
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json)
Hash identifier: lEll+5GoIOMtzYGdkxKFPJU9pmyGig6xlaExLfWqCag=
Subject key identifier: 75:59:EB:57:10:20:28:1F:BB:B7:FC:FD:3D:79:6D:66:BB:4B:1F:7E
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 019EBDDA624D61D57A7B5842FCB4ECF23359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
Manifest number: 165E
Signing time: Fri 12 Jun 2026 22:01:06 +0000
Manifest this update: Fri 12 Jun 2026 22:01:06 +0000
Manifest next update: Sat 13 Jun 2026 22:01:06 +0000
Files and hashes: 1: 1uEYEr4aUEIS5erchF-G3_love8.roa (hash: zNpv/vmV75AmB5KpVV8l8ngcfpgQVlAN2sGn4iX8/ng=)
2: 3w7QKsP-nBdjzBOchAjI61TTv2M.roa (hash: QyB/DzhD3cYZvTNAg8B4G4w4oEF1E2vw8LoHS76oVRY=)
3: 92brh40WW-h_KiNRuqIZRb5unjw.roa (hash: IJpD/Hxzhb2xZ5MqLyCbtsawZPipjgj8kAZiuASmDs4=)
4: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: Lln6b2wyyCu/cKq2hb0HvGVQkkN/19IFATZbS305wJI=)
5: E33BupXnwP12_IF4jZwLlg0xD4w.roa (hash: 0NACigb3EWqFP6STcn//yzpEwV+siLe8SJdsoWQ96Y8=)
6: GEIKFkgfp6_eIqRvCuYJD-vtDrg.roa (hash: lwzwGD8UECsEevl2wRnqOwDSfVvfj8CLyePijoTaj1Q=)
7: HW_hkEfvkCc_Nbd1XrvVgG6W_mc.roa (hash: hJtEY+ViaHHrE6ovlwWbn8ahLz2qGrhOtEFfqEUoIIE=)
8: I0x4Z-Xx3L5jydy9aoZ7XgF5QNg.roa (hash: JlSlaBzAXyXquY82elhNPJ3+qyBoK5BR21f4eeFhqKI=)
9: IPeiMehm6QECFC52RY0apIXHDNU.roa (hash: 8ANVC/sDEWhLrwoJ9ZsQK2bdvdAuXXAuDwW/JPfEUMw=)
10: OY7VggLlS6S8taEQZwxA_9MJ9Jc.roa (hash: hj2ioa7d+yEki0gbVFILdu22LUXQHhfHdLKTOV3RU+k=)
11: W-LFdXJpQLdmO9rIYC8JOFXBGas.roa (hash: iUdq2UMzKZOkLskYtT6LwMXoPeIpp0LviydmXs6dcHA=)
12: hkJU0HHWf1-4JqWwATl5ZFWfJyc.roa (hash: VDA82OVX/X2yLRwyOfMgqYUT2szuVZcwdV7SJXAxuuQ=)
13: lTN9WM_3kAIwHlpaUspavss4Il0.roa (hash: HHix3BfeZ1Pqtr5dBucc6Su9pPLjQX4ABrsZY3uNeNA=)
14: nM0fT2qGFIY-E7YXz-VIDNKzo6g.roa (hash: 6H3JuqjFe5vPc22lKrJFxNe7X2kqJ2+u4oq5uX5FAp4=)
15: ppxL-JyBnLIGugzsw08md5QRsxg.roa (hash: +phpwkg3kcNrCj/VJvMVw3i6In/xr7LehwojIFYPMKg=)
16: r3qIFL64zBjpZJnS493yx0oryZk.roa (hash: 8MocfFSSFr7GFC7FeOm+9FTF4c9hg7BslJ3kzykAfTs=)
17: tJlaTHgStBVLlJKHBUxS_V9A-YY.roa (hash: ezIOIeTnDODny04gsbWcse31DfWyx6mg8AHZtHJ4iMk=)
