
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json)
Hash identifier: 1HVPDGjPEdLagQGkhorNh2PAKpw82LmDUYIexmaqj4Y=
Subject key identifier: 9B:78:D2:0F:15:5D:E3:32:31:7B:C6:76:2A:C2:E9:A3:57:41:55:CF
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 019FA9E338AE6A85A5362E37B9D837C4FE2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
Manifest number: 19FC
Signing time: Tue 28 Jul 2026 18:01:08 +0000
Manifest this update: Tue 28 Jul 2026 18:01:08 +0000
Manifest next update: Wed 29 Jul 2026 18:01:08 +0000
Files and hashes: 1: 1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa (hash: 1Fmhd+4SkmoKTilp+KnCaHBrX5MmOhF5Wo18rIERPHw=)
2: 733qejQeyvQfxCja1dAc1nuCR_A.roa (hash: KleWDRg9L/DGQoc1sDASC5LrA8OvWQb92hsXoAnnUGY=)
3: 73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa (hash: BSPAMunG7+dz8/xVaXw63v+Zih21l/yg2vG9uFtCoek=)
4: 7mjjEimVyPAhDrW306HN7Xpq5TU.roa (hash: rJyGYC0o7YsIdd+MxxTQnOk4AhcSOrR+I2pW7d2m2kM=)
5: 9fPFGinDfGempONBNKKR85QTrY4.roa (hash: OcTPIavmogAcMDXY2sRRS2ySb+5s9YwccCvKuySUcQg=)
6: F6FVNLRVZ1Urk9z33_67okQbq4g.roa (hash: eN1LfvinQOvT+MLeacaMPwMXreCB7uQkdHfpw0SJBpY=)
7: II1ZVg6fHe7M0vm2TA9v3X8mC6o.roa (hash: p68UHIrzry/3qZoSeb+eQcb4FEiW01aytTp+ib7BRMg=)
8: JnPAv8lx_qgiyt8IZcz38a1HdUk.roa (hash: MwHoRiJbPTT8YYMUuCjiN8T5BomUWhWpITXv0mHPhEQ=)
9: Lh10WlvwLo5FMBkJ865-yYzNORs.roa (hash: KP2ztC96HoIm1Q+cl0xK6rS5NQtKIaU1qUzrl8/B9+s=)
10: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: 4V4EFbCw93M9XanhOx/oH4YN9cC1xqbBG7u+DDS7EPk=)
11: P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa (hash: otq4sVs1VpBy6GnMf7DBSa171vmhP3dynH14BlSuJh0=)
12: RF8NSoKFBF5OaqJYcDdT02VuHSs.roa (hash: vvRB+9WORlJrLhlB589TkVY3+WpSsmxXiUuyhpijGUI=)
13: S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa (hash: wikPp7X61J9BcNvkU05wIEdzT3V8DLeI/IY315exqs4=)
14: US44wcphD6LlMjq_XXuf83C94AM.roa (hash: ZoeHyaeNCMvwVI+LzE+c+Ul6H+jb9UOCj4YZe6jJhyM=)
15: aaBKRBdEokmI1YebEe2qpwWm1LU.roa (hash: W0VKJflIrnpYpIB94urNDehev59jsZlXXi8glok95Zw=)
16: dhvS8jcUEVfvG46-fKLWALCIpVw.roa (hash: L/U3IcHBzPTqJbWLVELvDe1/R6RlRem6lq6GXoNBkWg=)
17: kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa (hash: RmDZVqDTWxbHbVHJYI+dt1cvutcS51g0agILS9swwck=)
18: pewyh9mTWFMXEikjYH6QDkv1tH4.roa (hash: 1T30Mm7QBaKNNrH0R9ThAvrcs7PzL0UDdC3W+cUJBXs=)
19: uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa (hash: LCPMsfcyxURpdxTULAQXWYhhRiaQLuroc5jgvHzKoa4=)
20: voadC2JBDf0kY270gpj8Ay3wj_4.roa (hash: s3llyj84v1b4U6Le3auXVyy/kIYl6zbffdXfZc1j1vI=)
21: xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa (hash: Bb2qIqxu7gzASrbXBCAeaJtrIuYqnsstxMEsjaiRExs=)
22: ywsBEYyAKFfKP2eykdIBS6MH4y8.roa (hash: HDEyzi3R+BlLQKOv6yiUGnBCJrIeFX9J0ujKiMj5JFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:38:ae:6a:85:a5:36:2e:37:b9:d8:37:c4:fe:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jul 28 18:01:08 2026 GMT
Not After : Jul 29 18:01:08 2026 GMT
Subject: CN=9b78d20f155de332317bc6762ac2e9a3574155cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6d:63:58:79:02:be:25:14:ba:aa:1e:91:9f:
