
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
File: 7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json)
Hash identifier: eL6aJ2MsRHHl9Oe8XQUWlVwMP4Reyja+vodO3spXP60=
Subject key identifier: 18:81:EC:8E:04:51:19:1F:40:79:F7:76:9A:B4:1E:26:CC:09:E9:E5
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 019EBF5A3830D632C6E418063EB53927CFAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
Manifest number: 0FC2
Signing time: Sat 13 Jun 2026 05:00:21 +0000
Manifest this update: Sat 13 Jun 2026 05:00:21 +0000
Manifest next update: Sun 14 Jun 2026 05:00:21 +0000
Files and hashes: 1: 112MUhV6Rq4vAZbzuW-obACCM54.roa (hash: bG/EpEeoydzJUldH4JoAmHs4InlJJW21+s36TR2C22g=)
2: 2wyh_QhMgMqC_O4n1IvcnhHRGBk.roa (hash: ao/nwpiJU1qsY5iD/g3xyfwFgyAPEV6fkSVForiTS1k=)
3: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: aVkkhwqoinSD1RLe4rnDdqW4NmO7HZqP4Py8Dmi2zqk=)
4: 9WKN0gCb48l5bHUNl8dV6tRmYSc.roa (hash: v965nXSnshTWQQghLNVOqzkDYtxXR/Xwp0hDztEcPr0=)
5: Cdey4x25Y71jAjsi-w5ror1Em9w.roa (hash: 9Nkc6pZ1LY8cZ4nIVazJu4RFkDfce5y0UNDPuC2XOUU=)
6: Fu5kT9TxojjMx5c9WVqjL4KHnHY.roa (hash: OkWCwFJEccvJXScWm+KM/QkYp8L4OehLKl/qIjl3hPk=)
7: LvnAY2pckzRLAzMxTjPE9zCN3Ag.roa (hash: woZLLhApCfVxkyZ50HpqXpM/zC7yGzb4mBQNzIbCauE=)
8: Q03PdSGrQJ1a3WGfZ-bc5I0qaws.roa (hash: 2OnqRPuaN0v+Zan9ND6ygbAA1lh/p4DcTNqdYBIoSGo=)
9: Q5C92tE2t37UtBMqw-zHumbPgxQ.roa (hash: tly3KYH+a59AiCAVIEHbNYFLpCPBaZXHr2/DBwumJlc=)
10: RUzsZjQOmWwABCIUkcshejkaol8.roa (hash: RBKNBE9V3LhFEz+JeieM4xs1FwZeU1f7a5C0ApeFYFE=)
11: U0sKMofxXdVOw-0XJTrnhs5_ivw.roa (hash: 2ArYsgltaFdadzwNfrDc7gLpkClQBPjzaHH3uLWf38s=)
12: WcBb746Ge3KAEF-yLyH5I6ZFE0E.roa (hash: QXm/UopRYCraXfnadtlxCqtDzUMyQNtipIGzmPAgbf4=)
13: XUImnZKdlu7MDc0FxppzhVw4AFU.roa (hash: owXiNqfnKaJDDUXdUHghHE0onKUOIoOQu55R09C97Zg=)
14: c-8fg39HEBoTazbtgLubPv-jdHk.roa (hash: JsFBjPvToocQ1g31FqB3aylJXDSNR8YaVIwtJ/bFd+o=)
15: dXpQm6W-fzeDoM6ANaDna4LeJJw.roa (hash: X+KL+RuBzuWO/Tf7EZrDXYxpoc28BH51yAUJezDMoh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:38:30:d6:32:c6:e4:18:06:3e:b5:39:27:cf:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jun 13 05:00:21 2026 GMT
Not After : Jun 14 05:00:21 2026 GMT
Subject: CN=1881ec8e0451191f4079f7769ab41e26cc09e9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:3c:ca:56:5e:bb:3d:f3:31:38:91:1d:32:
00:a6:a7:d8:78:7f:3c:7a:73:dc:31:28:c7:63:e4:
13:cb:89:a2:3f:40:8c:0b:ca:0d:2a:8e:be:79:63:
19:71:99:d7:c7:8c:7e:6a:0d:a6:d6:fd:09:62:14:
24:0e:da:17:76:8a:85:ac:3a:ce:ed:e4:82:fa:46:
61:df:29:b7:22:1b:f7:6d:5a:9d:f2:8c:4d:a6:d5:
65:4b:4a:f9:13:50:53:9d:cc:2b:07:6e:13:53:31:
b3:e0:e6:b5:57:f1:dc:10:6c:95:d0:54:84:8e:ca:
69:53:a1:94:8a:10:a5:f6:4e:c1:62:df:66:ee:6b:
