
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json)
Hash identifier: wpFITMpFEDGFGnY56qIAf5qNqiZjYFWDGqT4IxSfsR8=
Subject key identifier: 5D:C3:1F:68:F2:5F:06:17:D6:9F:95:07:7B:1B:51:14:C0:9A:E8:8A
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 019FAA1993319A5A947B92C19394A43C83CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
Manifest number: 07FE
Signing time: Tue 28 Jul 2026 19:00:30 +0000
Manifest this update: Tue 28 Jul 2026 19:00:30 +0000
Manifest next update: Wed 29 Jul 2026 19:00:30 +0000
Files and hashes: 1: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: vkhNUpebx/xSB69Ev7H2GUvHrwqGQiY53m5RABKxdPY=)
2: 3MMGuyxk5BA1h4yKFwGuekYBWpE.roa (hash: qDDPw4rjqe8Of6FqTmZ8vNfrRu70pioyOFhkznkxbn0=)
3: 7PMwWghG1f2GH2kcgJJT1T19mKA.roa (hash: iSWM8zD4dnBfc8rm3hdCfD29wpDU7MXGImntX+CzTys=)
4: CUZDkD-NcFvyMKKqxpqKTImWldI.roa (hash: BjgaQINh/o8BqluKWpCRQpHRBGijPayFIzTWLEZZ+ZQ=)
5: Dhrq3603FXAC1wqjo20wzUmr4F8.roa (hash: 93F+LmWkBd0KITwFzxwwnm7wh1Nm582E0rUj/2gWiKA=)
6: DlLXddAis5e2NiYpDlPFgCC2fqQ.roa (hash: wChHj1a1SOAqKO2XbDKNiJzmDLWZ4VK+PUQtszQXCaA=)
7: aoX3qgSrCGpVmGI2-sNdQlbBEmo.roa (hash: fUASGNwLnomXxmckWPpEyeY/fBQ9vTiFVyQieAo28z4=)
8: cojKfvUL96n8v0NW6xv7i34QuKg.roa (hash: lYPKoP4F96eul1kxPLkPqkS5F4CgrEIREjfk+V+jg3o=)
9: f-9ciEqv18Kub9fxi8gMgTEDiN8.roa (hash: ys7Se75WP1iZvGd8oeyIka2FlXVNvmTKA8g4Bz+pUFE=)
10: pPL6_ILH_OSb0uend9BsYY1M5zM.roa (hash: uPRcSj9Qet/R5RDAAlJ1xCgadEw0HnsrDGUuZztgzUc=)
11: qse_CjeAhZ5mrJaaeqQbXdzwq6c.roa (hash: DcaCDcXxQuFqUhYc0T6gyos8/cyyoYS+q0uMnwfEmhU=)
12: qvL5cNpCo_XaFCNykh7Gx2HPj7A.roa (hash: Je87v5hgNV1x62aPiR7j/Cjy7ey6GNmVdBbyWoayWLE=)
13: rtaxspuDF4uli6my-kG3x-CfzyM.roa (hash: Mbr6HPYPHlUpdc2sSsGgV2VBSnLTCf311AToZ6BeZWw=)
14: sRTNLbJ3g2jrnoN7xO2uBbfWguU.roa (hash: 97xAwvGhhXW1GC5fGvIVMkcoGK7MfJbMcwrs0H6Prc8=)
15: sSEuPuJKSwvGPl8OYtUAbNgjLFs.roa (hash: t6MnFRdD+DMOOopxl5hauoDky6UirAHK0zqLM5bjQWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:93:31:9a:5a:94:7b:92:c1:93:94:a4:3c:83:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jul 28 19:00:30 2026 GMT
Not After : Jul 29 19:00:30 2026 GMT
Subject: CN=5dc31f68f25f0617d69f95077b1b5114c09ae88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bc:3b:2c:70:6b:b1:4b:41:7d:18:dd:52:a2:
9e:9a:d0:9a:ac:b4:de:ae:2b:84:13:c4:4c:0f:6f:
7f:d3:2a:42:0e:7d:f6:26:be:e5:e6:33:79:a7:78:
8d:42:ae:c0:0a:a8:de:7b:a8:48:16:8d:89:f0:e4:
f6:b4:0c:77:99:14:f2:26:b5:1b:7c:c1:1b:48:86:
0b:82:5e:72:e2:f6:50:e9:ca:05:d3:7f:9c:9e:ba:
d0:ae:fd:76:29:f2:f3:c1:11:6b:a8:58:c5:11:1e:
f5:aa:fe:22:81:d3:2d:1c:6d:69:4d:ca:5d:96:39:
18:41:ab:14:0d:0e:7f:04:ae:7f:46:26:bf:a5:b3:
3b:0d:d5:86:07:cc:5d:9e:3e:9f:81:89:51:43:4e:
a1:96:53:48:9b:29:51:57:2b:de:1a:bb:74:b6:92:
74:51:85:d6:5b:35:5c:00:0b:55:77:c2:54:fb:f9:
eb:cb:23:74:94:80:94:00:6a:46:8b:d9:43:6d:c7:
41:16:67:5e:fa:c5:3f:b6:88:db:fb:b8:75:d4:9d:
c0:6e:5a:92:c1:bf:25:47:d9:56:6a:68:d9:09:79:
b7:93:9b:e7:f2:1a:9f:a2:5c:8c:c9:23:0b:31:01:
89:a0:70:7b:ac:92:1c:e9:b6:0e:c2:ef:7c:fb:a1:
78:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C3:1F:68:F2:5F:06:17:D6:9F:95:07:7B:1B:51:14:C0:9A:E8:8A
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c0:74:9c:26:1b:df:cc:e8:62:d2:3a:39:6a:b5:bc:60:8a:
f5:96:33:9a:da:a1:c3:3e:e6:d0:e7:9f:f5:79:37:65:f2:ee:
e3:5f:c8:3d:79:d8:e6:14:a6:e5:1e:20:aa:65:22:1d:ec:4c:
ed:30:f3:4d:a3:68:12:8c:91:cf:37:ae:af:9e:cd:6d:58:e8:
61:91:4a:4b:82:e9:68:f3:e0:10:a0:00:33:6e:6b:e5:e4:21:
92:dc:76:97:ea:f7:dd:cd:07:b2:0c:09:af:d5:50:54:0e:de:
b7:47:65:f3:2c:f3:b8:86:bd:7a:c1:f5:92:f8:a3:35:59:e5:
1b:08:8e:45:72:6e:6e:f9:53:75:66:d9:3b:75:fb:d4:9f:ec:
6e:2c:fb:30:8f:56:0e:7f:53:68:54:91:6b:7a:e6:d5:9f:54:
b7:f6:bd:da:7f:c3:ae:85:9a:ec:79:0f:e1:50:f4:23:20:d1:
32:33:e6:65:4a:f2:4e:03:5e:f5:bb:da:98:af:c5:80:85:c2:
e0:45:53:cc:43:c3:0c:01:46:2a:f8:24:6c:1f:84:20:23:eb:
bb:af:f3:66:b7:ad:22:19:0e:18:d0:eb:96:23:6b:59:f0:4f:
d9:54:f1:1d:c5:fd:b0:c8:54:ca:bf:c5:9a:b7:50:df:f2:1f:
71:cd:56:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:31 2026 by rpki-client