94:01:e4:dd:80:f8:24:0d:4a:ce:c8:50:7b:8a:50:
59:6a:27:42:8a:58:ca:bb:37:4f:9a:3c:cf:3f:43:
ea:e8:d3:d0:23:3c:b1:b4:8d:49:07:53:9e:e7:dd:
00:4b:69:52:28:8c:08:6d:d8:43:75:16:5f:f5:cc:
52:73:23:f7:10:d9:bf:39:01:ca:d2:44:59:f0:60:
42:31:9a:f8:18:27:70:99:03:b8:c1:e0:e0:e8:8d:
40:2a:80:14:6a:aa:27:55:d0:03:2a:81:77:09:d4:
bf:78:f7:a6:b1:69:79:be:4b:df:4b:91:ca:ca:95:
d4:1d:a3:12:c9:be:4b:d2:f5:cf:61:e8:c2:12:10:
f6:2e:b1:78:fb:ca:98:61:aa:0b:a4:a9:4a:f8:51:
1f:57:4b:2a:2c:36:60:bf:e1:75:c3:ff:48:33:92:
52:28:85:2b:ca:7e:f8:16:cf:e2:35:25:99:60:5a:
08:dd:61:9d:de:2f:b9:13:ef:73:9b:fb:15:fc:41:
10:9a:cb:27:21:b5:6a:5a:dd:3d:f8:59:70:15:3a:
e8:92:ef:01:ab:b5:a8:7e:67:9f:17:93:42:45:7b:
05:86:4f:45:a9:be:d2:15:f9:a8:c8:5b:de:9a:93:
ca:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:78:D2:0F:15:5D:E3:32:31:7B:C6:76:2A:C2:E9:A3:57:41:55:CF
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:da:e4:c8:9b:bd:00:8c:6c:0c:1f:b3:bf:78:85:c3:d8:fb:
82:57:60:c0:2b:59:72:89:81:02:9f:f0:26:d5:84:f8:0e:d8:
1f:66:57:08:77:79:22:c4:68:cf:e6:f4:20:2e:16:e9:2f:e0:
38:9f:d6:e5:6f:04:ea:5f:87:45:5d:4e:59:78:ae:80:79:8d:
29:97:96:e8:df:bc:3b:73:59:25:36:09:9e:9a:31:7f:d0:c3:
b1:b3:4a:5d:55:b7:6e:49:b7:da:3c:9c:b8:36:dc:2a:dd:d0:
50:57:76:e6:79:d0:2e:9e:79:67:b3:a1:32:cf:4e:76:10:f4:
5c:ad:13:cf:a2:a1:26:31:17:b9:14:41:a3:74:34:d6:69:a5:
19:bd:bd:3b:25:2c:cb:ef:a8:de:0b:81:70:8a:7e:16:5c:36:
dd:fa:ea:7a:49:82:34:8a:09:75:16:f4:01:26:ae:45:56:d8:
c1:50:0e:2e:02:a3:dc:95:37:11:c0:19:68:62:bd:c1:c1:d9:
3d:93:65:7b:27:27:6a:bf:8e:c1:f9:bc:50:1a:01:ad:55:c8:
73:db:95:a3:f0:f9:ab:10:b6:f1:bc:1a:9a:32:26:f1:7f:90:
65:28:4b:81:0b:62:48:c6:ec:f0:a3:c0:ac:3d:2c:94:5f:14:
70:93:69:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4ziuaoWlNi43udg3xP4tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl
NTQ2YTQwHhcNMjYwNzI4MTgwMTA4WhcNMjYwNzI5MTgwMTA4WjAzMTEwLwYDVQQD
Eyg5Yjc4ZDIwZjE1NWRlMzMyMzE3YmM2NzYyYWMyZTlhMzU3NDE1NWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9G1jWHkCviUUuqoekZ+UAeTdgPgk
DUrOyFB7ilBZaidCiljKuzdPmjzPP0Pq6NPQIzyxtI1JB1Oe590AS2lSKIwIbdhD
dRZf9cxScyP3ENm/OQHK0kRZ8GBCMZr4GCdwmQO4weDg6I1AKoAUaqonVdADKoF3
CdS/ePemsWl5vkvfS5HKypXUHaMSyb5L0vXPYejCEhD2LrF4+8qYYaoLpKlK+FEf
V0sqLDZgv+F1w/9IM5JSKIUryn74Fs/iNSWZYFoI3WGd3i+5E+9zm/sV/EEQmssn
IbVqWt09+FlwFTroku8Bq7WofmefF5NCRXsFhk9Fqb7SFfmoyFvempPK0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJt40g8VXeMyMXvGdirC6aNXQVXPMB8GA1UdIwQY
MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt
MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy
LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtrkyJu9
AIxsDB+zv3iFw9j7gldgwCtZcomBAp/wJtWE+A7YH2ZXCHd5IsRoz+b0IC4W6S/g
OJ/W5W8E6l+HRV1OWXiugHmNKZeW6N+8O3NZJTYJnpoxf9DDsbNKXVW3bkm32jyc
uDbcKt3QUFd25nnQLp55Z7OhMs9OdhD0XK0Tz6KhJjEXuRRBo3Q01mmlGb29OyUs
y++o3guBcIp+Flw23frqekmCNIoJdRb0ASauRVbYwVAOLgKj3JU3EcAZaGK9wcHZ
PZNleycnar+Owfm8UBoBrVXIc9uVo/D5qxC28bwamjIm8X+QZShLgQtiSMbs8KPA
rD0slF8UcJNplw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:43:08 2026 by rpki-client