
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
File: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft (raw, json)
Hash identifier: JimjaR1OJ5K/k2FBcu8f+tsIXMKuQ7OmP51INnmpX7Y=
Subject key identifier: A9:6F:6A:03:89:CA:9F:15:E1:31:55:32:B7:11:73:54:19:D9:FE:A8
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 019FAA881B7A48C5C568843BC2DF27178629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
Manifest number: 19F1
Signing time: Tue 28 Jul 2026 21:01:14 +0000
Manifest this update: Tue 28 Jul 2026 21:01:14 +0000
Manifest next update: Wed 29 Jul 2026 21:01:14 +0000
Files and hashes: 1: 67pKVcBP4g1ka7BHnXY8o1GjatI.roa (hash: NHI8d7vH5tjpxPomV3eBVCOa5aQTAvgW0GwAOx6HDCM=)
2: 6oyqxH6fbfCjScGv2qC0XiD5gCU.roa (hash: X2pwG2wmLfB4M+6njFbtbY0lJjAJiNG8E4ePk2t5PZ8=)
3: BG7hZwdKTnkeh7F43mqTspITrC4.roa (hash: 9w3fRT22xu3zZICYpxgXI0CEKv6s/N6rtv0UUVT3l1A=)
4: E3UcI6HbofZm_snwFtZqoqwg5-4.roa (hash: d4QiFFj+amh2JyYpNEFn0n/k8uKNUlkfpX81m7S5ZMs=)
5: EHRfsqdBqIv-_jr_ZiggJSyGQh8.roa (hash: GuBt3vwa11J5qRXuLm85netCILaHs5EboKmysMN31gs=)
6: Ig2ees5HLfOePoZmV44oy1ypzFU.roa (hash: Xt9yas6tqq8RhgQUndyXvcQyGrhriLDFS4gSQyBaGSk=)
7: KsuuqZuzWciosvKgFRPXzNp2Gcs.roa (hash: fH9tuqcfvS+JzHyWBgJi96fMfx/uXZQsaH9PlzbW4JY=)
8: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl (hash: rVBm0prH2F+q7saLrBqwFlWSuH4jDa8LE79iTNxbMC0=)
9: gAqwEcTCZcYoTWX4c9WWfhoNMgI.roa (hash: vAiaSmq1X3G0blOObiQg/SKw+90F8oGpc/icVWBJSss=)
10: k0wZqmhMQI1_yKbqeg-OeoA8ghg.roa (hash: okOMVmkk1MoA9VfXhi+YW9SB7pABGOjg3hztcxMcS9k=)
11: nzPG4vwX1IeVP2cSHRY5OFKnn24.roa (hash: OLyA9Gv/rl69xwJleWIyqhvz9X35ZOv/7WlzFp3vKrM=)
12: qMM2yBBqAUZtpJ-UlQnkHWnMjy0.roa (hash: TpFOiG67I1bJklLN/pt/Lsphs7nPRwEpTIL7MabwCy0=)
13: qOQMcO_XSSMHONHJzrh7779P3jo.roa (hash: ade5av8pqt7Ksv1kVj/c8U/iRecFohg4Rxixd7NnxeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:1b:7a:48:c5:c5:68:84:3b:c2:df:27:17:86:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Jul 28 21:01:14 2026 GMT
Not After : Jul 29 21:01:14 2026 GMT
Subject: CN=a96f6a0389ca9f15e1315532b711735419d9fea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:81:84:05:36:e6:a4:a9:8e:28:2f:f2:e0:eb:
3d:b3:a3:4c:81:77:2e:4f:ce:1a:e1:54:12:ad:3b:
48:76:76:cb:a0:77:46:eb:49:66:bd:d1:31:48:1e:
36:b6:28:d7:6a:5b:d9:aa:44:ec:e1:fc:e7:cb:48:
13:e7:2b:0e:5a:ab:2d:37:be:e6:bb:5b:ce:14:f6:
0f:07:67:52:db:a5:85:26:b0:5a:b8:78:cc:36:5c:
cf:b7:24:d8:38:40:92:de:6e:a8:61:8d:db:b8:84:
a4:95:86:7f:7b:dd:b9:62:fa:2a:09:eb:9a:d5:b7:
aa:ec:cd:f8:f1:83:c3:f0:c6:61:7d:9b:bb:21:62:
b0:ac:21:52:e9:fa:52:d0:41:34:f0:97:56:96:1a:
0b:67:ea:4a:80:f1:69:08:37:e9:03:0a:96:40:76:
e9:18:7d:fa:cc:b4:24:7f:77:d0:f3:95:f0:ea:c9:
28:5d:9b:ff:7b:f2:bc:b5:80:bd:93:d4:2f:c7:5a:
7d:8d:29:60:ef:26:0d:a9:6e:59:ee:ec:30:10:f3:
e1:3f:ed:be:37:78:e0:11:07:8e:b1:3d:88:83:f9:
be:45:ee:94:63:88:58:6b:c8:c3:8b:d5:d2:30:d2:
04:61:bd:5a:1f:48:90:66:9c:ce:3d:85:eb:39:96:
2f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6F:6A:03:89:CA:9F:15:E1:31:55:32:B7:11:73:54:19:D9:FE:A8
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:36:63:75:53:42:5a:eb:b1:e2:f2:7e:cf:23:f4:f2:7f:33:
f7:c9:61:9e:fa:1e:54:6e:bd:dc:27:99:3d:86:54:3a:12:56:
98:ef:fe:c8:6b:cb:41:a4:d6:e6:60:6f:34:4a:85:0a:43:47:
b1:81:6c:3c:60:c5:dc:03:fc:9c:d2:f1:de:c5:61:2d:25:1c:
c7:d1:a9:d5:fd:1a:43:2d:a3:10:0b:18:88:52:96:19:ae:8b:
ba:75:5e:ea:1e:34:f0:bf:37:b3:32:97:91:bc:0c:9b:07:39:
42:37:9b:81:db:59:c7:c8:fc:dd:1c:65:a5:04:61:8c:c8:f8:
05:b4:d8:e3:0c:e0:35:cd:00:b8:81:86:5f:00:74:7b:3c:ad:
7e:18:8c:5d:7c:ce:e7:77:9c:6c:a9:0e:c0:9a:29:d4:95:f3:
17:5a:eb:92:ac:ef:1e:e8:09:7c:22:ad:7c:b4:8b:e8:db:61:
62:a8:87:74:01:46:ee:5f:ef:98:3c:66:3c:90:2d:d9:d4:89:
fb:bf:54:1b:c6:87:89:8e:a3:b1:cb:8e:1b:bb:42:24:88:e3:
f2:7a:6d:35:ed:df:f9:c5:1b:c5:1a:56:70:7b:0a:ca:2d:19:
66:d3:03:ae:71:ca:56:4e:13:00:77:b6:10:7a:42:03:51:3c:
c3:fa:39:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:57:07 2026 by rpki-client