
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json)
Hash identifier: TwrSCB6SlQtM038YEw0H2yDOBYLdzPBuaKf9Rb8ccZY=
Subject key identifier: 60:70:51:E2:DE:A2:31:11:54:79:B7:40:05:10:30:1A:AC:8F:EA:8F
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 019FA8D0699FE6AE2F2FA6ADD84A03E9F979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
Manifest number: 1793
Signing time: Tue 28 Jul 2026 13:00:58 +0000
Manifest this update: Tue 28 Jul 2026 13:00:58 +0000
Manifest next update: Wed 29 Jul 2026 13:00:58 +0000
Files and hashes: 1: BKLkIdToQetqMN6t0fILb38dSDc.roa (hash: RhVkHdE+vukqBXIHV6N+0FaehH32ohYDLGAwN+SuRTk=)
2: CupzWU4aLHwacea9s2f26JgGU7w.roa (hash: YiVW0zn+2J0x+BF2Yslb930PEXt7HMZ5DbfmBNoWQKE=)
3: Hf9SE1c9_AO3kFICjo06WD1ExT4.roa (hash: Zcpcz8u2FNeH+3dXoD7WRhTdlszR9sgi9wm3DkRL4TU=)
4: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: Qid8ml62BxwMiKRIsqMGQJRFDqnVD+/aY+MHLrPGExU=)
5: InZzXVL8KHJoCW3P7j1vC_LCtX0.roa (hash: UZuietxe/VlvBF04H5Qn/Q3JuczTSHQbjD8HNRbl0Y4=)
6: V6V_NlUP57LahAmPSdJLWOxrfrk.roa (hash: PQq468qMgQ7iMbphbUgZdzLfF9PWviyerqDZHzWerVE=)
7: a6tV42bT2z7X2lsjs8cvX8HIAIc.roa (hash: NDbBw26iXwsVl/ElEophDI0QYBlkmtkRinFz/9BOzMw=)
8: ew5GxWmNdi8APxJ7DnyuV397vVY.roa (hash: scbuflEbcOaCfZ8YsAmmUBvMpXLhScUEwCDFhgE24W8=)
9: fObJjjriSFDg4fSQTq7ENWa9-zc.roa (hash: WGLV3VjdN5mD0f589CBjcyMgLQSoTV+NVe84m46+eBc=)
10: hcsvWgXQpRuMWY3WmGaGm9cGJ4A.roa (hash: dkGLaaklnk5lHe0yhu52I503lMVuY0bbx3ehGkFXyqY=)
11: i7574yuT4RZ2_MwlIM2VKqIIK2U.roa (hash: X+/UrliSCfToScMB/8/XDGdMggPWp6ennjed9G4uk1A=)
12: qOIniIo2K3_zis3JibLadioBPRo.roa (hash: 5h4shskfhopVb9L7z02A78iAajdnh2sIBdf4Kss8RH8=)
13: vWKFpPFVl35hfIog_KoQjclWrmY.roa (hash: 7m8wK3gsN1166dBeFVQxAfE0K89nsZEcg+lnonfGv9Q=)
14: wWIoMzB39ahvaptJv9NhKUQr9Cw.roa (hash: 7GV/ae9yumSfYZH3dmuAGtWW+nlGHJx1A9VViiivwD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:69:9f:e6:ae:2f:2f:a6:ad:d8:4a:03:e9:f9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Jul 28 13:00:58 2026 GMT
Not After : Jul 29 13:00:58 2026 GMT
Subject: CN=607051e2dea231115479b7400510301aac8fea8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2c:99:3d:38:8f:88:64:49:05:bc:7c:99:92:
71:81:a0:e0:86:8d:2a:aa:7f:6e:7a:6a:7d:93:ae:
26:24:8b:17:50:c8:26:ea:09:47:d6:08:f8:32:db:
30:02:68:ec:60:c5:e8:47:db:7f:ef:eb:18:33:2f:
4b:12:f3:72:20:b4:4e:14:7f:f5:ab:61:87:43:be:
a5:df:e2:fa:9c:04:87:fd:74:dd:c4:2f:17:7f:89:
41:ed:a1:e0:3f:b8:e3:58:ec:3b:39:e5:eb:43:cd:
c0:08:dd:c4:07:fd:21:1a:2d:ec:53:fe:bc:3a:84:
f7:19:a2:da:af:be:00:11:36:7a:4e:46:1a:a9:c7:
57:08:e2:ca:49:f3:c6:11:dd:c6:19:4e:82:78:32:
c9:90:3b:e6:fd:ec:22:ea:7b:5e:f5:01:db:79:1e:
1b:f4:a2:53:7f:f0:79:08:2f:69:55:e5:10:88:89:
ba:ab:45:b6:13:bf:43:00:37:80:77:7d:86:19:09:
ba:85:7d:f6:75:9e:72:7c:c5:8e:78:30:7c:8f:83:
5e:40:c8:69:c2:41:82:19:3a:f1:c4:ae:cb:3d:c9:
38:5a:3a:f4:66:77:2d:e2:9b:75:87:4e:a9:ac:8b:
be:44:80:7b:b4:66:30:65:40:4c:18:4c:3f:e6:f5:
db:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:70:51:E2:DE:A2:31:11:54:79:B7:40:05:10:30:1A:AC:8F:EA:8F
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:41:57:0e:92:56:70:54:08:3d:64:03:78:c8:8d:f9:c6:bf:
28:21:9d:62:cb:aa:6d:59:31:4d:8b:6d:55:d5:bd:61:43:b1:
e2:82:96:a0:d6:dc:f1:53:a6:b7:3e:6a:85:2c:d3:b4:91:10:
3e:5c:bf:9f:90:57:de:5c:d7:89:67:df:5e:d0:7d:fe:42:57:
9d:07:68:ee:2c:26:c9:f5:5b:f7:c8:80:28:e6:4c:3a:ce:ea:
8e:bd:54:32:9b:1c:49:42:c6:82:21:00:09:ef:d3:ad:d5:2a:
fa:9b:db:9e:ca:1f:80:e7:fe:03:33:c7:c3:ad:22:ad:e4:0e:
a7:85:92:21:59:85:f0:01:92:28:0e:a9:76:36:53:88:d0:3e:
70:b6:13:2f:7b:d0:d5:30:32:25:44:ce:1c:bd:da:94:5d:e7:
16:dc:72:a4:ab:8f:9a:e5:94:ce:ca:e5:c3:d6:5f:1f:5e:58:
82:9f:25:98:d2:1b:da:c5:ff:5a:c4:b3:0c:3e:e8:8e:f3:0b:
15:5c:52:b5:88:3d:47:b4:88:4f:08:b7:28:d7:e7:d8:03:df:
96:fc:9a:ce:1c:de:4e:e4:8d:5f:84:1a:45:fd:ff:c2:72:e0:
20:e4:c8:e9:b1:68:c9:ba:68:13:ea:15:18:1b:80:30:3c:11:
19:0f:28:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:04:14 2026 by rpki-client