
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json)
Hash identifier: c2lUlLWb5dN9MMT4c7WZwP25+SsogVCE5CzE/yLVLQU=
Subject key identifier: 23:A6:58:58:45:3B:EF:DA:90:DA:DF:F8:50:45:80:EE:D7:8A:2C:74
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019F8F7DDE9BC306787C58AABBE230425000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
Manifest number: 19E1
Signing time: Thu 23 Jul 2026 15:00:18 +0000
Manifest this update: Thu 23 Jul 2026 15:00:18 +0000
Manifest next update: Fri 24 Jul 2026 15:00:18 +0000
Files and hashes: 1: 2rAGmumAatpMz3kw0VsK7nvOOnQ.roa (hash: QkO7bxWZSDvJ15l2k1OHawSRFNSNmwY3Ip4idTP8XgU=)
2: 44tbRBm3zSZMoCst6WkxTKufMIE.roa (hash: 5gCjJr0c5JiHRvqLpZ00s+SrgcQffTqmoJaDyLE8c74=)
3: 4b5IG88yGY57oOV8rMMD65D9450.roa (hash: L2WJBC1WPudMtSgpBc/n3eAovKHJ7Y5NfWrM/nSEbtE=)
4: 4kfyvx6IcqlCxed7fdvb4m5sTD4.roa (hash: KVGLl3eS3kXmc+q2aJ0R4MjOlnAmyZYkvCj/Q8Juapc=)
5: 8hx1gAb9JQ9Jt_adfPfauV83-lw.roa (hash: 5Yu25cs4dK7+vmfRVz+5LCQcuI9l90lTLui83bcVIAU=)
6: ECR02Lvma0Akqx8_eko_IQ3lvNk.roa (hash: WYbPrDTPpGPZPcdOFkDj0vuliDTMuVhh8dLndPv7htw=)
7: KUG1dAS56WFyM7HpXaZJm_9NZcI.roa (hash: bDHk7s2ypHa/VmIhy+huenZ6Yha/61UKd4WW960McEc=)
8: NIP6OMbGVO_LoBDEsbJ6LixxNnc.roa (hash: ZLVjxa/g6JD46/uf8XHrDkESKrByzEppqfl3vJn4wSg=)
9: V0ZbvO-Kau_hina_xax1FtPv3HU.roa (hash: 5pDhKp4j1D9CHXJw1ml9s4a1yEyDrOVGDOf0oK5BSVI=)
10: WrWwHOItDmU_S3g0-w_cgsaPRFA.roa (hash: jNNtsFSn9AMYEFYuH0fqqD4hwORadbXk3pHoHndZnnc=)
11: ZJD3Q6iJx8-f2YHw1Hw_i2VwDds.roa (hash: 4ehtslOSeTUspbDXf2ztNXuLiv7hRwHykkGiKzcBHMY=)
12: f0fB3ZCLspEHf4xo9ont5Ruj-yU.roa (hash: s3KQRvgs0uMJaKxlqnyZSS+058EdiVidz4VTBoWLKeU=)
13: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: TZ60wHTFAlsgYF27T9lRk8pFMjVL5lfZRKu96Vun+xg=)
14: oU210CVFzLuiQyHcf_YEp8pxk6M.roa (hash: HDzrvRtHa5TwJys+/lsPvAJ6xNgxTrYnp7lOvSNjpgo=)
15: pOcafHbNpE6IufWUjCXZs2WWYP4.roa (hash: lDDN8g4MAtlbqtSRtBrtfZVHqI5iUxRV0FsUbPWXCHU=)
16: tZjmsStp0VcKPFFLWR9K3de-3PQ.roa (hash: OEQhtHW2/RhfDyyYWpUnjsi1Rb0UQYxvnkk2lrldW2w=)
17: yGz8NgbL_uPaqQIt8HfMRIIbhxI.roa (hash: 1r231ZIpUKsAJqSZVFd8j4Zxh9itylhnPaX/Hsb0udk=)
18: yt4sMwydKd-q7CRhhaUoMNZQcYE.roa (hash: HAZLAfvTvsad0Yf/uypEMiAh8+oiLiVNNSNJqAQE/M4=)
