
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json)
Hash identifier: 735jq91rYRt163gmhU+kGESdI3rcHZfvxhcSjIIYyRU=
Subject key identifier: 01:C0:A8:23:94:26:A0:F2:6B:90:64:ED:1E:05:03:64:4A:16:B0:53
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 019FA93E5443D13902D153124C007CDD90A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
Manifest number: 0CCA
Signing time: Tue 28 Jul 2026 15:01:01 +0000
Manifest this update: Tue 28 Jul 2026 15:01:01 +0000
Manifest next update: Wed 29 Jul 2026 15:01:01 +0000
Files and hashes: 1: 1lESD01m5gbJyA-braAOgm-nsxs.roa (hash: LKvU7E9DI8H+f3xZF2Ibb4ZAlOKiTpfnzxmAzY3Zmkw=)
2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: wvkginJ7KlH8aoDUlym4CWWNYMcxT0GhpXCWgrqxemo=)
3: 3x-NKns4WK2EjpOMEJoJpIWj9Ck.roa (hash: QRb3J8nMmBOOsUmMgbTcpmnm8lqCJiwslflpTn2ZSQw=)
4: 61nxpqdan0uvkgRYS9p3WXMt0is.roa (hash: +Etzf8iyPB8hG3RY9d2BBNlzK8ZhQf8I9wkNpl+P4s4=)
5: C9CUr-PFwRxBqveQc9JRexz5FUs.roa (hash: lYbCEmweFZ4ggkWxLIShDolBIH8LVCAHfTyc91SJwy0=)
6: FsSNPUWjwDIlPVEHY__f13MutvI.roa (hash: ParcKE8qGlMpeOMYcmP/zF1xOvvVsHqjFGUJ9CbIYcQ=)
7: LmasvFTLE11mrCxdzPNrrKlYdc0.roa (hash: cro6qKPl5KcW1vG37gAcGVH3Wnv66eL0SBKTzxopYzw=)
8: OnExh771ZtOXTYHIXE8BRYIv3I8.roa (hash: iBanqCcjQhcLJzTqVwfRApVqXKWA6vIc0dQd8k0fLnI=)
9: SUEavrAvbJYi-09a6QVI2M_eSIc.roa (hash: hAAmC8KjoRR+ZLoagJaC8chUvGr6KdS0WhlLhZ1Tw9Y=)
10: ZNlrsOCJbz1ZgCLSQBpDj_ZZT-8.roa (hash: 6MRVKUdN0TmbZpchW3YbxHhN5ECpIXnD3S+JTzC3uLc=)
11: _TZcDPZzpFhla5KXCrewBSv_afs.roa (hash: F0O1jt3D7eDKUVGno8fQyg0oYO+Zw0jzvuEgWmXzed0=)
12: cn5s2B89TenTg8TZ857ognMMlAA.roa (hash: wUmnZRz2SMT6wxHgQtSrqJwqrjnw6hSXkRMz9LqAT54=)
13: d8tYjTMOm2iLi-JD46yX3lK67ec.roa (hash: R7k5LiqgpO3uW9dYKT9Gf8MpGa5+R/ekeb18H+cE9bo=)
14: g2tL8Q8gVC3ISsI1OuGoDAk_qjA.roa (hash: nYVi4YC9fVishrPOTjgH2hJlXxcspFsYbheNk/bE1wY=)
15: kkTc-CqdA7325Hx74WPC1i1z1ho.roa (hash: hgMqyY5kb0icfrniqakaGixYqwHTT+s6ebLBFJjRgM4=)
16: sgrFZma6zheGea9J58PSDqqiCmM.roa (hash: iXm2HKLx+ZNC9Eul83oyhoOJ0aOmRAKDu34RWqMoyaY=)
17: tKvDm86AMvEYB6hIUoRsN49Ezbc.roa (hash: pU+aaBDxFZaTXPgmpTQRfdLFYbNDZGhl1yZjscogrfY=)
18: tnraOPm2wq2V9j6Hrmc8SV9avLQ.roa (hash: 0L3Box8fqHKPp7PEt0nCwu/IlhVupcAp096tLCY3oh8=)
19: u5OJcAyxXqVdXI6_czaVfj1EejM.roa (hash: t2Z9GDdetSIV2Qs3dbUX4iVW8S3Gt7a3O86Jkfr44UQ=)
20: wO7k2vDj77zEzFHJWa2AP6hrFwo.roa (hash: 1sU5o66HTpxQdQlGcQU1k+KfBlwlPYDW3+vPSz4y/K0=)
