
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft
File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json)
Hash identifier: tZCsXQ3YUuQhahCq+sKm6PPmBljYgW/4d/rkuEyMCOM=
Subject key identifier: 3A:C5:BD:B8:65:25:2C:CF:C0:A1:1D:CA:59:25:D3:F3:D3:43:D5:71
Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2
Certificate serial: 019FAB9A6697D76346303935E4DD2EA63627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft
Manifest number: 19E2
Signing time: Wed 29 Jul 2026 02:00:50 +0000
Manifest this update: Wed 29 Jul 2026 02:00:50 +0000
Manifest next update: Thu 30 Jul 2026 02:00:50 +0000
Files and hashes: 1: 0PS11i5r6_XriyYDfmzviKAWbi8.roa (hash: BRU05EVEvYBbrW5Q+knCe4k9JjLCUR0KR3nHL/L/63U=)
2: BE2mEMqXoD5W-rYoEN42UUzsleE.roa (hash: FSSNupkI6ZKtnmsSmt58MJHjD7OKdKEzjPUgRieAqHM=)
3: FzYQ8UfkOoXbLMAefaap0q8s5jo.roa (hash: uu0TxkfB1szooYSk1YRvasc+kONIbxD4r+CRWDgwPzQ=)
4: JcLTA0-qn4cquSouPyluInvPpYs.roa (hash: KJNyyHE6CpQFleLIlWbocpdXYFfQUGuvmGs2OkgCYQs=)
5: NjoBWFZasR4u5kKYBTzr17mcUXo.roa (hash: 5hFL56Dz1c0tBp4+xkoRBXQC3H4xXKPV9W/AB2fy/u0=)
6: Q6tmJsk2LzP8aKKZOFRvTtKlV7Y.roa (hash: 6O+cQ6PMg//nmlkDWEnYP8/rkGuPnhqX1I2FvbDOgXw=)
7: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: O6gkJXcMFu78T8Zz3hYwwguri94dYsGycfFYgzGnYc8=)
8: ZhVI6A7yr7ri4GCLLeKZeWj0x0g.roa (hash: RoqCMqDvqASNbsfdIC5YDSePIlxj7YcloZ7cYASt570=)
9: aB8YsQajO5vsG_dGMtQzCv70utE.roa (hash: ucgRD6r1Y1kDsBy85mHGSMRU5Fdf30W1uPDxejD/J18=)
10: i84_9A8NDIa-TzE1ChHrbwaZBN4.roa (hash: 7m4WiAjdci3msjrn9oh8ACKLzakLr8+uwG8wxrFXysE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:66:97:d7:63:46:30:39:35:e4:dd:2e:a6:36:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2
Validity
Not Before: Jul 29 02:00:50 2026 GMT
Not After : Jul 30 02:00:50 2026 GMT
Subject: CN=3ac5bdb865252ccfc0a11dca5925d3f3d343d571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4f:be:9d:98:db:f1:07:13:7c:f8:60:46:55:
67:d0:71:77:4b:0c:17:01:ef:fb:29:26:4d:d3:0b:
3f:bd:d2:95:4f:ac:17:b8:33:e7:80:9d:2a:c0:18:
13:44:8a:b1:d9:ce:c7:38:16:06:a8:1b:38:68:4f:
e1:9d:94:77:b3:67:61:54:64:43:8c:f3:39:89:c7:
03:a7:53:43:eb:6f:29:ea:5c:c7:f8:1f:06:51:9d:
26:67:24:e6:df:36:c2:02:4d:fa:c1:33:bc:aa:d9:
81:a0:f6:ed:ec:ba:83:dc:46:8c:87:1d:0d:c9:58:
bc:6d:b9:96:18:4b:20:7f:3f:7c:2b:9c:07:16:46:
87:7c:4b:06:29:5e:ad:07:2b:bf:33:16:1f:23:d4:
d5:a7:5f:58:f8:ce:67:fb:d7:7e:26:61:c4:68:04:
f4:79:74:0f:9f:be:cf:a1:4d:3b:f3:d8:e2:49:65:
db:90:56:7d:62:7e:b9:c0:b8:fb:4f:15:d8:49:da:
7d:47:73:75:4f:e2:0a:3f:2a:bc:6a:11:c6:b3:dc:
cc:c1:aa:a0:d7:37:79:46:a8:00:37:a8:6d:18:e2:
84:61:c3:92:e3:8b:05:34:94:c9:3d:6c:8c:34:fe:
5d:49:24:1c:ed:df:e9:af:73:36:17:3b:b0:68:68:
08:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C5:BD:B8:65:25:2C:CF:C0:A1:1D:CA:59:25:D3:F3:D3:43:D5:71
X509v3 Authority Key Identifier:
keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:98:fb:d9:c4:7a:6b:91:f3:de:33:59:38:d5:ec:6a:03:b8:
73:aa:52:d3:d4:b9:64:96:b3:3d:5e:fc:11:4e:c8:b1:41:c6:
ed:0a:fa:07:06:54:a5:34:0e:8a:a3:56:39:97:c2:c5:08:60:
a4:93:2f:0c:1e:a2:47:ac:84:24:6b:98:04:ed:05:b1:f1:a1:
9f:85:9b:31:55:7e:fb:82:e8:5b:64:50:bd:59:67:c9:00:98:
fd:33:8f:33:6f:14:5b:9f:d9:7c:22:e7:77:04:74:97:94:20:
c0:cd:75:f4:b5:aa:e3:0d:b8:3b:fe:f4:79:64:6c:63:9b:7e:
01:fb:a7:db:98:36:d6:1b:c5:63:82:32:ab:1b:73:a0:b7:6a:
d7:eb:9c:97:66:c3:fd:27:e0:78:2f:92:a9:a3:cd:42:3a:a3:
94:29:ab:23:41:66:a4:e6:46:2f:5f:24:2b:0b:bb:65:80:8a:
5b:0c:9f:24:24:23:05:32:ee:7a:9e:65:6e:05:ad:88:7e:67:
4c:b5:f9:4f:cf:96:97:2b:c4:68:ac:60:c2:96:da:0f:72:19:
f1:e0:b5:a3:e2:75:04:c8:6c:df:76:67:fc:10:a1:4c:5c:6f:
5c:fd:4a:e3:d8:86:c2:f2:b5:da:f8:5f:47:92:fc:e4:33:7b:
74:ec:55:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:51:51 2026 by rpki-client