
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json)
Hash identifier: 70fCRJm/hxvIFZ5MQ7jtOcBNJs9g3yNHV/QIgl+kjjU=
Subject key identifier: CA:D3:F0:B3:1B:67:F0:13:D7:71:3C:49:09:BC:6D:A6:74:47:EA:94
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial: 019EBFFFA47DF7B40B7D936C4DD57DBA58F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
Manifest number: 1961
Signing time: Sat 13 Jun 2026 08:01:02 +0000
Manifest this update: Sat 13 Jun 2026 08:01:02 +0000
Manifest next update: Sun 14 Jun 2026 08:01:02 +0000
Files and hashes: 1: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: cw1Tvi55w9xiDPJLsgu+PbbZhmBerHKMnds9nz51Sn4=)
2: Ao4MbaZG9c-QguWfgi3_65omXS8.roa (hash: S3ppKNcefv9jQMNAYTBjG6T2ZcBIubvshiWmN6cEp/8=)
3: IaHDBU7cqXMsetfiX2V98tBbzQ0.roa (hash: aSIfbQJ1s+03WYJQC/BEFCyDvq1e4lEKVIPKT8xRj5U=)
4: cyPt3U8MJxx2O8Gu_nAjxme3veM.roa (hash: dV2szaez9MAXq7GDDnq9o/U1fwaDRDnU84jID4xsjVg=)
5: f6Ax4OW8pptafrcB2Q3m_1jzDBI.roa (hash: egPj0/WWhG1KzeeOZW9kIeKIxG162Clkej5fleUo7YA=)
6: k1kjtWhfi3liyX8iFQRZl2D24O8.roa (hash: FnHmLVNImgUYL2pZsEuxgg3wkTC9/TTxiO/Pam+ZNU0=)
7: kPF9QYImDQ8SjVCJLj3L6j0wQQI.roa (hash: waaiuuNITP+3U2hyTT1tilYciSOM0S3B84ifw1ZVvyc=)
8: pTwEVEq8lsnikbVPE7gddvIm5IY.asa (hash: LWjHycnNu+2zFdDZjCo9dzUAFT1k8vR2dW8r+7ivikA=)
9: p_2QswK0tfCmIfiQf4KGVocaP0k.roa (hash: yu/G9KWpPBYXD0gOpNQ+e9+3i6QBlbxRYQF7XZvUA6E=)
10: qZFCiUxell2FKSjDa_U0AngZipY.asa (hash: 9ILwTknvcVjTEi7mBGnm8X+aT4WlXd+eb3GpaxquWNg=)
11: xnIV9lSRlUBIwsXt0rhBAj2FpKc.roa (hash: cvHuJPxiNYfhnN5IvufGhGrZKzw6FzUojqlP7L5juw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:a4:7d:f7:b4:0b:7d:93:6c:4d:d5:7d:ba:58:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Validity
Not Before: Jun 13 08:01:02 2026 GMT
Not After : Jun 14 08:01:02 2026 GMT
Subject: CN=cad3f0b31b67f013d7713c4909bc6da67447ea94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:7c:04:c6:fb:d8:8a:d7:5e:12:35:be:06:
73:c9:54:68:4b:5a:ed:cc:5b:f8:08:69:e8:09:3e:
b8:c5:58:d9:45:52:ef:50:11:03:f9:a8:61:56:08:
3a:f4:95:0f:b1:c7:62:2e:91:47:a3:c2:9d:e2:88:
1c:0b:d5:e4:60:32:87:bb:21:b5:b8:9f:a9:ad:73:
1a:26:0f:f2:ac:ae:2c:54:5a:31:01:6e:4c:e1:aa:
d1:ae:b1:92:6f:c4:ba:2c:3e:5f:2a:0f:37:fa:1e:
a7:03:bf:8b:5c:cf:ce:57:f4:2b:e9:e9:6e:4e:3b:
db:49:a5:52:f8:19:2e:55:84:e9:fe:14:b0:91:97:
c6:bb:80:09:42:de:7a:b9:3c:0e:90:47:6e:f8:47:
40:2a:56:cc:2c:18:a4:20:2e:29:27:8b:2e:97:c9:
78:4a:c8:f6:06:62:2a:71:d0:24:30:78:1c:b3:35:
c3:72:d9:81:34:37:55:5f:a9:f6:f8:14:90:f4:81:
3e:ef:3c:2a:49:c2:ce:6e:a0:86:20:80:21:31:7f:
86:0f:02:bc:37:73:3b:cc:20:e6:2e:80:6e:0a:8f:
a3:e5:2c:ea:dc:90:da:11:83:54:c9:eb:5b:42:de:
24:db:6e:b6:f7:6b:ca:e1:54:e5:9e:dd:b5:23:2c:
7a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D3:F0:B3:1B:67:F0:13:D7:71:3C:49:09:BC:6D:A6:74:47:EA:94
X509v3 Authority Key Identifier:
keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:da:e8:5d:ad:c3:8b:8b:39:d8:9e:d1:a7:46:1b:e9:03:81:
49:6a:09:92:2e:01:24:72:c0:b2:6e:35:aa:c5:76:39:13:d5:
cd:6c:96:d7:3c:ed:7c:1d:cd:08:be:24:aa:ce:5d:e7:33:54:
9c:e0:81:30:25:bb:a7:e3:c9:11:53:45:7d:23:c5:06:23:06:
db:e3:99:6e:a3:3b:0d:00:dc:00:28:4b:a5:30:ab:85:d3:3c:
fb:4b:17:e6:ab:ec:63:c0:ea:80:3f:c4:7c:18:36:ce:46:9b:
a6:de:8a:9f:df:ae:7a:b2:04:e5:32:83:66:1f:85:f2:b6:12:
95:dc:17:45:b2:3c:b8:5f:ca:58:99:c5:0a:62:e3:d9:90:7c:
2d:0f:74:eb:6c:66:3b:96:4b:e5:25:77:8c:dc:47:59:45:7f:
0d:27:62:b0:35:39:60:c6:32:68:37:9f:de:d0:92:e1:1a:51:
3c:5d:12:3b:75:97:fa:19:d9:ec:fc:c7:e0:83:25:f5:01:e0:
e2:e8:86:4e:4f:94:08:99:9b:94:53:c5:0a:c6:52:08:48:17:
76:7b:69:c2:d1:62:2f:40:0c:a9:04:1a:67:bf:db:1c:7f:87:
d6:80:dc:c1:53:ca:0d:fa:af:77:ea:72:b5:9e:32:dd:2e:34:
bd:55:9b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:21:06 2026 by rpki-client