
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json)
Hash identifier: KqLdoU0LXlPhdE0LfbydUgjwSnAk1tE3YAxK6aPjqOM=
Subject key identifier: 90:31:C3:3F:DD:69:7F:EB:08:8B:2F:95:05:8E:1B:0B:42:7C:D0:B6
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 019EBEECC54DE1DDFD84990004B4C619348F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
Manifest number: 0FD2
Signing time: Sat 13 Jun 2026 03:00:48 +0000
Manifest this update: Sat 13 Jun 2026 03:00:48 +0000
Manifest next update: Sun 14 Jun 2026 03:00:48 +0000
Files and hashes: 1: 0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa (hash: TfGSU8XCSgVMZOD41y1990e2kIyriSC3XmqU7n3kfvE=)
2: 1M4CR97G2KsXmA_zCbIkIXY9AHc.roa (hash: GDf20c7QMRCTOktQNho+ECo62hgqNJJUdQUlkUBsHZE=)
3: 53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa (hash: Rge2VTZzY9AJwofj3q/Q6jFmREW3CoHsGJkonCRjf/E=)
4: 54lg5Z3PwYcVlmy8U--OorXyIRU.roa (hash: p4H+ojtQvC4UXZDuYUx4ZnC8qPB6jzl83dV6d963YfA=)
5: 6hrkGNyyTTSVf_rqftzyJaZfZm8.roa (hash: uZjY0XxhNwiqPz9+ZpU0AGGQSAkcGO0viC0E3iatgws=)
6: A20W_5_G6C-OdgoqlsDfQ4OCw2M.roa (hash: FALYlcnA+YtKlalF7N3tNk7RIjxbvPOkk+v0cemQh20=)
7: BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa (hash: MVsrvMO39kJoc0mZmN7diOxB9EcjZr9Z1pn5l5VbIw0=)
8: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: 6csqihByjbFgYYRGar3BVUaGdzMo4BjGUPcV01iLMDg=)
9: FgNKNW5B9puTce7TwiHPk7LKkM8.roa (hash: vwSEzoXOmoqMUtBgzMgDVlO/tkSbCfgKY6cTiF3Xr7o=)
10: I0pwg9CZMHqLfBbOSZRcrUCAXac.roa (hash: ez3uTbsX5XWKgBxDLIribBBe6QXM1/Sf5/DyeWPZIME=)
11: JkSkZz0V71DoQe9YMy_e5cmRcoM.roa (hash: DDSRfY0k5pw342j6cRoTFECAjnDvu5LmuTi0bOitYXo=)
12: P8CPGWFsawUMl03GCUpKnxbjjlE.roa (hash: GAHel1W64Z9n1z13wYSseROdcgB58qy+711XhLs0e+w=)
13: QJ1xM-I48uzO02IgPeNQyuOaUqA.roa (hash: 6rMIGe2ob2Y14JHRw4XfL4QGb3VCibvSBGXwMtcGqqg=)
14: a1bxge9RaAQ4hUbIUGzCCu-i2F4.roa (hash: a1kP5I90YhkZZI2m2BFKJdlp4Oz3OlMvq6wsOXlcI4c=)
15: aASnsFjaGSv1507L70pG1D3Mylw.roa (hash: oa7lWKQuw6P6CITW8+9RNGq86p0mYNRQt2gm7DcEnkk=)
16: aE7dmxNnMqlbMvLqgzOsP-ooEsM.roa (hash: yRZuNFGwI8VBm9671WQ3wPUuTbQ9RDPs60a0RaW0q3g=)
17: cFgdjeeP9MpYfV_2AUL1U_5M24c.roa (hash: 7BBXQ8Fn1Y9T8QvfmXuLGCX/jZRN0auG1tMDaE9RoLs=)
18: huTbYgpqurqxYkSbrMBeRshoxjw.roa (hash: XOmUVP6KC3R9djF2wr37Vopd4+qc2j38WB+awNW8Kn4=)
19: njGiyS1riv8o5Tx4DTboEJsmuyA.roa (hash: Jvb2eyKp3aYHDbslRvWJdCfA9jI/WLkz3iYOmnC0IPo=)
