
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
File: zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft (raw, json)
Hash identifier: 1WtFFE70mYxVm5rlFGGXnJXChbidaotfI3UkK+16Fu8=
Subject key identifier: 6B:AF:D7:76:C1:5A:A9:B3:A5:4E:BD:F6:A0:E7:74:9B:D9:A6:D3:61
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 019F927EE5372092341DD7CE9732EC818AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
Manifest number: 11BD
Signing time: Fri 24 Jul 2026 05:00:17 +0000
Manifest this update: Fri 24 Jul 2026 05:00:17 +0000
Manifest next update: Sat 25 Jul 2026 05:00:17 +0000
Files and hashes: 1: 1-cJPzLFnEqH5HBa7LXTLzTN8Sig.roa (hash: y2pMWhMaLZyGP/h+eP0yeYXn0/ZQODr617glRelxkng=)
2: 1-w_96dZZvAhqknsLDQxMYnFiHlY.roa (hash: Yvy1v6JVhNfglPJmSg7JFYYeASs2BwwOCl6D0ULH7XE=)
3: 5qt9lNybqUHZohfxSPz95g9mX7E.roa (hash: mVHv2PLsBDsXEMy4ovgXLDyhiJ+2KGTM6nPmA9c85LE=)
4: 70_l1y6U6sQdwIpOb6iklVy3oao.roa (hash: VpEU3IVoWQIPh97gn+id38/VbaiStJZ66MLtFsKLfsU=)
5: AEZof4s4jSU43Cjeiy5C6caRCeg.roa (hash: u3Tu4bTb99jlY+qChU7xb5zLmf+nryw4qR+okn3NkQU=)
6: BGMxTE0_-Ky6TibuPNRzmTxUL6k.roa (hash: a0OwK3rrYXMHfxjEnabs1KjSXWbcFZrLT7UxZW9tjc0=)
7: BKPl0VR7xYdXYKg2sB5jhzIUpPM.roa (hash: WLYjBTaaoRkUg9cIZWEhhWlOX7Jh/HdxdA+DXCeO3yM=)
8: CVjpP5fbG6FZ2VuiKyMRFNqdUK8.roa (hash: pUvsaqMuCpZ883OSrkl0sgOmVBTesmRkdym3KHIgbJc=)
9: GGfTyBNbI489PdjBnrpK0_0Pbtw.roa (hash: H+6wl5gGeH6iVyXOVvQsj95iEngE2FRVQ1f4kfsJ1Sc=)
10: HrOHL7N5WVrxCxYAttZq-03pfHc.roa (hash: qifv399whUGIsH7h7aGdUtF3vmpZ1o8CfKVRy9gkfLQ=)
11: JGn2GKoXJ8jNO9rMaZb5j6MBYt8.roa (hash: YJCYbO1tbshnVmgvPqt65xZEpQvUa9LqSd0IYWT7qsg=)
12: KiGFzL7XSLHCsk5kOv5EU6GDjHs.roa (hash: E2MSykUDl/Q4sWoRqwyjpDX7oQ+5JC9Qa55nDLPQgKc=)
13: NAErYGyu2OxGuf_6AEnvFZF3m00.roa (hash: Efn4X5npgxeYg3CAnRT/UiNScy4w0Cb8p/IjBRVN00E=)
14: Q6jWWNwFSQEE3tRsGBlCg_ZVl20.roa (hash: FyqK9jZ27cGkvbDyCDe1OUlIh4FvaJyJ1LPI/ZyMQ0g=)
15: Rh1E5qxMlmiIy0iHzMFcbx-ILCY.roa (hash: l7nvXUR6ZjHVsyeZWx0Ki3Tb8P2diCAcOJlZGejmDxA=)
16: TPflC2tWkm5_6P9IemHAg3jDH38.roa (hash: 7haADyJs1k9uwE2EhKfl4+X3oqT2rg7BL60uh8bbzNo=)
17: XVq3IYAj2pjJVKsPJGpvrfgzYxs.roa (hash: 1m83ro/W3gU5CbeKTbsHPZcXEc5WYBDNa/RLiDPwPnI=)
18: Y7DNK9hcBBTE7Th1kYyVw3RPwWY.roa (hash: HI8YgFsMuVg4hk5qijfjNGh2VIu0QcRdphqK5LhPNyc=)
19: _JDLOHBdrBVnKNE-CkwafjX4Upw.roa (hash: 7xZENWzKb48fOsZF0FWLYlI8o3hnSoZOH464Nb3NFoo=)
20: aq4mHriPC_Od7XgUBZpEqq5gcHk.roa (hash: yiecnEtPgQHrRACDcmP4fFBJvqjTl0FnO0eslGPKhWc=)
21: cRhh2a8DyS-BnqcPTrEQH0ZbDoA.roa (hash: IqlFBWiZvX+DZXZZbfb7qN9FDJR9IKeDzLOuL+Y7oLQ=)
22: kopgSW14D0aMxVGgeQmEGmsYFAQ.roa (hash: emFzXwVeUl6yg/bnrgocFfxZY+cFQwEF3lD8I6fBmX0=)
23: ksVJIBjGvwL4s1PtRRQoRC2eUSM.roa (hash: Ga4kbKkw40NTNAmZazaZ3aVIVvGOSEfaNiqjZ2JqONY=)
24: m8rYr_2iytyxaBvpY5bmVT_GPA4.roa (hash: JdvL9p4h+mSTLc+2jMP4AS3ujI2r7wbx0jXR1EyHp+g=)
