
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json)
Hash identifier: EXEYgzOSPdI0lQzedUDUhzG2q9Y9fr6v/KbNb9ezpwE=
Subject key identifier: CE:18:8E:33:A9:98:F1:B1:28:4F:93:7B:01:4B:64:27:91:B2:D0:9F
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 019EBDA2C08F0B35F0ACA2510A04E89586DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
Manifest number: 196E
Signing time: Fri 12 Jun 2026 21:00:20 +0000
Manifest this update: Fri 12 Jun 2026 21:00:20 +0000
Manifest next update: Sat 13 Jun 2026 21:00:20 +0000
Files and hashes: 1: 8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa (hash: kjvVcc0xOxJUg+x1ocm3gLplTcfZBpQ+nllVK3oSP4I=)
2: BYRF65R_gvTrOamV1sFiMyQQwwo.roa (hash: UcJdHpYQj1TR2O2eeL78WCxx+T3hnx4QNGLSHOCWD40=)
3: Clokdo8iEnkyRg1-72rcFdu0uTM.roa (hash: qI/NxfPHzKCTkxa3q3ZgfCGrWFBeBUVuUQo7H3Os6L4=)
4: FQSV18p_T_droUZh08zoIA9Ax8A.roa (hash: znhD3qntwxP0GJzV41Y9fLTZXvTyllhrzmb59F4/qY4=)
5: IULcSReBl6BR3I_U3liy7HZAnac.roa (hash: 8rcQZaYhRzic9A6LKK6K6/YTQNKz/3wSmuzt2vfN2vM=)
6: WQ40HwqNRKlQ2HQVL_yje1GhYzc.roa (hash: trnRLeQIkkiLw857V7VhCIi+fD4BZsqXF3LsWGBOzyc=)
7: X5-PcFCXcBmeXFytRndx1GWZR6M.roa (hash: CusHkyVTE5E1hf9Dcr6iJxa9rL7UUSerxewweRWup5Q=)
8: cpXyEOPsQYnhoiU9YXgEHRotygE.roa (hash: 1cwR9tQfEOIHfGITqs8rBDCiCASn32+xpW4m0FX9NNo=)
9: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: gOyD0eXS/cncQmZxb5ujj2yhXTsF40WGIpIdoHFu7UU=)
10: ht0ZHZI605xUDKgSuTW22dQeuGI.roa (hash: 4Wq4/BC9bk0nDo/1dAW7K8pSTWikWYSsafNCxLUrqSo=)
11: xGGCf6Hil4Mo0C8TJDJWoZKOtQY.roa (hash: OSJabINQbvYIP/JxqMQjPh9E61hQf/o/MtFixqbU+Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a2:c0:8f:0b:35:f0:ac:a2:51:0a:04:e8:95:86:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Jun 12 21:00:20 2026 GMT
Not After : Jun 13 21:00:20 2026 GMT
Subject: CN=ce188e33a998f1b1284f937b014b642791b2d09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:4e:f2:cc:06:1c:39:20:2a:6e:64:2e:cc:
26:80:7a:07:07:1d:7d:52:66:ca:25:ba:b0:d0:47:
10:9a:48:23:e7:b4:bd:6e:74:7c:ac:d2:77:d2:81:
46:74:a4:0e:14:63:26:c8:84:85:75:92:6b:b8:82:
b9:1b:f9:b0:a3:eb:00:5b:0e:44:12:6b:39:43:06:
0b:08:4e:8d:33:e7:ed:d3:ed:fa:8c:2d:7f:0d:11:
02:89:5a:0d:8d:10:c7:a9:50:62:47:4d:91:fc:2f:
23:26:33:cd:34:d0:d1:ea:3e:a9:3c:79:5e:87:3a:
73:44:54:02:d3:3e:50:3d:6d:3e:a6:75:bb:ef:09:
76:a5:8a:d2:f3:80:3d:7d:ee:b1:6d:e0:9a:9b:bb:
a0:e5:0c:f3:85:03:be:d7:bd:65:0e:d0:5c:21:85:
5e:47:94:8b:7b:2f:eb:a8:5e:f3:85:3e:99:fc:30:
cf:d7:04:19:bc:45:ec:2e:6d:a9:d5:4a:ca:af:8d:
b1:18:69:ac:50:1f:de:ad:40:b2:3e:a5:29:2e:f3:
97:79:ef:b5:16:97:f0:ab:41:8b:cf:60:ea:77:b3:
32:2f:06:71:55:4e:46:1f:37:0f:96:7a:1c:06:de:
82:ca:69:de:e7:3b:d3:60:05:25:94:c6:c2:15:84:
33:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:18:8E:33:A9:98:F1:B1:28:4F:93:7B:01:4B:64:27:91:B2:D0:9F
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a5:4b:cd:aa:9a:70:2c:f8:2a:e3:3a:a4:f6:37:13:3b:7c:
51:40:8a:ba:eb:34:3a:03:92:ac:d8:52:0a:13:76:6c:23:8b:
8f:ce:ed:4b:6c:5e:ef:12:eb:83:b5:5c:52:42:ab:4f:fa:4c:
63:44:2a:e7:20:8b:95:d0:a0:82:2a:e8:cc:18:5c:5c:11:e8:
22:5e:9a:c8:a8:28:cb:f1:9d:34:ac:1c:a4:91:95:46:43:76:
9d:89:cb:80:fe:a2:32:0c:31:db:05:8f:d7:36:b5:91:88:9e:
a4:81:5c:87:b6:83:c5:d6:b7:31:d1:b4:4d:54:8a:84:e9:bb:
ee:cf:20:c2:21:c1:be:21:33:64:02:fa:9b:58:79:26:e7:07:
06:a7:b2:91:22:54:38:c5:71:09:9b:a6:4b:78:ef:a0:5d:12:
ea:77:ad:8c:81:60:d5:76:46:fd:3e:68:43:91:e1:3c:cb:3f:
8d:9a:87:4b:67:b2:db:a6:a0:d8:5f:78:b2:0f:28:ce:55:3e:
ef:e5:23:67:12:58:eb:61:ef:e8:42:12:61:c3:52:83:2d:91:
77:dc:79:df:97:fa:6d:43:03:07:5d:bd:3b:80:35:97:f7:bb:
b5:86:1a:ab:cc:ef:ba:56:d1:a8:99:df:69:37:42:17:34:d8:
bf:4a:99:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:11:48 2026 by rpki-client