
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json)
Hash identifier: BwcSHR5e85fPM/Lh4O5b3JGmtwpVP/aRyHgGKJo5OWw=
Subject key identifier: 42:80:35:9D:0E:1E:35:2E:04:55:C1:36:6E:CA:F1:07:4C:25:30:2B
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial: 019F8E6C233E6B314B65D259E51CAB907FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
Manifest number: 19D9
Signing time: Thu 23 Jul 2026 10:01:19 +0000
Manifest this update: Thu 23 Jul 2026 10:01:19 +0000
Manifest next update: Fri 24 Jul 2026 10:01:19 +0000
Files and hashes: 1: 0uXHR2UhfdGKOw0-7UVbnfQAkig.roa (hash: Q9NPQXWKGQHVWf1Z/Oo69HPn4r2sOJMpx+RqofXuMKw=)
2: 1-jd9OcIMJ3MRmOrCPnxeklbAz-A.roa (hash: 4BT08aUJAH5XA8v2nUCY0ZzKbtYT4OuVlGjXaC8L51w=)
3: 3Hr9NkohHp-0dQh6eby1rDTTvtg.roa (hash: 31UMAD/tu8ErCfftbrPF1UHKdFAEb8fyigVMsh1vdjY=)
4: 50_RqUM3HM1DTyeXhDBU-vljMns.roa (hash: jLfna8CaKrQXjGhh5I5+7KDotyKYCpxYaW8lSXxCxYI=)
5: 8VffJRIzchhCe8rm2mAWoMqOrUw.roa (hash: ZlMVYfC0qcWAgUxCif3zol/JEVTmk18XMebsrNTaMMw=)
6: FXkLPO07K0oGiHX6N80HucLUmQk.roa (hash: pJpxLX/J3IKaGvymzNo/eP+WscosiFBoX/gscobrkA8=)
7: SviK5uP3P_320woFz7MJ74gfE54.roa (hash: cdu27i/9dSf6ELTxYPRMzucVjIzIdkrFCjEQ+8cX0Hc=)
8: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: pA7e6UnmL8vmrf8XGC2Q5XgAupEQsmyTfph341om4vU=)
9: _yMstHwq62YtmKZbMo5Nl7N0BSY.roa (hash: fA5EOJqyYeCeRJjBOFQnKbcHaakgxJGZzArfMKvJW7M=)
10: mNIa-kBl--UJ4M4sTdW_ScZtluQ.roa (hash: APBGVJ5X0w1VXGqUTI7O+M7iTb0F7m1Cbhdbmsncrvg=)
11: vUnigMLcxEHFFYzam4W0EFuYfF0.roa (hash: qgrF46htEQCa+s16GhFv54cTmD+21CsD7rkwyl8dr1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6c:23:3e:6b:31:4b:65:d2:59:e5:1c:ab:90:7f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Validity
Not Before: Jul 23 10:01:19 2026 GMT
Not After : Jul 24 10:01:19 2026 GMT
Subject: CN=4280359d0e1e352e0455c1366ecaf1074c25302b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:63:d2:bd:c1:c1:a9:c8:a1:82:48:6c:60:
da:bc:5c:31:58:ab:a3:02:b0:fa:13:a2:d3:97:a8:
7a:ad:50:5d:c4:b3:df:ea:8f:44:65:06:3e:45:53:
bd:43:67:89:3e:d1:a8:35:f0:b5:d1:93:59:89:65:
16:ba:99:4e:9c:13:38:9d:0a:bd:09:9c:3a:c2:39:
16:a3:67:46:c3:28:31:0b:ca:c7:7d:a3:37:74:61:
ac:67:a4:81:12:1e:49:13:bd:5d:31:45:0e:69:22:
67:57:cf:91:dd:92:31:1e:b3:7f:54:3c:41:73:38:
f7:5e:7e:56:ba:69:8b:23:96:ef:fc:c1:9c:74:69:
a9:64:ef:90:43:b0:01:d1:31:c8:cf:48:4d:77:c2:
fc:48:b2:ca:6b:bd:85:a0:3c:d9:57:92:75:87:95:
0b:f8:9c:42:22:31:fa:1d:6c:65:d3:e3:6f:83:16:
27:06:c2:d9:ce:47:0e:82:53:db:30:32:1e:44:87:
