
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
File: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft (raw, json)
Hash identifier: d/KkKuZ96Rf/g0rbSZ711UloVOmZ3KGS9sqYz7Helj4=
Subject key identifier: 39:D0:BF:F9:0A:B8:A5:97:7D:2A:87:11:4A:EB:8A:AC:C8:88:E9:FA
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 019FAA50D8A80D819B202EB879F64E88C84F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
Manifest number: 19E8
Signing time: Tue 28 Jul 2026 20:00:52 +0000
Manifest this update: Tue 28 Jul 2026 20:00:52 +0000
Manifest next update: Wed 29 Jul 2026 20:00:52 +0000
Files and hashes: 1: 1--f8TOFOHJxy913_bnxbbB_I8Ps.roa (hash: wDKAE8eJy4a/Xju9oL+J32sQIgyfZxer9kQNnDKALh8=)
2: 1-jH0g_JDLp_7206NgV5uijHSTJE.roa (hash: LRjP11l8Yg7jbG4bbfhfNEvQDZIpDubQ+TvWhkwjrcQ=)
3: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl (hash: KtBUwhJSFmOwtGKGMvny7+B/v30f6epDGbTYoBci+/c=)
4: 1-zOd1kumaIlRrXPMfMdhndo9duk.asa (hash: J313kMfLz/jeTLF4rt+b3BkZqWQAyhsRwo4qFMMY3+c=)
5: 3GG8eWEP0AsTR5hlJBndfjSVqXE.roa (hash: OqQ6t5k1StJuUPb2wymY353zmLAJ5m9iQ1cfSGHhatc=)
6: Ew6t29Ei1xqX6fCJJvzPjV0QQx8.roa (hash: JiMbHLWrOkAjKxV/HgN8hcqfDizA3AaG0pNVT8kgBVI=)
7: OS72UUjy1jIbO6SLm4_mGk1QjoA.roa (hash: JCjobLuVUg3x2yIR7Yj0jA3s02kdH2wYADkCYAZAm6M=)
8: hlYcdx1ybU4O_N_wWLe8kEQOPAA.roa (hash: g8sRkVv7AmG02gcDiKwncGvtRS2uuD1b8FmdkJIrmVQ=)
9: iY5E0iZ2YmwSRo1oZbuozkzcREs.roa (hash: XAB0LIhnvafntszSPTz4cfq/KAQxwohiu0F5a96UkOU=)
10: icspBYCC63q1vNy_EsXnZosS_IU.roa (hash: 3NUI/DqhsJ55TwYWG35Se4xjLYr3z+ZTAvaw34Ss74M=)
11: qWmrXkuHj_sWsoWUwUEWOmRpZO0.roa (hash: MHfvuh3eLEasmU8bZ+QtTWQpVIX8pvTM+Puzp/lNHV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:d8:a8:0d:81:9b:20:2e:b8:79:f6:4e:88:c8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: Jul 28 20:00:52 2026 GMT
Not After : Jul 29 20:00:52 2026 GMT
Subject: CN=39d0bff90ab8a5977d2a87114aeb8aacc888e9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:a8:a4:2a:5a:1f:70:2f:cd:b9:68:b0:77:
27:e2:22:ac:19:76:57:7d:05:d8:dc:43:6c:11:42:
8c:82:92:0f:57:85:e1:27:76:42:9b:7b:c1:40:73:
78:75:3b:60:70:06:c5:f3:39:ad:99:f2:84:33:67:
56:96:19:11:ba:f3:65:94:e7:95:cd:44:5d:a5:0a:
64:e8:73:66:13:5a:8d:5d:ad:bf:d8:f6:d9:fb:dd:
71:f5:fa:ce:b7:92:fb:5c:96:61:28:1d:b9:c9:fa:
8a:d8:1b:0c:8a:3b:ab:e6:f8:f6:c1:c9:9f:c6:2f:
92:44:2d:7e:87:cd:67:75:23:75:5b:26:fd:da:a6:
6e:e5:69:5c:d7:ff:00:be:b7:1c:d3:56:a6:84:72:
33:09:c3:bf:fd:b1:ec:ec:37:e6:47:aa:a5:fc:02:
5d:37:ed:cd:a1:60:7d:e2:05:95:33:45:05:55:fc:
c6:ad:55:87:9b:2e:9f:59:71:70:26:7f:9d:be:04:
fe:dc:18:4e:78:01:ae:8c:64:23:d2:39:4e:60:b9:
a4:08:c6:03:c0:74:e4:ab:5d:ca:04:56:c9:79:cc:
2f:d8:cb:75:62:fd:40:03:f7:80:cf:b6:43:0f:5b:
e5:0f:c1:9a:e5:5a:8d:ac:76:54:59:f6:5f:3e:2f:
57:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D0:BF:F9:0A:B8:A5:97:7D:2A:87:11:4A:EB:8A:AC:C8:88:E9:FA
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:03:95:35:99:88:2b:09:b2:4a:d3:d1:a9:48:1d:f8:a5:c3:
57:b4:e3:cd:92:9e:f0:66:81:8f:dc:10:65:32:25:11:0b:6d:
5a:20:c8:8c:33:6c:f0:f5:37:a5:80:e7:70:75:15:ed:e9:ec:
81:53:e6:83:7c:24:96:fb:b4:d8:c3:39:98:90:99:d2:95:77:
18:d4:e6:ec:a2:d8:8a:28:8d:30:c7:ea:3e:e4:e1:18:da:17:
15:58:44:8d:91:82:c7:92:a0:8e:df:82:00:ca:2f:be:04:70:
dd:46:69:92:0a:2b:be:b0:12:1e:9a:87:aa:b3:b0:cc:1e:5f:
e0:25:ff:c7:18:9d:f0:ab:dd:cc:cb:3c:49:40:bb:9c:9d:cb:
0f:40:db:85:d4:a1:e9:f3:28:3a:6d:aa:b9:d4:aa:98:9c:32:
cf:84:99:00:ca:8d:f9:c6:5d:93:58:e1:28:1c:36:dd:45:a4:
fe:a2:3d:fb:73:a0:f7:03:52:1b:00:81:31:c4:8d:23:78:88:
68:3d:54:01:00:66:39:6f:d9:a5:c0:24:45:a1:b1:4b:96:e8:
3d:b7:d9:2c:e8:91:e9:e4:18:a0:42:03:ae:3f:47:c9:6f:35:
c7:01:a2:f9:46:22:ba:fb:fc:d8:d4:9e:26:48:74:22:c3:59:
45:58:43:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:15 2026 by rpki-client