
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
File: ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft (raw, json)
Hash identifier: zZWv1OhnFPHJ7LjHHNeFhMci2/tWBkdt4CaWjkIej+k=
Subject key identifier: 77:30:5C:E9:68:9D:EC:45:A8:7E:FE:CD:FE:DB:9D:2F:4A:98:5E:46
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 019FA974A81024EF5951C7512F1FF44F4108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
Manifest number: 1A11
Signing time: Tue 28 Jul 2026 16:00:22 +0000
Manifest this update: Tue 28 Jul 2026 16:00:22 +0000
Manifest next update: Wed 29 Jul 2026 16:00:22 +0000
Files and hashes: 1: 5dAVtaJIi1EXqqYU5USv7fZXPs4.roa (hash: F+ZaLmkSoDDXKvEZfC55Pqn2Kegitmab6UvzlFAoMLA=)
2: EYW0DPWxBVq8OkJlufsQTH29-zg.roa (hash: LYmKFSnt04HxJKJsThK8gfh7k7FUGUtbXQNPAEzqIUM=)
3: ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl (hash: RWf1w90m7PsWGXzpRgik3IIicERjuvRPt2ljkk/eL2M=)
4: WyfVVVbupjvPxLzRmrpKaA7AkYw.roa (hash: 02QZajpOlAkNu8PwY46zt4fm5XsA4QV5bfhzU3rgZmo=)
5: Y_29QVsVJvHnxddFaQdcq2kyCOc.roa (hash: ycsC5DW4Lfa6OQ8J1BIx0zDPciZcjwI4JTfmbrMI8V0=)
6: _MW7W40W598GgASR5Eoa_4tP1ko.roa (hash: aru9WUwoYSO6XyN5TKKL7ZyhgIa+93XhWqRZBdE8/Ss=)
7: kyJQs5we30dtkYez5Z5lc7nb1uk.roa (hash: QYkWAPu1QeZJ7qVGGJyIAFdYbqAhnaEmDRslgqPIGEg=)
8: vkSBou13YVLJcpm4RzlvkM2VmEA.roa (hash: Yt5SBPreKEhsGRzUNTyivVfBSSg7gYCaurShg3S49zg=)
9: w66ZldWus98F7FLtFE_HfwzAVOw.roa (hash: dMhZ2iCHZg0KsJ/1R4eui0OO1+pgGYsJE5mhqZ9ftyc=)
10: yGko-YtBNaNvOP4tDs7GDUXg2eA.roa (hash: wSaHrBildo4ZcOo9cc+dzQPk/7VlKqTO3FnCX6x1CG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:a8:10:24:ef:59:51:c7:51:2f:1f:f4:4f:41:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Jul 28 16:00:22 2026 GMT
Not After : Jul 29 16:00:22 2026 GMT
Subject: CN=77305ce9689dec45a87efecdfedb9d2f4a985e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c0:d3:fc:07:cc:4e:e0:ef:ae:fb:cf:b4:ad:
db:9e:e5:72:a3:4b:1e:63:b2:ed:23:54:f2:aa:e1:
47:0d:9d:f3:21:f3:31:cf:25:84:bb:d3:71:bd:ab:
73:55:e3:2d:04:03:1a:19:20:29:72:a0:ca:40:d1:
1c:c8:c7:10:e1:75:1d:78:60:ca:e6:4f:27:89:0a:
2d:c3:4d:6d:56:0e:a7:33:62:bc:12:64:ae:4c:12:
f1:46:d6:e1:fa:48:6c:8d:44:29:21:72:9a:4a:a2:
a1:4f:53:47:18:7e:f3:5c:77:58:56:07:52:22:63:
25:e8:df:9a:ca:67:f1:43:b0:91:a9:4c:d3:52:c3:
a9:fa:08:08:41:99:8c:48:1b:6e:ec:3a:fe:e2:68:
03:76:95:a2:d4:31:14:5c:27:76:3f:b0:2b:6e:62:
b6:2e:40:25:c9:aa:9b:dd:f8:82:e5:22:2a:b7:ca:
7c:a6:35:88:a1:ca:53:5c:1f:42:69:8c:13:f2:c0:
74:0b:79:80:b3:37:92:33:33:00:e2:0c:40:4e:2f:
86:7f:b6:d7:dd:70:82:21:68:e7:a3:23:22:d4:b4:
d2:20:a5:b4:ec:15:0a:aa:92:a3:72:03:47:5b:77:
20:8b:57:39:ee:06:a8:db:ea:48:b8:3f:8f:f3:9f:
ec:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:30:5C:E9:68:9D:EC:45:A8:7E:FE:CD:FE:DB:9D:2F:4A:98:5E:46
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0b:cc:f5:c5:45:a2:d3:7f:3e:49:c3:6f:de:7f:76:43:d8:
9e:62:ce:1d:85:7a:48:d9:5d:ba:9c:06:ee:e3:e8:46:ba:32:
cc:58:68:9c:84:61:38:3f:7d:4c:5d:e3:06:d1:a1:1f:85:92:
95:35:38:20:cd:80:db:b9:ec:8a:c4:b2:77:3b:82:17:6a:d9:
27:2f:7b:ac:3d:49:a2:33:9f:a5:a7:53:4b:7c:62:72:a1:83:
3b:79:bf:bb:ff:fc:f5:15:dc:ae:94:27:36:56:08:78:98:1f:
ad:9e:97:3a:bb:6f:cf:76:35:72:97:71:91:05:44:7f:c9:35:
6a:36:46:d8:7c:90:49:4a:2d:33:3b:db:40:6b:73:f6:6f:24:
c0:4c:c4:34:41:4d:31:09:cf:39:c4:04:6a:4e:2f:ad:3a:da:
1e:a3:43:ec:22:ba:44:e7:70:5d:7a:7b:c5:45:05:af:b1:77:
08:17:f3:19:5f:11:24:a6:bc:0e:cc:fd:7d:c4:c5:40:31:91:
4a:b7:78:e8:93:64:f9:de:99:14:e0:31:c7:6b:a6:65:3a:17:
07:d7:5d:fd:4d:13:99:64:48:66:0e:6d:6d:19:43:53:a9:f6:
99:79:82:ac:1b:44:b6:f0:20:c4:2b:79:94:85:5b:c7:81:db:
93:e8:c5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:05 2026 by rpki-client