
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json)
Hash identifier: eRL1zuOtJjsOl/KWVcplsslhD1B/yrszjzv+/vL2Yv4=
Subject key identifier: 02:30:2D:40:C6:6F:7E:9D:73:2B:17:84:D6:6B:53:0B:BB:E4:11:2C
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial: 019E1D910C73E67C73770500620711E2E838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
Manifest number: 191A
Signing time: Tue 12 May 2026 19:01:45 +0000
Manifest this update: Tue 12 May 2026 19:01:45 +0000
Manifest next update: Wed 13 May 2026 19:01:45 +0000
Files and hashes: 1: 0uXHR2UhfdGKOw0-7UVbnfQAkig.roa (hash: Q9NPQXWKGQHVWf1Z/Oo69HPn4r2sOJMpx+RqofXuMKw=)
2: 1-jd9OcIMJ3MRmOrCPnxeklbAz-A.roa (hash: 4BT08aUJAH5XA8v2nUCY0ZzKbtYT4OuVlGjXaC8L51w=)
3: 3Hr9NkohHp-0dQh6eby1rDTTvtg.roa (hash: 31UMAD/tu8ErCfftbrPF1UHKdFAEb8fyigVMsh1vdjY=)
4: 50_RqUM3HM1DTyeXhDBU-vljMns.roa (hash: jLfna8CaKrQXjGhh5I5+7KDotyKYCpxYaW8lSXxCxYI=)
5: 8VffJRIzchhCe8rm2mAWoMqOrUw.roa (hash: ZlMVYfC0qcWAgUxCif3zol/JEVTmk18XMebsrNTaMMw=)
6: FXkLPO07K0oGiHX6N80HucLUmQk.roa (hash: pJpxLX/J3IKaGvymzNo/eP+WscosiFBoX/gscobrkA8=)
7: SviK5uP3P_320woFz7MJ74gfE54.roa (hash: cdu27i/9dSf6ELTxYPRMzucVjIzIdkrFCjEQ+8cX0Hc=)
8: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: EkoGfLjIR84v6yhHUfpW91jihJhkEqL4zWZPP6N1GVA=)
9: _yMstHwq62YtmKZbMo5Nl7N0BSY.roa (hash: fA5EOJqyYeCeRJjBOFQnKbcHaakgxJGZzArfMKvJW7M=)
10: mNIa-kBl--UJ4M4sTdW_ScZtluQ.roa (hash: APBGVJ5X0w1VXGqUTI7O+M7iTb0F7m1Cbhdbmsncrvg=)
11: vUnigMLcxEHFFYzam4W0EFuYfF0.roa (hash: qgrF46htEQCa+s16GhFv54cTmD+21CsD7rkwyl8dr1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:0c:73:e6:7c:73:77:05:00:62:07:11:e2:e8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Validity
Not Before: May 12 19:01:45 2026 GMT
Not After : May 13 19:01:45 2026 GMT
Subject: CN=02302d40c66f7e9d732b1784d66b530bbbe4112c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:98:f0:10:b7:75:d8:cb:87:ef:eb:aa:e5:6f:
bb:5d:25:11:f5:8e:1d:41:0c:b3:66:12:4c:4b:fc:
25:09:72:92:05:53:e2:4a:61:01:73:d9:30:15:3e:
0e:11:56:f6:4b:0c:70:4c:38:f4:b7:d0:e2:6b:2a:
9e:33:84:16:aa:9c:44:b3:57:cd:0f:25:de:22:00:
1d:98:87:ea:b2:23:80:de:c0:fb:a0:65:93:cb:c4:
4a:a4:89:8b:ab:67:f4:13:95:da:8c:39:a3:3c:de:
65:bb:8f:45:78:30:40:99:45:6c:38:01:c0:03:10:
02:6a:62:bf:1d:30:69:b9:61:8f:45:7f:0c:15:72:
70:d6:c0:d4:8f:cc:01:47:88:94:d6:13:29:4c:23:
da:04:a1:ee:84:d6:20:2d:82:cf:cb:8f:f2:4b:e4:
85:64:fc:6f:79:77:c0:3b:7a:2c:cb:c4:14:23:b6:
7a:53:eb:b0:34:76:97:48:63:da:6d:29:ef:08:53:
a2:83:d5:a5:9f:89:41:e8:46:61:e2:d1:63:9f:91:
d0:bc:6a:36:8c:f4:9f:0a:f8:ca:23:9b:92:dd:eb:
3b:dc:82:e2:8d:29:f4:be:07:94:3e:be:ba:9b:de:
c7:39:72:4e:9a:1d:cb:60:e5:82:54:03:c6:85:53:
4b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:30:2D:40:C6:6F:7E:9D:73:2B:17:84:D6:6B:53:0B:BB:E4:11:2C
X509v3 Authority Key Identifier:
keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ca:fa:44:3b:bd:58:6b:cc:b2:d5:6e:67:65:96:19:55:a0:
29:6c:b2:15:fe:93:28:81:d5:de:f0:6c:d6:ba:bc:e9:33:90:
8e:b8:40:d8:96:b1:86:1c:bb:cd:8f:cd:7a:10:c9:00:9c:73:
54:88:12:7b:99:61:b5:85:b2:df:d1:3c:92:c6:5c:bb:28:61:
95:2b:54:20:43:05:a2:a7:df:37:aa:8f:55:6d:80:16:16:3d:
b7:09:fa:89:27:73:60:b2:90:a8:92:96:6b:d3:de:75:0a:ff:
79:fb:da:b3:d3:27:1d:52:b0:bd:f8:d5:53:ab:96:26:38:08:
87:4b:5d:98:bb:1f:27:2d:54:fd:97:3d:0e:6f:a8:7a:2e:73:
96:84:5c:ad:b0:d8:07:87:aa:fe:35:7f:b1:48:31:aa:c3:9c:
35:68:4e:89:7a:1c:7d:06:9f:cf:60:b3:a3:d0:da:7f:56:12:
41:cb:97:f9:84:7a:70:76:7b:d9:ff:d0:8b:73:24:8a:92:04:
a1:33:72:1e:6f:9b:93:0d:d5:9c:da:e0:57:3a:02:7b:71:9f:
e6:e9:53:48:b3:a2:fa:74:2f:f5:43:43:62:35:5a:40:46:68:
ca:a8:05:71:ab:4b:2c:c9:8a:2b:d9:35:3c:a8:f5:f3:80:ba:
2c:8a:ab:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:21:24 2026 by rpki-client