
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier: HXGEP7S2LyBcxnB+gh7ZHEUK9MGFQLHJEl9OIUK2Csg=
Subject key identifier: 3F:D1:9D:A5:E2:AE:B5:AF:C4:4E:10:32:D6:E2:77:DE:05:24:32:A2
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 019EBF5AF6C47302E47F251A0FE89560C97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number: 09A5
Signing time: Sat 13 Jun 2026 05:01:09 +0000
Manifest this update: Sat 13 Jun 2026 05:01:09 +0000
Manifest next update: Sun 14 Jun 2026 05:01:09 +0000
Files and hashes: 1: 42iMMMRyCj6t5Gb7iHxpdxdIZnw.roa (hash: oV05xJ3ianPj2d2p5u2rAJjPxzr+kZmbQ6SGxfEYdL0=)
2: 9skBFy-gVmDl-nkjxXAKgHcli-I.roa (hash: 7gSJ6zN5NW6BGUihBJnVoBFmgqEGP4fmTIDMGINspMU=)
3: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: z8MrlbKQm/F44OS7bn6jGWG0E+LOsZeHyJGUDt8AZPU=)
4: CYN-6kj2u9HIpYoQ3hmgvSsB35k.roa (hash: uoS5teZaIQEfymaaNdwi0VIQaDXV2jMrircb9XoayTE=)
5: Cn2XHyeB81WqaZSjg7QBfwHD8CU.roa (hash: +H1tXQmNkJ0PpJOqloukby4uXtryrpKFGs7NDZGKF+U=)
6: DC-2va12O2p4wJaztsxQYqxlteI.roa (hash: 8DuSeuFCejqmMZ/sp4dL3rLoQsC1vmmd0qUYceaaN1Y=)
7: Eh1zKu3hD9M9mfNTxR_zbWN_UoY.roa (hash: LmM/Lacelv6UENbWxP7rIgedmTwgXdIq3BTIdVtbP+c=)
8: GXpP16JP0Mjym_u_vszjldIXucM.roa (hash: 0GFGujZKcR3Ga+pFC/exC5L1CnjeKo6DgEs39y2hAc4=)
9: IzioJZxghFwgMTnVeVHHpMj-swI.roa (hash: wRkEhmwjz0Z3CuNMqban/3il9wF+W+3UoPcrnrnPUQI=)
10: QxRT0q4FzTnTcacN8tWvzsCAarc.roa (hash: XiEdwKLVvGeQdfVFaF47mebbaJXtp25EOB5RwY48keA=)
11: RHYHLfX7MZwqTOjtai1Px4dZdUk.roa (hash: 9gqUDjHutLNZlP+IlfjuYLEG7YjcoaY1UFU3hwr+l/I=)
12: SyWHbYOnHu_cvDaajuYM-To7M1w.roa (hash: YSRENKcj3fhKWRCWRTPdwxBLbJ6LeYaoc5YN/u+MBoM=)
13: U0T21bHsT2j1MueUQfzfVxTuFZQ.roa (hash: 8mdLmQ605wsI8HkkExAKeuL0NcxSn5gGLXOqg42+2n8=)
14: ZTRYP_xNQ-xHfjwU3V1iHE8I5Sk.roa (hash: 82wNZlZVa9PTuuaZD0iq9g3BjS5GghQ+K3v6FuHGgcA=)
15: _Hrgg9TwnO9PoE-2Cm9MNkAYl0w.roa (hash: bu/cyj5EwB3TDiwyIVSQeElzT+joOr0r21e4GEpp8jI=)
16: fd8bJA8DM-0zr8RLGfMJuFRYj1U.roa (hash: AOSETmD6hQ/zex92QpyDr+KfP3AtnIbAXfSo/7qIWOQ=)
17: gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa (hash: YAjRepSXiV21hnlqtzGBka5AQsC2Q/c9dyI4/lADp+0=)
18: u5dp8n3I7jflzjFJbZJ5BPdSfSg.roa (hash: SdwZS8EmIER4C5RBFO+zi0xPjMT8sLGC4SKpUhZ0ViQ=)