0a:e6:a0:1d:90:90:fe:62:88:da:be:d5:6b:b6:50:
4f:fb:fe:c7:1e:b7:7d:2b:9e:ef:4e:e6:9e:be:80:
93:c6:ed:45:1e:38:4b:95:3a:d6:db:3e:92:f5:f3:
fe:c5:db:9d:dc:0a:58:a0:fc:61:24:26:3c:0a:0e:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:80:35:9D:0E:1E:35:2E:04:55:C1:36:6E:CA:F1:07:4C:25:30:2B
X509v3 Authority Key Identifier:
keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:57:64:89:0e:60:ac:00:da:e0:da:61:fa:7b:42:d2:00:f5:
79:69:04:25:11:3c:9b:91:cb:60:fb:3b:6b:66:2e:91:12:2b:
6d:bd:f8:46:4f:11:f3:db:3b:31:31:49:c0:b3:d2:2d:0c:4b:
bf:b2:ea:a9:f8:1f:2b:9b:44:31:6b:96:3c:71:ef:4d:79:ae:
72:3b:51:f4:df:3d:50:36:2c:66:6e:f3:e8:aa:73:91:99:f7:
2d:70:33:dc:64:80:cc:45:10:44:93:c0:34:08:fc:b4:79:f5:
ad:d7:8e:cc:4d:1c:da:8f:91:ad:9e:dd:dc:df:a0:68:3e:ac:
76:02:9f:6b:c3:d0:4a:57:f0:37:ed:e7:bd:c0:10:c3:0e:49:
d9:c9:31:53:ce:a3:d8:dd:29:ad:98:19:be:50:97:f6:b4:56:
07:f0:c3:b6:59:6f:8f:25:12:68:06:3f:d7:c4:dd:03:4b:cc:
3e:99:2d:b2:a4:1a:d0:ed:0f:71:dd:e8:91:0e:f6:7a:d8:ea:
cf:51:d9:eb:00:59:ef:02:38:ad:57:64:e9:c8:2e:d3:b7:84:
7f:4b:6d:15:f5:b0:8a:62:4c:5d:c1:3b:33:10:25:94:82:a3:
78:da:27:6a:97:04:b4:cb:73:90:e3:7d:0f:77:53:0f:59:da:
b2:ea:31:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ObCM+azFLZdJZ5RyrkH+nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl
NWY0YjkwHhcNMjYwNzIzMTAwMTE5WhcNMjYwNzI0MTAwMTE5WjAzMTEwLwYDVQQD
Eyg0MjgwMzU5ZDBlMWUzNTJlMDQ1NWMxMzY2ZWNhZjEwNzRjMjUzMDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbZj0r3BwanIoYJIbGDavFwxWKuj
ArD6E6LTl6h6rVBdxLPf6o9EZQY+RVO9Q2eJPtGoNfC10ZNZiWUWuplOnBM4nQq9
CZw6wjkWo2dGwygxC8rHfaM3dGGsZ6SBEh5JE71dMUUOaSJnV8+R3ZIxHrN/VDxB
czj3Xn5WummLI5bv/MGcdGmpZO+QQ7AB0THIz0hNd8L8SLLKa72FoDzZV5J1h5UL
+JxCIjH6HWxl0+NvgxYnBsLZzkcOglPbMDIeRIcK5qAdkJD+YojavtVrtlBP+/7H
Hrd9K57vTuaevoCTxu1FHjhLlTrW2z6S9fP+xdud3ApYoPxhJCY8Cg4AhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKANZ0OHjUuBFXBNm7K8QdMJTArMB8GA1UdIwQY
MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt
NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh
LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVdkiQ5g
rADa4Nph+ntC0gD1eWkEJRE8m5HLYPs7a2YukRIrbb34Rk8R89s7MTFJwLPSLQxL
v7LqqfgfK5tEMWuWPHHvTXmucjtR9N89UDYsZm7z6KpzkZn3LXAz3GSAzEUQRJPA
NAj8tHn1rdeOzE0c2o+RrZ7d3N+gaD6sdgKfa8PQSlfwN+3nvcAQww5J2ckxU86j
2N0prZgZvlCX9rRWB/DDtllvjyUSaAY/18TdA0vMPpktsqQa0O0Pcd3okQ72etjq
z1HZ6wBZ7wI4rVdk6cgu07eEf0ttFfWwimJMXcE7MxAllIKjeNonapcEtMtzkON9
D3dTD1nasuoxYg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:15:17 2026 by rpki-client