
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json)
Hash identifier: Bk9vAeM6jbIQVn10cXnDrFWYeTdubtothSrURpEwk/o=
Subject key identifier: 3D:5A:8A:24:65:BB:45:D1:0D:30:C4:0A:74:09:F8:FC:6C:CB:06:C2
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 019EBEED188494E45B03F4FF024877B4305E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
Manifest number: 1979
Signing time: Sat 13 Jun 2026 03:01:09 +0000
Manifest this update: Sat 13 Jun 2026 03:01:09 +0000
Manifest next update: Sun 14 Jun 2026 03:01:09 +0000
Files and hashes: 1: 1iiQznngAAUoJBg2IRNbTIROLgA.roa (hash: IfOiJ0y8Jxc7SmQONu8fFngEQ795WWF+gFMreRxG3CU=)
2: A5PgGRLn4kXJK7rp7MRelJlQCGs.roa (hash: uoHX6U7FvckkMUmhHzgYs1oGVMNEJnR2TmiJTsJFLvY=)
3: Bzo_VHzhyMxVmlaGb7eDpMOzKNw.roa (hash: faAu0B/ZNdAR9cPNQILlVsqLeHnhVt95YfA/GQi7kCw=)
4: DwjEXVnUblEp_ffjT3ktDSUITT0.roa (hash: I6xp4PWDpWQ5//0ycJ2/A/YaDv2hFHAvBn6TOMEWzLI=)
5: GIo6XBIIGKLKY5fo-2KAJGPCwGY.roa (hash: KkZCoIa9nndDPKaAqxfqTYTtr6XtVmuZC5N9YIEfldg=)
6: MASv_rraqDJSYbqgrPz4hvaUE2c.roa (hash: cVsPoSNgg1jdtpq+zgxbSf3SDxFypt0t/a96jTQx6hE=)
7: NzbIi-FrPomQ6ctOPJJUrBGgm1I.roa (hash: PdBiVtgjdqqfmsvkZMECcdaQfrG9aEwqLBPPRyETYkY=)
8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: pYbZ8tCwT4qVdqjkGhKcIaAeo3XWGZ+QTzvEAjz1z9k=)
9: bzkVBP_m0QOkL7HvzQFXrT5rq10.roa (hash: NzVgHolIVrpawCE7CDio6iuv1mdZYc6KIW6NA0eXBBI=)
10: mr3eytu19hz9X8102ddOQBMhaCs.roa (hash: rgExvt59Z6M78VouciXS9dA08jr+rMik1ukA2amoJZc=)
11: pUmN_6XpWcEqw-3rUBgKOFddqas.roa (hash: Cn7MMw/oqRiT9o2HCgwnJRlue/qjCZYJ4u8zRlj1ypM=)
12: w-PDKFF3prApvO2JzmgAyow-O5c.roa (hash: yGP/NbSbCcqtvQkL6kf+yxHQ3/xxKzetGY7fqt3Etok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:18:84:94:e4:5b:03:f4:ff:02:48:77:b4:30:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jun 13 03:01:09 2026 GMT
Not After : Jun 14 03:01:09 2026 GMT
Subject: CN=3d5a8a2465bb45d10d30c40a7409f8fc6ccb06c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:75:56:33:a7:e4:b5:4c:67:8e:9a:4f:e3:
7a:65:22:32:b4:1d:ab:1c:23:b8:49:cb:4e:5a:ed:
f1:35:ff:61:ce:b7:08:7c:7f:ee:ee:82:c9:c6:ab:
ab:3f:f4:6e:b1:8d:a1:74:9b:e9:27:e8:fb:58:21:
fe:b6:b0:9e:3a:02:9b:77:67:f7:8f:f8:11:1f:60:
35:4f:ed:27:e6:59:eb:fd:85:3d:08:35:24:cf:09:
de:a1:4f:f3:36:d2:dd:cb:d4:f3:a0:ad:d7:35:9d:
84:a2:fc:19:4a:2a:82:d5:9c:41:ee:58:f9:52:5e:
fb:fb:92:61:ef:c6:ca:98:34:cd:af:d9:c6:00:cc:
38:60:2c:5e:4f:e6:cf:3a:07:5b:3e:db:f8:b2:26:
a4:4f:66:85:6f:2c:0f:da:22:d4:98:51:fe:aa:c1:
fc:2c:eb:24:8d:10:a3:2a:1d:53:4b:b6:b5:ce:1f:
52:fd:8c:72:a3:0d:db:74:3d:41:de:38:80:8b:05:
d3:51:08:65:72:72:b5:a4:94:b5:6f:72:9c:6b:04:
e8:1c:dd:95:9e:72:3d:08:42:9f:e3:dc:24:ed:35:
8f:dd:d6:07:92:1a:6b:95:4b:28:05:73:19:d1:fb:
c5:92:8a:08:eb:06:1c:86:be:36:bd:7e:b6:86:0e:
d1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5A:8A:24:65:BB:45:D1:0D:30:C4:0A:74:09:F8:FC:6C:CB:06:C2
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:84:0b:2e:3e:f1:fb:c2:48:87:d3:cb:f1:0c:fd:26:9b:4b:
77:bf:f6:6d:90:8c:42:ee:f8:17:c1:ec:41:aa:73:44:f9:6f:
d2:2a:ab:ba:b4:8f:f9:01:d7:a9:c6:67:73:dd:6e:ea:0b:28:
f8:bf:7c:8e:7d:65:90:3b:24:6e:a7:ab:fe:6a:8d:da:cd:01:
aa:37:a9:5d:b6:32:d4:d0:d4:ab:6a:94:20:f0:d6:c6:0e:20:
7f:4a:6e:a0:43:af:cb:0b:76:43:f0:e0:dc:9d:72:cc:9a:d3:
76:1e:4b:da:61:ab:bb:8f:3d:d7:40:95:bc:8b:fb:77:bf:2a:
17:f7:e8:e4:9e:aa:6b:4d:70:04:63:ff:89:fc:83:30:dd:86:
75:07:b0:9f:01:7a:5f:fa:18:79:fe:bc:28:c0:c3:46:f0:33:
24:37:4a:bb:5a:c3:58:5e:65:4f:09:e5:48:56:f0:90:55:a6:
1c:8e:91:fc:60:82:a1:e9:25:29:fe:fd:48:37:75:a4:10:b2:
a4:ad:1f:e4:c6:7c:c1:d1:e4:2d:16:00:85:2c:48:2d:cf:9f:
f4:86:33:c3:f1:69:8d:1a:b8:65:51:7e:c6:1a:16:0c:70:5b:
14:06:38:fd:d2:93:d0:5f:b2:21:41:aa:11:91:ca:8a:9d:04:
43:7d:86:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:20:50 2026 by rpki-client