
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json)
Hash identifier: AVC4mavtb6TtSvqEdflQtsTpvY5c25bWKxlyfTVL4ak=
Subject key identifier: 30:06:C1:10:71:F4:5B:73:F8:FD:D7:84:2E:5C:9D:CF:86:33:E4:4E
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 019FA7BE03DF7D807F41FB41B3EED4E21501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
Manifest number: 0E96
Signing time: Tue 28 Jul 2026 08:01:15 +0000
Manifest this update: Tue 28 Jul 2026 08:01:15 +0000
Manifest next update: Wed 29 Jul 2026 08:01:15 +0000
Files and hashes: 1: 8r1K1OM5qngui5thmoePxmjOGcI.roa (hash: Lc08lhuuRKkKxvYSfc9k1w2HHAp3Uz/xuk8BCj5oIrU=)
2: A1CXr4dOt7xuCmQiPBtgt3iWtAo.roa (hash: GtPqaBuYk/tZ5YQVdapU19lv8Ijc7CBMwLU16C7BxnM=)
3: HMy1wxSppt6a370WgOiNsXQlVPk.roa (hash: nDhnb6wdJq1bcejnMDwW0L0rGJF02QbJ2F6fT5r9zng=)
4: JpNz-5mJsFq7butKO_csWbCEm5Q.roa (hash: VpAczQvbgQ1Ym4VsrRQcCrHDbx+vYYfxzFiOJ1msYps=)
5: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: q52wi6/RR1Fmv7z/nZXLK+E5yAszWvkvxLMDVxq4HG8=)
6: ZuS-gRLhfC_n_ype4xj8F1xzPiw.roa (hash: EZUmDI/jcW023J4DXzaS1TmCl7OpJwcwm1bJROBPAP8=)
7: aOh1-99JcOZxqAcykG11EP2F9_g.roa (hash: 5HlRoHZPsDB8WS/Sga5nh3qNHpa39AaXfQFzVc0mT+4=)
8: eqKnQgR3Z3QzGQfveZTC-r9HgHg.asa (hash: zwc2/cXGVh90A6S8KR+/k+8p7KQXn9Hn6gTyZ7Bdy4M=)
9: fN_qyC3q0DgZifOUjvgGUIVLuLE.roa (hash: Ghng4SHLOPaXZFJc/gZf2VJ82XHj4yYptmX1zNVV1oI=)
10: mP8zF_bJOTWvXPulXS_oUR4vAd8.roa (hash: 4byK92brafemOMsopEaLGHGlykZBiRbGdrhWO9EemSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:be:03:df:7d:80:7f:41:fb:41:b3:ee:d4:e2:15:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Jul 28 08:01:15 2026 GMT
Not After : Jul 29 08:01:15 2026 GMT
Subject: CN=3006c11071f45b73f8fdd7842e5c9dcf8633e44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ac:3d:e2:61:da:42:89:ac:93:09:8f:24:2c:
45:c0:a6:50:51:09:24:38:f2:07:13:77:f9:3a:1f:
df:51:46:1c:3c:47:5b:2c:bc:33:38:4b:ab:be:bc:
5b:95:76:25:22:a2:9e:dd:5a:0d:99:31:1c:80:b9:
69:48:91:d6:11:97:6b:6a:25:6d:36:fc:cc:b2:d6:
8c:c2:f7:9c:d4:51:f0:02:17:15:af:a1:e3:e9:5f:
2d:3c:bc:72:85:8b:af:df:4a:79:e5:e3:d0:93:72:
d8:3c:c7:be:a7:f8:b4:7d:80:4a:1e:a9:d9:89:26:
91:69:c6:8b:82:fa:10:95:ad:91:a7:6a:82:aa:ff:
f8:a4:ea:10:5d:ba:23:26:40:ea:0d:c5:f3:7d:73:
d2:4c:1a:54:b7:ec:54:be:5d:8b:99:39:e2:08:bd:
5a:4c:40:d5:c8:7d:ed:17:49:fe:48:74:d0:02:07:
e9:d2:30:46:de:6d:f3:de:58:66:a7:e7:2a:6c:16:
c9:f4:7d:a3:24:c7:fe:7a:52:5a:24:2d:5f:fb:1e:
70:7e:2a:80:9c:b8:fa:b0:3f:b1:8c:29:37:22:77:
be:98:a1:06:49:f0:72:50:f5:1e:8a:fc:a8:f7:2b:
7c:66:72:fd:93:12:44:73:a9:02:57:f8:5e:ba:8b:
3d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:06:C1:10:71:F4:5B:73:F8:FD:D7:84:2E:5C:9D:CF:86:33:E4:4E
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:75:87:a1:f6:aa:ba:9e:e4:cd:a7:f5:16:1d:6e:78:e2:ea:
fd:cf:ba:67:58:0e:d4:c6:97:12:6d:e0:a3:a3:26:45:28:a7:
5c:62:85:7a:8f:74:79:fc:64:05:85:8f:50:d6:77:82:e2:75:
f5:66:03:97:e4:4b:6d:da:f0:39:f5:3e:e4:fa:76:c1:a8:91:
c1:d0:a4:77:35:4a:fc:99:d9:43:23:69:0b:ee:0a:2b:db:f6:
66:d1:7b:50:19:fe:ae:e9:25:f0:4a:13:a4:cf:de:65:69:da:
4c:e1:60:bb:46:37:b6:32:0d:17:e9:11:24:b6:28:35:c1:dd:
83:ce:29:01:58:64:ca:85:68:2a:98:ac:93:a0:88:dd:73:69:
ac:cb:7d:5a:f3:6f:a6:02:2d:6d:10:34:e1:2d:a0:78:2d:a9:
eb:3f:ef:6f:c4:17:60:0a:a4:84:a3:48:62:c5:fc:6a:54:e6:
b7:7b:58:4a:1a:09:3c:1a:15:22:f1:b2:26:81:c6:fa:6c:af:
d5:1a:4d:3e:51:95:7a:d8:ba:ed:e2:fd:80:50:14:5f:c0:b3:
3d:92:bb:ff:cd:f0:11:69:45:1c:e3:12:e8:3f:d8:bd:3c:38:
cf:7f:17:99:63:8e:66:68:59:31:80:72:41:d9:bb:e5:de:b0:
72:b8:ff:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:18:36 2026 by rpki-client