
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json)
Hash identifier: azCsXSp0O/V6Fv6bJYfCWmBtrRh1/JxLYiszbNbzzqo=
Subject key identifier: 2A:F4:C9:59:9D:EB:CB:40:01:D5:5B:11:89:61:1B:11:77:7C:C5:09
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 019EBE1144EB4CB1741BA6DD85632A7C6A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
Manifest number: 1962
Signing time: Fri 12 Jun 2026 23:01:03 +0000
Manifest this update: Fri 12 Jun 2026 23:01:03 +0000
Manifest next update: Sat 13 Jun 2026 23:01:03 +0000
Files and hashes: 1: 6EiFZKIQWAEn8OFVy62rq2hePVc.roa (hash: QqaEwKcSsaYt3wwf9x5zbgaPoA6qxMBDNuqLJjfSh3E=)
2: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: MrsIT3Dee/jXhHoDIgtjh5FMvUiHd8lJmtKti6QbJ40=)
3: 8nyc8D2U6ZLNC1jg1xTgLIB5O08.roa (hash: UjE3wubUY3p3vPXEL528/Y/zzZrPn9j4CkCZh6HPAm8=)
4: D8drYTgqt32Cqf3EAiV6kDEeJmQ.roa (hash: z2zUysrNuxBIuhiC3z6/alcclEfX1JrDjmY7TAheY/g=)
5: FutR1Anwjf0YPYgj24VkOnnpOKo.roa (hash: B1PUo1d5o9i7GHA7LLQ+U0epYNN9/13TWk0w7UgND6Y=)
6: HrEvCC8IhGVeGnzBd0VRZALtork.roa (hash: O2TX3efNC8L1kVYPj9yl6qN6Xg9peYzVQTc557TbA/U=)
7: Kpq8EZf55_gV3FvEsn5mjf_dpBU.roa (hash: 2nhGvk06IqlLqxKExuqHomEp9VHs4mN4Vn/X8wYfMBo=)
8: U_LfKCv5kJDOuObeAwMorX4Nmc4.roa (hash: ecSv+ahB4B19FetdtS+R40A/h+b9mvwFfb6awkKuwag=)
9: _x6aIQIYgxoNnvNtpDTT6-qH5fs.roa (hash: j+sPJji49saMlwCW4eBAQImk7LYRvTzCGkaTq0ojLDo=)
10: cCLQDT_9t51iKlaGarf8PuI7ZuE.roa (hash: p225RnWWY7l8rkaX7oOrNPhwDG+u+RY9z5HJIbVDWT8=)
11: dOGEvxWz_zQwe0ywxB_yohVohyM.roa (hash: mrA0JieT5fE1JYF+wUVSCw2S+TnNb/74IV4H+fC+v3w=)
12: wYnNwRf0L8-7zAlQ9eMsEnpatqU.roa (hash: vGGDkEQtDcGYvJgapMsj38d8WJqbdN5ZD4U4q0HVb6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:11:44:eb:4c:b1:74:1b:a6:dd:85:63:2a:7c:6a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Jun 12 23:01:03 2026 GMT
Not After : Jun 13 23:01:03 2026 GMT
Subject: CN=2af4c9599debcb4001d55b1189611b11777cc509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a2:f8:43:cc:b6:00:6a:90:9c:fe:5e:fc:a5:
8c:c8:3b:e3:cf:5b:61:33:57:e9:49:b6:d5:a9:2c:
6d:78:71:f0:1c:22:43:1a:6a:de:f8:b6:e1:7b:56:
82:41:a4:03:f9:27:6b:6b:78:6f:1d:2c:06:a7:c9:
f3:ab:16:ab:8e:f6:00:00:e0:e8:63:73:e0:4e:50:
7b:aa:83:35:2a:ba:87:95:c3:c5:73:00:0b:73:c0:
30:02:7c:4d:dc:01:ca:8e:8b:3c:b2:fa:8d:8f:39:
c7:c6:83:13:38:39:3f:32:bf:c2:43:53:e3:5e:25:
dc:7b:8e:97:bc:97:cc:b4:27:5a:ec:8e:55:5c:0e:
0f:38:27:ed:d3:d3:c5:e9:ab:0c:6a:68:18:30:88:
d1:83:a4:11:b8:4d:ac:bc:d9:72:00:c6:b5:e6:20:
7a:9c:17:e6:d5:91:00:79:4c:35:13:31:3c:ee:1a:
