:72:7d:13:4f:68:ae:
a2:14:e6:eb:5e:cc:b2:57:fb:4f:f6:12:9f:d9:56:
6a:69:5e:49:cd:a8:9f:3a:57:c7:ec:18:8b:fc:80:
db:22:14:6d:78:04:db:69:3c:ec:a6:c5:07:29:0c:
c9:b0:60:96:de:8a:15:6f:2e:be:d9:51:81:ce:db:
1b:da:15:f2:a0:b1:5d:4e:b7:16:d9:b7:0e:94:0f:
75:35:52:bc:2b:d0:63:d2:01:5a:81:61:fb:f6:4a:
2b:85:25:dc:2f:24:ee:9d:a2:6f:72:0b:43:d3:0b:
a9:60:e9:18:b0:ac:f1:e0:f1:00:c6:29:c6:2c:6d:
02:f4:5d:34:b1:68:a2:8c:24:c6:2f:85:76:14:df:
65:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:43:F9:7B:B3:02:33:A9:E7:55:80:76:08:9E:BD:19:01:9E:63:3B
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:26:e2:a9:05:31:be:f0:e7:bd:09:cf:ee:d4:bf:1c:5d:2d:
41:d1:90:7e:fe:af:98:de:54:c9:4f:23:0d:c1:d1:9a:2f:76:
82:50:c7:f6:66:8e:c1:ca:22:65:ad:14:67:b9:19:c0:27:f0:
09:83:8d:9f:d3:b2:26:f8:d1:04:4a:58:d5:ca:e9:95:24:5e:
fa:23:2d:93:e0:3e:bd:c9:31:e9:cc:2a:32:2a:55:e9:11:a0:
65:86:e1:75:ae:9f:d3:06:dd:b2:e6:ad:d6:72:ea:90:13:06:
6c:8d:eb:04:18:c6:29:57:7d:10:09:10:c1:1d:11:dc:58:8e:
88:2d:52:06:20:0d:27:3e:74:7d:22:f4:62:3a:2f:28:01:50:
4f:d8:8b:64:e3:9f:a8:42:7a:21:df:d8:38:cd:56:5b:9e:0f:
80:57:c4:dc:fb:1e:8c:23:28:fb:0a:94:1e:0d:36:ad:f8:58:
da:50:ae:2f:50:29:9d:16:2b:e7:18:26:9a:bc:a5:1a:11:e2:
6a:ba:d6:34:87:c0:b1:a5:f4:57:7d:31:bc:70:42:eb:3a:ee:
fa:e8:84:38:c9:85:2e:cb:f7:0f:3b:e2:e1:45:86:e2:c4:a6:
2f:f9:b1:f2:48:2b:c3:09:a7:14:8b:93:c6:80:bd:5b:3e:13:
cf:51:b6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:05 2026 by rpki-client