19: zMHnxNkGZBmoNQowVHKQvmrR1So.roa (hash: 5IVAfxXNsWU6GCJqjsRbswDzTaG988IprK4skA5INuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:de:9b:c3:06:78:7c:58:aa:bb:e2:30:42:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jul 23 15:00:18 2026 GMT
Not After : Jul 24 15:00:18 2026 GMT
Subject: CN=23a65858453befda90dadff8504580eed78a2c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:79:02:f6:45:c1:2d:03:28:fc:2f:e5:fa:72:
22:f3:8d:24:57:fc:25:6d:ae:24:08:87:21:e7:15:
91:96:44:bc:45:8b:aa:fa:70:9f:83:c9:e0:f4:c0:
23:d0:28:65:cb:e7:52:4d:87:7a:ca:77:22:6d:b8:
4d:60:ab:de:b3:30:58:1a:12:f6:a0:cf:3f:ad:2f:
dd:68:f5:53:a6:f2:8c:57:0d:66:b6:a0:9c:ac:85:
7d:53:86:9c:2e:05:ca:25:73:cc:c5:5b:92:63:1a:
33:fd:42:67:4b:e6:59:a5:84:19:5b:db:45:83:c2:
10:32:ce:14:59:0b:e1:2c:c9:e5:77:b0:4b:34:70:
40:30:0a:e4:4d:9a:7a:75:7c:8a:1d:9d:60:28:18:
44:d7:c6:09:1f:77:63:58:0f:b5:af:4c:af:1c:84:
bb:99:2e:78:60:07:49:42:6b:e3:c4:37:d0:e9:d6:
21:42:28:39:a9:b1:b8:f2:17:0c:27:55:9c:e0:af:
78:af:0e:28:3d:5d:dd:b2:c4:ed:65:ac:8f:ec:c6:
0d:db:74:8c:b2:28:38:d8:f6:b0:b8:1d:24:b3:19:
f3:43:44:17:2a:c2:f8:fc:0c:ff:9d:48:14:a5:80:
1b:27:bf:a5:7d:b6:6d:dc:44:d7:3c:9f:6c:e4:03:
77:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A6:58:58:45:3B:EF:DA:90:DA:DF:F8:50:45:80:EE:D7:8A:2C:74
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f9:3b:fd:54:60:31:d0:97:b3:58:ca:26:29:e9:59:9f:38:
08:2f:01:9d:7c:fb:f2:68:7d:f4:98:ad:ca:a0:ef:e7:19:34:
e6:c3:fd:b9:de:04:34:ba:0b:f2:4b:8e:d4:2e:5d:43:6b:6b:
c7:85:d1:a5:38:e0:ed:aa:ef:7c:4b:a6:2b:79:3b:23:f8:f6:
b8:d3:ab:4b:03:b9:68:df:0d:4f:52:cd:94:8b:fd:76:0a:cc:
af:05:93:25:d0:7d:9c:08:3e:d6:e3:e2:8e:8f:b0:93:85:53:
ed:c1:2f:68:fb:92:bd:7b:c6:70:7c:1b:2d:c4:56:84:e6:b7:
39:ad:88:ab:63:58:40:bb:1b:56:87:4d:a7:67:ef:10:d0:a8:
d9:17:24:9b:70:50:1b:53:30:c2:cd:09:cf:cc:8c:56:de:5e:
16:3e:b1:b7:7f:ff:49:c2:c7:d4:0e:fe:c4:37:56:12:32:69:
ee:d4:c2:73:4e:49:c8:04:31:8d:00:ee:47:38:70:4c:69:ca:
97:b4:be:58:36:18:98:2f:17:32:5d:ca:3e:5b:62:dc:50:64:
6a:9a:f1:71:c8:3f:9b:89:30:d3:36:35:29:ab:15:cd:a8:02:
0c:e0:62:98:a5:ff:e7:ad:37:c9:d7:61:0a:d9:42:02:9b:8e:
56:af:bc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:06 2026 by rpki-client