
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json)
Hash identifier: VgU3R2YHnjQPjqi7pJWkCCOPsn4syurRfwSggAvr1ac=
Subject key identifier: 07:63:02:90:77:7D:74:55:38:BB:05:56:63:06:2A:B3:E2:F0:07:B8
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 019FA9756EC42B9D27EC2EE04A68B02F692D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
Manifest number: 19FD
Signing time: Tue 28 Jul 2026 16:01:13 +0000
Manifest this update: Tue 28 Jul 2026 16:01:13 +0000
Manifest next update: Wed 29 Jul 2026 16:01:13 +0000
Files and hashes: 1: 0j-E2p7yPQMemgGvSRSZ4MvRCNU.roa (hash: R10Ysi1BEXWiUlY0MZI6cprW++MzfggA46h3XQchDBE=)
2: 6lQ-d2RqD34pr1B6YNpd-OcDomw.roa (hash: EUu4nLunhxSbrVXC44jFtM4/qfl2QcaLlDGbKHKerK8=)
3: EpKlZvm1sQunk4TyUL8-X4yYT-s.roa (hash: tOu5I+gySB5LV5V4nchtnSTJlY0KTUc/ZBP+vEiIXg8=)
4: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: flGF7Hti2CPLEp0ldseo7gQ0jhGMUvtqwcilBFjTbRY=)
5: Rxt2CLseUCvSS0aBQtPjXzszCqg.roa (hash: t/WG3LqTBzVpZUkPVYwf0yWDRBg9EaL/KqhhkGh1DOc=)
6: TDsQsD-FogHQsn4Ec6vvY4gDP8s.roa (hash: U4WjlnP/gqngtBE2O7bB+uTcniNf17yLooWBWXfykbw=)
7: YJY6sXgdjZPpBkj1VwmX4zvap9o.roa (hash: dT/ycJa0vDp42f9RraEZREL3j3du8iMNlQiXyOOHqI0=)
8: ajchcB005SwdhHOonkg_FPYCObk.roa (hash: iRaNo1hXeWmGHavpqJaMPyQrwMjNl6Bwb7CatuzhcAo=)
9: ix2q65tvo79b2VM9SJoR3waKmbY.roa (hash: 45SsaY7Saj0PCodz7wSRlglQW+UHXzTiCmppLl/YbTs=)
10: oI8W0AkfN6Nm4xiZ9xN1plVsvaI.roa (hash: OjUGaPP7K1loTdge45OhIT+GBszfyERu/sHA/9LU0io=)
11: qyibzEtDjpKnDnO2ZiEDt3kaXzA.roa (hash: 8qTTIASb+Ax4Z41uNrWSSXbwwLoNDBXuy0I+ga8d34I=)
12: yIWy_rvvNZnwLxKMF7Qd8tp5mIU.roa (hash: yZlGIfyc2ty242yY4bQaWq7Zh/xS5/o+bqbYH7SHCr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:6e:c4:2b:9d:27:ec:2e:e0:4a:68:b0:2f:69:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jul 28 16:01:13 2026 GMT
Not After : Jul 29 16:01:13 2026 GMT
Subject: CN=07630290777d745538bb055663062ab3e2f007b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f4:a5:61:71:57:3c:b0:9b:6e:26:52:e5:db:
76:e8:f2:08:dd:ee:2d:66:c0:1f:6d:80:4f:0e:18:
64:60:2a:e9:35:fc:ef:05:4c:6c:72:b5:b8:ab:74:
71:ca:1f:73:c6:2f:3b:27:6d:8d:db:de:c4:37:ef:
01:2d:38:7b:68:e2:a2:ef:19:5c:1d:96:74:28:1f:
1e:83:2e:bb:51:37:2a:4a:7d:b6:5d:09:26:f2:aa:
fe:b9:f9:bd:02:1b:d4:67:ec:c5:26:f3:3f:a0:0d:
7c:54:02:0a:f9:3d:17:3a:97:2a:e3:96:a9:28:d1:
1d:5d:f7:a0:4f:93:81:e0:39:83:d6:50:16:13:57:
93:3b:a3:a1:65:41:63:ad:0d:d3:b1:8b:b8:b3:33:
60:56:ec:f9:40:e6:c0:8a:d6:3a:60:44:08:41:c6:
77:3a:89:0c:db:d7:29:57:54:9b:ca:01:15:b4:af:
47:67:19:46:71:e2:77:2a:cd:37:a2:f3:06:d0:80:
38:af:1c:55:5c:79:89:ea:57:f8:71:c8:cc:89:fb:
7f:a5:d6:b5:e4:5a:b8:62:31:75:69:96:c0:55:99:
ea:64:5d:eb:c0:b1:4b:5b:42:56:46:f1:8c:5a:45:
67:67:57:19:b6:a1:14:66:cb:35:ff:3d:af:ba:e4:
a6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:63:02:90:77:7D:74:55:38:BB:05:56:63:06:2A:B3:E2:F0:07:B8
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:23:34:e3:b5:4e:db:d6:5c:c6:7a:3a:39:0f:e4:6c:2e:0d:
3f:ec:2d:82:68:4c:2e:91:59:3c:c5:53:42:70:be:74:83:a2:
d9:34:53:74:4c:ce:c1:f5:99:21:a3:cf:91:19:b0:c2:9d:00:
3e:8e:a7:b8:fe:7b:cf:7f:6a:17:54:14:1e:20:88:1f:89:35:
b5:fb:82:18:48:0f:b8:69:8e:7a:f3:18:46:8b:fd:c7:25:43:
e2:89:5c:7f:60:1d:d9:d2:dc:8e:52:d8:da:69:2f:4b:3c:cb:
c1:d0:88:85:dc:fe:e0:41:74:da:57:22:78:6e:1a:65:f8:62:
14:b1:f8:f0:08:df:44:b1:a9:c4:e6:2d:a3:5e:02:54:8f:1e:
a6:ba:b5:7b:cf:2c:cd:81:4d:5d:34:31:57:57:b8:4f:ee:bf:
1e:b1:48:0a:95:ff:ce:17:4c:00:61:75:44:62:30:1d:bd:8e:
3b:15:8c:4b:cc:3c:56:3d:1e:ab:eb:ef:c1:bf:20:5c:d8:8c:
ec:a6:66:6c:af:6d:21:9a:29:c9:b6:99:cf:09:41:1e:71:ae:
83:7e:10:d2:98:bf:30:c1:6f:fd:56:1b:eb:e7:1a:25:5e:41:
ce:c7:ce:d1:13:89:17:b7:86:22:e2:4b:b3:18:dd:10:25:9d:
ef:80:1d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:21:31 2026 by rpki-client