
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
File: iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft (raw, json)
Hash identifier: Y5uOCwZxVxMGW8W7lwQV1hjtJBz5zLhXKyBR9eLc2+M=
Subject key identifier: D2:67:17:5A:75:23:A1:93:DD:A3:D9:AC:A0:98:1F:1E:14:4D:20:58
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial: 019EC0A451C35E062EDB36A3E4838094868C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
Manifest number: 02A0
Signing time: Sat 13 Jun 2026 11:00:54 +0000
Manifest this update: Sat 13 Jun 2026 11:00:54 +0000
Manifest next update: Sun 14 Jun 2026 11:00:54 +0000
Files and hashes: 1: 43jM40RYm5KfeGPiDNzubwAPnss.roa (hash: 3FdXgssZKeAEaBlX49WSPSeSpanDn1fR5o5d1jEZFX8=)
2: F7I5rnkHLQ8PitpUJJXzJQnZJaU.roa (hash: mzXoIYY5/cdBAcGj+HsD/eRCWuIVU1w+4VfWf00hQ20=)
3: INCU2iAXvTzNbBMSAxlrItQxyhA.roa (hash: QjZs1QBxW0pY83BtGBXtgMXwn/IF6AETwK3PZKsE2JQ=)
4: Jf0IiUw2yxEGHU21X5UBjTTFsPw.roa (hash: iznEwndgoL7LQZ3si+t9hPfxRdTHhoHEK3Tm2NJNWr8=)
5: Q3Znim6qxleuhiANfuzqn0XQe7Y.roa (hash: xqiLzxwXQFjHq+9P4kBJ5oqn9VLWT6Mr5rM7CUckdIc=)
6: gjdIx7JpQJjhJVIboXcukmsgReA.roa (hash: 6IvSw94J4Pwlc26GeUiHVjeQmmn49KLLbVomZAh3xKI=)
7: iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl (hash: 02sMXSW9elYKXbcjjyWTRuRgwl9sdvCxN+qlJHQLCyA=)
8: jJlQZpZevpI7sI0qTXUB9jMuUv0.roa (hash: sIoAPPkOgjZo6KC8AV3+ukTiCzKXpwR8qem4+cLmkos=)
9: q-RWodK7a-3CkL-IcmgLBAtseBw.roa (hash: IdzRoZdWnPk+8n2VcM7Jqg89nCMd+QL98y/Yo8OkRK4=)
10: wYwUaKIKd-bY8Wo70jEekOpz-dA.roa (hash: r5OOBgo8FfNpqi69a1yE5xLz64FR5eB/1u8J9jN8CoI=)
11: zCh_Z-NL-lt9latA7DFFhUPPEEE.roa (hash: H5XNQm6vSeKYsENIaBhTZdYpRcyi8dMupOSZNrKXWpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:51:c3:5e:06:2e:db:36:a3:e4:83:80:94:86:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Validity
Not Before: Jun 13 11:00:54 2026 GMT
Not After : Jun 14 11:00:54 2026 GMT
Subject: CN=d267175a7523a193dda3d9aca0981f1e144d2058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:e3:0d:f3:8a:25:50:c0:ea:46:9c:fa:f2:
27:cc:ef:15:4f:8f:48:6b:40:0b:42:22:27:48:03:
ad:77:38:d9:90:c5:98:c0:d1:fe:a4:5c:10:01:ba:
30:ea:a0:1a:18:6c:c3:06:4d:61:9a:65:81:dc:19:
d6:d4:84:42:75:d6:12:da:80:54:28:de:53:9b:01:
03:9b:82:bf:6b:e8:17:e5:58:60:05:87:aa:8d:99:
6e:ec:9a:1c:5b:1b:5b:ea:4c:58:83:af:39:22:9c:
d2:76:2c:b3:c1:e8:2f:0f:e5:5d:f7:c5:b4:5d:61:
e4:8c:d9:49:86:04:b6:25:cb:70:6f:ef:39:ee:8c:
f8:e1:5b:51:f9:41:0d:2e:cd:b8:b9:87:6a:84:2b:
4a:40:34:30:85:b5:cc:d3:ab:17:31:4c:49:29:48:
ae:f2:00:4e:f9:e8:eb:38:8e:06:8d:d3:1e:39:49:
82:1a:33:00:54:cd:28:04:87:35:d1:f0:fa:99:e8:
3b:33:7d:4a:1e:a3:19:ea:cd:8f:26:3f:51:92:d4:
