
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: LF4NytpXj5yMNVjEtz8ujjyEQNQmwpcomD0lpSGFXM8=
Subject key identifier: 21:AA:04:FA:06:52:AC:5C:50:0F:45:3C:71:B4:A2:25:6E:F4:FF:25
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 019EC17FDC49188AF552843853E5362ACE2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 0703
Signing time: Sat 13 Jun 2026 15:00:42 +0000
Manifest this update: Sat 13 Jun 2026 15:00:42 +0000
Manifest next update: Sun 14 Jun 2026 15:00:42 +0000
Files and hashes: 1: 56Kmc-Cz64ulFDN7LZkLpLy2Uyk.roa (hash: M1LxSBYIiPUs1C9HbHfgJfFfNoWmm4ypO8QoHN7KG7k=)
2: Es0Z1jWd-kkhYkOP1GtHh-lHphA.asa (hash: yA+b+JTKhvzBntnbRz8H3TVoNPvRK8TlZDevDFWYPVU=)
3: Gz_1bJto4c1yEF2Q0CAMMKyQM04.roa (hash: XtyCodmY8171cj6WcCGbm/ih1IwcnbUwaLWquFazgPc=)
4: MHUiyig4q2dE9dcejzFeSdppyes.asa (hash: vsGXprjQpMNWSZX1y2syqnGE09eYObc2WoOHBWaktro=)
5: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: 5CJfO+rXRuRe6HTRiYHJKWYP5tDVo9gM6Wos2ECcY0E=)
6: Z1V5lwUUrZll1KmPOgWR8Eag8b4.roa (hash: xUsruNjtSsoiCiUtber3+Ze8kadAYwEP/UxnWmjwonA=)
7: Za3vl_jOJ0pGYslBqqMRsVt7h_s.roa (hash: YOFAZhaKlii8wEnPzm8mR4aNFVEe5XwwG7RLJLy04yA=)
8: klZpNcpkOEquqUsO-jju5O69v1E.roa (hash: jxFHJzSImYx8wBjjvdBncxitlUill6En9a34gPRYQtA=)
9: r7okYEliiPaYGayWJrORm3iOHe0.roa (hash: Ry7pFD2VVeVJdZ2ogqW8WamtLwX0AlhiB6D7DLFsEGw=)
10: y7rxPQXdQykP2HWundiTAhRuuNE.roa (hash: kwq12jPHanXZhrxqm5HaXAm17ns+Kl4rOD8Lx3F1wV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:dc:49:18:8a:f5:52:84:38:53:e5:36:2a:ce:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Jun 13 15:00:42 2026 GMT
Not After : Jun 14 15:00:42 2026 GMT
Subject: CN=21aa04fa0652ac5c500f453c71b4a2256ef4ff25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:68:1a:3e:24:01:74:52:f1:29:13:29:f9:a1:
f7:ac:7d:b9:22:f9:1e:2a:eb:66:8c:10:74:08:59:
fb:2a:90:6a:2d:6a:c2:bf:77:4d:96:07:67:e7:13:
64:56:a5:42:db:a6:c5:95:3f:0a:28:97:8f:c7:c6:
30:06:39:48:f7:b6:c3:0d:83:98:73:de:ab:e5:fe:
36:a8:2d:3f:b6:fa:32:96:7d:30:71:b7:a3:f4:39:
a5:b7:92:73:0e:50:75:0e:9c:6f:bb:d7:40:f1:d9:
5a:c8:ad:2a:b0:2a:e0:ce:5d:ac:46:b0:4a:fb:9b:
e2:be:00:ce:fe:9f:8a:cf:d2:5b:b0:fd:21:6d:c2:
f5:c6:bf:fe:ea:df:40:23:84:44:40:46:4e:6b:16:
c5:cc:47:d3:68:4c:2a:c4:78:67:7f:32:f1:af:42:
12:97:05:2c:2a:79:e3:e6:cb:3e:2d:21:dd:36:04:
71:65:66:4c:95:7d:00:a2:54:75:48:96:9a:2d:dd:
57:bc:f0:95:2f:b4:c6:6d:8d:f8:3c:15:e0:45:f1:
84:3e:3e:49:cb:d1:59:63:f0:2b:93:41:99:22:3f:
ae:f4:93:77:00:e9:c9:af:a2:d3:e2:b5:b3:5c:9a:
4b:8c:7d:64:00:1b:81:a3:d5:54:06:6a:5a:e1:38:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AA:04:FA:06:52:AC:5C:50:0F:45:3C:71:B4:A2:25:6E:F4:FF:25
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b5:86:28:a1:a8:80:13:4d:87:53:9b:cf:26:eb:3d:34:dd:
d6:bd:6c:d7:c9:1b:23:41:e0:42:48:9c:c0:c8:e1:bc:7a:98:
90:95:7f:3d:b8:41:75:25:a4:7c:56:54:36:09:77:00:7f:f8:
22:27:67:3a:0c:38:42:1a:a1:a0:ef:17:4f:4b:3f:73:c6:9f:
da:4e:da:81:d2:ab:c9:a9:51:1f:d9:25:28:4c:7f:91:09:5d:
f9:91:15:b9:b4:8a:8c:3b:8d:5a:52:13:c1:c2:79:7a:0b:bb:
ec:14:f5:4f:59:01:02:e5:76:5b:17:d8:c8:86:51:1f:8a:58:
49:2f:2d:6c:f1:8f:01:ea:e9:37:fb:24:b3:64:9c:c4:af:d9:
1e:e4:5f:26:1d:7d:b3:84:29:6f:4f:52:df:17:36:d0:71:5a:
ef:a1:57:46:c4:cb:17:b8:64:0a:b3:b8:8b:26:07:e3:35:76:
d9:92:e0:41:a6:0c:8e:e1:84:d1:5a:52:a1:93:19:3b:16:81:
19:c8:79:29:6a:c8:16:81:a1:2e:42:a8:3d:53:9b:e1:6e:2e:
93:e3:b2:a1:ee:a1:93:f5:03:51:ab:5f:91:ca:cc:6d:80:0b:
93:16:5c:c9:09:4a:05:71:fb:46:24:b9:7b:62:e5:f8:f6:cb:
8b:36:1e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:18:16 2026 by rpki-client