1f:f8:cf:57:ac:b7:f7:78:76:bc:ea:53:39:7c:64:
2c:e6:2c:da:dd:5b:8e:d9:0a:fb:7e:58:bc:6a:09:
02:c6:be:60:49:c1:0a:65:6a:e2:fe:9f:8a:f6:0f:
f4:95:3d:74:4c:fe:08:3a:6a:2a:f7:13:0a:ff:b9:
9d:78:30:8e:ff:c8:a2:b3:c4:6a:0d:8e:0c:b8:63:
c7:24:a6:d8:25:65:29:20:7c:bb:12:28:28:bf:0d:
de:8e:c9:83:ff:43:96:97:c5:4d:3e:e7:77:59:95:
b6:05:dd:2b:81:e4:2a:14:f5:92:1f:a3:f0:16:8f:
a3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:81:EC:8E:04:51:19:1F:40:79:F7:76:9A:B4:1E:26:CC:09:E9:E5
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:bb:a7:bd:be:fa:25:32:8b:35:63:9a:1c:07:15:8b:19:cf:
62:86:d1:e1:72:7f:80:b1:f2:62:5f:8d:af:c2:bd:9a:96:04:
ae:5c:74:bb:b0:d1:0c:b0:cd:fc:34:2d:89:d5:1a:54:f0:3e:
45:8b:37:73:e7:de:95:80:c8:c1:49:55:59:12:52:02:e0:95:
f8:71:17:cd:db:5d:9e:ad:fb:e4:e0:cf:38:ee:a1:99:fd:c2:
f0:a4:bf:25:f4:54:34:73:3c:d1:cc:28:89:91:9e:8f:9d:22:
e0:2d:75:ca:7b:7f:79:0d:dc:6f:d5:62:28:98:bf:80:41:76:
ed:30:e0:7a:ac:7d:5d:38:38:63:39:9c:c9:fd:96:70:8c:04:
d9:ca:6e:75:8f:ed:55:19:9d:4a:20:76:0b:fd:e4:4b:42:0e:
a8:34:cb:36:11:41:0c:59:7b:c3:ee:6c:df:ea:d4:42:e3:7e:
eb:34:e4:3c:80:ec:13:68:6d:04:86:ad:ad:ce:30:ff:3d:81:
1f:ef:17:4d:9f:3f:cc:c1:cc:a3:bf:49:fe:6b:66:dd:c5:5c:
91:bd:12:8b:2f:1c:b7:bb:48:dc:14:18:86:6a:68:76:1c:c2:
b7:38:df:97:e2:8c:a8:dc:f6:e9:d1:1c:9c:54:d6:b2:5d:e8:
0e:7e:1d:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/Wjgw1jLG5BgGPrU5J8+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx
ZjZhZDEwHhcNMjYwNjEzMDUwMDIxWhcNMjYwNjE0MDUwMDIxWjAzMTEwLwYDVQQD
EygxODgxZWM4ZTA0NTExOTFmNDA3OWY3NzY5YWI0MWUyNmNjMDllOWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCU8ylZeuz3zMTiRHTIApqfYeH88
enPcMSjHY+QTy4miP0CMC8oNKo6+eWMZcZnXx4x+ag2m1v0JYhQkDtoXdoqFrDrO
7eSC+kZh3ym3Ihv3bVqd8oxNptVlS0r5E1BTncwrB24TUzGz4Oa1V/HcEGyV0FSE
jsppU6GUihCl9k7BYt9m7msf+M9XrLf3eHa86lM5fGQs5iza3VuO2Qr7fli8agkC
xr5gScEKZWri/p+K9g/0lT10TP4IOmoq9xMK/7mdeDCO/8iis8RqDY4MuGPHJKbY
JWUpIHy7Eigovw3ejsmD/0OWl8VNPud3WZW2Bd0rgeQqFPWSH6PwFo+jfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiB7I4EURkfQHn3dpq0HibMCenlMB8GA1UdIwQY
MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt
NGIzYjFiNjNiNmFiLzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi
LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArLunvb76
JTKLNWOaHAcVixnPYobR4XJ/gLHyYl+Nr8K9mpYErlx0u7DRDLDN/DQtidUaVPA+
RYs3c+felYDIwUlVWRJSAuCV+HEXzdtdnq375ODPOO6hmf3C8KS/JfRUNHM80cwo
iZGej50i4C11ynt/eQ3cb9ViKJi/gEF27TDgeqx9XTg4Yzmcyf2WcIwE2cpudY/t
VRmdSiB2C/3kS0IOqDTLNhFBDFl7w+5s3+rUQuN+6zTkPIDsE2htBIatrc4w/z2B
H+8XTZ8/zMHMo79J/mtm3cVckb0Siy8ct7tI3BQYhmpodhzCtzjfl+KMqNz26dEc
nFTWsl3oDn4d8w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:23 2026 by rpki-client