07:d0:2f:0a:a9:6d:d7:55:e2:aa:90:1f:62:04:42:
ea:0f:c1:80:7d:e1:77:08:63:1f:4a:cd:f8:2d:11:
48:de:4d:d1:02:37:95:21:73:51:ef:e7:e3:3f:32:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:67:17:5A:75:23:A1:93:DD:A3:D9:AC:A0:98:1F:1E:14:4D:20:58
X509v3 Authority Key Identifier:
keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:98:80:8c:a5:07:69:4d:db:d5:9f:65:ea:8d:b5:6f:9b:ed:
4d:3a:9f:d8:4a:98:10:09:fb:94:11:6c:b5:ce:d2:10:16:5c:
1c:fa:8d:6b:6c:20:b1:e8:ba:f3:13:bd:7d:82:9f:54:0b:a0:
ca:1a:c8:9d:29:6f:5a:9c:40:17:36:21:a6:41:b7:8b:61:b7:
bd:b2:bc:e3:e2:9b:29:8d:72:99:48:c2:4b:4a:36:ff:0a:0d:
cd:c8:73:d8:1a:13:7e:4a:04:b1:53:65:d4:70:5c:d3:a7:98:
37:9e:52:18:55:ab:8a:c0:a8:71:aa:6a:c2:81:cb:9d:cc:10:
e2:78:27:b3:b4:a4:17:48:c2:e9:b9:93:82:ee:9b:09:8e:ff:
14:6d:7f:69:f8:cc:e7:00:b7:3b:5f:08:5f:de:ca:39:cb:1c:
2b:ad:47:c3:b5:df:a0:dd:9f:e0:ee:05:9d:69:6b:50:36:2f:
7b:fd:e2:0e:d5:a9:0f:13:f2:ea:65:79:82:f4:22:48:57:14:
f3:9d:5f:85:08:d4:a5:38:cc:a1:bf:7a:4c:79:c7:ce:2e:e5:
d9:5c:81:16:88:fa:3e:a5:8c:74:f8:cb:45:3d:92:5b:6c:dd:
bf:33:9c:27:05:05:74:cd:8b:49:1f:d3:e1:e3:37:a7:95:9b:
d2:fa:d7:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ApFHDXgYu2zaj5IOAlIaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZmI0MTBhM2JmYzczNDBiNjY3YjRmMjIxYzdjYjgwNjI2
Nzg5NmUwHhcNMjYwNjEzMTEwMDU0WhcNMjYwNjE0MTEwMDU0WjAzMTEwLwYDVQQD
EyhkMjY3MTc1YTc1MjNhMTkzZGRhM2Q5YWNhMDk4MWYxZTE0NGQyMDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs13jDfOKJVDA6kac+vInzO8VT49I
a0ALQiInSAOtdzjZkMWYwNH+pFwQAbow6qAaGGzDBk1hmmWB3BnW1IRCddYS2oBU
KN5TmwEDm4K/a+gX5VhgBYeqjZlu7JocWxtb6kxYg685IpzSdiyzwegvD+Vd98W0
XWHkjNlJhgS2Jctwb+857oz44VtR+UENLs24uYdqhCtKQDQwhbXM06sXMUxJKUiu
8gBO+ejrOI4GjdMeOUmCGjMAVM0oBIc10fD6meg7M31KHqMZ6s2PJj9RktQH0C8K
qW3XVeKqkB9iBELqD8GAfeF3CGMfSs34LRFI3k3RAjeVIXNR7+fjPzLwbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJnF1p1I6GT3aPZrKCYHx4UTSBYMB8GA1UdIwQY
MBaAFIj7QQo7/HNAtme08iHHy4BiZ4luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDIt
YjM4YzgwOTUxOTgxLzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDItYjM4YzgwOTUxOTgx
LzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJiAjKUH
aU3b1Z9l6o21b5vtTTqf2EqYEAn7lBFstc7SEBZcHPqNa2wgsei68xO9fYKfVAug
yhrInSlvWpxAFzYhpkG3i2G3vbK84+KbKY1ymUjCS0o2/woNzchz2BoTfkoEsVNl
1HBc06eYN55SGFWrisCocapqwoHLncwQ4ngns7SkF0jC6bmTgu6bCY7/FG1/afjM
5wC3O18IX97KOcscK61Hw7XfoN2f4O4FnWlrUDYve/3iDtWpDxPy6mV5gvQiSFcU
851fhQjUpTjMob96THnHzi7l2VyBFoj6PqWMdPjLRT2SW2zdvzOcJwUFdM2LSR/T
4eM3p5Wb0vrX9g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:44:51 2026 by rpki-client