
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json)
Hash identifier: jeCifgJ2bNRUHSJ98fMFTZyFItfg0BwEEWg9BxLqvPw=
Subject key identifier: 05:F0:A1:69:ED:37:15:7C:07:E6:C0:E8:9F:C8:ED:11:28:D9:DC:2B
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 019EBDDA83B6302EC38C4C289B60B72AABBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
Manifest number: 1719
Signing time: Fri 12 Jun 2026 22:01:14 +0000
Manifest this update: Fri 12 Jun 2026 22:01:14 +0000
Manifest next update: Sat 13 Jun 2026 22:01:14 +0000
Files and hashes: 1: BKLkIdToQetqMN6t0fILb38dSDc.roa (hash: RhVkHdE+vukqBXIHV6N+0FaehH32ohYDLGAwN+SuRTk=)
2: CupzWU4aLHwacea9s2f26JgGU7w.roa (hash: YiVW0zn+2J0x+BF2Yslb930PEXt7HMZ5DbfmBNoWQKE=)
3: Hf9SE1c9_AO3kFICjo06WD1ExT4.roa (hash: Zcpcz8u2FNeH+3dXoD7WRhTdlszR9sgi9wm3DkRL4TU=)
4: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: ZIwrdliXmw6e5KqMjGr9o2fphSIceRU4VgZjZy5D5/A=)
5: V6V_NlUP57LahAmPSdJLWOxrfrk.roa (hash: PQq468qMgQ7iMbphbUgZdzLfF9PWviyerqDZHzWerVE=)
6: a6tV42bT2z7X2lsjs8cvX8HIAIc.roa (hash: NDbBw26iXwsVl/ElEophDI0QYBlkmtkRinFz/9BOzMw=)
7: ew5GxWmNdi8APxJ7DnyuV397vVY.roa (hash: scbuflEbcOaCfZ8YsAmmUBvMpXLhScUEwCDFhgE24W8=)
8: fObJjjriSFDg4fSQTq7ENWa9-zc.roa (hash: WGLV3VjdN5mD0f589CBjcyMgLQSoTV+NVe84m46+eBc=)
9: hcsvWgXQpRuMWY3WmGaGm9cGJ4A.roa (hash: dkGLaaklnk5lHe0yhu52I503lMVuY0bbx3ehGkFXyqY=)
10: i7574yuT4RZ2_MwlIM2VKqIIK2U.roa (hash: X+/UrliSCfToScMB/8/XDGdMggPWp6ennjed9G4uk1A=)
11: qOIniIo2K3_zis3JibLadioBPRo.roa (hash: 5h4shskfhopVb9L7z02A78iAajdnh2sIBdf4Kss8RH8=)
12: vWKFpPFVl35hfIog_KoQjclWrmY.roa (hash: 7m8wK3gsN1166dBeFVQxAfE0K89nsZEcg+lnonfGv9Q=)
13: wWIoMzB39ahvaptJv9NhKUQr9Cw.roa (hash: 7GV/ae9yumSfYZH3dmuAGtWW+nlGHJx1A9VViiivwD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:83:b6:30:2e:c3:8c:4c:28:9b:60:b7:2a:ab:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Jun 12 22:01:14 2026 GMT
Not After : Jun 13 22:01:14 2026 GMT
Subject: CN=05f0a169ed37157c07e6c0e89fc8ed1128d9dc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:60:17:f0:d6:fb:21:09:bc:00:f9:23:26:
65:0e:9b:e5:6b:26:f1:1a:4e:95:c5:34:1c:bb:cd:
2a:6c:72:af:81:00:a8:aa:08:84:3c:3e:11:27:4d:
b2:92:dd:df:27:a9:62:7d:7c:f9:ba:c4:2f:30:9c:
30:1d:d1:9a:be:42:12:88:db:64:f4:24:69:75:05:
87:a8:05:7d:3f:67:67:9f:32:f5:21:1c:87:61:1f:
25:eb:fc:b3:8c:3e:99:5c:1f:08:60:a9:ec:d0:14:
c0:ae:8a:29:5a:46:a8:1d:ff:36:a6:82:a1:48:16:
7d:12:64:87:01:bb:dd:3a:fb:01:7b:93:d1:f9:c7:
3b:3c:94:87:a2:a4:e0:15:d5:50:99:4e:2d:f9:db:
6c:02:e8:8b:0c:06:d7:b7:16:bb:db:68:be:1d:d0:
4b:23:1b:79:83:a6:d6:7a:ac:27:eb:a8:ac:ac:a4:
