
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
File: C047O4QkIliGMULtOhl5LZfLvHQ.mft (raw, json)
Hash identifier: sSncKV50NTvOOvL8VhkBSWON9q72eGvo0B4Ia1sTjG0=
Subject key identifier: 62:0C:3E:25:8E:32:DC:16:8E:CD:E8:F3:FC:70:89:38:DB:1E:C4:7E
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019FA94145201B8C8B15F08AE1B3406DCC96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
Manifest number: 073F
Signing time: Tue 28 Jul 2026 15:04:14 +0000
Manifest this update: Tue 28 Jul 2026 15:04:14 +0000
Manifest next update: Wed 29 Jul 2026 15:04:14 +0000
Files and hashes: 1: 0OpHBjMjVbA4mZB-uVin8-sMqm8.roa (hash: dlPHcIvBlPs7pHaxzesxD3zEaITEFobfNEN1Krtg6o8=)
2: 0n3k1plZ7gspLcfGB77auONj9NQ.roa (hash: GZay3LMOHeft1uDyAbnIiPZLbpCesTcRpivEg0C5JRc=)
3: 0rhF20B9J0l57DDXD5PI3Mlgck4.roa (hash: IsJTlAtlEK1wuKb/L+IEKig4AE4TBarY7Xe4bFwDMpI=)
4: 0ujXrGQTao7zE0UXYj0QEZetn9M.roa (hash: SxU2SJlRSmNPPjg7I0n+fsfsrGwbPEb2o3ed/Qx4SL0=)
5: 1-iXfg-U8SylhrLc2ZgN-IWOSj_I.roa (hash: z403kyA755x4jzlOpyXfkDsTCsWGb4c36bDKZpoexk8=)
6: 1JWLzJvmDfXfFTlqllO6oWCfebE.roa (hash: 5GIZ6J8Mx1dbqGixM8LMDwre3droz9ECoiRqY7plEb0=)
7: 4YZpEFUeoDRYP1bzx_2d2Anmo8E.roa (hash: G+qNTCkOeVDqmWz8ppqH4R3u6xjW3i07E2k7e5pXfLo=)
8: 5YruXy8dr8Jzmk4o8uUkR0LyMj0.roa (hash: EFf8O91ALZ5Kjye0uLijwsnibY6fc6l5dQPgTY8e94Y=)
9: 7M34N_8c18kwYN5DXzfuwEhrmZA.roa (hash: ldXuTTIrM9/cmADJD+iI7DaLo5yereXOVCE9PkpSmcA=)
10: 9FHZxYEYO2T03vdrk0Gm6lLRVNI.roa (hash: BnAcFaoVjjUdhkSHx2DYwTMQ4jv8ptKkNzwfA/tYvto=)
11: 9iCGXGMlG9blrWg1oCgEyBnOWDE.roa (hash: jitXayUeLYoVIziGdLkVAJnm4bC+Qige+N+C29Ex3+E=)
12: C047O4QkIliGMULtOhl5LZfLvHQ.crl (hash: hbx1HwoQZ6EF6PODsMuDVc430OWdc0/dvvFWLR5B5pw=)
13: DNierERMt7dmzNBZdZRnmSzRRJo.roa (hash: M00aB5v27f9BexRM0aK/KhwxJxmLtuu8O9D1e4YzCKA=)
14: EqprGk5kowrimby1Je14qsse7Lo.roa (hash: LFHwUVenT9McibVbW2ZQmoL89oEmwzTC9qG4B4kc9jc=)
15: F4hF9CP1SBRuff5KIXPB_fiIicU.roa (hash: H951/GRArRlrpHlbN+ZkkGfHvxDoHtPJ8AxNrjC2rDk=)
16: G3HN66IsyUqcyb4IdBzNqnOqqc0.roa (hash: sDJ2LPZQc8/0xG/uRBZ6QNwDRUd4YGJewkn7EWmexdg=)
17: H-VLcLjySEvCPdXFtIamTTKKAmY.roa (hash: Pu4WAc0AHR3VQp7EwlL95Ks6Sl9Ot8C0yUhL/DK+kcs=)
