
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json)
Hash identifier: kqJhbUjZWIKyvU6KLdjbkCWNUvk9qbQRl5+gDMpE3DM=
Subject key identifier: DA:73:7B:8D:8B:B0:69:E3:40:C1:40:B9:2D:D5:BC:99:E0:ED:59:F1
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 019EC035FBCFEC5D38780075EF33A61089F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
Manifest number: 0C78
Signing time: Sat 13 Jun 2026 09:00:23 +0000
Manifest this update: Sat 13 Jun 2026 09:00:23 +0000
Manifest next update: Sun 14 Jun 2026 09:00:23 +0000
Files and hashes: 1: 1-FaALXlMsFyTh9BoD33d67aHEeI.roa (hash: vrnFz1Kmq+5wOQAjBqsePEJkDcr2bnQe4L2j8uEu+qw=)
2: 1bCAUkvNoYD0zomW0iurtF9te8Q.roa (hash: Z9CJnEIWfCZlmGT2t+Vqj5cmYatgFLNVqvFiGcAhXS4=)
3: 2ZG1OxPA9lJyGthfBpRD7jHaL_Q.roa (hash: IHbK3thySVU9Np8f+PMKh3PQZI2WcY5GEAykoMyFvfA=)
4: 3PEJB7BEtrLxE4pQbBEXg2NJ0zM.roa (hash: z+UJ71RNNGVXWGUolTIwgBdwKGA2gX9wpBe2tOfMGEQ=)
5: 5s08qvtxu5kbTXtLwFi7v9aGHaY.roa (hash: BJGago2uFSQjoC1tJOqQgCqqprBXKW62J2ZndZct5iU=)
6: 7RoJ9VAFHyX-FagiKQIhkGQ_c-Q.roa (hash: HkhHBOyfDP+gjtdcVY9wa2Y21nfYECLjXeRT5/sYvk0=)
7: ADRzfCr8-nkR6lRMT7eQyQ5uz2c.roa (hash: Zz8uOoQc0hbIxPblxdT0hBouk0wTSjJNAtxlR56BcEk=)
8: DvkRhCAztowgp0lKvjLU3U09Xpg.roa (hash: 1t/9feUa5ol6uYHCvs+WcaENRu5/18p6uTEUH0Zu6wU=)
9: J2ZRrTftrtV0_TjbPrZlFNP6xjY.roa (hash: igNt9ILvZZAjjU9Sm+2kCOHSTe7FUif0MtylGZarlYg=)
10: Mmk6zLU_gv73BOtf2g3APw9lmyQ.roa (hash: qL0PMP9vArwRqpbzs+j1LZZAXvUbDkXbOFyqaLmsqDo=)
11: RjEWq6ih6-2kfI0plendbaS8Y6w.roa (hash: 2i+2TrldDE3Er0VIAbdcWVtXkE1ii9e0XPDWCNXu1QA=)
12: RxkQzIFpbR8h5Y7GlER0QvlZ_xo.roa (hash: QyQ3uZNSoqX601+GHgavM056pTz7tYKjCe54YFu8AJg=)
13: YcoX0FswwtJDNeSfLbzKnpX_Ncg.roa (hash: bSifOwZU31nSn4HWPxK/P+Uoua0/V7duu8jXadJB22w=)
14: _0fjxv0fjuqXsB_dEZmZt2gQyKo.roa (hash: jytC1G6IyWDZvWzadzg7tWo6vkVxU20E7eXcUSAboG0=)
15: abtquT29kdz8HKSwyxp8MDLf-rM.roa (hash: 9xlsXDDDbF8yj8g2zV/NUxjfsdOSQi7MgQZSbquwXwU=)
16: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: wkaDlV3mJQpZwEFWOwLZf2T/BxtdNwToGktrK4lnKMk=)
17: cagtjc8bDeRcNxkPpsNFtRSw4HA.roa (hash: aF1LQSDw1Bl5408F1vJ3i4//pV71kCpJdauO5OKZNZo=)
18: czj_PZMJsKJEUcCpGuFemJRiVXc.roa (hash: XIy6OGhmtMXoCJdKfW1aLecDFbIhje3cjpXyY92Ca30=)
19: dhgQMv5d9CMtFJpDdBdVdbTFSgs.roa (hash: b2TvzpSS1aAj+1tdL7elB6HMEo7lO6B9iw17wuzVv+k=)
20: dpKkGD2SgABNju9FzjICMh-bILM.roa (hash: eA7DrTniAuZ9y6HHMxZvWAMtE9cnaGhtY/mRIrHlXQg=)
