
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json)
Hash identifier: lEmX6rKhD4f8n0zQcMSHUPSNwsQ9myn38i9RqxhXtJ8=
Subject key identifier: BD:39:B6:E8:55:FA:BC:B1:A3:78:99:88:65:06:04:65:8D:04:EE:5F
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 019EBDDA6C8AB646A4430242FCCB9BC141FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
Manifest number: 13F1
Signing time: Fri 12 Jun 2026 22:01:08 +0000
Manifest this update: Fri 12 Jun 2026 22:01:08 +0000
Manifest next update: Sat 13 Jun 2026 22:01:08 +0000
Files and hashes: 1: 1-RxvuJO_jTchUynlUq2UfaQo14s.roa (hash: RiJrCfh6jrOWp/Kdbsy9E1iiVv4aVjYDrT7ENiEz4TE=)
2: 1-a4Jfvl73sg74p_0XL8QwTt9GSg.roa (hash: FUZwlR5+IowctwR2O6qPAipX2v6y8pLQV+4UDQvBld4=)
3: 1BivsgHv80evKrJUr40JTZlUflQ.roa (hash: V8wFTbk/nUscM1lOnu4fmHl0eVlRMSa47L0o0dXKIUQ=)
4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: U0ZQ2hFnPspo8pfRsGc8w1RieFmH5RgfIBABC1yzWrU=)
5: BYf7RoVtzwx1yTG9FshawkhjTK4.roa (hash: sDDf+aqw1FGJKYG+5FCvmvbUR9TO2CTrbICWskjL/F0=)
6: HL42GB5yCeK03X0nAabkVkH3_Aw.roa (hash: uOANZs2dCcg3I2ddPUvkq5JotkivRlYW0T26ryzPHHM=)
7: Iw5mcpwalTXPnZnnTmYTdsqiUzs.roa (hash: sk1P8Pv/vu7n71J9ytQoTHDjd9XCgIlEXHvpDdpVHFw=)
8: UReyeEdRYk-K5jTcIl8Ooq7M3tc.roa (hash: RUl0rxhnXo8q1lbp04pAM7Ge7Yr5f6OK0CqmmmjACe4=)
9: V-aCqzfb1a5nr18Dpdo59TdOJ2o.roa (hash: cKOWN1Y85BplWaYgItYhxxODhX9O9HAW97DEPTPY4i8=)
10: fl0ZAFdlfHmaO-tRgRiDI18HGbI.roa (hash: MwB5gNGA9bGWfwt6Pb+LVkIHTpzaIDIKiSps/GwLDPs=)
11: ha79IahEugt55pyXch2rl5eqNpY.roa (hash: /2Q4OxJwb2IrGYC5cRQW4yWcjEMQEg/M8fPIE1oKn0c=)
12: z9xaJu4-grqg2GhotcVjg60Bphs.roa (hash: X87I15rWlYwJRZh2iXyNZTDnLknqtSiwvXkNxh+oeds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:6c:8a:b6:46:a4:43:02:42:fc:cb:9b:c1:41:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jun 12 22:01:08 2026 GMT
Not After : Jun 13 22:01:08 2026 GMT
Subject: CN=bd39b6e855fabcb1a3789988650604658d04ee5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:9e:7b:ac:30:d0:f2:59:4d:c7:bc:50:3d:
64:f6:e0:9e:fa:05:5b:8a:66:fb:d2:6e:ac:62:81:
9f:b7:14:51:2b:5e:6a:43:ba:63:01:ce:43:dc:fd:
49:f2:86:f4:41:8d:97:82:83:8a:6f:ff:cc:fc:e2:
7b:93:00:f9:7c:7d:76:7c:74:e9:13:dc:91:92:75:
74:18:9c:07:17:89:52:5a:86:c2:58:4a:bd:a8:8a:
34:90:a4:ee:ed:11:58:99:8d:f2:b0:34:3a:a7:6d:
80:fa:6b:76:7a:34:80:8c:0c:c0:0f:ef:c6:08:58:
88:d0:98:1d:94:c3:ff:6c:8b:a4:a2:03:cf:83:df:
91:5e:17:f4:ce:db:8c:e8:7f:17:fe:72:37:24:60:
28:f4:74:3e:2a:0a:bc:1c:0d:a1:42:ab:40:a3:fa:
6f:87:01:88:4b:2e:dc:97:0b:3f:c5:90:f3:e2:9b:
cc:1c:78:b3:73:8c:71:ad:68:0b:bd:1b:83:ef:b8:
f5:73:db:c8:47:b9:39:4f:2e:ca:f7:7d:b2:88:89:
8c:e2:e3:20:98:1a:4b:4d:bb:10:c7:05:3c:4a:6e:
39:4e:d5:0c:21:be:2e:d7:35:f4:45:2c:d2:0a:d4:
4a:ad:3b:fc:18:24:8d:19:4c:6b:ff:7e:0a:43:52:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:39:B6:E8:55:FA:BC:B1:A3:78:99:88:65:06:04:65:8D:04:EE:5F
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c0:a5:61:be:fd:6f:02:e5:22:b4:de:8a:d5:a5:de:19:72:
dd:d7:93:cd:ad:2b:f4:a6:41:60:d5:41:42:73:e1:71:75:82:
85:45:f9:a3:65:12:bb:a6:7a:1e:b0:0b:18:08:e3:37:90:1d:
6f:1f:75:c2:df:0e:24:c3:9a:51:8e:6a:a1:ab:93:04:77:be:
bf:ba:09:b3:bf:4d:51:fb:5e:47:7c:08:ec:de:20:bf:2d:f5:
c3:61:13:80:97:5f:dd:14:02:bd:34:70:91:54:e8:71:57:01:
84:67:b9:9e:31:d8:5a:6d:fc:9e:16:41:d8:6a:07:6c:81:95:
60:f0:b5:55:e8:8d:64:80:ec:f8:f7:57:6b:f6:69:1b:33:03:
0a:53:8b:12:7b:c1:96:06:be:b0:46:cc:41:25:26:e1:52:b1:
e0:96:52:3f:c1:df:cd:8d:8f:ac:46:23:d8:42:7b:52:b4:f0:
e0:6e:60:c8:0b:50:b7:c1:b4:e5:7e:c3:50:80:a5:9c:34:41:
ae:a6:2f:11:14:04:fa:57:d0:ce:0d:35:84:ad:82:58:ef:1c:
cd:d5:e1:02:b6:13:8c:8a:0d:c3:46:02:e7:c0:33:e4:e8:d8:
7c:e0:6d:ac:2d:dd:0f:e9:16:49:bf:46:ce:16:54:e2:3c:c7:
b2:f9:d4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:44 2026 by rpki-client