
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
File: v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json)
Hash identifier: tumDEOHT+ymxrp2sYGbMHT1eqtQ/Xc0pO705GMNhSXQ=
Subject key identifier: DD:70:D0:05:CF:45:75:5B:4E:7D:63:9C:57:0D:41:42:83:2D:10:0D
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 019EC0A452F1376DD981BEF15A49B06D9C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
Manifest number: 1974
Signing time: Sat 13 Jun 2026 11:00:55 +0000
Manifest this update: Sat 13 Jun 2026 11:00:55 +0000
Manifest next update: Sun 14 Jun 2026 11:00:55 +0000
Files and hashes: 1: 2JAGeWqOz-z8FVKdPCxyLtHJNFA.roa (hash: +TySuOsOtYESlmt3r8OIGn1Nao4rCD0nAMni4cCzhG0=)
2: 37plEvr9_SAxpS24SOyNrKA9Ebo.roa (hash: T+3X8+kwm0mxKJkDFOwSTGKX5y/yChg7gIfBo7o4fzc=)
3: 4v2abVtxmKK1EfY1UKsh5vBwTBQ.roa (hash: Fs7Ab7yQf/ulu1DAd1ofgpYjehocmFGlxjUMdJ2h/+Y=)
4: 6FvTo5bRSodTC6FDiz2fehPBQHE.roa (hash: apDjsNYn3O+BU+7M5QZsfrZaIB7/OL7UKbfG6C5NerE=)
5: 9KcHIAUvzuR2GWge4D-VK2067f8.roa (hash: 9sijw09CpBSxcD1XyR49IxKSXJ+lbUtfOT6XCsfhPs4=)
6: B8mKcjnkQ06bQ0cYOYl4NuSVaMg.roa (hash: BHHwvopeV4L0Tgx1rARSKD5k/JLb/fI5L/vuVF66caI=)
7: BmKkxsvsllYGRv2VQUx8x8IPybM.roa (hash: iJVvCwQgSkbFGgNZWYbEzkgvbnxvQYXvysN7fV/Jo/I=)
8: CTkFnxq5k5gkKBOyHIjTnJxEA10.roa (hash: wNOA1anlJOJNxwL/khfQbYI7GWefAhmxsi5L1GTuKvA=)
9: CybUaoE-1zIBrxVRyCGND427ieM.roa (hash: 8GMC+ouN1TxZrZlKa6hwbH6dJmnjXnGYbHSveCF/7PM=)
10: ELqztzBTOVJ9TbgArZg2cCQeUqs.roa (hash: RpN+biF12RBn9jYvgP/g7LA1mBZiYaf6GKLjllO7nRY=)
11: JO5erv-vSOU_O-xUynzRSVbHmIc.roa (hash: zMiR3ptMJOgOIdKG+IIwNcZj+cGNLnGMV7wyCQljD4s=)
12: JXnrULMb6DsHyM2cbpC7FtDo9UY.roa (hash: iamRHWkLnsJiPb+n+IZVDqFiRKag4o4LNxuZZzmL0jQ=)
13: Jb979-aOtFrxIQewqtQtN3rvkPY.roa (hash: h5kBwpidUiteAllQX66DeU4MAx24NppeXa8u24NM7iI=)
14: SybLZ24hhMiBkVFRqMhgG4Tt_So.roa (hash: jdIOIL7oBwjwXGbHbND2Uo+qRIMM4Rdpr2383Sxr5BI=)
15: TEEJpugeYt1F43E2tJGuUV3FeZA.roa (hash: DLdME2cAIv/rSNCUPiFiPYf01huYXXEj3+nEaRucgYU=)
16: Tg7LpYV7I-GpxinThcktcQRnm_4.roa (hash: BbXoN3AQWQv407qJGvIy6QX/6IL8zec6zQB0QjsD6HA=)
17: ZPlBlPD-W-maIRDabAoyZWrxupE.roa (hash: MQ/ql1GxKXsn5YKKa+q3cWZtrV1Ms5Llr3f8Hh6BGNE=)
18: c9_fZRRZyW0XDy9Nuj5gaWSKFjw.roa (hash: 1Hs4IJDmnuMEMdz/1IBBL0atJ2FMVY2hg6chmbt42Mo=)
19: lUbooQJTqUPsGNWs9whSoRmQ9io.roa (hash: kluWa3I7Ato5aw2LG6KL/4iV6N2sUDy3GUsBbZKsEa8=)
20: mhK9zCgXdFlII0XrtCsgCaL9xjI.roa (hash: hSBJb7L+mvFAKQjClhKXrHgKgsxf+0/Ah1GNpCqTJNQ=)
21: sMNPbaJ2swpQDptjsmEdLRBAjsE.roa (hash: wMrNQ1Dt9RdtalTcVqalUbl+Cb5VgC4Yw+MpJfT4roY=)
22: sWFQ2639y5fQaDmU5ThRk6YSWFs.roa (hash: YXKPoBXjKE1eqIFJiy/DtB2fJyWSkDcytdS8/Lx36Lc=)
