
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
File: O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json)
Hash identifier: 9FANFiUsF5l5sPAfUBXmDF+YAcFnGqq7W2kMbwWNcKM=
Subject key identifier: 59:AC:5E:B3:67:BC:27:DA:56:4D:37:FE:29:25:15:4F:B3:26:85:54
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial: 019EC11217C7115A614ADD6A4FA3DC5358FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
Manifest number: 1963
Signing time: Sat 13 Jun 2026 13:00:48 +0000
Manifest this update: Sat 13 Jun 2026 13:00:48 +0000
Manifest next update: Sun 14 Jun 2026 13:00:48 +0000
Files and hashes: 1: 1-ehuABryUVINj2W3NK-g46DB49o.roa (hash: YXDM1cCPDyh4BpBxko9niqIGoA4Nx7Wm0bIxDril5ZU=)
2: 49TpBZIbyHobsWcoh4oSwqHHj24.roa (hash: H3ZabpGlNw6ABVIQ/nTAsG4jZDJmHYwqGcghd6J47mU=)
3: CJMQtEYFaJCIAob5YTIM33reer0.roa (hash: 2fmW/5EjPlZQDHVPyDvXpi5tn/bBcbJ02R3RN2NWWE8=)
4: GhJdnyWj9py61uVvaxvqFfy0V7c.roa (hash: ljlh5bK4up2SZeKlCTioJwKwERt/6WFEKI2x/h9hHl8=)
5: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: ixrk5Z4WbBhzVmzriaS9DI02PC4dzr0rtCTweIAuTTw=)
6: YTSwtqCla-KMN-KojPP7ZcEJhCI.roa (hash: ucZ995yNrK5VHoaXITb+Y7tbONn7bL9sNblRcrvwpcQ=)
7: eSL82eEcvzSK2dkw6o4hr1h_hm0.roa (hash: iOpyDBpoorKPMwT1bNhIwY8hNcyUZXYXJpDFE6NQs9Q=)
8: gLrTd-tF6YKwKPVyN-B9kSozUjE.roa (hash: TmnCSJykitabQj5d7T0dn/Ydx5URkDDijEKhCVoUSe8=)
9: nKmF1TZGqw4Rl01o8Upo8B1uARg.roa (hash: jsNr28qDsooPsLwTF7PUY4RAqfXcXlMffZUWeSf+lRc=)
10: y2kC-JHxws7OdlKjntbmzAIGoYo.roa (hash: LqoUkGt/W9j9zMAyvyXO0TzR2hTHbWsAzvz5pfbOIEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:17:c7:11:5a:61:4a:dd:6a:4f:a3:dc:53:58:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Validity
Not Before: Jun 13 13:00:48 2026 GMT
Not After : Jun 14 13:00:48 2026 GMT
Subject: CN=59ac5eb367bc27da564d37fe2925154fb3268554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:a2:21:43:cf:77:2e:c1:1c:cb:97:f2:8e:
84:05:8a:f4:4d:29:42:02:3c:cd:60:c1:1c:6e:7c:
7b:d7:bb:47:3e:0f:0a:51:be:d0:ff:b1:03:9c:d8:
63:38:4c:4e:d1:3e:51:33:83:5c:5f:57:c0:a6:3a:
a6:5b:31:f9:e8:95:f6:5a:92:0a:84:cd:b5:5c:34:
cf:36:54:f7:08:ce:7e:3e:d9:f3:0d:13:3e:8d:f1:
83:6f:ad:01:dd:11:fe:85:8b:5a:08:b8:e5:e5:c8:
91:74:e1:4c:ce:08:0b:bb:52:55:cc:15:a8:c9:8a:
8b:9b:02:a9:ae:6c:fe:b4:26:4b:35:8d:33:bb:43:
ba:e3:8a:84:fd:36:06:70:35:cc:fe:f3:75:c6:ff:
74:d2:d5:8f:ad:3a:0b:b5:63:fc:4f:00:ff:46:85:
f2:16:33:8f:99:03:22:4f:54:51:10:bb:e8:6f:7a:
b9:3c:7a:47:67:60:6f:07:3f:4e:78:17:02:af:b6:
3c:88:60:95:8a:fc:8b:23:a6:26:48:8c:e5:80:db:
a5:6f:e9:23:3c:be:db:ea:cc:32:fb:50:1b:94:64:
32:a5:a4:32:58:a7:94:86:bd:d9:f6:93:18:0e:05:
3f:69:fd:25:4a:64:90:36:ec:c4:88:32:92:01:01:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AC:5E:B3:67:BC:27:DA:56:4D:37:FE:29:25:15:4F:B3:26:85:54
X509v3 Authority Key Identifier:
keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:50:25:8b:3b:3e:51:e8:2e:88:e3:37:3f:16:2f:25:8b:2f:
d2:7f:07:73:de:b1:a0:67:4b:cf:7d:e4:81:ed:58:c6:5f:ab:
eb:01:93:88:d3:ae:5d:81:f6:1d:6d:c9:99:2a:68:cc:96:35:
0f:0f:95:32:8e:1b:42:a6:cf:7c:23:0d:04:bc:7f:e6:ba:12:
53:3f:01:3b:99:05:68:f5:fa:c8:7f:bc:5a:4f:4c:1b:1d:78:
61:80:68:e8:f5:9a:96:28:60:e0:17:a9:4e:ab:03:f4:c8:46:
39:02:e0:f0:81:d2:c7:26:28:66:26:d3:e3:97:73:39:65:4e:
da:4d:09:e8:29:0c:81:0b:8a:d9:27:15:a4:cd:3f:80:0f:7f:
d9:bc:64:9b:ca:39:f6:36:98:c2:e6:f4:ed:bf:13:ed:f8:a5:
97:fb:94:ec:92:a8:ea:d2:b1:11:3e:7e:6f:07:d6:8f:08:37:
f6:ed:18:10:ca:05:1c:9b:80:45:a7:72:ea:26:30:20:4b:ae:
3a:79:01:e2:e5:44:1e:ed:05:52:74:9b:f6:13:16:e4:cc:43:
62:cb:fd:e0:4a:c3:1c:33:a6:b8:17:b8:92:10:7b:a4:14:ac:
c5:b0:eb:fc:a6:38:b8:30:0b:38:12:6a:8e:97:09:9f:45:91:
ab:af:11:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:16:48 2026 by rpki-client