
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
File: 437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json)
Hash identifier: 0GUrEAxVXWPJ3Al+bYfWSnQByCkLpMqFwSW9uiQdvJY=
Subject key identifier: 28:E0:16:25:B0:04:80:B5:20:CD:5F:67:6B:E6:53:8D:49:FE:43:F2
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 019EBEED5AC478D6DEDAD5555943B98D1FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
Manifest number: 198A
Signing time: Sat 13 Jun 2026 03:01:26 +0000
Manifest this update: Sat 13 Jun 2026 03:01:26 +0000
Manifest next update: Sun 14 Jun 2026 03:01:26 +0000
Files and hashes: 1: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: 8NrPOSYL+jEyBL3EKtgXzCj3mlQBLhR9kJDPrxsWlH4=)
2: 6wXcfaNHNIKPsPI9yxLfZE8Q_jQ.roa (hash: ECXhCTN51hl1ngcmROyprePwXkJAyAbxEBIgymRFGBA=)
3: 9qGo67yr4HRrxBkAO69NOfH1xyM.roa (hash: 9kV8qye+hDokGEdQvc6wx6xFhzWb+QDG85qAmFrrRNc=)
4: HBS5CYoNWOXobGPomOlaeFTG4h8.roa (hash: D7vH7TbSVaq4pp/oo4dyUnQisHAJ6z4gW2NLDiuh3AQ=)
5: IHMW0iOLCaPimXteCXKckZiuXok.roa (hash: eKTeqM0561BoLTc+G0Vfml+zBr4iHbl5NUyAYC+RQzM=)
6: TBEAu5KKSTnnuwJ2g_Z91zWbXKA.roa (hash: smnw3toc9NIJXiN4piIx54U4f4Mbs+Yue06OIF7Ed2g=)
7: Y1o82bE2-gHB1r-LJfG7FW6CDno.roa (hash: M0bYY1tvqoKKPy6ihZHMLQgzM3Djtdt9R4G+PSmX6ng=)
8: ZAW9hLoDnVp80PJK59uzMqseMQg.roa (hash: zROFGa57szBUE/hPHlcNo31U/nC8cbg/ehhEeCGDUB4=)
9: gi6Xytn9Iu0GHoS2bz8-D2_xuYw.roa (hash: zRXOYl9PkTzrkMP8UCwOsXf5eAi2L1/FabDUe5aeP6I=)
10: gkrX8giQ6QIjeOJImpNrLasUcW8.roa (hash: cVUYd7WZ6WTEztb7BgwmdLIllELNK+YG3dJF4zpe1s0=)
11: mdbl8KjN_pI2P-96efcrIi9qHxw.roa (hash: 4vgyCEYY3RfdpxSNxZ4oJoblwT+Dwn9gfMa1VoZI1dc=)
12: nLhpxF_vYMtPztaP2Ob2bwrsO-c.roa (hash: X8qVQYMo7q02YZkTCY5KKMS/PXISC65xUOcTfDXBI/8=)
13: r9Onf1Z5MTGo6HQvvK-yrmEpNLw.roa (hash: MdZ3nuj2R7EYy2YZK3WtRbRVVeyc+IpvGV7gP3oPGfI=)
14: r9RKCxC-bJSZP5eNLFlTH-P45J4.roa (hash: 7LAwVur+A67mmGnNZEsZn6jtCdt4Y9Ty6Li1zYtAdB4=)
15: udGl8isNJxExRSIhiZ2jjvucC5s.roa (hash: 46OQaBoVhzlHfO3MZlMA5GIChgYIIijufkFgTDDBkM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:5a:c4:78:d6:de:da:d5:55:59:43:b9:8d:1f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jun 13 03:01:26 2026 GMT
Not After : Jun 14 03:01:26 2026 GMT
Subject: CN=28e01625b00480b520cd5f676be6538d49fe43f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:56:38:d1:68:f9:74:28:d9:54:a8:20:f6:f6:
c4:c1:09:fa:47:7b:da:96:28:78:b0:dd:90:7b:fd:
6c:34:fc:85:81:1d:9f:98:e8:dd:63:1f:6a:e7:e2:
8e:62:d0:1d:76:98:d3:4e:1a:e2:f5:eb:2e:7a:7a:
b0:4a:d5:02:1f:18:ac:78:3c:ca:ff:ad:56:57:19:
92:05:d2:b1:01:e7:5d:c2:65:da:e5:37:64:3a:25:
d8:38:05:db:b7:9f:9d:2c:28:fd:bd:fe:92:dc:e1:
94:ad:e7:0d:b8:e3:06:84:b8:2d:00:45:ba:fa:ad:
94:64:a1:54:62:0d:0c:7a:92:c5:7e:80:0b:88:45:
42:07:ac:fe:36:48:4b:e2:f5:4d:11:83:5c:8c:db:
1b:02:c0:2e:31:7f:3f:16:85:6f:c9:6d:f5:91:99:
6e:17:aa:5a:49:e4:c4:5c:24:75:9a:76:eb:48:d3:
58:44:8d:b8:99:bb:37:33:0f:ad:98:9a:68:27:49:
6f:73:78:5c:91:c8:87:e2:84:19:8d:26:78:13:34:
e7:8f:20:08:e8:b8:e3:d2:af:31:eb:87:96:a6:26:
27:23:90:1a:2a:48:98:64:f5:2e:0b:22:c1:52:fd:
a2:1f:4e:34:d8:89:24:30:c8:78:29:9f:6b:da:5e:
0a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E0:16:25:B0:04:80:B5:20:CD:5F:67:6B:E6:53:8D:49:FE:43:F2
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:94:db:52:0e:aa:c0:bb:e5:e0:30:31:39:c0:d2:c7:f5:74:
72:05:4b:27:e0:3b:97:28:95:3a:63:1c:69:5c:ff:b0:d8:79:
94:5a:36:d5:49:71:78:b5:aa:6f:3e:26:57:a7:ee:83:96:e3:
d7:3f:08:ed:f1:c2:4f:fa:76:c2:e6:5b:35:33:7c:97:94:b3:
6d:f4:9e:18:7e:ae:1e:c1:38:e1:97:cd:be:25:6e:37:92:30:
4b:aa:3e:6c:77:e2:c0:b7:f5:f0:97:82:bc:27:c7:64:bf:68:
55:48:63:01:01:01:76:ec:7b:76:39:dc:e5:57:20:48:9d:49:
c8:0d:d5:19:9e:37:20:eb:61:c1:83:f2:fd:2d:8c:58:f7:07:
78:b6:9c:e2:fc:d5:37:3e:fb:a7:e8:4b:42:79:8a:47:40:02:
2a:66:72:31:81:d6:1c:51:ad:75:9d:d8:12:7e:bc:58:ef:71:
fa:7e:31:8f:80:13:0a:c5:7c:c9:8f:4f:28:26:34:74:1b:a4:
d7:4b:26:6a:2d:81:31:23:c3:20:76:62:1d:3c:d2:66:87:b5:
50:30:0a:cb:6d:46:1e:da:7b:0e:98:b7:da:40:1e:bd:bd:fd:
6d:35:2c:9c:3e:e8:dc:9f:a3:f7:f4:cc:da:6f:24:49:82:22:
67:01:cb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:20:54 2026 by rpki-client