18: M-2rME5iw6DM-f47-QFFb7VzGFU.roa (hash: vtu0N2tgrIN8s3d7nrEfJQ8SnAhHAVxXwjju8rnYHgE=)
19: MWV90LWxUa-WUsz9LX9npKKVr3c.roa (hash: VJ3UQ6OcyZGRtcoJAmyUvcMKs1qQ6scCd0up5rRWI+s=)
20: N1PnU8iPr9EZ13dG8X64cG4ulKU.roa (hash: WHTt+fy/y2G++OYg+GB5IyURYY6HPSdNxpGg5oSsuIE=)
21: NUC_LFMe2cNtzU5aCrIgV-H-cMA.roa (hash: NpATbiFrt9IYp6v1R73idi7OcNugJKN3KPoGaMp8IYk=)
22: QeQH7ttGXunJxWM0h0G7aKwBYQg.roa (hash: IwnRt4W7ZPAUMI6e1S/3zzaB/RIQv7f2/YniSFDSdQQ=)
23: QrZBpVrINYvtt8eQ3BUierAVaEo.roa (hash: otF3M+RO1u8J3AFXZCe+jAflY8Wg53WcaWXyGwSEsJ4=)
24: S5LS_bpjTSbmRnive3Zl8hzTJg0.roa (hash: mvwM6Y3AjgcGvJLU07xuMwMQhEsH15lCs7wn853KSMs=)
25: T9HYPrCqI1Lwx1ICx4gg3y9EaPs.roa (hash: 8WBx6rryQFW8qB2gn0UcoHoZSKFuIQe/bNKvBOdNkz0=)
26: TskIBboLcFBuqPn_MOgE03hfzQA.roa (hash: mdOwXyGLiZ3kiLeepuX9bG0ElkLvweofxQqMwNHkNZM=)
27: TxA7LZAEQ_1O1wo4B0jrXnmrDhw.roa (hash: 5o3TCb2lIaRZg6xjEwTN8/Pb07E53fm4tlVwapwpcIc=)
28: U_0qeEP3Idv12PhOFh75-9eeGC0.roa (hash: ZpLMeKbCTbA3ZzJdV64fd3QZKSQkrt0U+5GkY5iWMQc=)
29: Wbq7Ok0yF85jLwjgt89q4ddf2aQ.roa (hash: GTUajXsE/JkQFkUisKJPXVFO/HOVdC4Jka6OQslN+MA=)
30: ZfsFxYrUt21DSR4r5HuMpJmoXbI.roa (hash: q7GFEFXDG3k6T3jOP5LncfCKwdj4SRAZpz/JFt/eK2U=)
31: ZrBNPjEycZrANxNyVIzzzbkmbro.roa (hash: xRKEM4Adn5RZtYpllrg5Vg4AZHQgUo0g7tJdnV0uOgQ=)
32: ZyNRmD88Nvq7BJuggIWKGke30ng.roa (hash: DM6W+5bERZP4hMVTIGmSMujiDmFBq+p6+S13VzA8OAo=)
33: _eCGeJZ9ztcP-js9iVfWwYNorMo.roa (hash: FYcuEdqIhJg4+sQujNMQIp6qd+suyEBIAnKLihcHSjo=)
34: _ryzMmjmSU7ZGAZCZXgl3zhi790.roa (hash: bcxS6uMI7fATL0M6h1j5zg3SrS8sl6NPvR5jNoM7/MA=)
35: aVYPw3w_haLDbn2L0VxoRpLVBgE.roa (hash: EA7WyFcduaDlrxiqAgb7BYQqnFnhXAXXbBCDWLRubeU=)
36: c--NfYyQ6E-hR59TJgivWxwrXVM.roa (hash: tL2NGDcvc+5rAS2b+OMbEZsDoupyJSLpPH625LDD0s8=)
37: d4bPDy6gX7ZhycjJ-oatXsJg1gI.roa (hash: +X1Zf7QDOV9QkmAjgROJXnd2JUd3+Ot/nBrbiw8iIAs=)
38: dAQ6Yalce-mSw3JzJGnHTG3anHQ.roa (hash: 2mIrdQ1ciiXVimVbz20GsghWRPI8l/oYrrPopxaFDQg=)
39: f2WIxHyieC-WDvm2YMWBAzMy0VQ.roa (hash: eEdlF03+KQSxf2xdCUsV69cYsUwb0W0kD/xuMuJtIeo=)
40: fnyKv9Z6W1X3B0Qgpuv0IqS_trI.roa (hash: oMGn/oJi6W+0WxTmW5GgGVa4HKOUpRDhfDtwM04eG0U=)
