
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json)
Hash identifier: bMUmSN/ZuWLhOZ5s7UWxIBCntTqoApXwUw2G9NJZzJw=
Subject key identifier: 37:FC:0E:C0:6C:FB:38:68:34:30:58:CE:81:82:17:7F:6E:B1:75:27
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 019F935ACD4442B196DF206FF0F0AF814038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
Manifest number: 19EF
Signing time: Fri 24 Jul 2026 09:00:29 +0000
Manifest this update: Fri 24 Jul 2026 09:00:29 +0000
Manifest next update: Sat 25 Jul 2026 09:00:29 +0000
Files and hashes: 1: 0D14gN2WiBa54cFbuKlrQUOrf8M.roa (hash: 2wB51bMRZ+T+HK/B9Edc9OpYAvR825v+i0duj5mr6/E=)
2: 8alVrjrWY968nNzLuKlTYJqWO5s.roa (hash: n3cPQVf1JqZIIBHl4vdLfSmHsel7C5NhWsG2ov9U0fE=)
3: AfDFx5CztN26DfCfFCFVeLtbfYk.roa (hash: 6hydPd19IUZH5tUXaWmgrdl0J31zdN4Hkjua9Sst5JQ=)
4: Fe9Xj78mLtBv56f9jO8i3r-s8qM.roa (hash: wNTnsyJdnh8/6vp2voiL35CQyX5QiogzfMfKCFUPFDM=)
5: Go3pOTuap2_fsOG2Cy2Y4VT2pN0.roa (hash: 0oyx4eIX+vmWlDNgh2kGWbDg44/BIpYISvXYVe/lRmI=)
6: OsaS-W05X64hVseLWVJ98CCH4bg.roa (hash: ZOdWLGxsnjVKDfjbUq3CekoJyLOWeoL5aqMKIGP91V8=)
7: ZGek-6HBksI7UR516vE0gk5R-L4.roa (hash: t0Obkj8sK06HaBNs4kmLvSB4hxDxnIEARfCn1Ni3RSc=)
8: axdSVqIzRJIZuL4bUaXgsCZR0GA.roa (hash: o1y1RiYLt8sTd8RRJ89cjZcmfxt/0UhXCW4mXlZ2wPw=)
9: cY5-1Q-gCudDvvsjntcM9LHNJ5E.roa (hash: 3JUexyB8UKFK23yZaQJY7snnPpz1rOPKcvmbdq5kUeg=)
10: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: v1aAw1Cj+PZzI4xw2cvIyzykMXST+L+1b/qMRXng/6k=)
11: nWdXzo03Nv5euYjJfrUQ8HTtaRI.roa (hash: 4zzXn53ZU7R+himiAEAxl3zTsYnZiM207WqrGti69uY=)
12: pJv_j_K2EgBCPVKk6BgeU9sHfR0.roa (hash: FZmisnstiTUOgcPXpHL2ZJ5p2aJPRBsk+SIz8t4Ftlc=)
13: rQ8ohk71V4ClseY7wRU6uUdfWw0.roa (hash: +Un59zWJ5v19ef4G1vmVABla4G6FDYt+TwXokRhf32c=)
14: t6LGbWPehA5-4bGA_0I8d0ATs2A.roa (hash: VJvhwVfSb8eKnL2DGvlH1c5C6AHV73YvtD/x841o6yw=)
15: xpxQq-XYLTeZi1RJOWi2RhOZm6M.roa (hash: stugu/O0ZbeQlykuDSWoq5P19xqk7ytCQZZAgWlL1aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:cd:44:42:b1:96:df:20:6f:f0:f0:af:81:40:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Jul 24 09:00:29 2026 GMT
Not After : Jul 25 09:00:29 2026 GMT
Subject: CN=37fc0ec06cfb3868343058ce8182177f6eb17527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:92:93:d2:bf:62:00:28:cb:54:2a:91:ac:
ca:4e:24:a9:2d:bd:e6:15:f9:7a:14:0f:23:e3:c5:
63:2f:82:56:74:16:d7:70:82:81:f2:3a:66:08:2d:
7b:98:9f:ee:c8:80:2a:ca:ca:44:ba:86:66:10:69:
b2:72:44:d4:7e:5d:4e:07:7a:c9:65:a5:86:a3:ca:
b5:22:b3:36:82:22:15:3f:b2:02:e9:29:00:8a:3e:
f0:39:c5:e1:04:95:49:b1:a2:76:98:8a:74:f0:8c:
ea:48:f3:13:67:41:66:02:07:02:c3:98:e7:70:d8:
97:cd:3c:e1:7f:93:3b:cc:79:1b:75:a7:c0:54:f8:
06:f4:ae:a8:e9:27:e7:b2:27:21:b6:53:b2:1d:02:
