
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
File: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft (raw, json)
Hash identifier: hQGtp3KDsjlnyYfgQ2MBGmbOEI7BaeOHCVzxA46BqwE=
Subject key identifier: AA:01:31:D5:A7:50:54:E3:A4:34:A5:58:DB:AA:01:A5:AF:B5:F5:92
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 019A50E29B0511737B404F4B8106689F36C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
Manifest number: 1737
Signing time: Tue 04 Nov 2025 22:00:19 +0000
Manifest this update: Tue 04 Nov 2025 22:00:19 +0000
Manifest next update: Wed 05 Nov 2025 22:00:19 +0000
Files and hashes: 1: 1LHZTYTL7zXSNbURJx33AGGJ_jU.roa (hash: ZCVf+uWinCAj5Wsl4w3DRqhhemyGlUb1mHPRd1We1lA=)
2: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl (hash: swsj0YGj5u/nvaZ2JRg+yGQkpgbeWEvzwHNTSZnAqG0=)
3: A8PVa9vWSAwziXQoA3-_9FI8Klw.roa (hash: XOf6bTSMS9ukvYg53bvOoLSXUdGWB4/jS9MgEcYi5I0=)
4: BN6LRrFEJAG-6Bzoq3Z1PsUMgj4.roa (hash: EhHoS/FD/TPZMfKWMnkYMzvxXKRlrokVae/pr8W31Fk=)
5: DTFLEZbU53RUxpbGCJ7xpH1wiT4.roa (hash: ijyiWI9NCfuTWvoi057x4Mhna5X/5xBxTCKG7ZnDJYo=)
6: EhBwV4ETdq9F_mf3TtRo4dLCK7Q.roa (hash: mC580gxvB3KBFmXIOJyzC5FKQdMNmnwwmoA8fTGfjv0=)
7: FLkrvqHmD6eBeMa1h2bO_ZNKhg4.roa (hash: /mPez/L0Vr+EoPocb/dhaqkaLues0KokkJJZezW2ow8=)
8: MI904WmPdL5oiRhP7S6FeaCAFak.roa (hash: scgaazBwq6y+Oc9C9eGo0W4xwalauzkyjxbQ4wwwgLU=)
9: PRQLZdsK1DQs1qv6M77wqTY-8gE.roa (hash: kluODCNS9Ohs7cHGK+NxzDBwM4XzNPkjizB01UMfLag=)
10: Q3_uNhirqJ7Bk9NtXl3eVrdBCzw.roa (hash: 0/Vyhy1R/OkAOBC9blQ+o7238jYUr5Pu0HfZsEBCqFA=)
11: RaS1Do31InjbQCFGnTA-YqKnIe4.roa (hash: 6QaZ0lK6HEZVx8vJm4K3nfnSTx8TNZ47FuFw64/BpII=)
12: beAFyhqFvuFjdXVUNjFjACkebr4.roa (hash: c4PQ30y59KAo6fg6oopq6KruOFK1py7waXQnLyMtf+A=)
13: dZy1uZbY_Aos8S6Eseo9aRlBjgk.roa (hash: EC7IY47xBAWr3k7hTs+1NK5U2ipaAGq2Sy+LIMFTR20=)
14: kl36awhzfsop7GgELsEJo3vTqlM.roa (hash: i1Y1Q4V1qiBLr3d5jT6i7TzoPO+NTihTUU++FBZ5ox8=)
15: lao8bHeqDQtESMGOKFSeFdxwj-s.roa (hash: elImsTbe0o9ywVCBRni5u407KloMMvHe03FwOzsl4Y8=)
16: pZSrV2l3WhVw5oetxkzKTuFut08.roa (hash: OVPrfbWkq15CVQU+AkW9e1dfy6vyOgMcPm5QJ7yajMY=)
17: qRvHhsUzZRo3GIbvVdtrbB33RHM.roa (hash: I0ja9Wkg3NaDCO4/Iu1ewOYHJdhLcuLZy6a2WJD503M=)
18: s0Jjixe7gcnzh8oekfL-6zeUy5Q.roa (hash: TIYNz1LcI70+SJrW3UzaV1tb56c2tS4JWFrmk3Zw1oo=)
19: t18vpttXogOnxguJ7pGpoYLrk2Y.roa (hash: w64HKCyG1jpJ4LOOvXrj2J1OE37lFLFqT6Q1/gy6SUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:9b:05:11:73:7b:40:4f:4b:81:06:68:9f:36:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Nov 4 22:00:19 2025 GMT
Not After : Nov 5 22:00:19 2025 GMT
Subject: CN=aa0131d5a75054e3a434a558dbaa01a5afb5f592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:45:7c:ae:1b:e8:4f:7d:7f:b2:cf:4b:eb:ca:
43:2f:85:e6:6b:a5:49:c2:9f:e4:8b:ce:3d:2f:54:
a3:96:84:4f:97:4b:3f:a7:7e:3f:43:89:96:c3:b6:
f3:6e:2a:00:f9:cb:26:15:97:00:30:37:d1:ac:30:
27:32:db:c1:7e:80:ae:ca:8d:a2:94:0e:de:ea:d9:
