
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json)
Hash identifier: BLYVkNAoQVuaDCXAkfbGhIgA2doJkUnuihKaSD3yfIo=
Subject key identifier: EB:4E:CF:99:A8:84:43:EB:05:80:8B:C8:D3:7C:77:2B:78:AA:5D:F8
Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0
Certificate serial: 019EBE7F8E8AD2932D221A9A8F919137765B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
Manifest number: 11C7
Signing time: Sat 13 Jun 2026 01:01:30 +0000
Manifest this update: Sat 13 Jun 2026 01:01:30 +0000
Manifest next update: Sun 14 Jun 2026 01:01:30 +0000
Files and hashes: 1: 4aHbMfy3j-ECkrD4rvedcCjTB_0.roa (hash: qusttE+9ZpOBhcPrh6x5LDaTogCO5iBos5RhS/oM6AY=)
2: 5-xa1DwYQklowUOFsT1S-uTdWNs.roa (hash: L6ahwy7v3F/eJH7YLdiIkbI0hjgLlbmnqluQBda3pbM=)
3: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: rMiMlm8kR8NWUjflgm3Kew9COoSXk4fQQUyiH1IxCkY=)
4: DqwgEpy8tzQ8MT3YIzSTmMnsaoU.roa (hash: F0Z+Aiea4uLu6qp3gJMuctXX0e3YeSp0/r7/SyVg7oU=)
5: ERka-Os6ObqqZqi9cGtA6y93DUc.roa (hash: xLtVOqUw1SdFOzEQIDV0mLPI1VOtVrObVSKBvt+3WeA=)
6: GLlV_QNfxAHgbPbOQuZSom8Go7k.roa (hash: 7Gk5aFbSltujIpc/l7EhPu0VuZTxlAcLmjwbJVWm0p8=)
7: Gi7sCCfKR95N2aHicd7FbOjBr8I.roa (hash: OQ/d+3fsf9yQoe//ZYqmXZhSoGbi8dYq3SEHzPc2Mfg=)
8: XhXwZGz_0ot-Yipy5gjWlGapqJg.roa (hash: osMFJv9ESYs8+a8oe5L8opFDI8cvKk+g8mqi6wPX570=)
9: c1WcScQ-iUvtqaFkrNNSIFe5J6Q.roa (hash: 9taVcBd6UWLT46HKsQQ8HZLq62dEzc2Av1/NrgPYxiw=)
10: t3UkDqm89BXYugxzek3H_T2xsnk.roa (hash: 0v05Mtv3fk+yrXhgZl5Oqsbm1YuaJuYan3rzgXnAwAA=)
11: vaGt6qiTwmKyEUcufJFu38Vn_PY.roa (hash: Pv4yo0vrEF77MupbDlB9r9HIwxhjZnbYRveAGoZFjW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:8e:8a:d2:93:2d:22:1a:9a:8f:91:91:37:76:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0
Validity
Not Before: Jun 13 01:01:30 2026 GMT
Not After : Jun 14 01:01:30 2026 GMT
Subject: CN=eb4ecf99a88443eb05808bc8d37c772b78aa5df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:db:91:06:da:ec:6d:e3:7f:a1:65:ab:32:
5f:96:00:5b:95:6b:60:d1:09:2d:21:f6:f5:15:cc:
e1:47:96:75:2e:35:bb:c2:44:3c:78:db:6b:5f:a2:
b2:ed:ee:d1:22:25:cc:4b:eb:ec:12:99:7e:6f:9d:
da:45:0e:76:17:f9:4b:d7:d9:e0:0f:e9:c7:6c:1b:
26:a9:a7:52:6f:23:56:ff:eb:47:8b:1f:e9:95:d9:
be:14:d2:54:57:45:7f:01:4a:bb:43:81:c8:54:d1:
a3:18:d0:ba:5c:52:bb:f1:68:a1:35:77:0a:4c:93:
27:61:31:d8:97:b3:98:f6:4b:70:32:58:86:60:bc:
0b:ba:3f:7b:37:9a:b1:61:d6:5b:77:38:ab:f8:f6:
f8:fe:01:af:ce:e3:77:f4:bf:39:00:10:ee:47:c4:
59:5a:a8:22:34:5c:3f:c0:85:16:ea:08:01:45:4f:
b7:b0:df:27:82:3d:4a:fd:74:77:91:a3:66:6c:a2:
9e:ff:2c:d7:c8:15:46:0c:54:c0:f2:70:30:89:f8:
18:8d:e2:b4:99:05:23:81:70:92:2d:8b:7a:d9:2e:
81:dd:07:07:eb:6e:27:72:f2:dc:20:f1:4f:85:cd:
20:b3:08:6f:42:57:8e:c8:79:e5:b4:2a:b4:4c:de:
01:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4E:CF:99:A8:84:43:EB:05:80:8B:C8:D3:7C:77:2B:78:AA:5D:F8
X509v3 Authority Key Identifier:
keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9b:0c:28:be:62:ab:6d:11:de:4f:89:a9:bd:b3:23:63:b0:
60:2b:52:55:4b:47:10:b9:11:61:5a:d4:4a:d8:30:cb:47:6c:
e6:ba:46:df:d1:3a:1a:24:92:2a:98:5f:c7:4e:df:93:ae:79:
1c:24:93:ec:81:b0:dc:d8:89:bc:69:ec:aa:3a:ae:fc:ce:7b:
e1:d2:a9:40:40:40:91:aa:8c:2b:c5:a7:87:43:f8:7d:12:23:
ce:96:77:62:de:ab:ca:57:51:8f:67:40:40:9a:68:6f:e3:d4:
f1:da:3d:51:89:6b:79:cd:f6:ff:7e:cb:d3:43:dd:5e:73:23:
22:ae:0e:fe:4c:d6:1b:41:18:50:ab:38:5c:f2:89:6b:cd:c1:
3a:3b:40:b2:d7:74:2a:84:c5:b2:99:5a:99:b7:aa:27:7f:a7:
cc:f4:2c:1e:b0:17:80:d9:57:4d:2b:77:a8:95:05:90:4d:c5:
44:cd:a9:51:10:82:b2:68:e6:43:3f:2b:31:e4:16:a0:a4:52:
cf:09:a1:50:aa:90:c6:96:8d:d4:ff:ca:75:42:bb:61:aa:fe:
ac:0d:4f:f6:a8:ce:b4:8f:f6:7c:da:db:41:f1:18:c0:84:07:
d3:1b:fb:78:9d:17:26:70:ec:b6:1a:f8:8d:96:f1:f8:b7:21:
d8:20:bf:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:06:22 2026 by rpki-client