23: ul8RfOvZQFi7b7h3CYZZMyB1Thc.roa (hash: ftj7d2qkg7awZuZD1JzEyU8qjVc4i/LwIGNmp8+f9gY=)
24: v1XAMryHcbVYBLXiFz1wOW3tUKk.roa (hash: JN1atA5xt1OyKxkpHh4rNxtPiXKSK2GbqwVySmKSgl0=)
25: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: 64LsXRZYjMmiC9WXRlWuKbD2Tgl7b0C/NiZCPH+S7FM=)
26: x0heqVIS4ldbm4VvDuHpvjwdG18.roa (hash: Q0/M1s9b+ez//kkSZOV821TfmbgQGcZ8JApzRiFz1/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:52:f1:37:6d:d9:81:be:f1:5a:49:b0:6d:9c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jun 13 11:00:55 2026 GMT
Not After : Jun 14 11:00:55 2026 GMT
Subject: CN=dd70d005cf45755b4e7d639c570d4142832d100d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9d:cf:8f:79:a7:83:fd:27:72:27:d1:b4:cf:
70:42:7e:a4:83:cd:ce:67:5f:d9:fb:22:a9:66:82:
7f:d8:97:ff:06:bf:33:84:37:30:71:29:c3:f0:84:
f2:b3:88:d6:34:fb:e4:e2:aa:d4:4a:02:7a:e5:f0:
0f:78:a7:4c:fb:27:61:f8:7e:d5:ef:d2:2e:67:0a:
c5:dd:0e:c3:cb:a6:1e:cb:eb:0a:a5:89:b3:80:20:
5f:e4:0c:99:de:f0:7f:15:a0:77:42:36:f3:24:e8:
b4:72:d3:a5:86:c3:10:c7:2c:f0:5d:f7:4c:44:5c:
82:7d:a4:2d:19:d2:e4:a0:79:59:0a:37:59:35:67:
63:3a:40:a4:8d:4b:1d:ec:de:56:bc:dc:db:d1:4b:
1f:8a:82:b2:3f:ab:58:11:7b:d8:2e:d3:2d:cf:c3:
7d:1f:04:cb:1a:6a:6c:d9:48:42:30:cf:42:78:1f:
53:0f:61:0f:53:36:8e:bd:52:05:12:80:ac:74:75:
76:2a:01:23:2a:6a:70:44:91:58:86:c5:c2:9d:49:
16:7d:98:0a:58:ea:ff:6a:e0:b1:41:65:b1:71:6b:
28:12:74:54:bb:41:6f:1f:36:c6:4f:73:cb:90:65:
a8:2c:dc:61:aa:49:9f:f9:f0:c1:8c:43:67:81:87:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:70:D0:05:CF:45:75:5B:4E:7D:63:9C:57:0D:41:42:83:2D:10:0D
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:26:2b:86:da:1b:fb:d7:8f:ef:cc:75:ff:77:a1:a8:c5:b3:
80:08:c4:2a:00:75:96:26:bd:a4:6b:44:d6:32:77:b3:6d:e1:
15:f6:67:89:ac:cc:66:d5:d2:97:9e:09:04:2a:78:99:d0:46:
13:68:8b:36:cd:cd:cf:fa:cf:d1:94:06:a7:ad:bf:16:76:52:
74:5d:1e:67:ff:3e:0a:7d:58:4e:c4:d9:26:97:5b:2c:69:f1:
f9:60:aa:16:79:40:9f:23:5f:a9:cf:7f:2c:d4:d6:1e:27:36:
e7:ca:1f:91:14:44:02:5c:3a:20:ef:6f:3c:52:0f:8e:bb:91:
9b:d5:8b:1f:e8:55:47:23:d2:06:28:04:63:82:f1:66:f2:9a:
35:29:f0:84:b3:cd:9f:6c:4a:07:a8:a3:1c:0f:13:e8:c3:b7:
7b:3a:ae:70:46:47:4b:1b:6e:55:7c:c5:eb:4a:57:92:47:19:
32:96:eb:ec:26:c3:bf:81:b7:ae:15:3c:ec:75:8d:d2:46:56:
56:f3:77:af:71:71:5e:77:a5:ff:ab:0c:af:f8:e5:60:2a:b2:
2d:c4:30:73:40:21:cc:1b:d1:21:b1:05:d3:03:29:a7:e7:f5:
72:33:84:1b:58:22:18:91:45:06:db:85:0a:8d:40:43:3b:69:
11:4f:75:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:42:32 2026 by rpki-client