
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft
File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json)
Hash identifier: ZX/tuKucAqA6ltsxc5w78rvezHjwmk7H5KRV2IjMOcw=
Subject key identifier: 09:90:6F:BF:6A:50:E8:81:31:D1:AF:E3:E7:DA:BF:3F:8E:F3:A3:2E
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 019EC18034F718AEADDBFD48448C212CC7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft
Manifest number: 1953
Signing time: Sat 13 Jun 2026 15:01:05 +0000
Manifest this update: Sat 13 Jun 2026 15:01:05 +0000
Manifest next update: Sun 14 Jun 2026 15:01:05 +0000
Files and hashes: 1: 0qoPAwW3u4O3nuBTKa5PONBSOks.roa (hash: zDLIjLJ9kfaX9ORhSymbZg9RPOjO5+ciHEoVCWTh8ow=)
2: 5rb_gdr_18InEoK9oBGPigLWsUU.roa (hash: p4S/HYMryWz0TiRcC0WYFB+Q46mGR28bojh5mjov+eA=)
3: 9kKHpOhtBjezk9yFRy3s1CnUzCs.roa (hash: QSt/YnCVmn0FcbGN3iyh0NHED7YUEP7jyMqq1w8Dldw=)
4: DfbASphlahLNrwts99_6lIeg5es.roa (hash: zL5VmvhQFmv2lwWz2Fw9d22g6IstnBgobdonQEiQWiE=)
5: I31C8iZaIQWbMFO9-aM0PeI5F84.roa (hash: f2C5DnBMFphCtAknysi92tQ1Oj6c92bExwouoAzWmBE=)
6: MUIHl-Fsh8We6GFXLmx35khoTEY.roa (hash: pEdoUTkjBemyLaurIbfbrfCDQS7dpMcaaEVDwlX8HwM=)
7: N67dLiGqW3gV8C1kx-hmlBjN5TA.roa (hash: ArpBN8vEN1vcjPm23RJHVhymMyyRoNy3XiIwSGDqpqE=)
8: NS1ZBrUo9cL2RzJl2DoZEtlJIgU.roa (hash: WlCP3A2g4WxvOy7MlXQKTM7lTwf6ExPkVhpn2oHTNY0=)
9: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: 7tyN+0X6SymCRVunIdaltDi/HKMX05RYf6QtAY1ckTk=)
10: UuhuRG3t0beQeM3SanzcH2at_G8.roa (hash: HIZxPCxcxlB3mmTmmJ/O+TBr9iHmgf1VMS9ElimxSg0=)
11: XW5LVb9LNrtO6jdEH26TXvkdFnw.roa (hash: tRXiDcN0Chk8qzzYc1rDT1NZ+Ap5GJUMsKOnNMIHQXI=)
12: dl-axVZBNT2S2AVqq4VMy6ChvWw.roa (hash: 2vk0yMOZ6FOkePV9piQMN/wPC82gVBjRJ8M1zk6BgNo=)
13: eZnbOaWyUU8qYq_o9kkd8phkDY8.roa (hash: MD/JlIaHZx48dm7+HSAnMRvJeNF5GVhVV35UTt9y5MU=)
14: iSA_YAY5iFLTdJZOTXus0Ai-o_s.roa (hash: C1lIo+EeLF6gsGe0gv3RTGuRyyEgO5RKKRKvoVsJdVw=)
15: lYzSKqCVCluyzh0YMnJ23vOcSrw.roa (hash: XhhSnlfR0q73ZJWnCDlOWwIWb2v29MCJSsAVMd16rUo=)
16: pH4b3fMjLouUhkKsmyKmLszYD1s.roa (hash: o3Cfd5JXDYsmQI7zlI6aZL8owGQLChjRNW4inPv4y8s=)
17: q-tGkn68JX1iQNUAcoaav1O9DAY.roa (hash: mJUUTb4OWlSpjDRCx3qVRgRZAaIDDrJog20ANOTrCK4=)
18: uzcmX6aVXVtiO7_4nXhYekuZD8o.roa (hash: 7x7xlMP1yianlPCbPG6o6JY/ufIwvtnUiZalCxbyGTQ=)
