
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json)
Hash identifier: d7pWnNA/tbco8sWy+PRHyvCBdaxURexVSqIq1s2zxtY=
Subject key identifier: 99:CB:74:E0:76:8B:1C:82:7D:ED:1B:64:1E:8B:BB:F1:8D:38:E4:3E
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 019E1F10AE5E938F5794171E83D964018A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
Manifest number: 190F
Signing time: Wed 13 May 2026 02:00:47 +0000
Manifest this update: Wed 13 May 2026 02:00:47 +0000
Manifest next update: Thu 14 May 2026 02:00:47 +0000
Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: jEuROSFgucbSjqpoHPiWoU/izoojd9x8SHkIshNp+Jk=)
2: 8cM6v3_NRAZ3FP_fGe0mwmajY0k.roa (hash: UZQldaFo6xwnQkumeQ30d5+3aDGt7jMCik6EMuRJupg=)
3: AA4leRD0fxCP27pMiyTWgt1l_rg.roa (hash: 7SvYjkQmEnHNW0Fizpa0BEm4+FNoAcLpGmBVskPF0pY=)
4: AnJCTd7AgRSldDmx71BvWIQlsjc.roa (hash: VFBhkSbr4RUTAOsdzP+CuaTF7y4EenVQsmWrwQQVwpM=)
5: D9vysDJ6akM7Z66wywlmqWF3jxM.roa (hash: +6sSHR1vJhbnSV1+bNKy86Yi96WvoRkEvwudcBXDAQg=)
6: ES-7aSo6ovYXFf1ggrOgufF4HXU.roa (hash: oBAEPOe3qVf8emRhcuSX1FU4S9ycxaYKQRzrtaIuUZQ=)
7: dBEozjZ87taP7CwFVSXV3w6pkxQ.roa (hash: Q0IadO2WrRqgDE01zeYb4r27Fa+c+ppGgdLscaUKNKk=)
8: kLGlFczsrbvI1LLNYABL3V31uw4.roa (hash: PyJOpPlpidMPg9tlr0wrxczB6f3WILsayIOfBgsOza4=)
9: lIxr1Y2g6tW4Go6HwrrCY4g1GhU.roa (hash: qocUAMn7M/1zyYPDlsc7BcT51RuGObx2kW5wM3NnVyE=)
10: rDXd_OZlN4Uiv52rfRn8xHDUy80.roa (hash: 91Ja2DiUDudi8VvOpGDDJuXajBkTzaFVadsjPhZfAy8=)
11: xVvAeAbjAnywjqQvLFjnqGabFzo.roa (hash: MHe3EjYa15PyEjrwN5cSdo1Ogd8ywELYCfO8/S46e2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:ae:5e:93:8f:57:94:17:1e:83:d9:64:01:8a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: May 13 02:00:47 2026 GMT
Not After : May 14 02:00:47 2026 GMT
Subject: CN=99cb74e0768b1c827ded1b641e8bbbf18d38e43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:65:b8:78:1c:8f:c0:e1:0b:38:ca:7c:e0:
ee:78:c6:47:c9:e6:5f:22:ad:94:92:ec:86:c2:66:
89:17:76:1f:bb:b5:44:61:01:af:80:64:5e:db:8d:
6a:de:96:3b:d2:e8:34:38:87:09:2f:1d:87:b4:8d:
75:95:1c:0f:70:e7:d5:c6:89:9a:9e:61:16:94:65:
59:15:6a:56:c5:c7:46:20:e5:61:2b:08:6d:69:54:
05:54:fc:9e:11:19:59:03:5d:26:c1:63:40:f9:92:
ea:47:97:3e:c5:5c:9f:e8:49:63:72:de:0b:af:6b:
7a:1c:d4:f5:43:3b:e8:db:ac:df:1b:2f:eb:a6:08:
9e:93:1d:67:80:f8:d4:f3:d0:fb:d5:72:15:b8:aa:
84:5e:cf:41:9e:de:f8:76:44:e9:eb:7e:6c:94:0e:
93:bb:b3:21:ec:0f:24:4b:99:4e:77:6a:63:31:1f:
a7:af:4c:3b:f1:f5:b3:ff:66:48:cb:77:b8:15:c7:
e8:d2:5f:8a:6d:f5:28:1b:df:60:d0:7b:35:b1:2d:
3a:de:a4:7d:9d:76:e3:29:07:84:c2:0f:d2:98:3a:
63:51:f5:cd:c6:2c:ca:41:b4:57:c9:f8:52:57:4e:
6a:84:df:56:3f:30:d8:8e:b6:ea:27:77:44:f7:a1:
44:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CB:74:E0:76:8B:1C:82:7D:ED:1B:64:1E:8B:BB:F1:8D:38:E4:3E
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:21:8d:e1:a8:1e:6c:86:30:04:d5:3a:43:12:c9:4a:0d:36:
ce:f9:32:ae:95:bc:3f:38:32:b6:46:c0:fa:8d:d4:f7:b4:c9:
ea:b8:71:79:2d:3f:d2:ec:12:ce:99:37:8a:51:32:2f:57:8a:
5d:09:53:4f:63:63:87:35:ed:30:c5:2f:eb:13:b8:fc:51:63:
e9:b5:a4:c5:5b:04:53:13:fe:a2:c7:b4:e0:54:d1:7a:44:13:
44:2c:f9:11:ce:ca:8e:e2:5e:ff:22:5f:eb:54:7a:54:ce:33:
66:ff:57:43:3c:34:b2:8c:34:62:eb:af:f1:66:79:c0:6b:43:
95:94:45:8f:42:ea:c5:7e:bd:02:c9:cf:66:0b:d1:0a:bc:1d:
ef:5b:ef:90:ea:17:09:29:bf:f0:82:66:6e:0f:4e:ae:4a:5f:
94:29:af:9c:10:bd:e6:38:7e:5e:3b:6e:2f:19:ef:02:a4:44:
53:14:e6:33:91:26:40:7d:e5:40:51:a1:e7:86:42:26:a5:0e:
7c:16:2e:ef:b0:e8:e9:a0:c7:46:c8:e8:12:2d:a4:1f:a0:8d:
87:f0:97:43:8a:b5:8d:8e:85:4f:fb:1a:6e:b3:7e:22:b1:77:
0c:47:53:24:ec:b8:4c:7d:26:e5:13:3c:89:11:67:7c:19:20:
63:21:9e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:14:44 2026 by rpki-client