
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json)
Hash identifier: WbBRCGIOdBT/JzJDryECH69NwtIk0h4VT4WWE2p/pPw=
Subject key identifier: C2:44:E7:EA:62:A1:B8:49:49:EE:F8:66:19:D0:89:D8:24:9F:24:E3
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 019D98502438821199849290865850DCEA56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
Manifest number: 18D6
Signing time: Thu 16 Apr 2026 22:01:22 +0000
Manifest this update: Thu 16 Apr 2026 22:01:22 +0000
Manifest next update: Fri 17 Apr 2026 22:01:22 +0000
Files and hashes: 1: 9Z9moOZMdjY1r0zisn1yG40T_Cs.roa (hash: 4qv97AavysG7gQ9zDpXhKGyy5MypOYdpddszCCL6JGA=)
2: Ax8-r-En_jV12HWCMP3xAmC-QDo.roa (hash: DTlvOtpcsab+lqdAbmVznR+Ar32K7k6eVkxqJFUVOG0=)
3: ChgBgVFuABIzwh66-TkKdZEX1iA.roa (hash: SVqR9Q8a5Hcp/asmqFGw5DEUG2TomIZWg2fteQrE3uY=)
4: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: kXJl4U6tAHNP0cj6DUymN6wCs/qPaGmpQQxOX2v7qbU=)
5: M4VIxAsjnWUbH6wj5hZONC0aLhc.roa (hash: gupzBjiIjp4MhIgh1kYK1O3xRS4nwuhoT78Vii8+xOk=)
6: M4YwzZnQpTpEIjJJQTa20n-PbwA.roa (hash: X4daXjz6hYdjbJNKtkZTJmDcLRTv0QGjJCHi4DW4ijk=)
7: NaxJ_NtLLDPENMvIhnNYLJraogc.roa (hash: 9owN2kSmqV6nvpiOXXWT2m/HU07KMLcW8IIUJ10ZKd0=)
8: YPx2c3RYrM8Uay8p-Jhbf6qFkfY.roa (hash: jPgFrnzK9XdaahAH17/G4k3SsWjfA1hQSptv2wqHEDM=)
9: f6D9aJ7BAJHcZz_OdJPNz7AwmHg.roa (hash: EgTfusTv2nkLjwq0TfPSW/EGFdZmepXuwghsp1RK2Ig=)
10: fF_JColRqe6k3b-dBUqfmSs3itY.roa (hash: QBb4ezm0BlO8dOz2Yfe88q5rYV5TSLEjJ01d5h6AZcw=)
11: hJODD-xae4GPfgCvm7u_1biBHW8.roa (hash: bwel4sYC9ovxgVCjU95RSPer2KsFebCbfOZutFD0aHE=)
12: ls2jvaZs7k_InUrbbNoPbvZ36vk.roa (hash: fIXofnEy1iYP/NYn3TCqqqwLir6u1PH+g1WJfBcU9ns=)
13: qPCjKFrGlCNUHjx_vor1JA3jHb8.roa (hash: l+K/oYAVSbzs8nUlzmSSgb/G/fJy3yi4irQ8IvElAgY=)
14: s7oo8h_lGdHA5B183SrGieJU08Y.roa (hash: jWktarjEvs1eZ/T6K2gwxO8ZGGgdn9UvYfnH2e8sE8Q=)
15: uJw0ADc8Jn_tUrRAslqVcsOv5r4.roa (hash: tvo4GlgyFEqW+8NWX03vTaovLhf5PDKLye47pitknWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:24:38:82:11:99:84:92:90:86:58:50:dc:ea:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Apr 16 22:01:22 2026 GMT
Not After : Apr 17 22:01:22 2026 GMT
Subject: CN=c244e7ea62a1b84949eef86619d089d8249f24e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:b4:be:26:50:39:4d:dc:ed:0d:e4:f1:b2:
9a:ab:40:33:5f:5f:77:0f:a7:d9:92:48:37:e3:7b:
5d:19:5d:ce:77:99:9b:96:77:60:93:25:7c:d1:d3:
50:9d:b8:d6:2b:66:08:ee:c3:4a:b4:13:2a:05:e5:
3e:0b:87:a5:60:b4:fc:cf:40:68:c9:6f:b5:e9:1f:
52:64:4c:3d:c0:95:39:19:08:51:d7:9b:a8:be:d5:
5c:72:65:63:b8:d0:fc:a5:0f:69:b8:e7:68:23:61:
16:1c:e4:53:dd:12:1c:01:31:bd:f4:c1:db:78:14:
e0:b6:a4:00:21:19:07:9b:32:e3:cb:1c:02:5c:c6:
fb:78:8d:e8:a2:d3:64:10:26:26:ee:88:30:3e:6a:
ed:86:3b:f4:29:af:62:32:09:92:25:a3:e7:b2:c3:
ca:83:a3:6d:1c:21:7b:fb:ce:a4:da:d1:c0:04:e5:
cd:49:a7:22:bc:b2:c7:9a:b2:f7:ec:d9:80:7b:12:
6e:5c:f5:ee:09:e9:2c:87:e8:34:89:8a:5a:bb:35:
07:f2:ed:88:f3:13:59:0d:34:9e:b5:80:b6:7d:78:
7b:d6:6e:dd:db:a2:51:6d:fc:b2:20:6a:f6:fa:26:
cf:4f:c3:df:1e:fe:cb:df:44:37:3b:5b:13:0e:ec:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:44:E7:EA:62:A1:B8:49:49:EE:F8:66:19:D0:89:D8:24:9F:24:E3
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3c:c1:88:d7:dc:88:87:5e:e3:d1:28:1a:e4:9e:b6:37:1f:
a3:18:8a:cf:fd:fd:7d:51:74:b7:32:6b:fa:bb:af:3c:35:f3:
dc:2b:98:de:fe:db:96:88:f6:04:5f:50:60:20:db:72:52:dc:
c8:bc:0b:f3:35:60:16:85:7e:15:6b:0b:63:f9:c6:02:d3:cc:
83:55:55:54:3e:41:ba:a8:9d:fa:54:c3:c4:c4:11:4d:3d:01:
69:a4:db:25:22:14:50:f9:b2:87:a3:b8:b8:ab:19:86:38:21:
b5:f6:3d:12:d0:7e:22:a0:00:0e:40:03:f6:93:50:86:33:7d:
8f:39:00:48:43:23:71:fc:e5:3f:a6:95:fb:39:22:34:fc:c5:
48:ab:a3:05:ae:2b:88:07:34:73:b7:46:3a:11:26:e2:78:5d:
69:1b:eb:b0:31:4e:0c:41:24:60:83:a1:ae:95:b8:b6:86:a7:
db:f4:9f:a5:8b:68:18:0c:d9:e3:a6:5e:b5:26:96:3f:f8:f1:
bf:27:fd:2a:42:43:5a:44:af:dd:94:13:ef:39:40:b6:7c:4c:
6d:77:11:33:53:92:a2:9e:9d:cc:12:83:4f:2f:7c:1e:0f:d7:
fc:6e:a3:5a:fb:53:ba:a7:e6:3e:44:65:b8:cc:04:e4:df:d0:
e2:da:e7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:56:33 2026 by rpki-client