
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: RlVKGXjXkTun4G2U4fRwg1y2FRNwodcxfkT1X3zQzUk=
Subject key identifier: 21:38:9D:61:BD:72:EF:6E:B5:8E:28:7C:A2:95:39:14:D4:AE:09:5B
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 019FA93DAC520B584F24F7012F0D1A287A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 077B
Signing time: Tue 28 Jul 2026 15:00:18 +0000
Manifest this update: Tue 28 Jul 2026 15:00:18 +0000
Manifest next update: Wed 29 Jul 2026 15:00:18 +0000
Files and hashes: 1: 56Kmc-Cz64ulFDN7LZkLpLy2Uyk.roa (hash: M1LxSBYIiPUs1C9HbHfgJfFfNoWmm4ypO8QoHN7KG7k=)
2: Es0Z1jWd-kkhYkOP1GtHh-lHphA.asa (hash: yA+b+JTKhvzBntnbRz8H3TVoNPvRK8TlZDevDFWYPVU=)
3: Gz_1bJto4c1yEF2Q0CAMMKyQM04.roa (hash: XtyCodmY8171cj6WcCGbm/ih1IwcnbUwaLWquFazgPc=)
4: MHUiyig4q2dE9dcejzFeSdppyes.asa (hash: vsGXprjQpMNWSZX1y2syqnGE09eYObc2WoOHBWaktro=)
5: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: ogRtIv4ZmrVDYqK7yYAMTt+oft1J04LTn+cza+iTtxo=)
6: Z1V5lwUUrZll1KmPOgWR8Eag8b4.roa (hash: xUsruNjtSsoiCiUtber3+Ze8kadAYwEP/UxnWmjwonA=)
7: Za3vl_jOJ0pGYslBqqMRsVt7h_s.roa (hash: YOFAZhaKlii8wEnPzm8mR4aNFVEe5XwwG7RLJLy04yA=)
8: klZpNcpkOEquqUsO-jju5O69v1E.roa (hash: jxFHJzSImYx8wBjjvdBncxitlUill6En9a34gPRYQtA=)
9: r7okYEliiPaYGayWJrORm3iOHe0.roa (hash: Ry7pFD2VVeVJdZ2ogqW8WamtLwX0AlhiB6D7DLFsEGw=)
10: y7rxPQXdQykP2HWundiTAhRuuNE.roa (hash: kwq12jPHanXZhrxqm5HaXAm17ns+Kl4rOD8Lx3F1wV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:ac:52:0b:58:4f:24:f7:01:2f:0d:1a:28:7a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Jul 28 15:00:18 2026 GMT
Not After : Jul 29 15:00:18 2026 GMT
Subject: CN=21389d61bd72ef6eb58e287ca2953914d4ae095b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1f:f8:b4:41:69:04:15:6b:f0:42:82:a3:6a:
76:7a:75:52:01:42:db:2e:52:b5:82:74:80:88:7f:
69:e8:06:86:e1:5f:44:75:d0:4c:d3:7e:40:77:79:
b4:a0:a1:03:7b:85:57:a4:de:99:a6:93:17:92:cb:
94:46:10:b2:a6:bb:c3:d0:30:53:e8:3d:87:9b:80:
79:22:6b:b7:73:12:12:1e:fb:74:9c:24:f8:ac:4c:
d8:21:4a:7e:e6:28:0d:64:4a:2e:ca:86:84:7e:5a:
23:14:c0:65:82:d8:58:d6:ed:3c:54:71:45:d8:ba:
b5:fa:4a:e5:20:c4:2c:5c:fe:fd:b3:b9:8b:c0:f3:
18:85:e1:d0:44:fa:a0:e0:5d:37:4d:2d:14:bf:23:
81:bd:96:fd:15:06:bc:d7:ff:e9:c0:5d:4e:03:93:
36:3a:5e:84:5e:93:96:37:3b:c1:0e:ee:8a:ad:a3:
2d:12:1c:85:bf:6d:71:5b:75:4f:5d:fa:ec:db:09:
f0:6f:97:82:ad:1f:f4:4e:01:a7:b5:f3:ff:10:86:
f1:99:e2:47:a0:56:f8:23:dc:e5:01:04:15:4f:60:
77:23:ca:e9:46:a7:61:d3:d2:d1:74:3f:74:85:ca:
c8:fc:01:75:aa:a7:f0:b6:86:9a:48:8c:29:38:6b:
15:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:38:9D:61:BD:72:EF:6E:B5:8E:28:7C:A2:95:39:14:D4:AE:09:5B
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:60:0e:8b:61:13:23:aa:ec:c0:33:10:6e:40:7c:2c:c3:fd:
2f:36:f7:30:6b:cb:09:af:e4:7e:a6:81:a0:af:e1:5f:94:fb:
a6:20:c3:b5:23:e2:3f:30:0a:01:17:ff:ca:ad:bc:f5:3a:7e:
08:68:9a:8f:a8:67:d1:58:5a:5b:74:e2:f9:32:aa:f5:14:8e:
10:f3:dd:c9:5f:a4:ff:0f:e6:49:98:11:a4:a6:19:67:9d:6b:
1e:8c:43:eb:e4:6e:0a:40:42:8b:71:a7:54:02:e4:4c:d6:4d:
57:5f:11:69:79:c9:a3:f1:ee:7a:ee:8a:90:cd:8a:58:d9:f1:
4c:0e:6f:1f:7f:ad:54:67:6e:31:7d:1b:92:dd:a3:58:ed:1f:
74:37:ff:48:14:2a:df:28:5f:3c:db:75:6e:6c:1c:6c:ec:2a:
60:25:4d:64:9a:ba:1f:5e:6b:5a:42:15:44:41:8c:5a:74:fd:
8c:bd:34:8b:92:71:44:8a:16:dc:fc:9e:60:39:ff:fa:7b:64:
95:99:2e:80:bd:06:bc:e3:e6:70:18:53:43:c1:17:59:15:0d:
d4:52:61:48:2d:fc:49:b5:0c:90:d0:9a:56:62:fb:13:23:d1:
94:5e:3f:84:8f:9e:94:4b:91:ac:68:e5:83:17:91:71:48:ce:
bc:d9:ce:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:02:35 2026 by rpki-client