
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json)
Hash identifier: d8mOiFTMFzwBdQBd+OQavo6GJwteL4EcBRC6LTKJfiw=
Subject key identifier: 14:CC:02:7D:67:2E:2A:F9:0C:9E:04:76:F1:58:51:0C:EF:A7:9B:36
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 019EC06DD6F3D8B776E15397FCCEAC7FDFBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
Manifest number: 0785
Signing time: Sat 13 Jun 2026 10:01:24 +0000
Manifest this update: Sat 13 Jun 2026 10:01:24 +0000
Manifest next update: Sun 14 Jun 2026 10:01:24 +0000
Files and hashes: 1: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: jbyFne031YRy7iRKkrkmSaHVVkRYAkgHCoQTdH/rfOk=)
2: 3MMGuyxk5BA1h4yKFwGuekYBWpE.roa (hash: qDDPw4rjqe8Of6FqTmZ8vNfrRu70pioyOFhkznkxbn0=)
3: 7PMwWghG1f2GH2kcgJJT1T19mKA.roa (hash: iSWM8zD4dnBfc8rm3hdCfD29wpDU7MXGImntX+CzTys=)
4: CUZDkD-NcFvyMKKqxpqKTImWldI.roa (hash: BjgaQINh/o8BqluKWpCRQpHRBGijPayFIzTWLEZZ+ZQ=)
5: Dhrq3603FXAC1wqjo20wzUmr4F8.roa (hash: 93F+LmWkBd0KITwFzxwwnm7wh1Nm582E0rUj/2gWiKA=)
6: DlLXddAis5e2NiYpDlPFgCC2fqQ.roa (hash: wChHj1a1SOAqKO2XbDKNiJzmDLWZ4VK+PUQtszQXCaA=)
7: aoX3qgSrCGpVmGI2-sNdQlbBEmo.roa (hash: fUASGNwLnomXxmckWPpEyeY/fBQ9vTiFVyQieAo28z4=)
8: cojKfvUL96n8v0NW6xv7i34QuKg.roa (hash: lYPKoP4F96eul1kxPLkPqkS5F4CgrEIREjfk+V+jg3o=)
9: f-9ciEqv18Kub9fxi8gMgTEDiN8.roa (hash: ys7Se75WP1iZvGd8oeyIka2FlXVNvmTKA8g4Bz+pUFE=)
10: pPL6_ILH_OSb0uend9BsYY1M5zM.roa (hash: uPRcSj9Qet/R5RDAAlJ1xCgadEw0HnsrDGUuZztgzUc=)
11: qse_CjeAhZ5mrJaaeqQbXdzwq6c.roa (hash: DcaCDcXxQuFqUhYc0T6gyos8/cyyoYS+q0uMnwfEmhU=)
12: qvL5cNpCo_XaFCNykh7Gx2HPj7A.roa (hash: Je87v5hgNV1x62aPiR7j/Cjy7ey6GNmVdBbyWoayWLE=)
13: rtaxspuDF4uli6my-kG3x-CfzyM.roa (hash: Mbr6HPYPHlUpdc2sSsGgV2VBSnLTCf311AToZ6BeZWw=)
14: sRTNLbJ3g2jrnoN7xO2uBbfWguU.roa (hash: 97xAwvGhhXW1GC5fGvIVMkcoGK7MfJbMcwrs0H6Prc8=)
15: sSEuPuJKSwvGPl8OYtUAbNgjLFs.roa (hash: t6MnFRdD+DMOOopxl5hauoDky6UirAHK0zqLM5bjQWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:d6:f3:d8:b7:76:e1:53:97:fc:ce:ac:7f:df:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jun 13 10:01:24 2026 GMT
Not After : Jun 14 10:01:24 2026 GMT
Subject: CN=14cc027d672e2af90c9e0476f158510cefa79b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c4:b5:5f:1c:bf:1d:f0:60:ec:0d:82:58:9d:
a9:28:c6:6c:39:9b:f6:0f:d1:9c:ee:a3:d6:26:3b:
4c:23:c6:6c:5f:5e:b4:8b:c5:12:ed:ea:fa:4f:dd:
f9:57:7e:e3:40:64:be:19:e9:46:46:fa:62:cc:dd:
17:83:1c:44:50:79:b8:46:54:54:ae:ab:bb:74:98:
1f:83:74:24:4d:d4:13:db:86:10:6e:93:3c:1e:bd:
93:d8:37:3c:fb:a1:33:eb:8e:4d:16:0b:6d:bc:dc:
64:59:6d:3c:43:a9:bc:0c:6b:98:7a:e4:52:bc:f0:
a2:15:b1:d8:e2:f6:3d:59:f1:a1:2c:3a:d1:87:dc:
5d:81:8b:e6:f4:da:f8:40:c5:63:3b:08:77:00:f0:
3d:10:19:36:98:67:e1:c2:b1:f5:ea:72:d2:77:2c:
92:93:3a:34:08:99:6f:51:75:95:62:36:d5:0f:12:
5c:36:df:e4:f7:b3:ad:b4:de:5c:49:d9:36:c0:a2:
7c:5d:4f:c1:69:e3:96:17:5c:b4:2b:3a:65:84:80:
75:de:8e:fb:97:8d:1a:bb:7d:38:8b:3c:d0:01:8f:
e2:3d:93:8c:85:c4:83:df:c7:cd:02:ec:3a:5f:f0:
f2:22:b3:59:84:3c:cc:3e:31:d1:6d:2f:c8:aa:22:
52:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CC:02:7D:67:2E:2A:F9:0C:9E:04:76:F1:58:51:0C:EF:A7:9B:36
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:94:30:90:4f:f5:8d:a1:b8:e1:db:f1:dd:9f:6c:4e:4c:e4:
fa:ba:a8:2d:46:e6:bc:e9:97:9c:d4:93:9b:3c:94:e9:c4:d9:
f1:2a:21:16:d9:85:c0:54:90:c5:25:46:61:a2:10:ab:96:31:
16:c5:5c:f1:26:fc:e4:5d:0a:09:95:42:15:21:09:44:57:95:
4e:5f:51:f5:7c:b4:e3:15:69:93:ba:01:13:06:92:11:84:31:
50:b0:c2:92:72:97:2c:04:26:86:e1:89:0c:b9:0c:93:2d:1f:
b9:9d:e4:1c:ff:d3:f3:e5:e2:69:06:03:b5:46:c2:be:8b:ba:
09:5b:8d:52:58:cf:ce:08:b5:aa:d3:a3:d3:65:65:46:67:a3:
ab:3a:01:66:5c:2e:68:55:a6:1f:65:13:66:e8:af:20:3a:56:
26:c6:5a:d7:9d:55:d3:69:0f:27:c9:b6:df:ac:5a:85:79:4c:
b8:89:10:c6:ad:9b:d6:74:53:68:01:55:57:61:4a:69:58:bb:
56:0f:02:4d:4a:91:ec:98:e3:be:fe:3e:6b:87:16:50:46:81:
d5:62:1d:fe:65:d6:01:40:85:bc:f8:e4:7e:94:93:20:18:6d:
e6:f2:9c:90:23:ac:bc:66:0f:1d:7a:32:6b:c5:83:ca:4c:88:
2a:75:61:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:49:45 2026 by rpki-client