
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json)
Hash identifier: FbamVhhkl2Q9pDeQ95psf69Lq8GKAGO1ivYj9leBfzI=
Subject key identifier: 3B:43:3B:48:1A:D0:7B:F8:BF:31:62:7B:85:1E:13:87:77:5B:B8:B8
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 019EBF5B3827AA50EDC98E0960840EB251CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
Manifest number: 10DC
Signing time: Sat 13 Jun 2026 05:01:26 +0000
Manifest this update: Sat 13 Jun 2026 05:01:26 +0000
Manifest next update: Sun 14 Jun 2026 05:01:26 +0000
Files and hashes: 1: 0sTykt04zhafsgKWmG0fpAc6Xi4.roa (hash: s3D/zF9I60gRgjWMCWnW5l2vwcfUO0zatEx48bleBv8=)
2: 13bSAbvbvGDWUO5yvtSsKXnlK94.roa (hash: DXldFZAd6AGXUWvxh5LvcSzCrQoe+CYXwhAGhk24KDA=)
3: De_n5gWs77mFUbESDcEhMP4Zgu4.roa (hash: 6EezXySVgGXz55sVzTpFqjj+QzByDEb/wr63m1U01ek=)
4: T5zUGgRal9JKPPCQ5ILhLwlQlHM.roa (hash: YHDYE65RL2KgOZOOjjz6vjoQjHzxsBWW9qIdkVOIzBk=)
5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: JslUzvVBxu/jtMNhWI8e5wJuPfbB2Z+aI7BjUxWfj2c=)
6: Z943jXHlAqEjC8HhkAmn0vuwcbY.roa (hash: zwEb4pXvmmR3brxpaMTgJgnaLu7vluGbc09IMA9MXt4=)
7: aZEJdlE8rryKdFsxcXIyoyt-SOg.roa (hash: BG6zGbPXxvvnXkdjQ9fWCyghzw5YTxYUyEjcqpnK0GU=)
8: d9cqCh7w_HREeS5tpm1EQv7bdkc.roa (hash: DnP+rNEbo3897fPDs3e26jS0WYx/AYH67Gkmxad3fpM=)
9: gxtTMluPb7DYJgy3wd0DpvfzwWM.roa (hash: fBS9RrpCcxHbEWQUD3mBXd03agLj4TXtQErbhFsWylM=)
10: kCoYCOa0aSPUd5aTKPlExBlfEhw.roa (hash: zI+RjbSOrq8P/7v/EkD36oGJO3KdfzSf7MtA8j+FrxI=)
11: rCdVkvlt_G1LGQUde5JSbjVQWY4.roa (hash: cVPKC03A+0G/4nVl6AX0govpW+3dUmuY6t25DXrvz8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:38:27:aa:50:ed:c9:8e:09:60:84:0e:b2:51:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Jun 13 05:01:26 2026 GMT
Not After : Jun 14 05:01:26 2026 GMT
Subject: CN=3b433b481ad07bf8bf31627b851e1387775bb8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ec:ca:bb:29:eb:cf:1d:b7:19:c9:db:fa:bc:
7f:55:0b:a5:e7:d2:d2:67:f8:95:1f:68:ed:59:66:
05:1f:49:99:12:12:4f:e8:67:56:54:75:87:b9:9b:
ae:e6:33:48:3e:6d:c0:a7:fe:1d:2a:57:5d:e5:67:
84:51:5f:5e:7f:a5:00:bd:82:1f:dd:dd:0d:22:07:
13:e9:fe:ed:08:84:6e:dd:ee:01:65:e7:8f:b6:c4:
22:24:fe:53:fb:f0:32:1c:45:1c:09:81:cc:02:cd:
7e:9c:0c:8f:dd:ca:65:0d:80:21:6e:67:26:c1:8c:
e7:64:44:ff:35:fe:dd:7d:ca:93:bc:3d:f1:b0:09:
f5:15:5b:26:be:34:bd:b5:09:c6:5c:fe:a8:2f:fd:
6d:1a:f7:b9:6e:d1:83:91:3e:91:cb:01:d1:2a:8d:
f8:3b:23:57:2d:0a:19:ca:b1:e6:cb:b5:21:29:c7:
c0:0a:4b:0b:2b:57:b7:f6:6c:26:8a:fc:91:ba:08:
1a:c6:88:47:aa:21:a1:89:d9:d9:19:ed:0a:b4:32:
e2:a4:54:12:65:69:ff:31:8f:de:1c:eb:6d:5e:03:
0b:2d:fd:c6:53:a3:e2:06:4f:86:63:2f:f0:aa:60:
b0:8c:48:10:30:a2:49:77:d2:65:dd:49:30:1b:ac:
2b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:43:3B:48:1A:D0:7B:F8:BF:31:62:7B:85:1E:13:87:77:5B:B8:B8
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4c:b2:8e:68:66:ff:95:c9:9a:ba:4d:1c:ce:b6:f7:43:af:
6b:ea:cf:b8:c5:cb:df:df:73:4d:70:4d:e1:2c:74:b8:04:b3:
0e:10:0c:cb:c2:09:b3:78:d4:41:33:f4:ec:20:da:2f:30:4a:
76:c5:31:8b:1b:17:cf:2a:74:ac:97:cb:9b:14:ae:c9:6b:cf:
48:b8:42:b8:4b:52:6d:c6:81:32:24:03:ca:fe:59:17:1c:2c:
8c:cd:a4:61:84:ac:a9:f6:1d:54:b1:f3:9a:f4:fe:c5:f6:fe:
bf:66:6c:0b:30:50:94:41:7b:16:a2:4a:5e:29:87:d7:bb:9c:
d9:7e:a2:5f:99:a0:1c:a2:36:96:0c:62:42:30:ba:2f:ef:73:
d7:24:44:0a:43:e3:5e:bd:5b:5d:15:dd:11:87:e1:cd:87:5b:
df:4f:2e:98:a8:0c:c3:d8:f6:7c:3c:a9:30:f7:31:30:7d:a3:
05:f7:15:c4:3d:8a:ef:3a:db:64:ef:48:1d:e0:59:3f:19:98:
6f:d3:b5:26:cc:8a:83:33:b2:7d:de:be:32:af:52:f3:e4:a0:
a0:d7:a6:d2:3a:18:f6:17:c2:c7:5f:9b:ce:cc:81:80:ba:13:
e1:6e:77:e2:ad:70:8a:ee:1d:11:2e:4e:1d:af:a1:2c:5e:87:
65:70:f9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:36:59 2026 by rpki-client