58:f1:4a:37:43:77:87:5e:8a:e5:54:1b:09:fb:92:
d7:5c:ca:7f:57:02:ce:9c:f8:15:2e:94:95:a9:4c:
1f:fa:67:55:93:26:99:43:5a:60:98:37:3e:f1:06:
f8:bd:b6:cb:11:cd:f7:28:bc:36:de:b2:f5:60:92:
5b:0d:0e:8c:e4:47:ab:32:ff:7d:e6:f4:17:46:bf:
8a:55:e0:72:07:2c:37:7a:40:34:e9:8d:c5:e5:b7:
8f:17:63:2d:a2:47:b8:4b:fc:a6:df:33:08:f2:94:
de:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FC:0E:C0:6C:FB:38:68:34:30:58:CE:81:82:17:7F:6E:B1:75:27
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cd:73:31:de:78:23:80:4b:cf:e4:85:35:b7:42:44:f9:f9:
dc:c2:61:ba:53:68:ff:3f:d0:1a:45:90:38:6b:6f:47:b4:96:
c6:c2:1f:1e:b4:8d:87:27:98:5a:06:67:8f:1e:2a:49:c1:e6:
f5:af:35:4f:65:b0:f5:dd:86:5d:9d:e9:3d:a6:58:6f:ef:88:
0a:3b:bc:6f:34:a8:7e:c5:14:a4:67:46:1c:04:47:43:85:14:
16:a3:04:2b:03:c6:2d:83:c5:97:e5:e6:13:94:66:87:88:bd:
d1:03:8b:92:6e:af:b2:ba:03:2e:7c:c8:16:55:6e:41:61:8a:
05:1e:f9:99:ee:0a:ab:11:b3:16:97:e2:af:10:f0:98:a4:a5:
8e:d2:e9:a0:7f:ae:a1:bb:d0:d2:66:3c:ed:48:4b:76:80:c6:
da:77:a3:a4:bf:a5:70:60:45:e5:50:dc:b2:f5:85:47:42:c0:
83:8b:a4:15:2c:c2:c9:41:70:0e:64:d9:ab:6e:d3:65:b4:63:
37:6f:ec:6d:4f:52:2c:d1:5e:c0:53:23:fa:18:24:04:54:3f:
7b:4d:4c:7d:28:ae:79:54:4c:61:0d:76:52:49:7d:c9:5f:b2:
c3:8c:2a:db:2d:a8:56:59:83:9e:dc:ec:6a:56:49:45:7a:58:
39:50:5c:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWs1EQrGW3yBv8PCvgUA4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj
MDA0OGUwHhcNMjYwNzI0MDkwMDI5WhcNMjYwNzI1MDkwMDI5WjAzMTEwLwYDVQQD
EygzN2ZjMGVjMDZjZmIzODY4MzQzMDU4Y2U4MTgyMTc3ZjZlYjE3NTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3eSk9K/YgAoy1QqkazKTiSpLb3m
Ffl6FA8j48VjL4JWdBbXcIKB8jpmCC17mJ/uyIAqyspEuoZmEGmyckTUfl1OB3rJ
ZaWGo8q1IrM2giIVP7IC6SkAij7wOcXhBJVJsaJ2mIp08IzqSPMTZ0FmAgcCw5jn
cNiXzTzhf5M7zHkbdafAVPgG9K6o6SfnsichtlOyHQJY8Uo3Q3eHXorlVBsJ+5LX
XMp/VwLOnPgVLpSVqUwf+mdVkyaZQ1pgmDc+8Qb4vbbLEc33KLw23rL1YJJbDQ6M
5EerMv995vQXRr+KVeByByw3ekA06Y3F5bePF2Mtoke4S/ym3zMI8pTe0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDf8DsBs+zhoNDBYzoGCF39usXUnMB8GA1UdIwQY
MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt
MTA5NTU0NGM2YzUwLzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw
LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL81zMd54
I4BLz+SFNbdCRPn53MJhulNo/z/QGkWQOGtvR7SWxsIfHrSNhyeYWgZnjx4qScHm
9a81T2Ww9d2GXZ3pPaZYb++ICju8bzSofsUUpGdGHARHQ4UUFqMEKwPGLYPFl+Xm
E5Rmh4i90QOLkm6vsroDLnzIFlVuQWGKBR75me4KqxGzFpfirxDwmKSljtLpoH+u
obvQ0mY87UhLdoDG2nejpL+lcGBF5VDcsvWFR0LAg4ukFSzCyUFwDmTZq27TZbRj
N2/sbU9SLNFewFMj+hgkBFQ/e01MfSiueVRMYQ12Ukl9yV+yw4wq2y2oVlmDntzs
alZJRXpYOVBckQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:45:56 2026 by rpki-client