
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json)
Hash identifier: 7xelo3izdUF6QD9Wx7RUd+ZAmPCrQDWefIOq90ZcJoc=
Subject key identifier: 5F:3D:E9:82:AF:F9:55:57:5C:17:FB:EA:D6:F2:DD:A7:3B:46:E4:FC
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019F924810032DDAF14BC84013E329CEF2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
Manifest number: 1A0A
Signing time: Fri 24 Jul 2026 04:00:23 +0000
Manifest this update: Fri 24 Jul 2026 04:00:23 +0000
Manifest next update: Sat 25 Jul 2026 04:00:23 +0000
Files and hashes: 1: 1nFCKi1R1uWAqKJnbMUD9y_3pno.roa (hash: 5C4IbhqcH3E0EkSlqxD//f0/kRfbI7bdALbkI7++DS0=)
2: 45jcpGMeN1MEq1EOG0Y9qcXt_7E.roa (hash: T4PlRQPL8k2IXPh/6bf0yHYACLBVnc7hXe7KA88boSU=)
3: 54lQx9jq3eHeFIcJKMTm3kHCZTA.roa (hash: 27oRvIuzZnhWTtAi86vMeQgbiUWJ+XcD4ONYqT3e54I=)
4: BtE_Prg_QTilEMkESiUbs4oIDmA.roa (hash: SFNeqY+UDzZLqbIx3LsR2g+sDJ1BvW0wdb9XdlLKZ0k=)
5: C-Qps28bGJ9viEITk81kKk0b0dA.roa (hash: YvQZ6I3rsCF/RjF8TlblPG71ruEskxswS8/cnuK9jtA=)
6: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: J1t4igC4yBI78YzW07FZsvjTdU3kdpyk3vy4OlEYQ+A=)
7: GpPbNoyLVyrmQ4b8e1AhKTzfuOg.roa (hash: ghZh7XoU09TtPH2tIcN1D5InXaZeImBLFNLb0RMUPhs=)
8: McMAEXhLQiJ8zGNeGMw3UTPr0gA.roa (hash: Axa3TJcrAyunbvQsH7ha/cb/OA+FPV5fxnNPJ+XHc9Y=)
9: SH8o9XaYeY75kSYDFek1xvvvpes.roa (hash: snF/ko8o9cC13jo1dYD32crG+aO3GlqBSVVV17i0l7Q=)
10: c-QDkOwRsaqWaCLR67UW_lU7-L0.roa (hash: AE6Uaz5NJLGOrk5M1q3pxLLZKI8/2jUOSqya5+asWc0=)
11: fNaq8m6O9BbhsyXfpIVgO1FBWfQ.roa (hash: YWEpMcVfS6S4vwVF7Bdrpn4pCsO6G0a695Az/e9ZD/E=)
12: ke2TciPSbDOn6zXxGdQLJTfLAsw.roa (hash: 9ny0lYpK79F/d0zmuY5DS1VwZbJpVvPVS9XC0rY+Evc=)
13: sgSvFZT7cMQ6O7meaSYCsiAvpIQ.roa (hash: b1OuAlU0+cSQfcjeLb3gpe1ABMzAcbi57g2ciFKHZfA=)
14: sl7rtV7gRWnH0rzgCWs0BxwC9uA.roa (hash: 13ubUUikB/ayAhjAv3tgoeX0xlseT2rnUuFrpyiC5X0=)
15: wCYaXW9yQXdX5eY6SwGBDpsbJ2M.roa (hash: +1+KMrFBvRETqP/PeuYGipr75ZikVYJF14sV08bslAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:10:03:2d:da:f1:4b:c8:40:13:e3:29:ce:f2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jul 24 04:00:23 2026 GMT
Not After : Jul 25 04:00:23 2026 GMT
Subject: CN=5f3de982aff955575c17fbead6f2dda73b46e4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2f:bf:c3:0d:87:13:34:36:61:6d:f7:01:c8:
16:05:ed:31:5d:c4:6b:b2:13:aa:a9:71:ba:22:8e:
1f:61:84:ed:c8:3c:4e:e8:49:ed:e3:06:57:1c:2d:
28:fc:5f:d1:6c:0b:63:66:f2:5f:ab:ac:eb:13:c1:
e5:19:1c:78:e5:3e:c5:9d:34:eb:6b:c7:f6:e9:34:
9e:e3:a3:d0:20:74:32:93:96:11:3b:d3:de:48:55:
a1:92:59:7a:5c:4b:91:33:3f:1f:62:ed:da:98:50:
9f:e6:77:47:cc:aa:db:7b:e4:a4:ed:ea:c6:d2:b1:
4d:c4:e3:7d:ee:7a:8d:13:cc:98:37:33:83:64:d1:
62:ba:82:ae:74:e5:6e:89:1a:22:86:9a:d8:81:8a:
be:38:aa:07:58:19:6f:ea:65:d1:6e:2c:fe:0c:26:
f4:54:7c:2e:d6:3d:2c:3a:ba:a2:ae:69:52:fd:1f:
c8:48:d7:8e:db:53:4d:24:93:f7:28:92:c5:b6:e2:
57:fd:32:a2:29:36:0e:e5:34:da:85:af:15:d2:65:
0e:83:61:27:40:98:af:dd:3d:5d:4d:51:d2:fd:d9:
68:53:3a:05:63:06:c8:72:61:63:52:09:2c:b3:e4:
5d:46:5a:58:c4:b2:dd:6e:09:13:f9:20:5d:42:4e:
67:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3D:E9:82:AF:F9:55:57:5C:17:FB:EA:D6:F2:DD:A7:3B:46:E4:FC
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0f:9f:fa:5d:66:cf:d3:bc:74:e3:01:48:16:ae:7e:20:83:
ea:8e:72:f4:67:9c:56:ab:de:8a:6f:f0:53:a9:a4:3c:95:cf:
e5:0d:de:ff:a9:0f:90:32:a8:09:a3:72:58:48:ce:7a:05:09:
3b:09:19:b1:cf:7f:db:00:2e:a0:80:c3:91:86:60:f1:67:88:
4b:84:a4:90:34:dd:0c:88:36:46:74:2d:10:54:75:fe:da:58:
e4:f7:f1:88:9a:cf:90:b2:f0:c0:11:8c:54:db:c2:ed:71:f2:
cf:fd:6d:22:13:3c:59:f4:cd:d1:ee:d0:66:d8:18:b6:95:57:
7f:59:89:73:9a:0c:8d:0b:ff:6d:99:ba:4b:56:fb:0d:0d:79:
2e:6d:9e:97:f8:ac:47:ac:cc:c8:2c:96:54:13:41:74:22:91:
2e:a7:68:f9:cf:7c:f6:99:4f:94:fb:59:97:3c:ec:82:e2:2c:
75:4b:fd:90:e7:b4:f6:3d:12:5c:5b:a7:8c:46:2e:aa:df:fa:
46:db:68:64:22:92:2f:ec:de:fa:14:dc:84:37:76:4a:a0:cc:
f2:9f:f6:69:37:47:25:49:ce:c1:c0:2c:61:f2:e6:a4:6c:67:
0a:55:9e:ba:7a:33:13:09:7d:fd:db:4a:2e:27:09:f9:19:83:
e8:7c:cd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:41:07 2026 by rpki-client