
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json)
Hash identifier: fv8Eygr0gQHeopEquYW5QO9BrSOGwUFtBKG9x3bBvK0=
Subject key identifier: A1:E7:69:E5:FA:6E:58:7A:0A:E6:09:39:A0:37:B1:6D:4C:6E:82:16
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial: 019EBF5A9066747867498CCAFD818C8F96C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
Manifest number: 1922
Signing time: Sat 13 Jun 2026 05:00:43 +0000
Manifest this update: Sat 13 Jun 2026 05:00:43 +0000
Manifest next update: Sun 14 Jun 2026 05:00:43 +0000
Files and hashes: 1: EXzeT1cNVQGrjDsUzW2UlqVdii0.roa (hash: 2mlpTBow4YOyuDssqjl1WEJ92MzDwM1udN0xfPDqww0=)
2: KaSYpHw3cgGmrc-y_KSdFLRvQjg.roa (hash: ngPn6nZOVUPCBtCKw0ufmBalbahdWHN3HV67pN56iBs=)
3: Krcq7ZeGH2Lmub3dy5F_WRkHwYE.asa (hash: btWWldiqWlNfihUeJ1u/kiPDZiSycBx+qnGB18Pzzk0=)
4: OmEoVv1hXlPAq7CNGemEHtoyCq8.roa (hash: 6Oxl07RE77xSOspyGrQX/nCyx5aobEqs28whvRim2nM=)
5: S3iUaJCc_acwdYntYs5xpD57Hbs.roa (hash: tcMMYIuMQX8llmY4X5nBERI+tJvSh0Ywu4Hfd+8wVHo=)
6: XEuJUbSaH7V7TR9Hm3H838oW62M.roa (hash: 6F0LWMrDhYqS4VjPhiF+6R/mdAzINXaIxftWMKZVOpA=)
7: XSUEp2ewELHmYwH52rXsSNXdWOw.roa (hash: YFKsQwoEE2JksK5/us9CiKgJv/xGESxAM1454M2S6rE=)
8: Y4Ju69pl9WjiYV9lWp9audfApt8.roa (hash: Gl1GkwHB6Z8deSvqoRDw7UqcxI8zxJVnp+wWJEZz2jc=)
9: _bgOMIgl5YD22GLFhIayF5W0H98.roa (hash: YVz2Tfwx8C1mKqc7gEOvJyA8kHNkiPYcjmBTfZn3ppo=)
10: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: hlZoe/ZnNNiv2cIjVauq4BODNKTv+wmkgwWdGhd72qc=)
11: gdXy00VXftWIDW180JVG0J7ko64.roa (hash: Mqi2FwypjABIeq2Jh4oC6KTGiPlkVF54aa5+tKkk1yo=)
12: i447kXV0W4Fpt-iPvHlJibEh4qE.roa (hash: rFvI0GyPBU1XtWp0i4L0CFa9xuzoPkzXxFcU9z+mJ4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:90:66:74:78:67:49:8c:ca:fd:81:8c:8f:96:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Validity
Not Before: Jun 13 05:00:43 2026 GMT
Not After : Jun 14 05:00:43 2026 GMT
Subject: CN=a1e769e5fa6e587a0ae60939a037b16d4c6e8216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:08:4e:f9:7d:24:23:fe:42:26:1e:0b:bf:
e7:70:30:0d:aa:9a:59:23:92:78:4e:7b:fa:9e:d8:
5a:7d:71:0d:29:5f:2f:5f:3a:6c:94:5e:c9:00:a4:
c7:fe:5a:68:e0:e6:9a:4a:29:4e:21:7b:20:9d:7c:
f6:98:57:1a:1f:8f:b2:65:21:db:b0:10:92:fa:0d:
9f:88:93:46:17:36:90:7b:38:38:4d:74:34:4f:8f:
4e:4c:64:ef:9a:03:22:8b:ef:74:86:74:72:32:96:
a8:5b:98:6c:3d:dc:2b:6d:90:ab:79:34:72:97:15:
e0:09:e4:47:b1:56:ae:0b:e3:c8:53:60:9f:ea:81:
03:eb:35:53:c0:70:1b:33:be:67:6d:6b:f3:8f:90:
7a:90:5e:e9:66:e5:2f:80:0a:ff:ab:08:52:84:22:
0b:96:ed:4c:74:c1:d0:d1:09:9c:03:e1:9c:db:1d:
c1:82:76:e9:ae:5a:2f:01:1e:7c:c8:ea:e5:82:25:
ef:d8:91:45:4d:63:6e:bf:a4:33:32:23:e1:2b:5d:
c0:ed:70:4c:83:90:7f:55:da:76:fc:49:d6:6a:6a:
52:e7:16:7b:84:fa:15:aa:45:bb:9a:65:f2:72:18:
9a:23:5c:36:2d:b8:b1:f5:ed:0d:3e:76:49:ba:d9:
2f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E7:69:E5:FA:6E:58:7A:0A:E6:09:39:A0:37:B1:6D:4C:6E:82:16
X509v3 Authority Key Identifier:
keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7b:71:28:8a:39:c3:bf:4c:9c:c5:09:ae:e5:14:54:55:5c:
7a:40:fe:c0:63:d0:f5:07:b8:c8:0c:b9:49:f5:a6:73:83:69:
80:55:e9:70:33:86:7e:af:94:be:7a:cc:b1:60:23:65:af:29:
a2:c5:65:54:95:55:a0:aa:ed:8a:a0:61:6e:eb:0e:5d:d7:db:
5f:42:9e:db:5c:26:cd:dc:32:8c:84:e6:63:3c:cb:39:b8:2b:
68:b5:5b:b2:72:b5:e5:27:6c:f1:dc:04:82:e5:0d:32:ae:94:
60:e4:36:aa:6a:1c:97:df:78:14:4a:75:52:38:b4:de:a7:5d:
86:fd:5f:ad:b7:eb:ab:23:af:a0:1e:16:62:21:bf:fe:d2:a1:
d1:3d:d2:a1:e6:c5:3e:02:e4:c7:ba:46:b7:aa:35:65:1d:e4:
61:3e:37:6a:f1:12:3a:9c:7a:17:bc:45:22:4f:c3:8b:ac:ae:
a8:0d:9d:e7:a2:ca:b4:b2:c9:63:df:7a:16:ff:c8:92:a9:32:
f0:7d:2c:fb:fc:75:b1:a9:f4:bd:1a:ae:c1:50:e5:4a:ba:30:
25:55:f7:ac:50:33:e8:89:07:c6:69:c4:9c:57:8f:6f:e6:5c:
75:27:bf:36:ac:70:a6:82:bb:df:14:97:07:17:84:67:74:97:
b9:c9:9b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:54:38 2026 by rpki-client