
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json)
Hash identifier: OzqE0XAogAoLmjGwRWP3EYKoOMabJRlmMmCraeb5zVE=
Subject key identifier: 5D:FD:97:18:4F:45:32:2C:91:35:C2:19:30:B7:83:CF:03:02:35:B8
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 019EC036A3854FDFDFA0FF95C8F363C5C659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
Manifest number: 1978
Signing time: Sat 13 Jun 2026 09:01:06 +0000
Manifest this update: Sat 13 Jun 2026 09:01:06 +0000
Manifest next update: Sun 14 Jun 2026 09:01:06 +0000
Files and hashes: 1: 2SgtXArHa91zHSP62V3VxCstPjQ.roa (hash: V4cGQtg2SBaCI8DVoJaqr+ulcrK5fl4LGupKdqP0XPQ=)
2: 2pWoRlgTXbKVX-Pjg4QmOZkMdQc.roa (hash: JZbkKUO0JB2SSX19jfhYYhBc4c8q+WYE6k6SKK4z740=)
3: Ae57O12AoGSXg6OjRfpvqk40IWY.roa (hash: jqB4zbEQVsVqha6FZMRqBv2gE+Oo/oekXl882sDWeVU=)
4: B-5LpHxABUdZLyscoHErjkqyIKk.roa (hash: O/ISaaNiYJWY/Osy259CyKWIm66WcENOZJ8/yUUM18U=)
5: E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa (hash: AM4W95wMVxmufbKvADXIfhnh/oxXBRJzCA12EQepcN0=)
6: G6LlelllmoaLjy6pGMovpp7eiKE.roa (hash: i0/dkXUXtTkS5bDtqW3KTO/a6C0FHwJWrOLBcdXePK8=)
7: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: u8+3t71cEA8ChmAul6nnYqYixUY3AlUuszJlAkyfakY=)
8: Ooo27uikwPKyN38Vc6E5PiPp16o.roa (hash: ysIkELBvjUmxilhHd/e1/CduTTEPJwJqPubCz95v0Yk=)
9: Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa (hash: PTOGD+XV9y0QkR0kx84XCCF1nWNGNBQ/AqHfSIRK6JI=)
10: R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa (hash: 926NNVMN0dOUlotEee8GGLB2yhZRvKk278w8BXpKBWc=)
11: SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa (hash: R2Ulh0OWrTfBVFa/oSxJhAwaFvEKQ4zUakZOAQnMxc8=)
12: SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa (hash: IKCVvcTAPNdNWxaMhV5j9dp59UVvAETJogxmpd5B1IE=)
13: UgQXPpoAPzzEY23clmnNXDMzKII.roa (hash: wVgI0/jKoNmP2W8lcpq9i62znX0LDf4x7s4+L/CLD44=)
14: VYgE8-UEudg3YNUfBmaafWIWqbY.roa (hash: JxhGY6dK9SUdetgzpCLPv5EvQwiRqHi3C+Rjc1w+Nx4=)
15: VulRC4nGRSWh634vxQHiExAKf1w.roa (hash: pU+A0lUoH6DQvksFwyWjaM1SkQ2OEMmZ30T/nm+6dqA=)
16: WyhDt_oaTKQN4eZu64NsYbZl4yg.roa (hash: 6ciQpQA0xk5YF/RtEahhFIWkqj1pqFVjXnDAnpgxo9s=)
17: YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa (hash: yFLoxqOVICN4QBajonvWQfdIkbyqD9W6GTNUrK2yjZo=)
18: ap_KBBwMetCUgf_yqig9NPG5GpY.roa (hash: 9v8lmt7h/soP3D+lntkITlcRnDn6phDZu9Zze6nhdUM=)
19: ayw9hP-juqBVUYhL4659BWRbagM.roa (hash: GLutlgyBzkV4tGAVG5CwDMmdYLkbefgbgEpP3APu1Jo=)
20: crm5NGlj9UBvhtdc7rwx7uYgEK4.roa (hash: /WaelaooGSkLECOrVgVomhzyK4ipvEXkWosApEiQHPA=)
21: fCPsVmQYESXsIrFzghBdJCH1miI.roa (hash: w0YUnPbD+SIAOv8xIs4vR52GvWAb785T1PJzGOLTe/A=)
22: ge_qG75CaLMKt1s8rP1tYixjlSM.roa (hash: KgSOhN8VDoDw2ctu7y0Z8Aqh13VkWXvib2gbxMkFp90=)
23: if7HhXNRoDw1TnbTu8jR1pBkTZc.roa (hash: 8a3JrsC30tF9jpJNG+DBi1BkDJl3zSelO4aQKYLFjnI=)
24: kB1VAe7IiWttP305SpTIQdMVrgs.roa (hash: 317W73vQ+ktqI7vunTSNBr39CAMFJ4AGWozNVMt/2j4=)
25: lT10uf8B-zB2W7pPHONV8j5w1EU.roa (hash: YP+nZP9+eePypNGYgLu6JQ6qv1UZQzTSxNte2fmvVXA=)