41: gL7kcy0CGpQ892sl0wMmU8AaiWw.roa (hash: WpJA+cPpaY+XCnbmHJGOXcvK6RUT0A/opePrapUqD8o=)
42: ggAlU2FvvMVt8QnyY4zRaT2PLhk.roa (hash: SC4t7+i4rHmGw8cE2pQbNtpAxChfBbrVKnQs9mBdyuU=)
43: hIhlsApAJdLLJuYqpM18UC8VDU8.roa (hash: w0KEsHHYOpSFRUO7iJHRkDSVLL6XrIJc5yAOLwz3W4E=)
44: jnA7FyFn0Bwnz1Mt9Wtgl10J7xg.roa (hash: BN2Z2i5sRIOUBHERNAoHq5gzh9ePkzqHgCOLUwXF9G8=)
45: knNwFqOSUSmwnzIGTZTBkXny7vM.roa (hash: Xuq/XGETEu+nAPlO71gTOdaRVSzyfoQNkrNuyE5V+lc=)
46: lhF0BV42_rqUWKbUThrMjDtWFzw.roa (hash: F24HaqHKhEIaMEPCdV36gs8c832UGlYXBcV15EJRdTA=)
47: mKVqfFr1Lo3_ctHzN_5BMHfev_Y.roa (hash: obxPgdYmhX/WzBvDrBWc/Zbmuh6Mlkpm2qXHG0RhKJE=)
48: mXL232jaE8hHl94HpGjqNMFjV6Q.roa (hash: Yu7AZcfQo5q0cdm8Mi2QwZnGcNNBc5O+ChKe97tJRHQ=)
49: n1rxwfyEu4ovtxs-PIPRbHD7WkE.roa (hash: I78sxSB0+1+LczQU4FM6Dhvmm31U8fYmSaTLfz+uB/Q=)
50: np7U-XpqEBEPoDvP-EMc8cL78JE.roa (hash: Eqer23B+84CL09GgCb1Kx+yFS1YQA/RSQksqG2+POoI=)
51: nu5C6TimIZf86hT6yeDzyfoKTQE.roa (hash: t+8MjD4d9sOapvEr7dX9OMRelbguagmpj3s0OAMNtXU=)
52: nyzxojqdr7GadWVNqp3JGjL6kyU.roa (hash: q5dWFszXIabWJc1BgCPYys8QljRHfta5E7euZKd5518=)
53: odIpENbkuAYUgSCFOb9X8keQCpI.roa (hash: n4YwE+c8Tv3wB760XLNIaYqSgw2aSbzr0UacMFL4Hr4=)
54: pDTvYNMLW2mttoxZkyBNnO1v0uk.roa (hash: cCxMiWyQEWiLZIRSa1CzYY6Z/AYwvRFdCM0FR4Q5K7I=)
55: pk1n32_6wDCth_KFQiNLI04TQeQ.roa (hash: UrkjSU2AnOmSwgJlZMHSDfm+daaFnMquUxnVyiBeYYs=)
56: prgj1oXvwWC0sM7Ft5oF9Cxe5KY.roa (hash: ioJewMTD2dS5oVrlrAMzHn6XNAAhfHw8VN2sudmlEoI=)
57: qdDhHST0POO_cx6hXWpCAo-bVbI.roa (hash: pWkIB8+c5hHuE4tcLzjiRurvj6BTxpdhOuvyX/TPK8E=)
58: quaP5HcdcMDvclPP159XEPozhYk.roa (hash: uBdRUfud/XYG0gmnL4SwfKaNneaszJifuNJ05zUe0Gk=)
59: r389-bRwfoFv3ttONx48xMLoaP4.roa (hash: 6ncl/Ha3OCO5NlFbPQiKMRrxUuWAUkS775Z1nyXGIO4=)
60: rnJfzmu2BtJK8rFBdT4C9yEqtyo.roa (hash: wNc34qBoMabTzuzWprFygpK2qiPnecjEmaMUrlgukE0=)
61: xTZJJpGpeUxMY5LeQXBMUN19dnA.roa (hash: HbnsCO3ZsmJagmIfOuDUR7M7F04yDmonV5hrdy2TpFM=)
62: xi4femWG-ZQednAL8XECKU1EOyY.roa (hash: YmTOFUdhWsN6D+89NN76yfPzj2x9BdaiQ4JnW99NyVs=)
