
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
File: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json)
Hash identifier: 4fnt3RW9cTB0F5BGqrt6xAg7/I0FR4oQjF3EgIoi9v0=
Subject key identifier: EC:60:A1:0B:EE:ED:2B:05:A2:1E:07:BC:E9:D8:0D:42:6F:75:7F:C0
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 019EBEB6692CEA6F31F7F898E5511591699A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
Manifest number: 1255
Signing time: Sat 13 Jun 2026 02:01:25 +0000
Manifest this update: Sat 13 Jun 2026 02:01:25 +0000
Manifest next update: Sun 14 Jun 2026 02:01:25 +0000
Files and hashes: 1: 6cANbFm-EJrK8-PMA7NyEk83u6k.roa (hash: jYdd/eqOCPnLV/a9ltPhyg+PE8hVFdwnP1KBbgFBkI8=)
2: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: Y0N79yPUuwAI1+Vk3ipByEclEo8p5HfNgvX9mkoJCW0=)
3: EuqppgZcuvBd77APj6BJDc66El0.roa (hash: Pou/5mkV9ShqmcqFaVCa6/FpNsjCyEKxq/5LPM8oRyE=)
4: F5f-3aC06oFfat6kysD7KzPEy7s.roa (hash: uf9RFkZjIVlqZ17DS35sOy7dY67XFR7qpT1cpxsxJnM=)
5: GkG94oLLyaWn0LlA7PecrXl0W9M.roa (hash: Vz1DhIY+rwizM8CF8BSBpl44BncSNC0p93dQaqvmHIk=)
6: HAJo40Wzweef0-HmgppS7_KBVno.roa (hash: Md/aD3NC3DChGRJq6Yp2XnMr5nwvrS2wV2tIMtwOW50=)
7: KLI9lQwUC5VTV4Cut0plGC56kr4.roa (hash: rUAMk0OUXXf0cF+q5isqU/kNi2S0D4fL5AOOV6b9LlQ=)
8: KTMyv7vLJL4RhzKJMxYv2Q04XU0.roa (hash: qlz3neHso26dPUfoq0gD9odJX4heiGA404bEQ8650r4=)
9: MKJ3r_4TKeocUaOcCqRhoBecjmM.roa (hash: E+tQHI9Z8HzAp+AQr7VOtuEt3TaI3sVfC37jnLib12o=)
10: NpomuMBzJVKQYcl-LphdVCYzfR0.roa (hash: ItHWcgevCY69vj6UIFo76di+HZvWbt6e/RbdJHhjvCE=)
11: OX8T0Loeee2SJyDfY3tEnifOFiY.roa (hash: WUtUuVCFbswJZDfkLKymBevKbkG13uZEO19XKdd+n8M=)
12: W8YNXsX9yPDFPY_juFzIPJCKU_I.roa (hash: +blIAp8nmqZRBhHxpcV2UfhK4Uk56S7wQ9UO0lHBgcA=)
13: YGyJEvwnW0WQ_NWAEj7vFCxCxWA.roa (hash: 2C2bEc32YpX5NyOiU/D+IWaEQi+cpjyPUf9gHuyinOg=)
14: ej_ULItssuJKfpG-aO3TpOCfAcM.roa (hash: MuVT+NmseLKCBtNzkD2hqoLRxqqBtVBwn/7W4rZMBJE=)
15: h6iTojqaXm32u7BLTwm0z2ziaCY.roa (hash: LjbU3TQQa1ApTEOwMzVmaLwPfpE+NGA0goG5pwMkhxw=)
16: ivG7FB0OuHZtaPx3ueruCQJm-VI.roa (hash: 5+fSISaJZ6MVlJNLKKnuDnQodZYydtzTRLt+3siDb90=)
17: kEEHiJ2_DoC2VfYdw5LhFhqepV0.roa (hash: wMCNRdrXjQmrhxah3XAz6wjU2Gf/YcDDzzpq9SAnAXc=)
18: k_yt6Ew5vZOiqYJGMvVI2kUV5V0.roa (hash: CUNe6MGDt6axlDbgIXUKB8iPiYMZNW/hw7m/AwCnfis=)
19: ladaJsKVTuv3YGDi38_Qd9THC0w.roa (hash: ElU3llDhKBNskVBOfdbOzFuE0cAaPwlyq6retebHVjQ=)
20: mHQ5lGsBLY58ZqsoI4KyEoGAaCY.roa (hash: qjy47Jf6cTEpCMuTgzO1n5sViPKiS4UbTibv345I4as=)
21: qABofJud5u1thFUHFuMgR1s31kI.roa (hash: piC9Su6MbkEuGjwZYHRT2b414PhCD/em2J4HZaBllmw=)