26: m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa (hash: QoWaAUlMFh1lhiMZuHSFJG4B7Vf6yI8ZyqsNOBMC67Q=)
27: n8NL6vGQtAkm4gMaIcDuJBP2IEE.roa (hash: jjvwqzXmoxW8cyo92Sd5PIndz67V2dJl+O50LnTVHRU=)
28: nzTl8UF3p7e9FvS0wb6zPjc4FHQ.roa (hash: gedwjVpwIHP4TjyyTazQknsPogKpR2m/8Qa6aAsv0F4=)
29: oMXKRKWkDw3BU5VHnmmfZczo3WU.roa (hash: 0w07L0habLvL3NwvX3KWEEL46dhGeHcv8F5gRgN4UD8=)
30: pqPIqfuErD5mbtSplqtkA0QY6aE.roa (hash: 6vvDbqxKmpWsHd5Wn/2ZoKbmAa7IUMY34ZPHLrIESc8=)
31: r__WaOcKmtAx8gXbwxmkYZg93vo.roa (hash: dQVWPRytzEKBIkeOfxLsINoVWiI0jdX6igSClXXnN6o=)
32: sfOxzLZiwEG7r5SeUCMuTrf1tvI.roa (hash: ZUuD5UEFtBeOCS9rptJ0iK7dObQgDw9xm9i0pDpXHUA=)
33: uixetmUNITGIE12MemXK43h0QKQ.roa (hash: LX2K4eqH4TnMxGBuhGigtPQYwuhHnTXNUjj69t8yapQ=)
34: v-ikOphb6e29hpwrNQIcQpcHAak.roa (hash: Pq9zDPP4BdGhk0vZiCEnuLu/9tRKgBub5R+cAWgzevE=)
35: w_A8FIo2-eV1ikzinAoy11bKCzM.roa (hash: LSQro8lyduG8gw0AhNa9mNG1JTNi93nM2iVzU2UVVdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:a3:85:4f:df:df:a0:ff:95:c8:f3:63:c5:c6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jun 13 09:01:06 2026 GMT
Not After : Jun 14 09:01:06 2026 GMT
Subject: CN=5dfd97184f45322c9135c21930b783cf030235b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:97:63:2a:89:91:87:ee:1e:b7:cc:23:7a:90:
91:06:c7:df:e0:c2:a4:80:dc:d9:26:d8:10:08:85:
fa:86:43:32:64:14:ad:91:cc:5c:f7:67:f0:84:21:
76:b9:9a:3d:96:86:ef:f3:47:7b:cc:0c:92:d1:f1:
65:d3:69:c8:58:a8:5a:58:f2:de:b0:93:99:cb:17:
d9:9d:f3:41:f9:99:c9:43:24:1c:6f:f3:6f:e7:6a:
ed:06:cb:41:36:b9:57:4a:72:70:77:94:90:67:c5:
42:21:2f:d0:55:8e:11:f3:75:52:d6:7c:9d:f6:bc:
7e:2d:64:cc:01:d4:05:1a:be:46:70:3e:73:c1:61:
ca:95:85:86:e2:ec:1c:c2:03:4b:78:c6:80:11:69:
0e:84:ef:e8:5c:15:23:a6:d6:cc:74:59:1e:99:64:
fa:0f:65:c2:c2:c2:b5:ad:3b:69:d8:49:cd:c0:8a:
21:4c:bd:e9:3c:30:39:5b:8e:d1:64:64:48:b0:ed:
33:09:ff:50:d2:ab:1e:30:bc:d6:ef:fd:55:96:1e:
22:e2:e9:ce:90:85:5f:da:7d:dd:92:c9:f7:d6:97:
38:9e:ca:02:10:e5:04:23:96:76:6a:63:19:a6:7f:
b3:f2:90:a4:82:65:23:fe:44:db:e2:7e:1b:9b:1f:
3a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FD:97:18:4F:45:32:2C:91:35:C2:19:30:B7:83:CF:03:02:35:B8
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1c:bd:40:99:75:3c:37:e5:b3:95:7e:d0:b8:03:b2:a1:e0:
e3:31:cb:19:1c:3e:66:c3:af:cd:a4:8a:6c:3f:b6:c1:89:88:
e7:d1:c5:b0:4d:34:b6:55:31:8f:4a:21:de:7c:96:23:73:1c:
c5:7d:47:a4:61:d4:e3:90:e7:4e:0b:dc:d6:18:fd:e2:76:80:
8e:c6:4d:24:66:0d:b7:95:c2:a3:40:a4:6c:97:7a:30:6b:fc:
cf:92:c9:58:f3:8f:94:c3:f2:07:03:8f:a7:4e:d3:38:31:a9:
58:3f:0e:5e:b9:ad:78:6e:5b:81:e2:69:77:c1:28:09:ae:65:
35:54:b5:37:b6:25:20:00:a6:21:42:a0:c0:d4:53:72:06:1c:
ef:87:20:3b:d6:89:72:ef:be:56:6f:f9:8e:59:ad:45:fe:1a:
c5:d3:92:32:e9:d3:a3:64:95:d7:97:00:15:fb:3d:58:00:d6:
18:75:e7:c1:c8:64:eb:1a:a5:ca:0e:33:c9:7b:57:fb:00:c5:
da:09:26:8e:d6:94:0c:9c:9e:45:56:8e:ef:c1:e8:80:4d:92:
17:25:12:03:b9:f3:b5:7a:0f:6a:26:00:b1:1c:f5:8b:55:f0:
af:20:30:06:31:ff:e3:5b:68:57:f4:48:a5:1b:7c:6b:61:64:
74:cd:b1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:54:26 2026 by rpki-client