
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json)
Hash identifier: ekT1TZuOsAPvlVPNghzzC3heROqbCoHiE4bT/XYpCnM=
Subject key identifier: 98:02:2F:0E:9C:C2:1C:08:03:AA:F2:49:B0:2E:97:CF:68:62:DE:1E
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 019E1DC778AA5D3D58C2D382E5571AE12DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
Manifest number: 1913
Signing time: Tue 12 May 2026 20:01:12 +0000
Manifest this update: Tue 12 May 2026 20:01:12 +0000
Manifest next update: Wed 13 May 2026 20:01:12 +0000
Files and hashes: 1: 5lFyIZmBLBFDx76RfuZHevsHQQY.roa (hash: PI10EPnFAgNZeRBfLyN6vfxKBB4r+mmccm1SKvgO9H0=)
2: 8JXNaaQmDQHdM4yP_RNeiswPEDI.roa (hash: UUO1y8o89Fboq48v1C/MZYuzKEwlodMmFc6P3ytbtj4=)
3: F1XFKolR75CvzOCyFlTtMYXp3UA.roa (hash: 1NsFIv/Vqxyf17zBRZ7ykgjIIYfbwgtJjmnNI1bztF0=)
4: Ho8BmWtRsGIfoh9TadeITydo350.roa (hash: jhic1+8GxEt2CK46n93QnO3HxEVdv0LVkgGPn/QSDf0=)
5: NDEJ4OPh2jQQg5h1HdKinOuNm1g.roa (hash: 6YV/mvu0IZaB1NRM8e6QdrWu4qWaOce8H7G5lo4LpOc=)
6: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: dVLK6liuxlprO/wa6rR0PnBu2d/6mU9YejudCWjngfY=)
7: Tj4Mcwc_96ZTjJYw-9rKbpG4AXA.roa (hash: 6X5APSqbz1P2mkb03h8c2CZF8YBdY33egLhUsQ1Fh0E=)
8: VlCsH-gKeuLV89RCvfubppUzoBM.roa (hash: E6tZ0jd2kOODThTzIfCZg56DVUHPrBwKWicp2pqqUq8=)
9: WLquCazhAB0ScMP5a1mkOMpQjSk.roa (hash: X6EOl+E5HOgYEVAmBJUO3eMgT+pMlGAkOYSNqnB4rac=)
10: Z7cr1HbCrsDtXUyxT8SJLiqzP6o.roa (hash: xU544IyvXcLXM7e3JvHPAxxk8EzCmMrxrlsPcRWgF9s=)
11: _Sp9nWnMGENvs_5RlKIg522yEo0.roa (hash: 5BiB2YKH8y+FxStt90RRFoc5lwCZkm5vmcOChmEykmI=)
12: gvMvxN1JHVPjgshkuwfHJsKx4dU.roa (hash: VUg2txUUu1/KKURpEb7Xa9x6WRrXiOxip3ohqdUTZeY=)
13: uGLn1rNehfP8gUHfuPWItHTs-Q4.roa (hash: rbb+/QdbyMdZWalyD4M+Cib5fxLsrq9/EvfwTaumIsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:78:aa:5d:3d:58:c2:d3:82:e5:57:1a:e1:2d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: May 12 20:01:12 2026 GMT
Not After : May 13 20:01:12 2026 GMT
Subject: CN=98022f0e9cc21c0803aaf249b02e97cf6862de1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:f9:47:4f:30:00:df:d3:27:c3:e1:1d:43:
c8:f5:fd:18:92:03:47:75:34:80:e8:95:33:cd:14:
5d:0b:d7:3f:43:a4:3d:59:1a:5b:c2:2c:0b:cd:2a:
a2:2d:11:97:43:c0:c2:cf:2e:e4:26:27:e8:1a:67:
5e:ca:7f:80:dc:12:fa:45:8a:9e:b3:96:e4:75:33:
b0:c6:f5:0a:cb:1e:c0:73:a8:33:de:8e:25:8d:d8:
a8:2a:64:e4:6f:f9:85:61:e7:b7:ba:b0:f5:d7:1b:
16:67:8e:f6:81:67:6b:a5:44:ab:5c:c3:92:0e:ab:
7b:d0:ab:96:b6:c0:3b:3b:14:85:85:8c:d0:aa:7e:
4e:78:cf:a9:e8:a2:e2:8c:e5:56:fd:16:95:e4:98:
d8:33:40:5e:55:55:9b:05:4e:37:43:23:42:a0:bb:
f6:e2:36:d3:6b:95:b8:f5:94:64:dc:22:a7:47:da:
dd:ea:38:9e:7f:3a:75:e9:8f:d4:d0:ba:20:0f:6f:
92:ba:52:aa:ef:d0:97:68:ae:5c:dd:4f:71:da:99:
ce:fe:f1:83:e0:6c:f4:66:d4:c4:e1:bc:b2:d3:19:
52:a3:ad:40:a0:14:1b:63:18:d6:53:e6:71:ac:37:
42:63:91:67:28:77:c4:57:aa:d0:e2:f7:d2:0d:3b:
b7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:02:2F:0E:9C:C2:1C:08:03:AA:F2:49:B0:2E:97:CF:68:62:DE:1E
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:53:1a:63:3f:40:bc:be:2a:06:de:95:32:8e:8b:2e:3f:4c:
67:d9:de:a7:cd:3e:97:9a:89:36:43:af:53:87:87:fd:ac:c9:
f3:75:8a:dd:a3:15:0b:9f:d2:fe:9e:09:db:64:53:cb:b1:61:
a1:00:0f:a0:2b:80:97:17:51:89:89:64:86:3f:46:c1:7a:78:
4e:1d:c7:c3:c0:2f:80:28:13:c4:cc:6b:68:f8:85:83:56:ce:
c9:11:60:57:58:28:2f:e2:9f:5e:06:a1:d2:b3:b2:c7:42:ef:
03:48:a2:54:05:44:33:96:21:2a:c1:38:f0:cb:ea:95:0d:59:
30:bc:5d:d1:d1:1b:c7:7d:d5:ea:8f:a4:af:3c:2b:67:b2:12:
73:b1:6c:b2:61:a2:34:4e:1a:56:2e:df:e6:b5:33:80:c6:2c:
46:52:42:55:2e:3d:6d:c2:ac:e7:5f:92:96:ff:8d:1a:5e:19:
7d:33:27:51:c6:0e:71:58:28:49:9f:ec:00:ba:4c:e9:d9:70:
16:33:a8:af:5c:31:3d:dd:99:6d:79:d4:82:f7:5a:74:4f:d3:
c0:6b:8f:b9:ce:e2:28:8f:c4:13:37:46:86:5c:e5:87:58:68:
57:10:8f:18:98:c3:fb:70:ec:55:12:d8:25:3f:1f:8a:05:4e:
91:e4:b5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:35 2026 by rpki-client