8a:f6:8c:2f:d5:78:d3:be:03:ac:e6:2f:0d:b4:a3:
ad:25:7b:f8:9e:59:90:98:1d:6a:d3:9e:15:4f:c7:
fc:25:af:57:23:61:62:ba:da:fc:fe:d2:da:13:7e:
ed:81:e6:87:35:31:9c:f9:37:97:7e:6d:3c:79:70:
28:af:de:dd:a6:26:71:c5:1c:32:f1:c2:fe:59:3d:
23:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F0:A1:69:ED:37:15:7C:07:E6:C0:E8:9F:C8:ED:11:28:D9:DC:2B
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:eb:af:44:fa:56:6a:76:5d:b2:f0:09:75:bf:37:d6:53:e6:
18:7d:ef:42:a6:df:bc:3f:86:c1:d6:db:54:e8:d5:fa:4a:5d:
3f:43:71:d3:5f:6c:a6:fd:45:f0:14:2a:e6:79:31:58:51:47:
bd:36:53:8f:93:10:ee:6f:64:7c:61:4c:3d:c3:b9:08:df:22:
72:8e:52:bf:78:1c:08:b7:e5:ce:0f:48:a7:c2:43:38:b3:6b:
70:f8:de:be:45:5a:c5:db:69:78:a6:69:dd:a9:bf:e4:b9:cc:
be:11:5b:63:eb:6f:75:59:fa:a6:b0:12:c3:ec:88:5f:2a:9a:
ca:ca:ce:72:bc:b5:e4:11:a8:82:ee:d5:4c:ec:15:c1:9f:ca:
35:42:18:5a:77:1d:3a:6d:3d:1b:5d:1d:fe:91:76:fd:5d:17:
cd:54:50:ec:f4:6d:8f:52:8b:8f:c3:ea:4f:7e:c0:9c:0c:cb:
6d:c0:8b:c1:e4:74:77:55:a2:1f:02:e3:18:83:8d:24:7b:a0:
21:f8:bc:57:db:35:99:cb:b6:96:8c:e7:54:33:25:77:b2:f1:
e3:ae:58:29:6e:56:c0:41:af:f3:ee:70:84:bc:c5:38:2a:cb:
e6:a9:5b:67:0c:0b:bd:f6:26:75:15:69:f3:eb:b3:94:45:86:
d2:44:45:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ692oO2MC7DjEwom2C3Kqu8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx
ODQxMmMwHhcNMjYwNjEyMjIwMTE0WhcNMjYwNjEzMjIwMTE0WjAzMTEwLwYDVQQD
EygwNWYwYTE2OWVkMzcxNTdjMDdlNmMwZTg5ZmM4ZWQxMTI4ZDlkYzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmZgF/DW+yEJvAD5IyZlDpvlaybx
Gk6VxTQcu80qbHKvgQCoqgiEPD4RJ02ykt3fJ6lifXz5usQvMJwwHdGavkISiNtk
9CRpdQWHqAV9P2dnnzL1IRyHYR8l6/yzjD6ZXB8IYKns0BTAroopWkaoHf82poKh
SBZ9EmSHAbvdOvsBe5PR+cc7PJSHoqTgFdVQmU4t+dtsAuiLDAbXtxa722i+HdBL
Ixt5g6bWeqwn66isrKSK9owv1XjTvgOs5i8NtKOtJXv4nlmQmB1q054VT8f8Ja9X
I2Fiutr8/tLaE37tgeaHNTGc+TeXfm08eXAor97dpiZxxRwy8cL+WT0jDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXwoWntNxV8B+bA6J/I7REo2dwrMB8GA1UdIwQY
MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt
MjVjYzlkNmNmYmI5LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5
LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOuvRPpW
anZdsvAJdb831lPmGH3vQqbfvD+GwdbbVOjV+kpdP0Nx019spv1F8BQq5nkxWFFH
vTZTj5MQ7m9kfGFMPcO5CN8ico5Sv3gcCLflzg9Ip8JDOLNrcPjevkVaxdtpeKZp
3am/5LnMvhFbY+tvdVn6prASw+yIXyqaysrOcry15BGogu7VTOwVwZ/KNUIYWncd
Om09G10d/pF2/V0XzVRQ7PRtj1KLj8PqT37AnAzLbcCLweR0d1WiHwLjGIONJHug
Ifi8V9s1mcu2loznVDMld7Lx465YKW5WwEGv8+5whLzFOCrL5qlbZwwLvfYmdRVp
8+uzlEWG0kRFAA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:29 2026 by rpki-client