25: mJ0j47UwFivW9zAPZ7Wpb6242sQ.roa (hash: ovh6+isWS+HgWIGH47x4leRVJSZT91OgjJW9sbvcdqA=)
26: pJ62jL1_CaC6LVWNYtByFrcLuDM.roa (hash: ouNLsKMv0CYovkFAKO8v3kQl+SqC8Bd31AIWBDyAwC4=)
27: pfHQoQuY3aQ1KMskVy6elrET6o0.roa (hash: 2B0UR9R1NQKR59jfjcXzQuYHh64T7KqpxoLNPjc77ks=)
28: t9G_1LZtK2mabZqjl3XjkAvpMkQ.roa (hash: dvgQDwtsUk39Ao+BrG34yvxtiJYryUNCUxCkBcW8cSE=)
29: w1p9YqCZmBafcgTm9UvFxf_0dG0.roa (hash: FOuH5kfe8qsQZTv/hD7teSHzc0NJLVkSv0+KWq6KBBo=)
30: zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl (hash: MaOzp439HTZeXHxWyc1HaudtNq7rXS9EjHtg7rtKF4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:e5:37:20:92:34:1d:d7:ce:97:32:ec:81:8a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jul 24 05:00:17 2026 GMT
Not After : Jul 25 05:00:17 2026 GMT
Subject: CN=6bafd776c15aa9b3a54ebdf6a0e7749bd9a6d361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:b2:bb:16:64:04:7c:d1:98:e4:a1:af:ce:
26:06:01:6a:7f:76:da:12:7b:79:32:30:51:e5:d9:
1a:f1:92:4b:a9:47:7e:e5:12:9d:36:61:e3:7d:3b:
94:a0:e8:74:0c:83:0c:e5:d9:98:26:fe:ac:55:5d:
1f:d0:49:5e:8f:39:cc:dd:5b:fe:4a:b7:b4:15:ba:
fb:24:6a:31:19:b5:1c:e2:92:b8:5d:4a:d0:fa:c8:
9a:a0:7d:1e:76:9b:3b:ab:96:01:33:14:ea:ee:7e:
fa:0b:3c:9d:70:7c:f4:95:b5:db:c3:13:06:61:a1:
d6:3c:7c:b0:81:4d:71:82:72:37:b0:bd:ce:a0:f7:
3b:9b:3b:01:3e:7f:37:df:38:0f:73:33:46:75:4e:
9c:74:d9:71:db:df:ef:fe:8f:60:1c:d1:11:b9:0a:
eb:cf:76:3a:1a:d5:20:e9:99:f1:ec:53:4f:1b:14:
2a:98:c9:99:8d:b1:85:29:0d:b2:b9:17:af:4d:b9:
30:07:6e:34:4a:d5:13:f9:a4:c6:ad:a7:f1:a6:26:
36:8b:65:ec:90:4b:5b:95:18:a6:bc:6f:c3:94:77:
e7:ca:9a:1f:9a:06:d3:58:d0:9f:00:0f:96:ef:4b:
ef:02:0b:24:db:aa:2a:13:b8:2b:fa:dc:a3:2e:98:
ff:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AF:D7:76:C1:5A:A9:B3:A5:4E:BD:F6:A0:E7:74:9B:D9:A6:D3:61
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:88:fb:c1:0d:2a:1d:7f:ab:77:b8:ea:27:c5:3d:b3:28:3e:
4a:7e:45:a9:35:cf:44:94:41:66:05:16:d3:33:3c:d6:78:3c:
f7:d6:af:92:17:9e:b8:0a:d1:9b:73:83:70:fd:65:38:04:e3:
c8:8e:f6:1a:69:b0:22:39:d6:1f:9b:9a:8b:5d:d2:c7:44:f0:
7f:49:38:3e:d2:21:de:29:b6:d5:69:2c:b9:67:89:47:71:fe:
b6:57:1c:bc:9e:96:7a:42:3b:03:a4:16:46:f0:0f:8c:19:6e:
9c:d4:05:38:20:cc:10:cc:ec:3d:e8:4b:a4:e3:b8:de:d5:71:
7d:d3:81:bc:4c:a8:69:7b:f1:11:46:d9:af:ec:f1:97:b5:88:
5c:7d:15:1b:40:ad:e0:96:97:e8:c9:cb:6c:5e:2c:af:d2:cd:
d1:53:db:b1:4a:a8:01:59:2d:47:88:73:10:0d:eb:ea:a5:bf:
33:ef:50:19:05:56:0f:f7:e5:5a:e1:d8:d0:0f:3e:8f:21:cc:
76:27:ed:cf:42:7b:b6:79:04:66:77:58:f4:92:62:0c:c2:7e:
d9:09:9f:d3:97:bd:31:ab:0f:a3:9a:f8:31:de:1e:9d:69:4e:
e1:7d:f8:1f:d9:68:80:81:55:d9:58:a8:19:2a:d1:54:2a:a2:
7d:49:2f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:41:39 2026 by rpki-client