
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
File: 8uFg8M5eA1rzyyH039BOq56n7lE.mft (raw, json)
Hash identifier: QeIdsy9SbzG9td87P5cWoTkf0EKdF7zS6MiG0MYL3wM=
Subject key identifier: AE:94:99:23:EA:1A:1B:D5:18:21:10:43:02:B4:E2:79:70:81:BA:CA
Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Certificate serial: 019EC2C9B40EA54A7E5E61B9E5E465176C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
Manifest number: 0190
Signing time: Sat 13 Jun 2026 21:00:59 +0000
Manifest this update: Sat 13 Jun 2026 21:00:59 +0000
Manifest next update: Sun 14 Jun 2026 21:00:59 +0000
Files and hashes: 1: 0_YG0sgTnEeCqR2GAlSUn6s_pA0.roa (hash: koqyIZ24dqKTmkVL8pxW4jxU1mXt25HHPfUDLD2rz9s=)
2: 8uFg8M5eA1rzyyH039BOq56n7lE.crl (hash: gRKaitUEcbkvZPs+JPbRgO/t7LkkmsFz1Cm2sNvYApQ=)
3: BSsRECuRcbwMW98kdWWK05egVBw.roa (hash: ug6KO2Zk1MrKsNXGJ9omTpAuU0xr+emz7VoOCmkwvpw=)
4: FRRRnwExpXw7a2MuDv5ABSNE0os.roa (hash: 3ZQFCRFjP8UeMQLhH1/qjBrVW66rsV7z4ra4rGbF/Rk=)
5: IYhXGcvuReRwLkKFqkHfMT0xdMQ.roa (hash: P65YHmORj/Qbi7gb1HICB61t5DJTFwQfC/ueE2C3wHQ=)
6: LD4LiJakMnd2fM_muaGzK3OCDm4.roa (hash: 06z+15zWX5rCsS3FhV81kHp2Sa4vXMzL9qdPTiJ9zeM=)
7: Lu0A41Q5pFS0BwtpNAPtssCo0S4.roa (hash: qztJk2kblBGSD62DzOMXwoBz8qyRVHAXX4kD8NQjcWE=)
8: U7PSP9nWfWRKWIUoCFTyUjwxEDg.roa (hash: G17Pia5bNZc2B8AE0xsa/dxprFpgNsjPpfQnTzG97J0=)
9: ZZ8EJAvAm0C06wzFaBzSONJZFPk.roa (hash: HIvZs/TkMx+bymwhUhZwvlQVHu6QM24ito4FjiIQX2c=)
10: ZjMYC0UoF-rr4Yr68ciz53_Avuk.roa (hash: XSFfC2tpTl7pGI7s34smkuOaa4jrXUiaCPuucJLlqxI=)
11: eABulvX519zXYKkLmeandGZ9N7w.roa (hash: m6XnfSrV2frwGCv/l/D3+0tVwZvOqYONPwxqBxG3KcE=)
12: gDVnbdgyGBxPjaEc46h1SC6bKGc.roa (hash: bRdUEdhFNf/pMvUllLg5PTYpswbssaY0ednf3AqAQx4=)
13: ilqY9c8IbcEKTWk24AXRgSNrWO0.roa (hash: m73bbuMRMSiNr5UeY5P6BQ8Ud8zaXgZ2oA4zOG5Tf2M=)
14: s0HOCx3ToCFGRzZUHm_UV-cLZBI.roa (hash: OKS1HAKlGU2JN5vzskZAI17mKtPa16rejzU50FR3zwM=)
15: sGNYZDKF8s8_UsTeuK9XpTB6Wkw.roa (hash: gaT8D+qDaVi3KbUN95vQ0WglNN0OnaGWaUxlYVphb+c=)
16: v_MCckuvkmHRzh3YWE8nt-ZoR54.roa (hash: FGgmeFbXcFcehxYNJD3aNuzFTZwBgyIrsfMAVTMWYLw=)
17: xTfVxlDggFox5PUuDnUsOPvWhQM.roa (hash: bQBdyFyO07zmwln6EqiEUBlqxDxw1Z3Lucvcv7jJ+Oc=)
