
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
File: tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json)
Hash identifier: Ck0JHEbMrkKmBmorkmbvjVKfouJ0HlE7tB97FsGhgcA=
Subject key identifier: 57:E0:C1:71:B8:CF:A1:D5:8C:4B:0E:DA:1E:53:EA:80:98:9A:64:ED
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 019EC148B9B324638C4D056903401707249B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
Manifest number: 1967
Signing time: Sat 13 Jun 2026 14:00:29 +0000
Manifest this update: Sat 13 Jun 2026 14:00:29 +0000
Manifest next update: Sun 14 Jun 2026 14:00:29 +0000
Files and hashes: 1: 7gdlonHkctidA_Jgo0e1sPluTfw.roa (hash: L7iWiH+YVCR3BgQWnot+ADKst5Rvum0Fp/JtCnJ65RY=)
2: DQ1yVesejJpDnZvd2JLWH_7gAEU.roa (hash: iuHd9st9MGEOE3UuhPG4vRJ6eBtZs6iPypxGkfqTQSM=)
3: MCv_Njd7Kt1jfUDJcMfP2Ew9zGA.roa (hash: 8slM4ZyNMUTgbPryNd+oyqvRv0X2KMYBpAbZ2g9V2+s=)
4: Pxzwfsnla9WCGgA_5yVN5NBVL14.roa (hash: dRusvivPw89AhWLw883YVx7O+/W5uw+jCzc5VJhBOks=)
5: dnlzr7T-KrzC8dTpRdaUUBCb42k.roa (hash: FlF41xrTHYEZQDWnwHhEl5bQr7qiicPhhj7kefuMDlI=)
6: h3NO-bNRnKL0h-LwaiCjswg7_nY.roa (hash: nge/dAbyC8BEKmPsWUQCbHBH18ANQj9ceVjvT5f7JS4=)
7: l8XwbbJw24-quxZEn6DNPzCPtQ8.roa (hash: X6CZp/lJQVG23+jPNOS99TJV1YAbrmzFBiz/CMHczr0=)
8: le7g6AeqMWo8tC4Pm6_9GuPpA9Y.roa (hash: M3GaptBPUtevgfpamZx3KC2EjkI+htg/GGtdiA7/WxU=)
9: o2KmTBSx7YAGDylX3itL6SdPUZE.roa (hash: lugrh1NUXlse4UYLEWT+hm10hbsF+hFuCCQ7+JOgu7c=)
10: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: itWvJroB9Kld3oyYqpYIcKF1dBJxP2+7Q8Ff0lzuGx4=)
11: v9V5UdS7W7gv8Mt6_7V1IzHZAiM.roa (hash: oqxmALkOA6EG36s93nwvrqkYRgI5R7v2/8FaBvM3TLU=)
12: zMhciCUgU6J6shiNhaiwocMfw14.roa (hash: c8SQXIzHCbyAhdC6MEvd2MwYwyUckczcTmVUE35TvUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:b9:b3:24:63:8c:4d:05:69:03:40:17:07:24:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Jun 13 14:00:29 2026 GMT
Not After : Jun 14 14:00:29 2026 GMT
Subject: CN=57e0c171b8cfa1d58c4b0eda1e53ea80989a64ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:4a:8f:90:3d:99:fb:8d:3c:46:5d:ab:f3:
14:91:ca:fa:4b:ff:d8:e2:87:09:6e:fb:bf:36:0e:
f5:79:e4:66:f4:30:69:ba:f0:50:bc:7f:bd:11:cf:
26:35:ef:69:35:ad:51:83:1e:f7:12:98:b0:c1:46:
33:5c:13:6e:fc:69:52:0c:d2:1f:09:8d:ed:38:a6:
28:24:30:f6:18:2b:85:38:f0:54:06:cc:a1:93:b0:
76:73:d8:2f:97:a6:a9:43:e3:d5:99:15:20:f4:37:
56:08:cb:c6:ca:4f:74:02:64:11:99:ff:78:8b:d5:
d8:a7:68:a8:cd:cf:59:33:92:3c:2c:bc:d0:9c:9d:
b7:5c:33:ba:2e:f3:5d:02:0e:c1:5d:c4:0c:49:29:
72:f5:f0:ee:24:cb:da:29:85:43:a3:53:f3:9e:20:
30:df:74:7b:8b:c7:2c:99:8a:63:70:22:3a:37:43:
77:70:fa:a3:db:44:5b:37:0a:88:fa:4b:e7:af:51:
e2:cf:fe:d8:53:b7:17:9c:34:e9:c1:85:41:6f:8a:
d0:e9:b0:85:7b:ff:6d:ff:7f:dd:d1:3a:ff:51:b0:
c1:da:02:ae:63:ab:7b:5e:e6:8f:be:72:02:0f:fd:
97:9b:f8:86:8b:50:9e:2f:48:2e:e7:16:db:b1:de:
58:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E0:C1:71:B8:CF:A1:D5:8C:4B:0E:DA:1E:53:EA:80:98:9A:64:ED
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6d:af:3c:9c:f9:bf:f9:6c:d6:c1:33:5d:b3:a4:96:68:8b:
62:85:7c:16:3a:1c:5a:8c:f3:1e:c8:ec:e5:cb:2d:be:71:3f:
31:05:a1:52:87:70:cb:1b:1e:b3:37:6d:fd:c6:05:fa:dd:64:
d3:93:97:75:b0:dc:1d:5a:e7:27:86:da:5b:10:79:a9:07:e6:
77:12:88:71:ea:30:19:6e:51:45:28:87:82:6f:3e:13:c6:5f:
47:28:bc:e0:12:26:18:14:be:6d:de:10:97:28:50:46:96:41:
e2:a8:6e:8c:c2:08:4a:68:e7:d6:d2:cb:9f:d6:9a:81:7f:24:
3a:09:da:f0:c8:9a:5c:52:5e:ff:f6:ba:45:ac:66:73:c3:2b:
47:fa:aa:74:d7:59:99:cf:9f:f6:ea:f8:26:50:96:fe:75:81:
ea:0f:82:59:6b:4d:9a:88:ed:67:6c:5d:af:76:06:90:1a:00:
27:6f:1b:70:21:16:42:d0:51:d9:97:be:b6:5a:83:63:b8:14:
0a:8a:d8:b4:51:25:c1:e3:e5:63:fb:c4:5e:d0:a2:e3:c3:39:
80:9a:c6:d1:28:dc:9c:18:28:3a:67:14:39:f5:86:af:95:ff:
f3:6b:d7:f8:02:7e:41:9f:4e:11:1d:ba:b3:79:50:03:3a:5c:
b2:87:28:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:41:03 2026 by rpki-client