
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
File: bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json)
Hash identifier: hZ6poN5r1ZAsK/jBJA426avFjpCQ3K1O4nOoEH5aB0E=
Subject key identifier: B3:A2:3F:36:E7:A2:B6:0B:8F:AA:E3:58:B3:78:67:C8:A8:B4:6D:77
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 019FAABEF568154196DBC13807A56DD2865B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
Manifest number: 16FB
Signing time: Tue 28 Jul 2026 22:01:09 +0000
Manifest this update: Tue 28 Jul 2026 22:01:09 +0000
Manifest next update: Wed 29 Jul 2026 22:01:09 +0000
Files and hashes: 1: 1UiUTiwKgTMIt2VTMxLe14f3nS4.roa (hash: pqQp2WmJbg2RhT73uD+Ys0RPrhInn/LiUGnsvcFLzWI=)
2: 2IRM0RAkwS2oAZ2BDb8uf2ChjCQ.roa (hash: JPioNw406pRxJydsBBDsLTocLaIvgiBjIbhi/i3xRcw=)
3: 99NN1WXl1e-tpKT6ABRzj8ek8js.roa (hash: 8o+XYKw0+50Z916SkqFv35kFc2HKB1Yb/OlTSFjUqWw=)
4: Gt42LNyKpJtcqVRywZEAUF7VLT4.roa (hash: 9z9Onu3kjDDPqyse/NwIrtPdYmJbza2UnnbQIfvOZ2I=)
5: LlDSn4AAdQvcio-w6ueKASNJzJc.roa (hash: Tt+ws0A+jguw/rGXSOQBHfD+EimDFMYYNfrKEOU8mto=)
6: S87lpzwpwcvhDVlbS4kDtqKKrpA.roa (hash: EL+FrGUGQI1F7I3SdqUWEFxAZnp0C1EKciCac/NeJoU=)
7: UlvxYSaKh8Oc3zweZMlSdRb-gtk.roa (hash: oQKB3We88m7rm0/lXA7VFioKwk6yZDH7U1EGDEWoMxw=)
8: b9R1mHou81pbTN845jWo8AY0dG8.roa (hash: 0MAAHxvRxGYVPd74Q6mtc12UmkhV79TPgssvbAGMnic=)
9: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: IWIDDiauoUE/yTKNEm9NO4rRTfGOLfxx+esg9MwHkt4=)
10: zKPJ1aUk7U9x8WVHRd4-RzORH30.roa (hash: oMQrL9GvdJqmjmfNbo6U4V/JwihFWzU7V32F6VSp6yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:f5:68:15:41:96:db:c1:38:07:a5:6d:d2:86:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: Jul 28 22:01:09 2026 GMT
Not After : Jul 29 22:01:09 2026 GMT
Subject: CN=b3a23f36e7a2b60b8faae358b37867c8a8b46d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f0:98:3f:8e:c9:f8:45:b7:80:88:bf:b2:c8:
a6:a5:8f:ce:42:2f:fa:10:ce:62:17:12:2e:f7:e9:
e9:84:de:9f:a7:2d:0c:3b:5e:42:57:78:82:3d:d9:
e0:28:07:c3:b8:46:d2:62:be:2c:10:81:b7:e6:34:
19:dd:d7:3c:7e:c2:9f:96:4c:eb:c7:70:88:c8:bc:
f3:63:d5:46:59:0f:66:3d:a8:7f:27:fd:cc:28:05:
5d:a0:9e:f2:4d:fe:48:12:3b:2d:d4:98:e5:1a:d3:
38:5d:37:7c:39:6f:82:62:8c:4b:66:2c:61:eb:c4:
0d:e7:1d:b9:e7:bc:08:1f:42:eb:78:68:84:ce:35:
ec:46:32:8f:32:ab:eb:d3:27:d1:f5:a9:a0:52:37:
4b:32:fa:dd:a9:50:37:4c:71:4c:63:a8:44:05:12:
95:2b:ee:20:0b:ac:d9:92:f7:5d:99:50:9a:69:88:
02:26:5b:a6:5e:c5:54:ed:2f:a4:a3:00:a7:35:86:
6f:8b:73:8f:53:63:b0:7c:b5:a7:1b:cf:8d:cf:34:
27:1e:da:f1:53:e2:2f:d5:8f:79:20:5a:0b:2a:db:
dc:17:e4:b9:e9:4b:aa:36:7b:12:92:08:4a:de:df:
41:90:e5:42:8f:47:83:02:ae:cc:27:2d:8d:2e:ae:
f5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A2:3F:36:E7:A2:B6:0B:8F:AA:E3:58:B3:78:67:C8:A8:B4:6D:77
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:03:77:58:e1:0c:36:68:fa:e2:f4:9b:a6:d1:04:7f:d0:71:
3d:c5:c4:50:38:69:33:fc:7e:63:61:30:42:c8:61:48:86:c9:
e9:f4:6d:06:f5:0d:e2:1a:7a:e8:1d:7d:75:4f:1f:3e:bd:a7:
70:cf:01:27:d5:c6:1a:c2:61:f2:51:42:2b:c5:1a:7c:f5:33:
f4:b6:84:1c:1f:83:af:57:78:cb:36:68:7e:0f:0f:f8:47:dc:
22:e6:95:cb:e3:e7:83:7e:60:93:41:24:b5:42:b9:ad:67:d1:
d3:ea:6b:60:15:1e:73:f0:90:b4:ed:e0:f9:c1:51:9e:5a:15:
14:bf:ed:27:30:a4:1c:e9:c1:a9:4a:5a:da:f3:1e:ba:a4:40:
1b:7c:6e:ae:ad:df:eb:13:aa:a3:92:7a:ad:39:11:6d:b3:f0:
60:91:f0:5a:b4:b1:5a:95:f9:ac:30:d8:f9:3c:97:bb:6f:a1:
27:ab:f2:01:37:ac:ee:a1:d3:94:f4:aa:f5:2d:3a:a7:cf:f0:
51:ef:6c:57:aa:3c:bd:95:40:60:d0:61:77:12:da:2d:db:02:
e5:95:59:60:27:e1:74:ae:7c:f6:d5:59:ce:ed:fd:33:f4:75:
b0:e6:a9:07:8b:f5:73:82:fc:c4:c7:11:33:28:74:00:2e:42:
c1:3d:f5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:58 2026 by rpki-client