18: wyfjlnYky-rnBOXT5ZHjb0J-F9I.roa (hash: XfYB9CaI2N46qtcZ6v9uIjhl1/e0d3UrGQvPezeGBLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:62:4d:61:d5:7a:7b:58:42:fc:b4:ec:f2:33:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jun 12 22:01:06 2026 GMT
Not After : Jun 13 22:01:06 2026 GMT
Subject: CN=7559eb571020281fbbb7fcfd3d796d66bb4b1f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6c:39:12:96:b8:22:e5:9e:87:c3:de:41:70:
8a:0c:1f:d2:a9:08:36:ff:20:39:0c:ff:23:24:1a:
f3:88:4a:ac:41:34:b0:b7:64:9d:09:38:dd:f5:43:
08:64:1f:25:d2:c5:a8:65:29:35:31:d3:e6:ff:90:
c9:9b:d6:59:28:0f:11:22:b5:63:5d:44:74:9d:88:
05:e6:57:8b:09:c2:dd:11:82:7d:7e:4a:83:b5:41:
75:c4:a7:35:57:b5:6e:1b:41:d1:6d:11:1f:0e:2e:
65:b1:64:d7:48:c2:3f:cd:ab:bb:22:dd:20:3e:29:
2a:c1:c3:40:e0:84:b0:c6:db:6e:d1:4c:51:52:2d:
ec:ce:f4:fd:4e:dc:a4:b9:aa:b9:d3:09:d3:98:ba:
38:a0:29:a1:bc:42:38:9f:bf:b9:03:15:be:a3:dc:
fb:91:7d:94:2d:5c:8b:8f:54:70:3a:10:5e:17:ad:
2a:8e:86:fb:80:59:87:74:db:9a:ff:ee:bc:f4:ca:
03:a6:01:82:38:4d:66:62:49:5e:5a:3d:fb:cf:b5:
2d:59:e6:6e:df:d6:4a:ac:37:c6:cc:fe:99:c6:e2:
4d:b9:19:a7:b2:67:54:d6:8a:e7:e4:e8:67:58:97:
09:11:a1:2a:10:67:c7:ab:e6:d7:38:a0:59:c5:25:
ea:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:59:EB:57:10:20:28:1F:BB:B7:FC:FD:3D:79:6D:66:BB:4B:1F:7E
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0b:17:22:a4:3b:a0:fa:f7:03:df:c1:6c:10:ba:99:b1:74:
39:09:dc:f0:a3:fb:ff:7f:a0:b8:09:af:4c:37:ca:9b:df:38:
3c:96:33:a3:8c:ef:e9:4c:f2:a3:ee:68:49:f4:1f:4f:13:eb:
c1:35:27:ae:d4:8a:32:96:96:21:86:44:80:07:ec:b6:ec:89:
72:31:a5:ad:5e:ea:68:63:07:af:62:f2:3d:a0:86:91:bd:4d:
95:42:09:92:d4:4b:1a:ca:ee:30:45:4a:c7:9d:20:5a:7d:47:
3b:0c:1e:ea:c7:17:38:d7:8c:74:6a:19:81:16:fd:52:89:76:
6f:48:1f:5e:cd:a0:d0:78:cb:fd:dd:91:b6:df:fd:11:89:f6:
da:ed:a8:51:af:a8:4c:84:55:49:5b:8e:1f:8a:ae:d8:c9:ac:
50:49:74:e0:f2:ec:b3:d2:58:bd:26:95:44:42:12:77:60:10:
43:21:f8:5a:f8:8f:13:f9:b5:f4:e7:a1:99:a3:76:42:97:a6:
c2:26:27:56:47:fc:67:fd:0f:c5:36:c2:00:2c:b6:cb:71:b3:
b2:e7:78:4a:1e:ee:a0:60:b0:9c:4e:a9:3e:f8:40:89:e9:dd:
c4:63:b3:1c:3b:20:13:d1:ca:b1:03:c3:36:aa:10:99:34:a4:
0e:ab:84:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:19:50 2026 by rpki-client