
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
File: 76W2I0ehtkzqSaKrOrSYPDSGH7I.mft (raw, json)
Hash identifier: dCk/vETP8RHNrp52L33ELjsvoEoI+FZi6Bd5a7sKrLU=
Subject key identifier: 61:F0:6A:2D:E6:B8:DF:10:D6:A9:A1:84:67:CB:EB:AC:C4:41:C6:AA
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 019FA9E285948C788E5538603ABAC787F6EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
Manifest number: 0418
Signing time: Tue 28 Jul 2026 18:00:22 +0000
Manifest this update: Tue 28 Jul 2026 18:00:22 +0000
Manifest next update: Wed 29 Jul 2026 18:00:22 +0000
Files and hashes: 1: 30rSP67H4gX5RMgOxT5dBfg20_g.roa (hash: pLbD0z+swzOFRKhR78b058ocPOqvyBgBR9Tg94u9QPE=)
2: 364eowWUpdHpRRNTUTnx-wVwLG0.roa (hash: REQkrovFJbhkk2t1l2Big9Qs8J0xEVpFx/DXeDXHf8E=)
3: 68EZrauB0qv4UqFcrYI1HWiTafA.roa (hash: bosTecBYxP1S8RTUkYY+Q2j0KSr6GAn+ipiGx0hncVw=)
4: 76W2I0ehtkzqSaKrOrSYPDSGH7I.crl (hash: ARE+yH5oq+F3AcIBVSQXan4ZuFW+XhAUB6gB+XZg4XE=)
5: C3ruCzQFpObijbg6nKyWeHWjy4U.roa (hash: Y2PICPggtqJuBNrLg9GLriE7TFiGRSa8ctzypTp0k5Q=)
6: FoL3qyEY48cw05gLQhNBtfACHmc.roa (hash: yngu0V2+UyneI185UKcvs0YYxoSzgQOcyO77l7Bzxy4=)
7: V9bz-LIlrLlNcy_JnZK_x-nhl2s.roa (hash: EweRvUyQqzzdZsQlbOmurMzzeItcgxBnOe1Rf0PMP7c=)
8: WOK1iT_PCPPQV6sHVEx5Px_Y9fE.roa (hash: 94hNqjQI8cFTU6a6Kw0AEcP1Xdns+Wtf+3N07hYhGa0=)
9: fzWlLGEPBxz1DR-_ybKSosveito.roa (hash: PMju7hqmYk5olTtNec80dTLKx9r70k1T9axrJxxCFmQ=)
10: iuSpcrmsV4f1Ysb1cVg-3onOaZA.roa (hash: c9q3XFMjCEy0sE0Ce3zydIbkqouf4LIzsM2RvAlYwio=)
11: pg6bOeS_pULCbWrF8x8V4Rs2ZHw.roa (hash: +2tNKvGcCLANosV1u5zkvXemE5ip/Oj7vqWsHidx0W8=)
12: sDq5U53kui-SouGQwvgx88wuoqc.roa (hash: cLZsm7xp+yinJ4qALYPDYjVVs4ZwSgrcr5htqd8PthY=)
13: xkBXp7rwmSNtGrPWn7O7LK3eIPc.roa (hash: ruZb0fyLFNIK8oCJZQCr0uOvP96aIH6PYR41YcREAHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:85:94:8c:78:8e:55:38:60:3a:ba:c7:87:f6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Jul 28 18:00:22 2026 GMT
Not After : Jul 29 18:00:22 2026 GMT
Subject: CN=61f06a2de6b8df10d6a9a18467cbebacc441c6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:2e:17:e7:78:2c:42:bd:40:a4:3b:39:cb:
42:89:e2:d1:00:06:f3:52:12:21:a4:4c:0a:5f:ff:
78:1e:79:ca:1f:ef:59:c1:a9:40:67:8a:5a:99:9b:
e4:5e:3c:1e:ca:b3:3d:6c:8a:0b:d1:81:fa:5c:e4:
a0:83:a7:b0:67:c0:90:f9:35:4b:cd:98:83:42:1a:
3e:da:12:6c:96:e0:c2:0d:ef:42:b0:47:30:58:c1:
9c:9c:e1:0d:1d:fb:54:2b:15:82:b7:85:18:55:18:
7e:68:cc:6d:a8:65:3d:82:31:67:4c:4f:e8:84:ba:
ad:6e:ae:6b:05:78:27:e7:ab:ae:eb:a3:20:e7:2c:
58:96:29:4f:c5:64:f7:86:e0:8f:cc:f0:9d:cf:ef:
95:cc:c7:40:53:c6:a2:d1:9b:4b:53:ae:83:5b:dc:
12:db:d8:40:57:c7:e8:3e:ae:34:78:01:d6:d0:81:
6b:3d:a9:82:26:8c:33:09:f7:51:da:e6:84:a4:c3:
d3:54:22:a1:a9:1d:23:30:1b:46:de:41:62:b7:8f:
cd:1c:e7:ee:c5:01:83:38:02:68:12:24:d8:ea:8b:
86:1d:f8:8a:39:92:6d:eb:fe:d7:c1:c4:87:ed:59:
c5:a9:09:13:40:c9:0b:93:46:bb:1b:87:36:fb:67:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F0:6A:2D:E6:B8:DF:10:D6:A9:A1:84:67:CB:EB:AC:C4:41:C6:AA
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:91:d3:08:60:3e:53:05:f8:3f:24:a1:31:34:d0:f4:cf:2f:
d3:d4:32:0e:5d:98:d6:18:d8:c2:e9:85:30:c1:2b:53:e5:ee:
4e:cb:cc:f2:e6:0f:0c:07:c0:c6:41:0d:f9:fc:b1:9d:27:dd:
12:12:32:2b:46:db:f6:f0:d3:45:f0:ae:c5:b8:f3:b7:47:c7:
34:96:e8:cd:33:d4:6b:74:0d:ec:5c:1d:ef:1c:46:35:31:9b:
b6:9a:44:9a:f4:86:1e:56:cd:d7:06:6e:e0:82:e9:81:f3:8c:
7f:bd:28:d7:ab:a2:02:08:e1:6a:07:82:1e:de:e8:41:7c:65:
4b:ff:89:74:85:60:b6:57:fd:55:fd:15:42:85:1e:59:34:02:
b5:c3:93:a1:cf:4c:6d:d2:95:45:86:bb:bf:70:47:71:92:69:
8a:d9:a1:a2:0c:5c:43:b4:c8:bc:4b:72:9a:79:fa:4f:7c:7e:
e2:8a:13:af:17:4a:c1:05:73:9f:63:3a:69:ca:8e:90:db:8d:
d6:ae:5c:3e:0d:7b:20:58:3e:4c:35:0f:5a:45:82:ee:8f:e5:
a7:66:77:7b:2f:b5:af:51:cd:54:82:e4:88:14:ab:c0:3c:b8:
27:84:29:68:a2:e0:12:11:49:0e:f5:e0:db:fb:4d:ee:ef:2f:
e1:6b:9d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:42:44 2026 by rpki-client