
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
File: 00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft (raw, json)
Hash identifier: rtK4LYfNtuaIAirCOl86hn5qaNLxLRbUMfrkBM8IUGc=
Subject key identifier: 3F:04:34:1C:79:2C:B3:EF:28:C1:4E:EC:CC:AE:AE:09:C2:50:D4:D4
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 019FA906B2431FC4263998526681D695E31B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
Manifest number: 51
Signing time: Tue 28 Jul 2026 14:00:16 +0000
Manifest this update: Tue 28 Jul 2026 14:00:16 +0000
Manifest next update: Wed 29 Jul 2026 14:00:16 +0000
Files and hashes: 1: 00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl (hash: gOMQG6l+OQjTlz6Lik4GI576ohE/tc1QL89VaXU/dM4=)
2: 8SSXBbJAmh2M2VamgGPNaaqs-GY.roa (hash: SNkG8Uti9KHLJ03Y/sW0/JYA5jvGANqmsDmL+13iGPs=)
3: 8bHzMmkjwt_yLAGYCvMNqkW2FzA.roa (hash: 8QaTUHJyXu6B1zsCrAVs6lorOrcroP37WqlcGmictGo=)
4: DPpak8RgDkxLfzni-EWhrE5FCNE.roa (hash: jo10qFPskJDWOQaAr+nqpNhpAqLODkfkRNWEJwo+MnE=)
5: KjzF_07LNXsxnLlTwbx1qy0Nf70.roa (hash: ZSx0htaVrCbITx9CYSvyBpcrxLFJ5FXPjTi+sdFipU8=)
6: OjUriyX22SftvbuImRgRsgq800I.roa (hash: FZUR12pl5mPO1tU55PwRpuebEaECFWzXN6MydVjjchA=)
7: UOXA4oU0cYn3rZAwOMaEWtcF4QY.roa (hash: DU4w5RjcNeNPeF61/164VHqPXEXFyBssEnx5YQVlwVs=)
8: UUDuiwdwXBJkRQyOZXL8jNnUvh4.roa (hash: 2E9XBsXGcCTsZ+IIciA4F+MOAPni9HkOnxgq1kncY7k=)
9: Yt82kfMh4tTFldct4S8Y42V4ySQ.roa (hash: jjNY9yqyt1O9yRK9Zvv5unUVKQa7w6A3b2RNVpEK9H8=)
10: klZdZ8xiyHGKEf_gfoS4Gl7S3V0.roa (hash: PnFskfREpmwodvBbY9tSgM475PNufEhEVsxknIOHmG8=)
11: qsvSYt_EBTj0D4qt2QoEMH74YEw.roa (hash: xOazcLY9pAeAKwSCYmBAkPRN6rzWqpKY798GdNgA6FA=)
12: sUn-f-qK9eXwNyOmR3mfe7EM8No.roa (hash: MGpupH/5gZWb0QJDQlscqVzzSmxpIo72s/B8/Jhn89g=)
13: x_QvBoOIA6vBeIKgjoFBOXwgqa0.roa (hash: YumGg/rjGkeZiLzIodCSXvp8gqP2A52SQH7tSRPZWGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:b2:43:1f:c4:26:39:98:52:66:81:d6:95:e3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Jul 28 14:00:16 2026 GMT
Not After : Jul 29 14:00:16 2026 GMT
Subject: CN=3f04341c792cb3ef28c14eecccaeae09c250d4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:67:48:8c:ce:ae:f6:3a:f1:17:1c:37:1b:
f2:be:9e:75:71:80:d0:6f:3e:8b:5e:2b:49:ab:c2:
ae:67:a3:5f:58:8f:6e:6d:26:24:35:f8:bd:94:4c:
33:ff:bd:07:c4:09:20:82:87:8e:4e:01:57:bd:4b:
3a:58:c6:e8:1a:1c:d0:b8:0d:5d:8e:35:5a:b5:93:
1d:aa:43:9d:01:04:86:24:23:94:d0:42:12:d5:73:
3d:3b:09:a9:84:ed:91:11:c7:f6:1e:2b:50:86:74:
4e:cd:74:47:60:4c:2a:24:87:81:03:0d:a4:5b:cb:
ae:98:01:23:30:49:34:36:d0:6c:31:74:a3:c8:3a:
e5:2e:75:2b:47:85:f3:d4:16:fd:d7:0e:7e:07:80:
43:31:15:4d:01:14:50:40:39:e7:88:62:e7:29:80:
ce:47:a1:fd:81:df:48:c3:48:5c:ba:46:d0:48:26:
81:c6:7f:be:7d:94:10:12:2b:d3:56:ab:5c:2e:ff:
af:ac:53:49:d7:90:d6:d9:61:3c:af:8f:3c:df:67:
b4:89:20:2e:b3:5d:73:93:3c:02:3c:9b:af:d6:71:
bf:6e:65:22:b7:19:f4:98:11:d2:ee:93:55:90:74:
88:bc:e0:04:1e:1b:37:76:21:ef:eb:03:e7:2c:be:
bf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:04:34:1C:79:2C:B3:EF:28:C1:4E:EC:CC:AE:AE:09:C2:50:D4:D4
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:00:39:a0:e8:6d:11:c1:64:60:d8:72:77:2c:68:72:c7:99:
7e:5f:28:10:81:0b:53:ec:df:04:ed:9d:e4:96:5a:77:08:0a:
62:67:91:2a:22:9e:a4:03:7c:0f:92:87:28:f8:cf:0b:20:3c:
c5:9b:d2:a9:35:9b:90:4c:7d:d8:8b:84:1e:ce:5a:01:42:f0:
9e:04:06:64:2f:43:5d:d0:8d:10:93:66:a7:c7:d0:43:87:aa:
15:5b:4a:b2:a3:8c:b2:c4:ba:1e:15:34:5c:9e:b9:6c:a1:44:
3c:1b:15:7b:72:60:3a:2a:f6:ee:07:b6:9e:0b:4c:4f:d3:f8:
45:36:70:45:c1:2b:44:7c:ad:a8:89:8c:63:ea:c2:84:f6:67:
bb:c4:07:fc:c0:9b:12:a8:dc:cf:bc:3d:13:1c:4c:db:33:e9:
7d:a6:80:99:27:62:51:2e:6c:fe:6c:1b:6f:44:25:2d:3c:ad:
db:27:22:c4:87:eb:93:0c:3d:c3:b7:92:d5:a1:f3:dc:5e:eb:
e7:2b:88:09:83:ed:3b:8d:c4:25:28:0b:0f:7a:be:ba:14:0d:
d4:74:4c:31:d1:a0:b3:f5:63:57:5d:88:79:32:08:d0:67:cb:
bc:4e:20:ad:9f:52:55:c1:08:7d:c2:ef:9b:d6:b2:e0:5e:40:
7a:30:c3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:24:42 2026 by rpki-client