22: qG2nNWb8MqqDopUB1tVODEkVl6w.roa (hash: cfGFab+OgFf7ubny/5LdmUqIORuyuUqS67/jyuUGkNM=)
23: t0bWLuL94obKt0o74dC0nCo7fYU.roa (hash: tfVFhgnQItxhSLrWx/IEzAzrrjR+KQ0zeBMzi4U648M=)
24: uuHljZPCvASdL1cahmx3sk-UM6k.roa (hash: YZhlBGblOcfxdLBJ41C2ivgjxSeLyB952u1KN3aoLfw=)
25: w-vsZluT0kZh5IKRYyErUh6E-YI.roa (hash: vQYBg15m1Mue8LpyOtOXWxkLMHHfT9+KR8TqZPcjtHU=)
26: zetNVI_5RmQ_9yMT7BWp_EHTd7k.roa (hash: BSZVF8mXcpYwrxryg8NDVMtvr+dxn8y1JxLoHLq3VvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b6:69:2c:ea:6f:31:f7:f8:98:e5:51:15:91:69:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jun 13 02:01:25 2026 GMT
Not After : Jun 14 02:01:25 2026 GMT
Subject: CN=ec60a10beeed2b05a21e07bce9d80d426f757fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:06:62:8f:a8:6d:a0:8b:b2:12:e8:8e:fc:
91:b9:a9:8e:39:93:47:ae:14:04:14:48:f3:08:ec:
1a:51:60:a8:cd:09:f3:f6:f5:df:10:da:5e:29:84:
50:46:15:7b:7c:b8:53:cf:71:3a:17:4c:f5:35:0f:
85:70:97:76:da:1f:f7:12:c8:26:b5:f3:62:c5:8b:
f9:7d:b7:8a:5b:fa:44:cc:b8:cd:b0:ae:17:42:f1:
a3:9a:93:79:26:b7:ae:69:fa:74:59:a8:75:1d:3f:
75:c5:d9:17:74:eb:ac:1d:ac:43:09:e4:74:2a:5e:
48:64:69:2f:60:43:36:6e:84:e7:33:f6:53:90:9a:
fd:9e:b6:9b:25:1d:2f:75:ac:aa:b7:95:8c:7d:0a:
6b:40:10:c2:eb:fa:21:30:b7:66:ec:2b:a2:30:e9:
43:99:7e:99:da:70:6d:f3:03:59:04:b2:98:65:70:
37:12:54:4f:f8:89:88:52:6a:b3:67:a3:76:14:df:
a1:fb:4a:89:1b:43:83:64:0a:65:36:ba:3f:9f:9e:
e3:c3:7a:7b:7b:78:5e:8c:05:12:b6:01:ca:3a:31:
e7:d2:5e:1e:d6:4e:56:b1:5c:e8:8d:9c:07:6f:a9:
1e:9a:2c:a5:f8:f1:1d:6d:d5:ca:f8:bf:b3:cd:4d:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:60:A1:0B:EE:ED:2B:05:A2:1E:07:BC:E9:D8:0D:42:6F:75:7F:C0
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:cc:14:3a:54:50:ab:0f:6c:5a:b4:82:2b:d0:e6:b8:89:8c:
ea:55:af:f3:e9:6d:b4:ef:6e:31:2d:8d:a5:0f:f6:e7:fb:00:
68:51:49:4c:7d:ad:3a:c9:3d:6a:e8:f3:4b:cf:b3:b9:8a:3d:
d7:89:59:17:60:f0:ea:70:b1:b7:81:e8:2f:52:73:56:20:a5:
f8:90:1f:b9:79:fc:cd:02:28:d9:ea:5c:aa:ae:3b:08:35:b8:
e3:68:e5:01:f1:8f:e5:14:45:b8:23:14:8a:dd:3e:fe:b3:1f:
ea:b7:79:45:37:69:a4:78:ee:aa:90:14:9c:34:3a:7d:62:17:
66:9d:1c:65:d8:57:75:ea:8b:10:b6:40:81:0e:05:6e:70:22:
93:28:8a:6e:46:05:e4:9f:c4:f2:75:1a:6c:f5:36:74:58:95:
0e:c5:e9:7c:de:f6:0b:5c:99:48:f3:6f:04:a5:ce:8f:ca:73:
45:58:bf:15:47:b0:87:b5:be:38:13:b6:39:d9:59:56:c1:cf:
be:90:ce:a7:fa:29:ee:aa:9c:e9:c1:ef:fa:cc:cb:67:c5:0d:
02:6a:9b:86:4f:7f:ce:2f:b1:5a:4a:20:cb:25:b3:2e:53:79:
19:db:99:d6:51:81:f2:39:2c:24:8e:95:66:7d:e4:b1:a4:af:
ce:f1:dc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:26:16 2026 by rpki-client