
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier: Vm6csYBAb3dfQ85l099kLovDl+XbsTMhKyREMM71O1U=
Subject key identifier: 18:45:3A:05:D9:CE:7C:67:40:74:8A:13:D9:60:5D:64:A9:61:F3:10
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019FA8D038D85FB091A8CFFE3EB209C25F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number: 16D7
Signing time: Tue 28 Jul 2026 13:00:46 +0000
Manifest this update: Tue 28 Jul 2026 13:00:46 +0000
Manifest next update: Wed 29 Jul 2026 13:00:46 +0000
Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
3: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
4: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
5: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
6: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
7: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
8: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
9: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
10: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: Ri8MbmIyIF/RY3FdVv4aOGfP6JwBMGac8zHdhj5Wb1o=)
11: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
12: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
13: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
14: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=)
15: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
16: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
17: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
18: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
19: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
20: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=)
21: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
22: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:38:d8:5f:b0:91:a8:cf:fe:3e:b2:09:c2:5f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jul 28 13:00:46 2026 GMT
Not After : Jul 29 13:00:46 2026 GMT
Subject: CN=18453a05d9ce7c6740748a13d9605d64a961f310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2a:a3:20:fb:1c:ae:b1:f2:b1:28:a6:5b:c7:
94:a9:dd:6c:45:16:d5:4e:b6:c0:ba:c3:3d:b4:f5:
ee:d9:f7:92:f5:f4:c5:87:85:97:31:4d:ba:05:13:
d8:24:c4:2f:dc:f9:c9:38:50:4a:59:da:be:1a:3e:
dc:e5:a6:48:c6:b4:86:be:89:b9:72:08:03:18:5e:
cc:22:9c:0c:de:ea:05:02:93:b9:86:a8:c2:4d:db:
37:fe:6d:a8:15:11:9e:2a:1c:f3:93:e2:13:21:18:
4b:3e:ef:1c:a5:35:93:0d:52:30:dc:a0:a0:45:4f:
98:72:37:ec:de:3d:7e:46:32:f5:78:f0:c6:55:c8:
27:47:ec:6d:d7:14:d4:88:96:10:43:29:e6:f3:0a:
14:dd:ad:84:b9:fe:b0:e0:2a:ce:fb:2e:ce:bd:e8:
a2:a4:77:12:4d:56:a1:8b:55:4b:bf:51:bf:08:3b:
25:f9:29:8c:5b:f1:27:1b:1a:45:93:1f:64:aa:ba:
30:fa:6d:cd:59:26:ba:c6:e1:d3:96:36:fa:1b:da:
4d:11:98:f8:f5:09:99:6b:3a:2a:20:af:f2:76:e6:
63:a4:f4:e5:37:ca:91:66:4b:78:be:0f:49:5f:bc:
ad:76:b0:3d:8a:a6:89:a4:f9:0a:a7:32:27:fc:0d:
74:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:45:3A:05:D9:CE:7C:67:40:74:8A:13:D9:60:5D:64:A9:61:F3:10
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c5:92:de:7f:f0:41:79:3b:b6:61:a7:52:61:52:28:df:8b:
a6:25:f4:46:5c:75:b2:35:78:a3:64:cf:f2:7b:d4:61:ab:48:
83:5f:5e:98:30:52:fc:3d:28:95:4d:2a:2b:2d:7c:98:91:a1:
1d:7e:35:08:aa:1f:35:81:95:86:30:6a:e3:d2:84:8d:17:5a:
49:bf:f2:1a:83:44:a6:65:af:f4:c5:b9:9c:cb:0f:6f:54:12:
4d:ff:12:cc:d3:5a:95:9b:30:c7:b5:28:2b:ec:07:ac:a6:f4:
69:62:19:31:bc:90:ce:1d:ab:6e:70:99:2f:5b:4d:f1:e7:d2:
a6:5b:94:31:fc:0a:8a:f0:dd:11:4a:21:9b:47:35:36:c0:e8:
5a:df:a9:1a:be:aa:ec:16:a4:a6:1e:17:02:de:ef:ab:ad:c5:
dc:a0:3c:95:8b:f3:7b:87:0e:40:5d:21:6b:b9:35:ee:fc:9b:
f9:65:7c:64:a5:cd:89:0e:99:04:6e:4d:46:51:7a:f2:84:15:
29:8a:34:ff:64:bc:01:5f:14:27:51:9f:e7:7b:41:e6:90:fc:
a5:0f:5f:64:a9:8b:33:4f:e5:80:01:d8:35:d6:c2:ea:7b:ca:
db:e4:e7:9c:80:0a:d9:c6:ac:be:0b:1c:10:b6:66:3f:83:d7:
08:27:74:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:16:28 2026 by rpki-client