
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier: kolMXiEkcpW5LuXypDdpr4BpxrtSy0xoizrSuzkvHiM=
Subject key identifier: D9:2C:F0:CD:D7:26:BD:B5:FB:4C:1E:9A:FD:9C:A3:08:1B:C3:A6:A7
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019EBEB627CC053CABC5885B87033C0F18D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number: 1974
Signing time: Sat 13 Jun 2026 02:01:09 +0000
Manifest this update: Sat 13 Jun 2026 02:01:09 +0000
Manifest next update: Sun 14 Jun 2026 02:01:09 +0000
Files and hashes: 1: 2VV3UfnItu_52uvF-k4DMpk1zjA.roa (hash: yurroUcvCQ0iRkkkr4yuxcK5LcAIk00+8chFnaavckE=)
2: 9hQpwIm1DZAst51hiEl_2tmCsXI.roa (hash: +NIpZnYNyfdjDsWB36dEl0YRtLioEvnM5GHzLPvZkhI=)
3: CEkYTmNqh4ud0nioNMk1K4djUfo.roa (hash: bhH9nZDHYzzeKrmVjURmPT3vNUIoH+wcuXxEhHTEVU8=)
4: HhO3fYlasNlXuWCWma8olPA14I8.roa (hash: an4Zb60vA9s3r5vXjNARMkYhW6HY9Hr3vQtUZ9SJwt4=)
5: KJmZuOF3Vv9jk_kFVP7YDH4cHgI.roa (hash: AtauxquVGMfNWT+OwoqixJIcGDXl6Ybqcwqx4c3ybJQ=)
6: Lm1nnFYkUsiu098gCvYjKS5-l4g.roa (hash: 1RaZfLGyq0c5ZD0BFswNZ5s2IFMTrcMOt76tyg+sqUg=)
7: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: hMUNJ4v/NAzFS4quZj6wW9Sg8CIdY+FSxyvZCEZENjc=)
8: SELAkj7y_jr_HiZRyQnazDtoXIs.roa (hash: YIble+z1sK0lKNMgOA3cU9xF8L12qHo0kNEA6b7HNQc=)
9: Th2adTOkopjhlJ25wcwyktd57wk.roa (hash: GpWnYTzTf7hBP6TDOkmn8+2X3RqmvubL/IyFk+5BLKw=)
10: YaZXtt4CBX_dPogFy216OZ32jZ8.roa (hash: MMlcUYaXZ5PcPwOs7IfmUuTH4RAjSxkjD0El5fES9Mc=)
11: lGPXWQo_7ubaGtUyGMqkGbwI4_M.roa (hash: YRpw+FIVlTh7o6DIYneOFKU0uNqBsWrzdPPNLu7NTFI=)
12: yNufAMlvFzr-y3RpF4kWqix80FU.roa (hash: ItOzxiAoZvT23VSZbnaQrDyl7pYFaBGpsulhtwB6Wpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b6:27:cc:05:3c:ab:c5:88:5b:87:03:3c:0f:18:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Jun 13 02:01:09 2026 GMT
Not After : Jun 14 02:01:09 2026 GMT
Subject: CN=d92cf0cdd726bdb5fb4c1e9afd9ca3081bc3a6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:0b:43:bf:10:87:0c:52:c7:86:f1:b2:fc:
b8:e0:3a:87:52:3d:9d:3c:6a:a8:d0:1d:51:60:45:
ca:94:be:68:a6:78:04:80:95:57:76:8b:64:cf:99:
55:e9:45:f9:6b:f7:90:94:76:14:f8:58:27:bb:6e:
d3:31:89:45:5c:f4:45:c9:1f:0b:1a:e0:8e:0b:2a:
c4:38:e9:6b:dc:7b:74:89:22:ca:45:d4:3b:c7:b6:
47:21:fd:d9:7a:9c:77:63:54:54:ca:44:70:41:92:
c6:92:1b:4c:68:07:02:16:ac:bb:9e:6d:23:6d:6b:
be:3d:fc:a7:9d:a9:f6:d2:fb:58:e9:09:db:50:e9:
09:09:16:18:d6:4a:27:c1:a0:47:3f:a9:ed:44:96:
94:9a:c7:ee:1c:32:e9:55:22:03:0b:4b:f6:ef:dc:
37:9a:56:7d:22:bf:8d:c9:8e:fb:c6:18:1c:5e:a3:
69:73:95:4c:86:43:da:9d:70:42:63:eb:dc:fa:81:
83:5a:c3:14:8f:1a:58:a4:b5:91:44:91:f5:26:e5:
43:95:c3:94:52:fe:39:bf:21:f3:83:53:40:32:6d:
b9:a5:ac:3b:65:db:f9:ad:ee:ed:2f:a8:c9:77:3f:
5c:7d:c7:1c:f5:2e:9b:9f:81:87:58:6f:35:d5:5c:
55:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2C:F0:CD:D7:26:BD:B5:FB:4C:1E:9A:FD:9C:A3:08:1B:C3:A6:A7
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:43:68:f0:d4:22:2c:15:17:c9:22:9e:0a:f0:db:b7:16:32:
c1:72:a1:fb:c7:09:d3:e7:4a:1d:8a:e7:08:ab:ae:0b:ef:cb:
41:23:19:95:92:a5:c7:51:d1:5f:2a:09:8b:cd:8f:42:f4:24:
6e:67:0e:f2:28:e0:92:2d:83:42:f0:69:9c:75:41:9d:74:be:
d9:5e:51:db:0f:b3:db:47:d5:66:9f:51:87:b6:89:2c:71:f0:
4a:e6:3b:6e:89:3f:9d:8c:94:3e:80:f2:68:21:19:4e:22:a1:
ed:fd:da:90:66:95:d8:d4:b7:76:94:89:66:b5:7c:4c:73:af:
bb:df:d8:8a:7c:a8:8e:3b:16:53:87:f0:7d:33:6c:b3:30:e8:
95:6a:7f:0e:9b:8d:7d:ee:8b:5e:cb:e7:2d:5e:31:94:a8:fc:
e5:ab:5f:12:44:01:0f:65:f9:47:77:27:01:c4:e3:c3:57:ec:
c3:07:02:17:6b:6a:20:dd:c5:ec:57:46:bd:9e:9b:0b:74:2b:
35:d4:63:25:75:f0:a1:6e:af:9e:ea:67:e2:d5:3b:7e:dd:36:
de:a3:e2:17:6d:e9:07:3a:8c:81:e4:06:f5:b3:14:7b:88:85:
69:7e:2a:ec:68:91:cc:bd:9b:2e:f7:49:b3:03:4b:9b:d3:15:
bd:58:6b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:16:25 2026 by rpki-client