
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft
File: tgdgRQHeNgl2jFunxMypxWth-dU.mft (raw, json)
Hash identifier: +z1BO9ThD4aT+iBXcVN1XOHYW01sngwD01egX5gi+jU=
Subject key identifier: C9:3B:57:31:28:7B:46:56:C2:35:83:06:65:59:C8:D1:B6:A8:78:3E
Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5
Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5
Certificate serial: 019EBF91612F2482AE831A5CA7A98C874BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft
Manifest number: 021A
Signing time: Sat 13 Jun 2026 06:00:36 +0000
Manifest this update: Sat 13 Jun 2026 06:00:36 +0000
Manifest next update: Sun 14 Jun 2026 06:00:36 +0000
Files and hashes: 1: 5bgXaKN4hNNnz1DSnp5RelfVjjU.roa (hash: dYGhF0WHwXTYiuMBvgCo0Nh2zgJTOeCE4oHJREko2dE=)
2: 6T1nn_O5VRNDU8iBXnRdEWu-Aa0.roa (hash: GjGIlQY+4mGEDueTUd6aChvkiLsbdqdShxrmkeYWZCE=)
3: 87E4xEnMZKLQ9-adCMFtqO3gxKc.roa (hash: 1s6eBRJk43stGn8sUQskaNANXR+WBZp4/9zkxTmF/w8=)
4: 8s6AG_0JrzjWg4BaNcXSsAEn3Qg.roa (hash: G1f9dVArvUO/qswkLFrkSyJeGmiXCkjeasIS9BOQinY=)
5: BXTPXysSBRPuUoSICW7HfZCr-Dw.roa (hash: +AZDE7fpWxbiq4XsQ/ZUYVAIhS86drQiS4sJ0QHcFJ0=)
6: Nv0Yk6F1P6EmulDV2AnvKDplxCs.roa (hash: Q5u0M56Cc14RBzwK7HGbwu5ZxQ2s50/RHubrsAelkTw=)
7: Uv6m5Ze8bGG3Zo-jWPLZit_cFAU.roa (hash: jJYA/CveQeDzpZWlaXQqIIF2Ui2N++3iqqXHakxy7Dw=)
8: Vx08NQyiV20g8Ga81BIS8rvDmyo.roa (hash: yt3nJJYF4J5PBamsoXkhQ12AqDswJfK8nDygu/ErBYE=)
9: ivPir5hTVZ6-2KvBi__rc2C4xp4.roa (hash: XwUyUM1eJM6QiCA3EZbvx9TyrTpnC6U24WwWURBAOW4=)
10: l1zzaU-q12nJ_8HhmrchfHRCS-0.roa (hash: Zlyw0gSFTXLUc8CDvWYZw2HjLJJb5vGb6M3Zn4aUG2c=)
11: tgdgRQHeNgl2jFunxMypxWth-dU.crl (hash: ffM+6MkmWlZTBpJSyc9jF85lFhWwyVz1XOfj8LqGJ0U=)
12: zGh2HbLQZnyjxYkNHHK5OUHYSzI.roa (hash: L1lyFIExE7ptfYv6B8KltqdYf/AvedX5c7QVNHU4hz0=)
13: zcAeP7CyuYSzvCr5z4QkpSpd_Fo.roa (hash: BZtxwPUla4tLZ+cA+wlMKxMd59rsmlSfQPWZuQ9tMPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:61:2f:24:82:ae:83:1a:5c:a7:a9:8c:87:4b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5
Validity
Not Before: Jun 13 06:00:36 2026 GMT
Not After : Jun 14 06:00:36 2026 GMT
Subject: CN=c93b5731287b4656c23583066559c8d1b6a8783e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:65:c7:8e:78:5b:75:a7:af:0e:13:02:51:f6:
dd:5f:f6:33:e9:85:9d:e8:8b:d0:2e:db:66:43:22:
dd:d1:ee:72:9b:d8:6f:8f:cd:07:e6:a6:57:67:73:
7e:25:0e:f4:64:16:c4:dc:ca:fe:b5:b1:de:2f:85:
3e:f4:9d:dc:a8:fb:1a:31:f9:9d:16:79:b5:c7:1e:
91:48:f2:3c:77:78:4c:da:7f:16:59:19:a4:59:e0:
80:b0:5a:c8:6c:91:83:07:2c:f4:e2:33:1c:bd:8b:
78:74:a6:7f:bc:bd:d7:51:d2:46:c2:9a:07:a4:08:
55:a1:35:ac:f7:17:82:27:b0:1c:97:d5:17:fa:ac:
df:b3:b6:54:95:41:79:51:4f:07:97:03:be:8a:b9:
4c:66:62:4c:f6:37:e1:3a:27:40:b4:af:90:e0:e1:
61:ba:27:fe:44:51:4d:3f:c3:ff:42:85:3f:79:ac:
52:e6:ae:15:7c:2b:77:b9:26:48:61:a0:09:a5:c1:
5a:02:1f:e3:c6:d5:57:12:8f:ba:26:3b:3e:2f:b0:
38:75:0a:3f:d6:6e:86:b1:3f:eb:c3:5c:55:63:d8:
b1:cb:a7:7c:96:65:ba:d3:f1:1e:2a:4d:7b:cb:d9:
4d:e7:30:26:46:9e:00:3d:81:ed:d4:14:1c:02:6f:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3B:57:31:28:7B:46:56:C2:35:83:06:65:59:C8:D1:B6:A8:78:3E
X509v3 Authority Key Identifier:
keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fa:5f:24:f9:31:2e:95:0f:d1:dd:cd:39:58:b6:ce:43:e0:
4b:be:a2:69:db:7d:c5:f3:14:67:cd:c3:8a:ed:81:d0:68:ee:
07:b0:cf:a4:03:0f:48:ce:28:2e:e9:f7:3c:42:11:5a:e0:77:
4d:95:38:dc:9c:b4:bb:4e:c0:22:b6:4e:fb:b7:f9:ee:59:eb:
42:4d:91:d5:f8:01:f6:97:31:07:84:0f:c3:c5:86:ff:a5:c5:
aa:dd:7f:c0:f0:cd:e7:78:1c:bf:72:1b:a6:c6:aa:45:11:a7:
ba:e2:b2:5b:16:f4:05:2b:11:46:30:f3:0e:01:92:03:1b:fb:
18:52:35:57:57:5d:5f:47:30:ea:e0:95:5e:d1:e1:ab:68:6c:
da:db:87:17:2c:b0:a9:87:9f:9d:2d:f1:ab:2b:12:a8:d8:f3:
ed:d2:11:92:bd:17:28:d0:67:df:a1:75:95:a7:f0:6f:84:ae:
1f:86:33:65:73:be:af:f3:bc:a8:21:d3:2c:88:3e:f1:ea:28:
db:4f:6f:c5:5f:d7:46:15:64:48:10:6f:f9:e9:ea:25:07:cd:
f5:51:8b:6c:b5:ed:b9:05:da:72:f9:25:d5:7a:82:69:45:10:
ff:c0:14:02:56:9a:b2:9f:9e:44:35:10:88:6b:9c:08:b6:93:
ee:fc:b1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:31:42 2026 by rpki-client