
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
File: 2fwL7GDQus4YiWd72buQGQzE_SI.mft (raw, json)
Hash identifier: rw234soo9+TSTrSOEgsjpCQokVuXKXYKuS8J6ZJHvHI=
Subject key identifier: CB:9A:A9:29:68:33:E9:C8:9E:4A:86:DC:11:2D:38:CE:C1:AA:9C:E5
Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Certificate serial: 019F91A3767C2F8F34F663DB8EB9D210857E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
Manifest number: 19CF
Signing time: Fri 24 Jul 2026 01:00:36 +0000
Manifest this update: Fri 24 Jul 2026 01:00:36 +0000
Manifest next update: Sat 25 Jul 2026 01:00:36 +0000
Files and hashes: 1: 0EOOKZ73EuVKb6azhsikToGYTJ4.roa (hash: tOeqHdzaa5uQmGPeE+9GIo5atcoydPGRdU/daaN1H/s=)
2: 2fwL7GDQus4YiWd72buQGQzE_SI.crl (hash: 8ifdPl1i1p9V3my2CJfYvOG533bOsLv5/1tcwPV/TF0=)
3: EUeWkU0aryB-YkR2M3TsErGD9Is.roa (hash: gK62/o9yO+OyvLt7cRE+ehw4Ouq7VrrbTSmr3DLojOI=)
4: MGhj0X-R9sE8_bxGpuMofPiVOac.asa (hash: DvQwv9R87PLKWjVN3/wl/o55noyjeNHEbII9CUCtA+0=)
5: SpICVub50OICM4yiQk6ulqnyBsU.roa (hash: 1SZAmfW+sJIqJsSkqCTN19QGqChFmDq0AZE9eacMzAI=)
6: W9lGuLlyK3oCTZXvmQuqTo4C2yg.roa (hash: G4w7b1CN5DpM/EZuMWQLQvxT+EVuYLv3nYfxDAbKhDk=)
7: jUElcf1JFP10uCVqAsvtMStO4o0.roa (hash: xrxSdpsBwKaZISPc2IK2Gw1lDuUsBX/PpqeA4Z3a8cs=)
8: o09lL4OudMDTh_jmHHeTIRn2L5s.roa (hash: ctwy00D7K53oO1gqUQQpnsVurkNSXddz4U1vX79+KpM=)
9: yn6euPUsjq8bRXFpjTNGPdRM13Y.roa (hash: IGe548/q8hO5ei6AedK5a51FhkUkqFo8BXPppwB9Vlw=)
10: znNyesTwbEHb5GdVovxJsLLM9KQ.roa (hash: WbfDTvPg/i+BiVxKsZsH5gFpX+Sz+6FiIPk4KG/O+AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:76:7c:2f:8f:34:f6:63:db:8e:b9:d2:10:85:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Validity
Not Before: Jul 24 01:00:36 2026 GMT
Not After : Jul 25 01:00:36 2026 GMT
Subject: CN=cb9aa9296833e9c89e4a86dc112d38cec1aa9ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:e3:55:8b:9e:5c:88:7a:e0:23:8b:15:79:
bb:ae:8f:03:4e:22:30:fc:f7:fd:2c:e1:8f:b5:86:
af:50:ca:30:de:21:11:fb:90:5a:5d:36:76:9b:c0:
87:1e:6b:d1:6f:95:16:85:6c:67:06:02:c2:78:ef:
52:00:7a:60:37:0b:fd:15:bd:a0:09:09:81:8e:c0:
a6:a3:b1:9a:de:37:f7:8c:ea:e6:63:b9:df:68:fa:
dc:b0:43:e7:82:61:16:1c:b6:1b:78:f3:d5:48:9f:
2a:ec:7f:e2:27:ed:f0:5e:88:a3:b7:55:7c:ff:1b:
5e:9b:db:46:42:eb:00:95:51:f3:ca:23:9c:67:54:
39:27:70:1c:fd:86:56:a7:b5:98:c5:66:71:b0:e5:
31:05:f3:05:96:28:55:c4:03:e0:10:86:63:cc:36:
d1:03:9a:60:7b:1d:55:38:2b:c6:a4:8c:d0:f3:12:
75:79:30:01:a1:e8:6b:c9:11:bc:e9:ff:44:ef:e0:
54:58:f4:18:48:0d:7a:c7:7e:b6:5b:b5:2c:f4:cd:
24:f2:d8:5b:99:1a:da:b8:67:7f:e5:9f:ab:25:24:
82:8a:b5:d2:79:55:12:2c:96:cb:3b:e7:4e:c3:cd:
ec:78:f4:6f:09:61:e7:a2:a8:79:e6:c3:21:3b:f0:
9e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9A:A9:29:68:33:E9:C8:9E:4A:86:DC:11:2D:38:CE:C1:AA:9C:E5
X509v3 Authority Key Identifier:
keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1c:74:36:0b:82:f8:94:81:77:2a:4c:87:c4:dc:35:4a:e3:
b1:c8:fc:cd:55:8f:88:14:04:8e:88:04:1c:eb:71:ff:c9:80:
d0:03:40:4d:20:34:2e:83:45:62:20:d1:f7:ce:26:3a:f1:c7:
2c:05:ac:da:71:14:24:9c:09:2c:c6:bb:70:af:5e:4b:dc:70:
44:cf:82:8f:64:88:8a:80:48:66:2b:9b:5e:b9:19:0f:30:52:
15:48:30:f6:23:42:17:a0:09:2f:1d:61:7d:42:11:cd:fe:4b:
c2:f5:9c:71:59:67:74:14:c8:ab:35:29:e6:4e:61:89:0e:bd:
89:c2:ff:17:ce:a7:2a:53:13:aa:2b:d9:ad:d1:c1:fa:2b:d1:
a5:3b:61:da:46:64:8c:db:7e:c0:b9:4b:e4:8f:69:67:2b:d9:
a1:27:2d:84:ea:d9:d6:3b:da:ea:b7:cf:8f:aa:c4:92:b9:31:
b0:ac:5b:c3:8a:ae:25:63:fa:5c:42:f0:08:a6:29:54:02:d0:
ce:2a:0e:76:33:ae:84:5f:a8:4d:4b:0e:58:e8:16:dd:6e:62:
c0:77:9a:f9:b1:c6:83:aa:0e:b5:92:bb:74:81:13:a5:96:24:
37:22:80:01:3c:fa:0b:c1:c3:6e:0e:5a:67:c1:2e:9e:7b:cf:
4f:74:a9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:56:56 2026 by rpki-client