
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
File: fKZDuzmcbYetxMfLpdK3L70A0EY.mft (raw, json)
Hash identifier: Vt2hanIH+8kCAyNn7TFavR6JHJ/JBLGiOjkLXvkrI8c=
Subject key identifier: 77:45:57:53:6F:0B:9D:04:7F:BE:02:54:61:AA:19:F4:24:AD:81:0A
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 019EBF5A769E0D63329CAAC5BD4352ECAE0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
Manifest number: 132C
Signing time: Sat 13 Jun 2026 05:00:37 +0000
Manifest this update: Sat 13 Jun 2026 05:00:37 +0000
Manifest next update: Sun 14 Jun 2026 05:00:37 +0000
Files and hashes: 1: 2JOxayZ4kxrtihpkJSNfTVv34wU.roa (hash: zOn78CRIowaCVixyqjErS7L368UV3aEuLomuXw4ifTk=)
2: 8JmGNshMSYZovGEGptxvSVmLazw.roa (hash: cBtmgXslMy9oeFHfquJAM4IBewoqUtnRBO1wAOTF0Qk=)
3: 9VFCcM5TkSFj-DtH7qLQwgSN5IM.roa (hash: wrh+UMairP6Hp+q2S/1S737Q0ISs8AkPKt06IH0nojo=)
4: EaUMOU4n5eMN9_93bWF9KbfM0Js.roa (hash: Qat9O3DT5PJNAgSB1rpNeEeKlT31JeYDByOxfigK1Mc=)
5: Hp0vnK6LsH978scPrAVFBl2kfG4.roa (hash: MiTGwbJzWQLF/5BUrcBlVLuqzCKJBbep6wp6tPRmCrg=)
6: JGgBlVIY2oUSh_HFDVRqyLKytmE.roa (hash: RKsfB4gNYffazBWvIDvr2El30bylWlzUFL7S8HQbwRU=)
7: X1LVS0a4yLVV-n31U0OmgdyXH_Q.roa (hash: HB5LPZBvI9YtdaaDN25t7bfdVncLanwsoppFOKXdT7I=)
8: arDSEArnZyqLs7jmsgT1tnPs8rc.roa (hash: /Km/RAgR6E8ZdX77lmgH7Nk0dxMhyfy0FGDCtSzOc/w=)
9: bwOIwRe-t7R54b9v9np6_kJQ_dE.roa (hash: Q1d3WN659RXAKPuHuKTKUTC5odQwSZ9Vh4CW0Um2Opc=)
10: fKZDuzmcbYetxMfLpdK3L70A0EY.crl (hash: ekFK2GJv6m6W3s1OgzoZe9sQy3EWEbI0Epes08yeYyM=)
11: gVoDkYx52kg2ObqLQQiu3dVABJ4.roa (hash: Q8A5Ai5FoLvBhe3BwpyHiBUhPSy+KXj0LhOWSA21Wgw=)
12: iyrSz_wsF9CBGgcuXGLfggTWLUc.roa (hash: hTAJ5z1uKngFKR3nayC40cEb7tmnFdoOcWdYxUuDRsQ=)
13: mfX6n982kHfEGonK72FOllXPKLM.roa (hash: mQgbn3Sty6H0kID4K5HG3Lec+s4hrDOIUIKg6j/AGRo=)
14: oSJ76RTJAM4Rkm0VytsagsICSMI.roa (hash: 5KF6cvuY3cWzSG6wpKOaFIJmUmHSua9Uf0BUoXvpF6w=)
15: w56M8w2Q_qfZu41_qHQO5zW4jwk.roa (hash: RAJ8brQ6bDHIdv8dDAPBh54oGKG2dIlrIsob6HcQ27I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:76:9e:0d:63:32:9c:aa:c5:bd:43:52:ec:ae:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jun 13 05:00:37 2026 GMT
Not After : Jun 14 05:00:37 2026 GMT
Subject: CN=774557536f0b9d047fbe025461aa19f424ad810a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fd:77:50:c4:c0:8a:5e:6a:f9:de:8f:1f:95:
cd:a0:98:b4:6d:c3:2d:57:28:c6:4f:74:7a:8d:48:
f8:d4:28:9e:48:35:94:c3:0e:f5:33:83:ca:c6:b0:
4c:92:e0:3b:e9:56:84:88:87:38:33:d1:0c:cf:14:
2f:34:11:ac:8d:07:74:2b:83:4a:45:6e:82:2c:79:
b7:a9:89:8b:c0:d4:24:30:d0:f9:dc:be:fb:e6:6d:
b8:32:24:02:86:f9:9d:ef:73:ae:79:52:ed:06:e3:
e2:0d:2d:ec:8a:bd:5d:d1:82:b2:0d:35:23:ed:bd:
fb:14:27:8b:f4:60:4d:fd:46:01:9f:01:bc:e0:69:
30:ed:1d:27:eb:a3:53:5b:2e:81:fb:61:db:ed:e5:
91:7c:7c:e9:1b:dd:f2:fe:0c:7a:eb:3d:fd:1e:1e:
aa:e1:92:c6:08:2c:40:57:e7:f3:d0:11:30:da:0f:
c9:0b:c4:0f:53:94:b4:7c:1a:fc:b3:f6:64:31:3c:
a4:ae:21:7d:81:bd:f7:82:21:ca:f5:e3:6e:03:d6:
d2:d4:f0:1d:9f:31:ba:7c:58:8b:4c:9e:32:2c:7e:
6a:69:2d:32:7a:6d:a3:2d:6e:bb:b5:60:ab:c4:ab:
20:df:1c:e6:64:cb:f5:6b:f2:51:e6:a3:70:9f:41:
68:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:45:57:53:6F:0B:9D:04:7F:BE:02:54:61:AA:19:F4:24:AD:81:0A
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d5:49:6c:bc:99:0c:ea:8b:85:b0:33:23:fd:74:b0:a1:02:
b2:80:de:b4:70:4d:4f:52:5e:55:54:9b:17:fb:9e:c9:cb:bd:
86:c4:c1:6e:ab:3a:e8:a0:bc:45:9a:69:91:75:a0:75:d3:01:
2f:ad:c4:3e:94:40:47:66:ac:42:27:82:b1:1c:e7:92:fa:e6:
16:95:5e:0e:ba:49:2c:3f:43:dc:3c:a6:bc:01:fd:a0:89:cb:
ea:2f:25:33:19:ad:f0:df:a3:d8:45:48:27:a6:30:e4:e5:45:
81:e3:0f:8f:c6:f9:9c:46:2d:7c:40:19:b9:cb:69:4d:6b:5b:
b3:f7:04:5c:d0:62:4d:62:7a:a5:4e:65:e7:3d:ef:d6:ec:ad:
2d:b9:a6:db:81:d7:92:ea:87:7e:2b:ed:60:ab:07:4c:17:a1:
58:01:f0:f2:73:84:c0:f6:09:28:b4:29:87:99:5c:65:d9:d1:
1b:5d:4e:95:da:39:11:a1:8e:db:9e:92:08:07:bb:78:05:4c:
d5:b6:e2:1d:42:c1:c5:06:cd:87:48:98:11:b1:8d:0e:86:b0:
1b:33:8b:0b:f8:0c:1d:53:aa:17:ef:52:b0:77:ec:3c:8b:61:
82:06:9b:ca:80:56:fb:23:27:11:5a:73:a0:4b:81:e0:b2:4d:
5b:f0:97:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:20:47 2026 by rpki-client