
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json)
Hash identifier: mo6LOzphioIQco5zRpt0KST+g+ich3RjFSp8bJb//JQ=
Subject key identifier: 00:E5:57:F7:8B:3C:4E:19:1B:0C:46:F2:E4:D8:AA:03:2B:62:BF:5C
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 019EC0A4588E622F689D91DF33FBAFD1D3BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
Manifest number: 193C
Signing time: Sat 13 Jun 2026 11:00:56 +0000
Manifest this update: Sat 13 Jun 2026 11:00:56 +0000
Manifest next update: Sun 14 Jun 2026 11:00:56 +0000
Files and hashes: 1: 0kI-1w2SNQehfoRycoNU1Pziv3I.roa (hash: viuJDQhBSgYavhQbluwLnuiQSVTVx0a9HzJyfcAYcOw=)
2: 5DlckLw7-djlSZ1lp36YaxGlvKE.roa (hash: eYIP1EqGYnvhmzjtkEGHQx/0NRgSz/vE0nE/kWbBXzk=)
3: 9lOq7Wh0Dc-TKs_jMnqAjp9qty8.roa (hash: gQsP3f9jY08L6TReTRhgCoFcXcYx56yiIKyEwP5fgis=)
4: B7aE9R9fg8NCdOQeiZzwMIi2ZNw.roa (hash: d1Ep9dN1bkXXcsIWaTx6sw5pJSc2xeGu6SeeEZeK/UM=)
5: H3x0T_83rlo2BTe5d7dbAF2ptxg.roa (hash: PQJVU6JoM83KwjANErOepQ3bz3i1NBfWfLmiBsgEm0c=)
6: KQ8fXNipeYkCVN179So0D0TWljQ.roa (hash: XxbQ5bE5bKEdW9jXnVZEomEiZqEsNztBM796TwnerwI=)
7: Tapjbvh-PuZAz-k3jhJRlpWxLVk.roa (hash: 4kpMa9oce3yLyGOA9Rf9dgs0rQL4kCPs5/HrQzn7jc8=)
8: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: G1C8s1m3lUA3GEDLwJWp5YZrjzr9NJFm6453wrQCFHw=)
9: apYOCQON8Q50nYzp4ypso-jbqys.roa (hash: GBiBhZg5+hSaQBI+hKWqc24pEoVUkpkEuUna1OBDqxw=)
10: no_ORyMn9T6-xikFSqLg-Gz96M4.roa (hash: Cp3JrKwrBj3GbQGbhILQy1X/3llVpyj5IPBpaVZnel0=)
11: qkO3HWUjh2SeVz2kOfBJ3fz48jY.roa (hash: /yTAZn/rmLrDKLc8NDsiQRU6zHvgZlDcdPO4KfqzKvE=)
12: se8BvmMQMrcgHtpi_ujjg8KT8CQ.roa (hash: cAQdGWRmSeLyjwmIoEHBdUkwP7QnABnaaE31A7C6720=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:58:8e:62:2f:68:9d:91:df:33:fb:af:d1:d3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jun 13 11:00:56 2026 GMT
Not After : Jun 14 11:00:56 2026 GMT
Subject: CN=00e557f78b3c4e191b0c46f2e4d8aa032b62bf5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:bf:90:39:44:30:fb:c8:f7:e9:fa:84:60:
f0:c4:3c:52:78:2c:91:4d:8c:b1:b9:ce:61:8c:37:
17:2b:b8:f4:34:a3:d9:48:27:27:87:79:41:ef:d0:
39:3b:62:6c:0e:98:e5:b9:ab:ea:fc:95:89:4e:c9:
92:0e:18:88:6b:69:0c:13:fe:7a:1b:75:02:48:97:
d1:3b:5d:ad:1e:71:d4:cd:5e:ad:a8:f0:d5:02:db:
84:44:79:f4:98:89:1e:65:36:4f:11:ed:3a:52:ff:
e2:b4:b7:af:fa:a4:fd:73:d9:96:7f:77:e0:be:a7:
d2:1e:60:00:5f:bf:1c:10:af:62:b6:58:fe:cd:dd:
d3:a9:e5:3b:49:47:f6:7d:93:f3:18:5a:8a:36:62:
49:68:d9:ef:73:20:fe:70:17:e8:bf:36:b8:1a:d7:
66:0c:bc:f8:99:48:4b:d8:54:18:a6:78:9a:11:23:
6b:c9:96:54:41:55:d5:bb:8e:89:6e:92:4e:91:dd:
5d:fe:6f:35:c4:4a:a7:2e:e7:cf:f7:9d:fb:17:db:
f1:8d:f9:32:0b:0a:ea:fb:a2:2e:ab:bb:c2:3b:99:
33:90:4a:6c:1c:e7:46:5d:0f:4f:f6:3c:b7:b8:d4:
1b:95:a7:ff:9b:1a:a3:8e:bf:fb:c6:5f:f8:f8:48:
a6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E5:57:F7:8B:3C:4E:19:1B:0C:46:F2:E4:D8:AA:03:2B:62:BF:5C
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:86:96:3b:5d:b4:9d:43:0e:fa:39:1f:2b:55:9b:5d:25:50:
51:93:36:10:e4:75:f3:ee:76:7d:92:18:09:af:88:6c:48:83:
d3:a4:a1:a7:12:ec:ac:84:d0:bc:42:92:a1:26:fa:c2:91:bf:
71:89:cc:29:30:7f:d4:26:44:48:4a:a6:10:65:a9:59:7d:09:
ce:f5:f6:b6:00:72:19:80:cb:5d:bd:33:e6:e3:2c:82:6a:ea:
f5:15:77:93:e2:57:61:f8:50:35:1b:3d:3c:32:c1:45:20:39:
39:d4:36:1e:ba:cd:c2:69:c4:38:42:28:72:3e:1a:37:04:1d:
bd:48:d4:bc:0c:98:c5:43:c0:c7:c6:cf:e5:bd:78:a6:fe:50:
76:98:b3:4d:2b:33:b2:bd:c9:71:fa:2c:78:45:3c:a1:b2:3e:
e1:d8:10:da:8b:25:2b:11:9f:94:11:12:a8:18:25:fb:64:9a:
44:a9:18:eb:81:b3:49:46:c1:69:10:07:ee:57:d8:ba:4d:cb:
36:32:42:70:7b:ad:d0:c9:e0:a6:a8:b0:ac:6a:6e:81:f8:d5:
73:36:04:ce:e9:c5:4c:a3:c1:8b:0a:b9:d5:f5:08:67:39:4e:
ac:9e:77:4e:6c:d8:8d:ce:50:70:09:e6:ac:17:b2:20:c8:58:
67:ab:9b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:44:51 2026 by rpki-client