3b:0d:8d:4c:9d:76:67:28:91:ee:af:0e:e5:18:c6:
d4:f0:35:b9:b0:e8:97:95:74:f2:8c:fe:aa:b6:70:
6d:f4:80:09:fa:79:aa:c5:b8:bd:24:bd:ef:9a:b4:
35:90:5f:4e:88:b0:f2:dd:28:41:a1:4f:11:db:87:
12:d6:e9:0a:ba:81:cf:13:a7:70:b8:42:bf:93:a9:
e3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F4:C9:59:9D:EB:CB:40:01:D5:5B:11:89:61:1B:11:77:7C:C5:09
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b9:0c:2d:2b:78:03:19:cf:da:a3:b6:be:5f:28:56:fa:7a:
e7:4b:e9:9b:07:7d:d3:31:84:d6:b2:79:bf:60:69:03:13:85:
cd:0e:d7:b8:50:14:3d:f3:6b:a0:61:33:f4:4b:ae:2c:73:59:
69:36:f0:2a:d6:c2:72:3f:74:9a:db:5a:1a:ae:64:c3:d7:ac:
f5:ec:35:a2:a3:15:38:00:d2:34:57:d2:2a:96:d0:7a:25:2a:
60:4c:82:02:a2:b9:52:70:d3:51:2a:ae:80:c1:fa:8b:1c:dd:
84:dc:68:73:00:0d:92:37:c5:93:48:48:b4:f5:6d:9b:ca:5d:
f0:22:80:10:4e:b9:30:08:ef:32:0e:5b:ca:77:74:70:14:e9:
5a:3b:af:c9:e2:ee:da:31:c3:5a:d3:c5:d8:66:c0:c6:45:6b:
62:8f:13:fc:34:38:79:b1:5b:9f:ba:27:6c:33:23:25:8f:bd:
0c:d2:7a:b5:58:db:f2:39:70:70:3a:6d:5b:b4:0b:01:e1:23:
e3:0d:f5:e0:d2:11:a1:11:04:1a:7f:74:31:76:1e:e8:f4:53:
b3:2f:87:95:81:e2:78:48:a0:68:cc:26:ad:68:2e:40:e5:b9:
3a:94:d1:fa:c2:86:4d:fc:ac:19:cb:aa:10:6c:51:56:c7:83:
47:2c:fb:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+EUTrTLF0G6bdhWMqfGpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1
NjI4ZjkwHhcNMjYwNjEyMjMwMTAzWhcNMjYwNjEzMjMwMTAzWjAzMTEwLwYDVQQD
EygyYWY0Yzk1OTlkZWJjYjQwMDFkNTViMTE4OTYxMWIxMTc3N2NjNTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aL4Q8y2AGqQnP5e/KWMyDvjz1th
M1fpSbbVqSxteHHwHCJDGmre+Lbhe1aCQaQD+Sdra3hvHSwGp8nzqxarjvYAAODo
Y3PgTlB7qoM1KrqHlcPFcwALc8AwAnxN3AHKjos8svqNjznHxoMTODk/Mr/CQ1Pj
XiXce46XvJfMtCda7I5VXA4POCft09PF6asMamgYMIjRg6QRuE2svNlyAMa15iB6
nBfm1ZEAeUw1EzE87ho7DY1MnXZnKJHurw7lGMbU8DW5sOiXlXTyjP6qtnBt9IAJ
+nmqxbi9JL3vmrQ1kF9OiLDy3ShBoU8R24cS1ukKuoHPE6dwuEK/k6njDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCr0yVmd68tAAdVbEYlhGxF3fMUJMB8GA1UdIwQY
MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt
ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl
LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7kMLSt4
AxnP2qO2vl8oVvp650vpmwd90zGE1rJ5v2BpAxOFzQ7XuFAUPfNroGEz9EuuLHNZ
aTbwKtbCcj90mttaGq5kw9es9ew1oqMVOADSNFfSKpbQeiUqYEyCAqK5UnDTUSqu
gMH6ixzdhNxocwANkjfFk0hItPVtm8pd8CKAEE65MAjvMg5bynd0cBTpWjuvyeLu
2jHDWtPF2GbAxkVrYo8T/DQ4ebFbn7onbDMjJY+9DNJ6tVjb8jlwcDptW7QLAeEj
4w314NIRoREEGn90MXYe6PRTsy+HlYHieEigaMwmrWguQOW5OpTR+sKGTfysGcuq
EGxRVseDRyz7vQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:09:48 2026 by rpki-client