
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json)
Hash identifier: 1sk5p0/h12bxhzLgQoxNtgcQNpPbLLUmUP0XzX1VrKo=
Subject key identifier: 18:91:57:94:C0:BF:8A:15:2D:BE:8B:45:D6:EC:A8:EB:4A:44:D5:6E
Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Certificate serial: 019EBFC93B6A4D4635E6666BFF49F10B343E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
Manifest number: 1695
Signing time: Sat 13 Jun 2026 07:01:36 +0000
Manifest this update: Sat 13 Jun 2026 07:01:36 +0000
Manifest next update: Sun 14 Jun 2026 07:01:36 +0000
Files and hashes: 1: 6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa (hash: Hi8ylLPtRW5cTPTLEZMSKMfBugZcDVTM9OMIUbfFA1Q=)
2: 9S4MfLquyh-qrUEKsjf9K5pPw-E.roa (hash: lDfP7Rw/AFVS5oiPjEygt8fOx4/sSpYeTHr+hNCy/Y8=)
3: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: isAvKPvJNWq1NYyCaEPdPdwkOuwxgfcHcRGr42k5PTs=)
4: eFOj6GS3QWx3LCTCCOeJMYOedz0.roa (hash: lFu71+7IA2r5yGUrDCeoEYffOjpuguSpQXtdqb7+Xe0=)
5: eklUJS2_Djtss2ru717v4kYti3g.roa (hash: xWdnp26vNQdhZX81YBA2whAixTtQ8EpVFLanadkwW6U=)
6: j4aPOI4c0SdvtsLU5py5qGdc5-g.roa (hash: bsFiCLCrhE/1RcQacPGG1ZYum/RU+6ALQdUjZFN36Eo=)
7: pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa (hash: PQ1PKNsZxV3X6qzBGN7N3OlK5qglG0fuEcuBkRu5Wrg=)
8: pPuYN3xv0sq-4zILngE0M1s1Mlc.roa (hash: l226Vj1q1kVjY3FHXrnuQl4C8mLmZwc1nh3ACqtnaGw=)
9: q19qERCShb-Y7JAltKkjwCPGd_M.roa (hash: yoUEi5A8cMILPVY4ZsR8L+GyUOqrJ2wvua2rTehpmZ8=)
10: u2LwB7JoPATisCyMgWUoyFBE2IM.roa (hash: zUkwX90Cn5pYIidpA9DzFJzrtYHxnLfOhDQRjwe5oPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c9:3b:6a:4d:46:35:e6:66:6b:ff:49:f1:0b:34:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Validity
Not Before: Jun 13 07:01:36 2026 GMT
Not After : Jun 14 07:01:36 2026 GMT
Subject: CN=18915794c0bf8a152dbe8b45d6eca8eb4a44d56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:35:8f:76:57:03:4e:51:b6:ab:8c:01:47:
e5:6a:ad:b5:40:7d:96:90:68:ff:e1:f8:26:98:f0:
19:ab:e1:ec:6d:b0:de:ce:f7:1f:2d:1c:d8:cc:9a:
71:0d:51:3e:51:ad:c8:4b:f5:9b:f7:cd:43:68:74:
31:86:7d:5e:d8:7f:bf:81:d0:f0:71:c8:45:02:ee:
2a:3d:bf:aa:7b:16:bf:17:68:a3:89:97:01:b6:34:
69:22:2c:ea:d0:80:84:57:0c:f3:73:22:35:0c:7a:
7b:87:bb:7c:84:2a:15:f7:30:cf:98:75:ee:45:01:
fc:90:e5:f2:f1:92:29:34:58:32:05:81:8e:81:87:
cd:6c:07:e2:b1:65:20:7e:fd:ea:43:10:8e:6f:8a:
3f:78:80:fb:48:cb:26:87:28:43:ad:35:ba:e4:ed:
98:ab:47:a1:61:ec:85:a1:c6:ee:cb:ed:1e:9e:63:
bb:8b:e1:60:2e:13:56:d3:96:6f:36:0e:43:ee:51:
4a:c0:aa:ea:0b:10:b8:91:e1:41:00:11:93:09:f8:
f1:8c:c8:e8:40:47:78:33:45:82:67:92:04:d0:32:
58:4a:82:d0:3d:d0:1e:d6:88:36:27:37:e9:17:2e:
be:30:eb:97:2e:2d:11:ad:9b:ab:8a:b9:04:01:68:
57:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:91:57:94:C0:BF:8A:15:2D:BE:8B:45:D6:EC:A8:EB:4A:44:D5:6E
X509v3 Authority Key Identifier:
keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6d:09:94:06:4d:ec:bf:e3:ad:38:00:be:8d:07:06:55:e0:
5a:9e:7b:ba:90:7b:5a:ff:c7:b0:4f:cc:5c:6a:76:43:98:2d:
00:9e:a6:72:19:1d:15:db:55:c6:a6:e3:c0:db:1c:f4:45:bc:
5d:ee:81:32:c3:ea:dd:e2:2b:44:e5:c7:3d:88:e3:db:67:fb:
20:f3:8e:bb:84:3c:d4:9c:6d:14:3b:4f:da:ac:a9:72:7f:50:
df:32:5c:2d:72:45:fe:38:70:1c:87:d0:63:88:79:d6:d6:50:
38:70:31:9e:62:c7:3e:dc:c0:61:bc:fc:3d:5f:95:a1:9c:a4:
18:95:de:cf:21:cc:83:76:ad:c9:d5:da:9b:25:54:b6:53:08:
30:e1:e3:83:c3:70:f8:65:75:a3:d8:56:0b:1a:8b:3e:7a:83:
f9:d8:20:f4:dc:93:6e:1e:2c:fa:66:65:05:88:5d:4f:3a:ed:
7a:f5:b0:c5:73:91:51:12:ae:54:7e:46:c7:e2:9e:a0:ef:16:
fd:d3:5c:b3:e5:de:fd:a6:31:cd:46:c7:39:ea:25:1e:a7:cc:
df:75:56:c9:f5:fd:c3:d2:b9:26:37:18:3d:4d:86:b4:b3:2a:
b7:7d:08:6b:b9:fb:b7:dd:51:dd:2f:81:bd:f3:10:c2:d0:d9:
46:79:a6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:50:40 2026 by rpki-client