
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json)
Hash identifier: HMKKQ+PWnn2Pq9FcUGGSyUmOXw/UFUEv8GkAgUsmJrk=
Subject key identifier: E2:8F:69:88:27:44:8A:15:FA:56:21:04:F5:E7:09:3B:D6:1C:43:EF
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 019EBE47F567961B97B7ECA4FF85F920FB8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
Manifest number: 167E
Signing time: Sat 13 Jun 2026 00:00:47 +0000
Manifest this update: Sat 13 Jun 2026 00:00:47 +0000
Manifest next update: Sun 14 Jun 2026 00:00:47 +0000
Files and hashes: 1: 1vjKgLyMbmbnD9BN-ENq6mCvpdQ.roa (hash: j6oOw0mW9VGeX6HTh7Pt8Y8xHM75I2sfi2YWe7POauE=)
2: 65FnmspDUVJ9_6QxvLd4l0NA4FE.roa (hash: lgYYkTyMefTXhDS2aNN91oiVE93MHjvbMsoRpFVLAkk=)
3: 6USIsr77ojsfaUkK7p_9yPX50RE.roa (hash: bxePdusDHlOz01oH/vysD1HExvewxm7Ub84+S8jsj6E=)
4: Bh0VhXCtnVTu6NYuZ4a0xAtyxnA.roa (hash: HBYP5wsCK4dtPnx1EHAW2IQhQMnr5dUB/nJJqTK+1C4=)
5: EnU8KLDk0MRS40FVtDjms_Soitw.roa (hash: rcy33n4rwkCj0xCW3i6XJv7RosymyzbT1+UqsgkLw0Q=)
6: Fe1_O6lqpZ4wU51PSyJRl5pRxgs.roa (hash: 3NI8C19YgNRWzyzmt0xuFsZNQ7eEnAdbBiag8O0XRuA=)
7: LcVUnzg476sY0cRj19anqQVr9co.roa (hash: CgyZ8RxzuluDb45z3tYn/fize5wHrZwU9v+utbAlRwk=)
8: QtjndSCGblrfab-ioVOroaNfPN4.roa (hash: 4OpyhaYwVmjq3TRkCJRrHAwNHbosmRoeTn4+UUJfDU8=)
9: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: nHrHzmb0ExyrDBOEe4yRynt9qQhIwUcGLNB69TUL90k=)
10: lC8mVQtZgzYCvFwXFlGkBqCpw84.roa (hash: SarrKRsARvJpAVux4A8mAEIosBVax08KS/WsVU5r/mE=)
11: ooTDK5wBI-XJq8zfv_YSdFU-vlo.roa (hash: xJD4AS2qcydvJ4nIFIToFd7KJeX/bcKOS0Cq1Ky05fE=)
12: sOU9sf_TLtLowD_NZ2t2Nk3oMWk.roa (hash: A6LA4etDI922EmA77PSJlPQnzxugY9xfCjTlpLtEMx0=)
13: usyF6cqpiTZ36Hi-zUV3iBaL6mI.roa (hash: MwwYW4a1c7XEGwwS8SXJYUUEBBLKVu6KJRZWVoJlLQo=)
14: v4wBo_Qz0X5zJTIwb0QZQ9GFZms.roa (hash: IlvU1dySJCzAWqUq3ax3NvMIRPVQQDJqs9utM98mnVw=)
15: y8jNpNhJhN8HEtdIA-w7AJf_i5Q.roa (hash: 8sIOOrWgw4Q4JWzlfJJ/cqOkQmwBNx1SNCCheRpOVMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:f5:67:96:1b:97:b7:ec:a4:ff:85:f9:20:fb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jun 13 00:00:47 2026 GMT
Not After : Jun 14 00:00:47 2026 GMT
Subject: CN=e28f698827448a15fa562104f5e7093bd61c43ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:20:b0:8f:aa:71:60:ed:99:3a:22:fc:5f:e6:
14:81:b5:ab:11:24:56:b2:0b:56:fc:ae:c8:66:30:
d9:f9:a1:89:32:ff:82:33:3c:8d:1f:20:d6:e6:bf:
03:d2:16:72:70:99:0b:3c:1f:8e:9d:6c:b8:52:15:
f7:5d:34:d3:c8:e8:65:22:40:30:64:a9:75:44:f4:
42:2f:84:ff:9d:74:5a:92:8f:ad:d4:b3:c0:b2:f9:
4c:d0:9f:1c:f7:2f:e9:45:ea:26:53:d0:2d:74:5c:
f1:ed:c2:7a:99:4e:1a:45:a4:9e:29:e6:6f:f3:bf:
d7:66:47:6b:fc:b7:c0:c0:33:e0:55:08:35:78:2c:
45:9a:05:f9:bf:a6:3d:29:a2:72:5e:e7:ee:ea:cb:
67:bd:b7:83:08:40:61:82:e5:72:4d:d7:da:81:56:
a2:63:bc:2f:a9:4d:d3:ff:91:4c:37:8f:35:4d:f1:
55:b0:82:15:3c:e0:44:80:47:42:7c:f8:70:85:28:
6f:a1:bd:bc:84:02:d3:50:fa:c4:e6:c9:a6:a8:8c:
66:38:ff:c6:54:2c:59:b0:26:46:43:b5:75:38:51:
c7:b2:e0:56:45:8f:0b:2d:fe:dc:2e:63:67:6b:3e:
4e:a0:c5:5f:4c:45:b6:9e:64:d3:99:43:99:d5:db:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8F:69:88:27:44:8A:15:FA:56:21:04:F5:E7:09:3B:D6:1C:43:EF
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:f5:5b:70:85:5c:46:48:b5:21:6c:42:eb:d9:d2:5d:d8:cc:
5b:dc:f3:d7:be:53:96:13:c4:ba:70:4b:47:57:40:e9:00:59:
ff:98:ff:11:ac:2e:fc:63:0d:dc:83:3e:46:54:2b:92:4a:b7:
dd:34:b5:0e:3c:59:c8:af:ed:ef:fa:0e:7a:42:98:c9:2b:3a:
7a:eb:1e:04:9e:69:0f:90:6c:04:5f:cd:45:a6:2d:52:00:ef:
05:5b:b8:af:e2:6b:e1:9f:63:4a:44:af:c1:4c:07:39:a7:38:
24:33:e9:0c:ba:e8:f5:da:d1:94:c7:b7:88:55:af:40:99:37:
37:a9:b0:b4:07:e2:c9:c5:20:7f:69:8b:7b:ec:38:62:8a:49:
14:49:3f:b5:42:b6:0b:0b:4c:d7:09:48:41:bf:ef:18:36:33:
05:13:cc:02:41:f9:77:bb:03:0a:ec:da:21:a2:21:a6:f9:6e:
a0:51:71:85:6f:a5:f1:54:d5:57:65:61:8b:f6:71:fe:9d:05:
fa:59:10:d6:bb:90:f8:58:b1:bb:84:1f:a0:f7:7a:89:9e:69:
9f:75:1f:ec:cc:3f:43:88:a3:be:34:60:7c:60:af:47:58:bb:
6a:14:b0:3b:ae:6e:ab:d4:07:cc:89:9e:7d:f1:6c:e4:51:42:
5c:47:6d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:29:08 2026 by rpki-client