21: jdeHBbAARHJbzNiwNCOXeI54EUg.roa (hash: th8vM6YWc/Ley5toEeaIWxyZTuv2x+5byblkSqcImLo=)
22: l6g5cRLwfzGSk8db5JuW24EySDI.roa (hash: vgdCsDG7+TIHFOHJjv7u8i4m1Io6EEjzSnBPC2bEVVY=)
23: tCiyGtakbmS-hkNH0HW8_YohxbE.roa (hash: 0kbqzbmcamtnxXVE6dSXdUJzJrO80eC7C3aPFLP4CRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:35:fb:cf:ec:5d:38:78:00:75:ef:33:a6:10:89:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Jun 13 09:00:23 2026 GMT
Not After : Jun 14 09:00:23 2026 GMT
Subject: CN=da737b8d8bb069e340c140b92dd5bc99e0ed59f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:71:08:b5:72:01:f3:68:4e:56:cc:7e:ab:
fc:73:36:62:91:16:af:6a:c7:1d:4f:15:72:96:f1:
24:9c:a2:43:8d:6f:1e:15:6e:a2:89:87:ea:fe:f0:
76:1f:ed:07:f6:60:75:c0:af:a3:99:fc:f4:36:1e:
1a:b8:8e:3d:ef:eb:d6:0f:be:03:5c:53:6d:7f:5f:
40:69:9c:aa:c8:56:2c:80:2f:26:b0:73:2b:5a:f4:
31:01:5e:bd:64:24:aa:81:5f:05:61:6b:cc:e8:f8:
9c:ca:79:53:0c:2a:02:aa:42:d9:de:c2:20:28:fd:
a4:3e:83:dd:c3:e8:ea:2d:86:c8:52:3f:05:22:63:
78:0e:ab:14:e4:d5:58:90:40:e0:d0:3e:6f:54:70:
a5:67:4b:e5:a5:c3:2d:c5:3e:87:c9:a2:59:1e:4b:
c9:3c:f0:7a:9c:8b:67:27:7d:f5:0c:49:71:fb:0a:
67:a4:d6:47:53:30:6f:74:b3:5e:bd:b4:17:81:be:
92:16:99:96:6d:ea:54:fa:fc:7c:e9:25:64:1f:0c:
f2:f8:e6:b0:88:29:09:7e:bb:d4:6c:c6:53:ef:71:
41:51:08:03:4c:f3:51:33:bf:0c:61:1b:ae:6c:9d:
e4:68:fc:1f:0c:93:6a:aa:d0:fe:90:52:57:d4:23:
b1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:73:7B:8D:8B:B0:69:E3:40:C1:40:B9:2D:D5:BC:99:E0:ED:59:F1
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1d:94:d6:3e:50:fb:7c:a9:fb:82:6b:7b:88:b9:ff:4d:1d:
b6:d0:64:1b:2a:48:8c:5b:54:d8:bc:99:44:28:7b:e5:3e:af:
9b:2e:41:b3:d6:fe:fb:36:81:2e:2f:9e:56:bf:70:0b:5d:5a:
e3:ca:02:ae:8a:ab:2d:53:08:ad:7d:60:61:87:a7:f8:aa:c1:
93:4c:3b:78:d7:f7:01:ab:77:0c:5e:02:c9:c6:e6:26:ad:e3:
bf:2d:73:07:98:e0:3d:61:2b:f4:91:b4:6b:16:12:5f:e4:d0:
2b:a5:0f:ad:f4:6a:2c:c6:f4:93:12:96:5d:cc:c9:39:a4:7b:
d9:d4:c7:ef:93:d8:5e:ea:59:b3:68:52:c7:87:74:76:7b:50:
fe:c2:f4:85:f4:6e:16:70:30:4a:4d:3b:e7:1d:38:ec:08:68:
e5:97:f3:95:aa:49:9b:24:a5:9d:64:78:f3:d5:2f:72:e9:42:
3f:e6:32:16:a7:40:db:ae:a1:34:33:71:1d:bf:bf:c0:55:95:
c6:32:21:38:bb:e5:0f:8a:c6:c6:68:01:02:37:12:25:11:2a:
23:94:ba:67:b2:ec:78:a5:c3:c1:d8:d9:a6:d7:51:24:9f:20:
6f:b7:74:45:bf:83:68:b9:0d:92:f4:6d:9e:22:59:5d:e4:62:
95:ba:a4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:13:30 2026 by rpki-client