18: xyq2X_f3zC6Xz55IxSXIUgnM5z4.roa (hash: NjWdv7TCmRAiHCp58PtMucOC3ZgidTmZVOahys71z+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:b4:0e:a5:4a:7e:5e:61:b9:e5:e4:65:17:6c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Validity
Not Before: Jun 13 21:00:59 2026 GMT
Not After : Jun 14 21:00:59 2026 GMT
Subject: CN=ae949923ea1a1bd51821104302b4e2797081baca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1a:61:f3:1e:32:1b:7f:00:a0:0d:49:68:36:
cc:50:13:37:e1:58:ee:1c:d8:83:65:6e:8a:0c:20:
ee:ab:4c:d7:e3:96:d6:17:6b:64:2b:4a:ae:d1:e1:
ab:5b:03:2c:bb:46:96:3d:59:98:67:31:d9:b3:39:
90:3f:e9:73:61:99:4d:81:fa:bf:34:89:ab:e8:c2:
dd:ff:95:be:a0:69:8e:9a:d0:83:26:3c:51:ce:fd:
4d:ff:60:27:bd:b8:7d:8b:c4:99:d1:90:c2:09:75:
97:e5:52:74:f0:04:d2:2f:99:87:a9:09:4b:32:18:
ea:bf:ea:d9:31:0b:a9:0b:c4:10:76:29:b5:9f:8c:
81:d1:74:17:3c:36:12:b5:1e:51:b0:ae:54:0f:3f:
dc:17:dc:f8:1a:2d:fc:8a:d4:e3:3b:40:06:96:15:
b7:71:25:c3:f8:eb:ee:1b:1e:87:b6:8e:8d:97:86:
e3:6d:f2:a9:6c:c1:77:b4:ab:e2:be:a0:a0:0a:87:
9e:ce:2b:0b:9a:e4:29:1c:e1:a5:ae:1e:b3:ef:ce:
99:90:6c:15:21:8e:e4:d3:6e:84:cc:b5:b3:00:55:
ff:5a:33:be:95:ea:6d:51:27:93:07:86:cd:0d:83:
2a:36:d8:d8:dd:2b:d2:79:c1:dc:99:1d:63:98:01:
17:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:94:99:23:EA:1A:1B:D5:18:21:10:43:02:B4:E2:79:70:81:BA:CA
X509v3 Authority Key Identifier:
keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:b8:ff:9f:0d:31:c7:99:e8:b5:62:b1:a6:09:db:48:0e:4b:
2f:12:d4:66:08:ff:af:90:e4:61:c7:70:4c:ae:b1:9e:ac:d7:
18:48:e4:67:fd:fd:a4:06:96:64:a7:58:34:dd:85:e5:39:07:
2e:b0:0e:64:1f:01:80:fa:27:c2:64:33:3c:e9:35:70:c0:48:
f4:d6:39:37:2c:e9:45:2c:0d:db:f4:84:d8:8d:f3:88:c7:11:
9b:6d:f1:27:15:9a:30:a0:3d:7d:ac:22:23:26:9f:bd:c0:51:
63:ea:45:22:ce:70:60:df:d5:14:a9:d4:84:b6:64:cd:d3:37:
b6:67:c7:2a:05:c1:31:88:e1:98:7a:f0:ee:4d:a8:60:88:86:
a1:1f:35:05:be:42:a8:99:02:5a:7b:c1:d1:ca:4d:7b:7f:f7:
59:cf:95:9a:7c:6b:7a:7d:d8:d4:b8:e2:dc:98:93:a7:25:49:
7a:fd:1c:75:0b:99:99:02:3d:2f:f8:6a:fb:b2:3d:4b:0f:8b:
b6:9a:00:8b:97:b2:54:2f:ba:af:ea:02:85:c2:a7:7d:3c:f0:
9d:93:0d:ac:72:f1:c1:1c:a1:24:0c:1f:8b:db:eb:fa:b5:47:
0d:66:71:16:24:62:da:d4:36:95:bb:e5:0f:b6:d6:6e:4b:e9:
5f:f5:32:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:46:31 2026 by rpki-client