63: yv8FhbcnTRrN9TOc-2PsqWje6m8.roa (hash: P9uulFa6QaPUohj+iTguvv0i6CS/+WyKM74MIfRJ4RY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:41:45:20:1b:8c:8b:15:f0:8a:e1:b3:40:6d:cc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jul 28 15:04:14 2026 GMT
Not After : Jul 29 15:04:14 2026 GMT
Subject: CN=620c3e258e32dc168ecde8f3fc708938db1ec47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:00:74:d6:5c:91:a0:a3:f9:b4:ee:6f:10:
13:d8:34:77:d5:ef:6c:58:00:20:9a:63:9e:f7:84:
6e:e7:0e:a4:5a:6c:07:57:8c:0d:b7:57:b9:7c:49:
25:0b:17:dc:de:31:ae:14:58:90:1a:0f:59:fe:0f:
28:d5:62:f2:1b:77:04:18:07:58:17:82:0d:06:e8:
f1:4f:08:2d:10:ff:e1:ea:23:d2:14:f2:b6:9b:d9:
bf:5f:18:ed:61:d3:82:5a:86:93:8f:2d:78:5a:d9:
ea:2d:d0:fc:3b:95:a6:f3:58:ac:f5:ee:c3:00:23:
10:14:4a:56:90:be:e2:71:37:2e:8b:c6:b1:c5:55:
0f:7e:7c:8c:a5:d8:e4:82:ee:74:c4:c0:b1:d1:e4:
7d:5e:94:b4:d5:96:0e:13:87:f4:26:6d:f6:b6:f1:
d9:53:e1:0a:f0:c9:bf:d5:e2:f5:e1:b9:c7:4d:6a:
e8:52:cf:a4:41:db:86:f5:30:9e:9f:5b:d5:bd:87:
af:60:3c:a0:8c:12:27:fa:ca:35:dc:b8:c7:32:05:
75:e2:d2:7e:e3:99:92:2e:5e:05:77:8b:6a:01:cc:
29:0d:6d:b3:c7:c4:5a:4b:e9:d7:63:b2:bd:73:02:
cd:7e:49:c9:3f:f4:a6:9b:01:9f:6e:59:f7:03:13:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0C:3E:25:8E:32:DC:16:8E:CD:E8:F3:FC:70:89:38:DB:1E:C4:7E
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:7e:e3:8f:a0:86:ff:73:6c:3c:6e:99:c0:44:a2:09:f4:55:
5a:51:88:b3:73:97:d4:38:5a:46:c1:3f:ff:d7:9d:c5:2e:46:
81:61:da:6f:44:c4:50:f2:5b:00:13:f1:dc:20:25:02:6c:cc:
6d:b4:86:28:79:55:04:eb:58:f0:70:07:05:9f:58:94:98:ca:
02:20:41:0a:e0:9a:b8:ab:bc:f0:0a:07:f3:2b:bb:fd:55:10:
c3:de:36:84:54:83:56:46:19:5b:09:a4:57:54:28:45:08:d1:
56:16:6f:dc:45:dd:aa:d0:ae:af:1a:c2:a2:b1:4c:ef:35:82:
a7:a0:da:ac:6d:72:72:9a:c0:8f:b2:88:ef:bf:50:95:5e:bb:
d3:b2:a3:82:56:d2:e5:54:aa:f6:be:2a:75:3f:cd:a3:66:a7:
56:74:b6:a4:35:67:82:fb:0a:d6:12:46:cc:06:f5:88:2d:14:
6b:e8:bc:d3:59:d6:ee:26:73:ac:ea:63:8f:77:2a:a1:59:6f:
ac:16:4d:c3:a0:95:2b:e1:c6:ab:88:f3:2c:7c:a3:7a:88:cb:
89:03:ea:47:f3:87:13:ee:d7:54:28:0e:d1:6e:b5:99:8c:02:
76:cd:b9:68:11:36:14:89:d8:47:d2:77:6e:ef:99:30:59:1f:
24:3c:87:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:18:39 2026 by rpki-client