20: q6AprXpiRcVl5ELQQP4HzyoPU1s.roa (hash: y1TzMFIAWDqXBEbPleIWHolHXjF7gfy6B7SVOuVhNiA=)
21: rJ1qNlWDYbi69BE2ZEKvQVltAts.roa (hash: 9qgzkGC4YfmPbthdBZ7B/utLfGFA/3aVgJMfSvBGTpc=)
22: t5l7KHAEWqvhTIwVkhIeMMidR-M.roa (hash: A1nvslLXHKOUrzLO45L1cBt57BRFdo4XXdQju80rlCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:c5:4d:e1:dd:fd:84:99:00:04:b4:c6:19:34:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jun 13 03:00:48 2026 GMT
Not After : Jun 14 03:00:48 2026 GMT
Subject: CN=9031c33fdd697feb088b2f95058e1b0b427cd0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:e7:67:19:dd:e5:93:af:6a:af:e9:37:cb:
a8:3c:e0:7b:b3:77:98:ff:ce:58:6e:9d:b2:d5:29:
6b:d8:61:2f:4c:ae:a2:37:8e:2b:94:17:77:c9:38:
05:36:25:97:30:6d:fe:f8:28:dc:6e:7f:fd:ba:de:
73:2f:8a:da:91:a4:3c:74:d6:b2:b0:13:6f:b3:08:
dc:60:b6:c1:f2:d7:ab:a5:e9:08:fe:4f:4a:46:e2:
f7:9a:b8:e3:44:c1:dc:a5:c5:7e:a4:7f:25:37:3f:
7a:6f:97:5d:2f:04:8f:1d:76:e9:23:4d:cb:9f:8b:
43:2a:bb:0a:c9:e3:6a:a4:35:09:e5:3a:9a:b6:a0:
51:e5:a3:33:d0:43:71:c4:ea:5a:df:35:fc:3b:0c:
3e:24:56:43:7f:e2:ae:06:8f:0e:16:72:61:07:e6:
29:5f:98:cb:49:d3:98:4f:f7:71:67:e2:15:c8:38:
68:27:18:78:07:de:98:f0:b5:a9:f5:d1:6d:40:4e:
03:90:31:fa:25:9e:44:5e:57:ee:84:42:98:3c:26:
d3:68:72:06:35:80:66:8b:0e:d9:1a:95:ea:34:2f:
be:b3:8a:d4:0c:8c:aa:5e:49:eb:a7:ed:79:75:79:
a2:cb:84:b3:69:46:31:74:88:11:df:d3:fb:f3:7b:
95:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:31:C3:3F:DD:69:7F:EB:08:8B:2F:95:05:8E:1B:0B:42:7C:D0:B6
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:09:d3:36:89:e7:7f:e5:4d:2f:56:63:e2:65:ce:9d:34:18:
a1:47:a7:35:c9:df:10:d2:e7:6c:4c:ac:0a:13:65:d8:0b:d8:
e1:51:b2:8a:2d:21:21:95:cb:d5:2e:de:11:98:71:04:35:d9:
83:db:11:d6:ed:df:1c:43:f3:60:03:8b:42:6c:60:20:72:4b:
e5:26:12:bd:43:e4:bc:95:8e:8c:d0:2e:b7:6b:ac:fd:54:e4:
b3:c9:52:c9:46:fe:dd:f1:eb:5f:68:2f:ed:60:74:8d:7d:69:
17:ba:a5:16:06:bc:6b:f3:70:5f:70:00:e4:38:2c:8d:e7:e8:
ff:87:30:20:22:82:4e:cf:fd:eb:20:5a:e0:7b:31:5c:7e:ed:
0c:ec:0f:47:ce:f6:3c:4c:d2:6f:58:92:ca:ac:74:31:b8:93:
24:a0:56:19:cf:bf:7a:c7:9d:96:94:4e:e3:b8:44:e1:43:d6:
3a:df:53:2b:08:07:f6:85:ef:4c:39:ec:51:71:4b:e1:04:af:
4b:99:6c:41:d2:f9:08:ab:71:5a:b1:97:92:cb:65:11:77:0e:
d6:ef:5a:2d:fe:e3:43:8d:d6:4e:e6:37:14:7b:8c:5d:34:77:
75:a7:39:36:be:c7:6a:48:8e:ca:a4:34:ae:2a:f6:ef:ed:1a:
03:01:52:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:37:46 2026 by rpki-client