19: wn83iLSE9WBjpaqkLj8JwBf0jfg.roa (hash: PMAGkAKkXOAgko2I4AnQhrFBjf2Qxoi2Y8ZDJ8W15/Y=)
20: yqsy0Xz11f8jVjNNKQk2GCjWnPI.roa (hash: ci+2sOrUoN9O/HRwXnIdXT2mkytFRNcvyi7A2sMYwg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:34:f7:18:ae:ad:db:fd:48:44:8c:21:2c:c7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jun 13 15:01:05 2026 GMT
Not After : Jun 14 15:01:05 2026 GMT
Subject: CN=09906fbf6a50e88131d1afe3e7dabf3f8ef3a32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:00:29:c7:92:f5:be:99:ce:9c:a0:36:d6:f1:
5b:f7:8a:fb:ef:e4:f7:4a:f3:3d:b0:06:8d:08:6b:
81:b7:0e:55:ed:00:2b:ef:d9:6b:7b:09:ef:e3:db:
0a:c7:b3:a4:4c:14:5f:9e:72:0d:57:66:08:fd:fa:
ea:bd:68:f5:1d:20:bd:34:88:9e:33:8a:ed:d1:93:
f7:0b:62:cf:b8:11:b6:9b:0b:2c:ac:89:0a:5a:6e:
9d:f0:56:10:9f:79:4c:4c:72:d0:82:be:73:1d:3b:
7f:78:6a:ec:8d:b7:43:49:51:29:20:3e:39:4d:6b:
a5:64:ef:3f:a7:1b:32:4f:b5:17:ae:94:fd:61:14:
1d:90:34:82:42:0f:1f:1e:4d:1f:17:4f:90:45:fd:
5c:5b:0f:e4:e0:50:aa:ae:04:ac:99:89:02:c9:ff:
44:7c:32:60:e1:b6:6e:b7:1a:61:de:bc:43:88:6b:
df:aa:46:ca:8e:46:4f:c3:f8:2b:68:d4:b9:77:99:
83:be:2c:8f:23:6a:7b:79:8d:b2:d5:d2:61:b2:77:
a1:ee:57:b8:14:79:52:ba:54:cf:14:38:da:c2:86:
76:8d:bb:54:cb:fa:ef:81:37:5f:2a:b0:a9:31:a3:
48:f1:f0:e3:42:59:18:72:c8:d4:6d:8f:ae:8b:37:
04:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:90:6F:BF:6A:50:E8:81:31:D1:AF:E3:E7:DA:BF:3F:8E:F3:A3:2E
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0a:79:2b:5b:b9:89:02:5b:3f:cb:84:e8:23:bc:33:7e:ca:
ab:2f:1f:d7:96:e0:f9:13:2f:5f:62:8f:9c:9d:6a:9e:db:73:
75:c4:47:d6:df:19:72:d1:05:35:53:18:bf:8e:c7:93:67:c9:
84:38:9a:c8:2d:26:1e:50:9e:1b:a9:f3:8c:74:1b:bc:2c:46:
11:d6:09:69:d8:5d:5f:d5:f9:1a:86:ad:a1:28:56:d8:6a:b3:
91:6f:ce:15:49:e4:c6:07:b5:dd:dd:6e:93:7b:0e:9d:fb:5c:
d2:94:71:77:f1:79:4d:5d:43:4c:f6:b0:0a:86:83:fa:c8:5e:
a6:7e:76:e4:8f:9e:32:f8:c0:63:f2:ef:23:48:7d:0d:4a:23:
bf:61:33:ef:48:10:22:b4:bd:22:33:0a:22:3f:28:5f:69:92:
e2:74:cc:10:a8:4c:59:ad:b2:fd:5c:54:6f:6a:47:1d:f6:78:
62:9a:3a:9b:2e:fc:e0:81:c8:20:26:d2:8e:43:3b:21:4d:1f:
9a:97:77:c6:8c:b8:db:66:b4:a9:6a:6f:22:a2:bc:2b:cb:67:
6c:97:c6:56:8a:a6:61:3e:18:70:d1:1a:c0:c4:56:d1:06:81:
be:34:02:69:e3:65:10:6f:3c:fb:48:20:9e:68:ed:a5:44:75:
8e:5c:88:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:17:12 2026 by rpki-client