19: xuhDpHE2bnYdJOoJ6yInvIa6YrE.roa (hash: ohBVT4HyJLZk/hzU7rkg4mhr642F6fJ3Kl5PbeKWAPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:f6:c4:73:02:e4:7f:25:1a:0f:e8:95:60:c9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jun 13 05:01:09 2026 GMT
Not After : Jun 14 05:01:09 2026 GMT
Subject: CN=3fd19da5e2aeb5afc44e1032d6e277de052432a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:62:59:65:3d:ff:d1:33:88:ad:3d:ec:2f:35:
09:fb:30:c3:fc:e0:d4:7d:8c:bf:18:ad:e3:60:65:
03:a9:40:bb:df:51:da:d3:48:64:19:6b:4c:f0:88:
23:8f:b4:c0:08:41:e3:80:29:80:fc:1a:39:66:fa:
86:c0:a6:b8:46:a5:e8:5c:f6:6f:d1:46:24:a1:d0:
3f:b0:6c:3f:c6:6e:19:c4:18:82:47:fb:a9:34:7b:
4a:6d:b0:e4:eb:e9:dc:42:02:1b:9b:b6:30:97:62:
ad:c6:bf:5d:5f:75:ff:d2:c8:4f:b3:a0:d0:b1:59:
d8:8f:8a:8f:01:3f:2e:4b:5e:73:8d:06:09:19:c1:
07:f4:db:fb:71:56:c6:67:a6:12:f3:44:24:a9:c1:
1c:95:34:93:08:75:8f:87:33:cb:a1:3b:4f:48:19:
7d:a7:d9:5a:25:bf:99:a6:bb:a8:62:b2:37:cf:5f:
3f:3e:15:f2:9f:db:e2:f5:6c:16:de:fa:1b:59:96:
dc:64:cd:44:47:86:7a:09:ad:cb:61:bd:4b:62:59:
da:13:be:d6:04:f4:6d:44:aa:77:6b:f7:bb:2e:b6:
ee:40:1d:10:1f:3f:a6:2e:37:84:0b:c8:86:14:1e:
34:06:a2:dc:1c:d4:44:37:6c:d2:27:d5:c8:ef:a7:
c5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D1:9D:A5:E2:AE:B5:AF:C4:4E:10:32:D6:E2:77:DE:05:24:32:A2
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:93:11:37:c8:51:6f:d3:7d:60:ff:88:b2:b5:b8:02:d6:07:
80:89:d6:b6:ad:f1:c3:71:87:6b:92:ee:57:ff:6c:bd:8f:74:
36:6e:98:c1:fe:97:be:cd:70:25:fd:c8:0a:94:e7:3e:6e:1f:
5d:ee:8a:c3:c7:6b:08:5a:10:21:5d:6e:3b:3c:ee:6e:76:9b:
5f:a4:1f:1d:84:2b:57:86:05:29:e4:3b:65:28:84:a2:31:2e:
96:25:5b:9a:24:61:53:ec:54:d6:70:9b:e3:1a:5d:c1:bb:85:
2d:83:87:eb:b0:59:38:e1:fe:a6:ae:cc:a5:d7:0d:ac:34:d7:
2f:8a:af:09:82:05:08:87:45:ad:ef:9c:21:7f:6b:e4:6e:50:
b8:ea:cd:3d:24:b8:85:21:8a:20:23:01:15:4a:b9:16:c2:6f:
a5:34:1c:45:ee:77:44:8c:1c:3c:1e:9e:7e:29:44:e9:3e:43:
fb:c8:fc:f7:2a:7b:52:4e:fe:da:1a:a0:b7:f0:32:d6:57:0e:
b8:31:e6:ed:2b:c9:5f:06:2f:be:2f:c7:a1:8c:24:4d:29:d6:
bc:f4:73:ad:15:83:52:3c:2b:56:a3:61:41:63:ed:bb:9c:42:
5c:a7:8b:e0:dd:0f:67:17:eb:45:a3:b0:18:ab:35:af:73:c3:
c1:74:76:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:18:20 2026 by rpki-client