21: wsknEjm24Tmqnj5AbQzSZKLiyUk.roa (hash: 1F0f934WY0AhELOowB6/aUmK8URa7DHUIj0Gci4bhIA=)
22: xxxAcHM4lxLwmaNP8NPyQYMT2hc.roa (hash: 81EBYCMb1JChmS1xYbhUHSpsd2Mkl7rE43HaypoVrxw=)
23: zntwCACaBUiEoCNIiizhSLfODLI.roa (hash: OK0H5/dFKXPhZoGNCmL/lJhvvQiQCr93pDDVTkxql6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:54:43:d1:39:02:d1:53:12:4c:00:7c:dd:90:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Jul 28 15:01:01 2026 GMT
Not After : Jul 29 15:01:01 2026 GMT
Subject: CN=01c0a8239426a0f26b9064ed1e0503644a16b053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:41:13:11:46:b3:ff:2e:74:29:03:ff:49:
cd:23:eb:6b:3a:6e:94:26:46:3b:e1:bd:69:59:f9:
c9:94:d8:f9:f6:a9:26:ea:74:b5:ab:46:d9:36:1f:
c7:01:28:ad:6c:9f:58:12:ed:d7:89:13:ef:ea:e4:
29:19:d1:9c:a9:47:50:18:6c:d1:fd:7e:18:c9:fb:
c2:44:0e:3a:3a:b9:b6:49:31:15:3a:a4:f4:9e:9c:
79:05:9c:ab:be:c5:ae:39:b3:13:9b:4b:fe:de:1c:
02:91:af:b3:17:d7:1b:d6:22:ee:0b:f5:e1:4a:82:
b9:42:cc:c3:62:79:8b:64:39:79:cc:ff:30:4f:86:
00:ff:08:87:58:74:4b:c9:8b:98:58:c0:a4:d0:8a:
23:d4:3b:82:b3:1d:d1:c6:b2:79:28:b6:24:6e:43:
7a:0e:43:39:3b:de:8a:38:ed:95:8f:17:41:b2:e8:
5f:fd:9b:96:09:72:fb:9e:16:20:44:11:25:8a:59:
c8:79:9f:6f:92:86:8d:85:2b:00:51:ff:ee:43:75:
e0:07:e3:2f:02:24:b8:8a:7e:31:58:54:cf:49:f4:
55:d7:7a:d6:82:37:4c:dc:b9:4b:28:53:32:1a:6d:
1d:ed:12:d3:08:f0:18:d9:c4:09:fc:f0:23:a2:4d:
b6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C0:A8:23:94:26:A0:F2:6B:90:64:ED:1E:05:03:64:4A:16:B0:53
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d3:d8:e4:b0:7c:90:e7:2d:bd:cc:c4:78:c1:5f:82:19:40:
0f:e7:8d:45:df:1c:fd:cf:4b:4d:fc:44:fa:ff:67:eb:d3:d8:
29:57:3d:23:ba:4b:8b:77:11:b0:c9:03:3a:75:21:5f:6d:63:
88:fa:17:ae:af:82:06:b4:48:3c:a6:e4:fe:b3:37:47:a5:71:
90:b5:6c:32:14:03:e9:2c:94:14:7e:5f:de:1b:41:d1:cb:5f:
27:a3:e2:d4:fa:d7:9d:2f:64:e0:43:98:56:8a:4d:e7:57:b0:
99:24:2e:4b:f3:fb:5f:48:13:41:6f:3f:1d:c2:aa:79:14:e6:
d4:0e:c3:1a:55:fa:bb:f8:30:30:5a:88:bd:1b:87:6e:0e:2e:
dc:f2:81:0e:f7:3f:63:36:70:15:1f:65:91:49:1f:b2:57:11:
d1:31:05:83:dd:a9:70:11:60:31:0d:b8:f6:7b:d2:13:5c:31:
56:e7:7c:15:97:85:dd:ff:c8:2b:d1:58:02:09:08:36:46:c8:
f4:4b:ec:47:1e:87:b3:8b:af:d4:f0:e1:e4:c4:be:df:63:0b:
17:09:db:3e:ee:4f:e0:fa:9a:16:c3:b8:7d:55:59:8f:d5:23:
35:e7:34:5a:52:81:e9:a0:51:d8:df:34:6c:6b:22:42:df:73:
1d:aa:5c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:25 2026 by rpki-client