
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
File: z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json)
Hash identifier: IOt+CX+FxWeQUvHBcunxSwOzMlp3agEYmxTD0J4OZUw=
Subject key identifier: 92:88:F3:89:1B:15:90:1B:90:34:36:0E:72:FA:FE:F5:45:D9:4E:3D
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial: 019FABD11B16588E11AD1DDB93DDABFE0801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
Manifest number: 19E8
Signing time: Wed 29 Jul 2026 03:00:35 +0000
Manifest this update: Wed 29 Jul 2026 03:00:35 +0000
Manifest next update: Thu 30 Jul 2026 03:00:35 +0000
Files and hashes: 1: 2KQ5ZpfUylUAta7ExfQtvEHkS4E.roa (hash: /7rSc6G6wbTQgfr6iC9XwInfsvw0txiwcKpJmnw/K7U=)
2: BgUnjCgAPDOfR4z_FTd_TpHVJ0U.roa (hash: heMoRIVQ8DTd9ArcP8LzeG/e00sDzEjtg2TIan/SctQ=)
3: Hhm4-xXrJa_SdRnbJRHBG-1HmF8.roa (hash: 2g901f2mJ95YUSaapsTP70+dUsRcUfZNWLYXTjA8fL8=)
4: LBK2m0x43uiy3CDrXewo6CElebE.roa (hash: Melk19K0g3bAymWD/+lvWlNHh7zUQK9z4QHwwE2U65g=)
5: NOCmADB0YfK3LWDGeRgeFYCfPBE.roa (hash: xAuAZnTz2KJs/xd23BdN6vcZ5UZS82kmFT5uSD3/ME4=)
6: PLUJiaThhf8vD4EoQGrmDtWUb0E.roa (hash: Ua3H2xX0J2QbkZIMHCzW8qMZcFmI3y1PNsZ7jGLEkQo=)
7: Q0_TTJ70K_PUBlOuwEh20FJ9gVg.roa (hash: KTqGXYAG8vVcFM7tQyAq5GIJNdRRd5/01ktBU+ZaPWk=)
8: RJy0_gErJZBzBgAp03Ym2G21A8g.roa (hash: 1Cgh17v2P9NMqOn+8E4Hl2KRYgZQoFx9YjOwa8NDWuI=)
9: Yt-w69_I1wza2CvDEypwz6EYLMA.roa (hash: T9k6Uc+A+ePGrkY6SKOEbGhVQItgNDio3FncjOloEKs=)
10: c3bKBXQu79Jy3dO_Hl07eYXslQQ.roa (hash: lJGAiR7fMIYg94I1p5YOTlfAqnFVCGIz11XSv3uLwPE=)
11: ifWB4vc9qFtHVpS0YI5P2BXL05w.roa (hash: 72Jjs1xc2pL2LvIq/8wmACvnX6p0xGHA2swVmmlBIwU=)
12: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: TDfneAicsLTjLie0jLw69Egrrd4bQ+/Wn/dzs7ddX7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:1b:16:58:8e:11:ad:1d:db:93:dd:ab:fe:08:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Validity
Not Before: Jul 29 03:00:35 2026 GMT
Not After : Jul 30 03:00:35 2026 GMT
Subject: CN=9288f3891b15901b9034360e72fafef545d94e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:84:cf:43:2f:56:83:a3:d7:96:eb:c9:17:41:
be:df:af:b9:d0:2e:d1:97:21:ef:d5:84:f8:30:9f:
7b:7b:6c:48:69:6c:49:cc:cc:31:48:a1:9e:93:96:
86:ad:26:19:b2:0a:8b:8d:ae:18:bc:db:43:32:50:
fa:b4:72:49:cc:39:f3:c3:05:81:26:52:b6:7a:a8:
1b:75:46:f5:92:e2:24:e4:4e:14:e3:36:a6:96:d1:
b8:8f:27:0b:d7:d1:53:ca:a7:52:c0:99:52:ec:ad:
2e:05:aa:85:b5:f7:40:1b:7d:26:a8:a5:2f:95:3f:
35:1e:fa:bb:5d:e6:0d:3c:a7:b8:bd:1a:69:a8:db:
8e:bb:ae:10:8d:40:50:fd:45:17:69:73:d0:db:d9:
3d:6c:37:68:29:cb:d6:4a:94:97:01:86:fd:30:35:
83:0e:70:6a:09:51:8f:ee:59:9f:85:28:7a:0f:4e:
35:7b:42:ad:52:75:87:aa:08:04:28:9e:b2:4e:3b:
0b:7e:ba:62:f8:96:20:ec:49:39:40:5d:8d:0e:9c:
57:67:8e:52:26:ec:49:68:ba:e7:4b:cd:79:30:ba:
48:30:97:87:b9:c7:a2:a0:c1:0a:57:5d:2a:d8:9b:
23:cf:bf:fe:28:b8:69:b9:ac:13:f0:55:98:8a:5b:
07:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:88:F3:89:1B:15:90:1B:90:34:36:0E:72:FA:FE:F5:45:D9:4E:3D
X509v3 Authority Key Identifier:
keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:91:b3:e0:11:7a:0c:5d:5d:ff:84:4f:04:1a:88:17:87:0b:
ae:7b:bc:65:65:6d:d9:58:5c:93:39:f1:2d:d8:a1:02:8e:11:
64:29:5e:f5:0b:6f:78:ad:50:e9:fe:16:e2:75:eb:bb:d1:2c:
e1:93:69:da:1d:8d:6c:19:86:00:a8:5a:88:66:4b:7a:8a:09:
be:3a:ce:57:c3:84:8d:e5:91:1f:0a:a4:65:a0:05:1b:68:7c:
ed:a6:78:2c:bf:dc:eb:72:12:41:49:76:5c:68:7d:cc:0a:65:
cc:34:6d:e5:b9:30:75:4e:57:4b:5c:79:2c:ce:80:3a:cc:8b:
c9:6c:57:99:7c:09:1e:73:77:90:33:68:27:7f:00:a2:44:2e:
6f:2c:ac:bc:f6:b1:5d:51:ab:84:04:2d:40:79:25:37:ef:e5:
c9:c7:09:3f:ef:ed:90:97:85:16:90:7b:00:af:89:d1:44:f9:
48:24:8e:6c:5f:03:5a:fb:71:69:87:36:c5:54:2a:a2:6a:34:
cf:81:06:c8:00:a5:8a:6e:26:d7:0c:f1:37:38:c6:3f:ea:e3:
de:c2:7c:30:12:c0:ca:48:8c:8b:8b:3e:e6:4b:8a:6f:9c:d5:
d0:0a:bb:9a:75:e2:6e:2e:82:02:4f:74:95:68:7c:e7:62:95:
99:cc:4d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:17:12 2026 by rpki-client