b4:5d:7d:a6:1c:a5:ed:bc:e2:a1:f6:f5:9d:36:2b:
05:8b:dd:a0:62:34:b7:86:be:56:a9:56:09:87:76:
ba:0f:68:db:ee:0a:74:8d:ad:00:dd:6a:12:6a:95:
ca:97:87:52:e1:41:29:18:9d:4f:2a:b1:ce:09:b1:
02:f8:d7:6a:c1:36:ef:e1:80:79:db:db:35:0c:48:
16:03:c9:c3:12:15:ae:c1:43:07:4a:03:bd:1c:20:
cd:ad:4a:c7:8b:d7:1b:91:48:7a:e9:ec:17:94:03:
0d:c0:e8:3f:54:89:a2:52:79:40:56:9a:66:f7:04:
61:ce:0b:18:32:97:07:7a:d2:6b:cf:1b:13:0d:8c:
19:88:0a:79:c2:00:6f:c0:a5:28:54:e4:ce:b1:8a:
1d:b5:10:9d:f0:87:33:29:13:4f:74:79:45:ba:e1:
5b:07:10:b5:46:53:05:64:76:a5:ba:5f:e1:ec:9f:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:01:31:D5:A7:50:54:E3:A4:34:A5:58:DB:AA:01:A5:AF:B5:F5:92
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b8:a4:16:b8:27:d7:91:47:bc:c6:b6:9b:44:99:07:ff:45:
85:a7:93:b2:dc:fa:5d:3e:24:08:37:27:fc:c2:c2:fa:85:7f:
af:33:d2:99:b9:a1:02:5d:0b:cc:13:9c:aa:34:6d:ac:9c:b8:
3b:d6:75:39:0f:fb:34:e6:0a:7d:b1:1e:92:c5:56:07:7a:3a:
bd:22:02:8a:6d:4e:37:3b:6b:74:36:e7:eb:be:db:65:1a:3c:
fe:1a:30:c1:97:94:8e:05:84:54:3d:75:ac:89:51:dc:be:3e:
b6:36:3b:08:6d:4a:11:9e:de:16:6c:48:8d:69:86:38:29:bf:
88:1a:1a:82:f7:0f:be:c0:51:a1:54:22:01:a6:25:a7:29:c9:
25:5d:43:75:46:45:71:6b:49:e6:6c:b2:63:78:92:64:22:89:
69:35:8f:46:f4:79:61:e4:8d:df:f3:e9:f4:37:fc:d5:43:4c:
4f:50:23:6d:45:9c:d3:9d:42:f6:6d:9e:ee:03:f8:a1:02:ba:
b2:ca:2c:57:ef:b0:d1:fe:48:d4:29:61:b5:3c:02:16:4a:a0:
33:e0:3d:bb:71:cd:5c:08:c0:99:1a:59:52:8d:5a:0d:1d:f8:
68:2e:d8:cf:c2:6d:13:e5:c5:25:8e:32:25:e7:38:c6:55:17:
26:d1:43:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4psFEXN7QE9LgQZonzbHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj
NTBkMjAwHhcNMjUxMTA0MjIwMDE5WhcNMjUxMTA1MjIwMDE5WjAzMTEwLwYDVQQD
EyhhYTAxMzFkNWE3NTA1NGUzYTQzNGE1NThkYmFhMDFhNWFmYjVmNTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10V8rhvoT31/ss9L68pDL4Xma6VJ
wp/ki849L1SjloRPl0s/p34/Q4mWw7bzbioA+csmFZcAMDfRrDAnMtvBfoCuyo2i
lA7e6tm0XX2mHKXtvOKh9vWdNisFi92gYjS3hr5WqVYJh3a6D2jb7gp0ja0A3WoS
apXKl4dS4UEpGJ1PKrHOCbEC+NdqwTbv4YB529s1DEgWA8nDEhWuwUMHSgO9HCDN
rUrHi9cbkUh66ewXlAMNwOg/VImiUnlAVppm9wRhzgsYMpcHetJrzxsTDYwZiAp5
wgBvwKUoVOTOsYodtRCd8IczKRNPdHlFuuFbBxC1RlMFZHalul/h7J8eRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoBMdWnUFTjpDSlWNuqAaWvtfWSMB8GA1UdIwQY
MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt
YTY4NzNiMzc0ZTI2LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2
LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7ikFrgn
15FHvMa2m0SZB/9FhaeTstz6XT4kCDcn/MLC+oV/rzPSmbmhAl0LzBOcqjRtrJy4
O9Z1OQ/7NOYKfbEeksVWB3o6vSICim1ONztrdDbn677bZRo8/howwZeUjgWEVD11
rIlR3L4+tjY7CG1KEZ7eFmxIjWmGOCm/iBoagvcPvsBRoVQiAaYlpynJJV1DdUZF
cWtJ5myyY3iSZCKJaTWPRvR5YeSN3/Pp9Df81UNMT1AjbUWc051C9m2e7gP4oQK6
ssosV++w0f5I1ClhtTwCFkqgM+A9u3HNXAjAmRpZUo1aDR34aC7Yz8JtE+XFJY4y
Jec4xlUXJtFDdw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:13:34 2025 by rpki-client