
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json)
Hash identifier: IO9B1hbpvgaTDcdPQMFR4XxfnlvICeCxcd06emefBWA=
Subject key identifier: BC:89:62:B0:0D:18:83:94:D4:C1:D0:94:A9:80:35:3A:72:55:C7:2A
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019FA861FF9897CF310986E429E0403B48AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
Manifest number: 1AF9
Signing time: Tue 28 Jul 2026 11:00:22 +0000
Manifest this update: Tue 28 Jul 2026 11:00:22 +0000
Manifest next update: Wed 29 Jul 2026 11:00:22 +0000
Files and hashes: 1: 0EJd6KM5OKs4ZeWtakfKi4LfHMQ.roa (hash: lq/+jqUsuGMmo0V5eC2lYaf4+vkz0NSEYMEZoOw+h8M=)
2: 0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa (hash: ZS7xsxHoPgLo7pXTeMFQba/WrlLyuKrD/OKsytQQliA=)
3: 3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa (hash: iqDDjW5cOG97r4sM2JSgMTij8ljbDdlavJlc1sdy2is=)
4: 4anZiDch9d6oi83TQFLyB4qT99g.roa (hash: gEOKEHS2zoAD8h95bY8JWc94frKYylDhR359To9K6dI=)
5: 6vLBlvAYnt5lDDOZcjpwfzHCOik.roa (hash: KihGwXVua6pirrjPV5VriwFVirqc9ZJjTQEykToX1o4=)
6: 79P1nblmX5Sl5oZdwI0Dj3MUbys.roa (hash: La6+lZpjnP/18h6j5GqiME+A/vxO0IF8qjUuVJayEN4=)
7: Au6ztzaYOL8tiA06L7XgEOvNL7w.roa (hash: 2gixSAvahjHMVkdyFo4/SHHkZ2SyI5tRyn1jTT+SjAw=)
8: Axyirs6pJ3W80QJ3YDoIci5zTRg.roa (hash: 43m1rEQkLo40I+R1w7uE4v2Z71kSfJJ3j7fM0HCzcL4=)
9: BSJwseKs8IstwvoydvzKDO4yjpk.roa (hash: 6WIA++2azmJG3DLJYorfCdBV6cXv3FDFWjwIcVYK2xA=)
10: BaNXpsDq6-N9oos8dJUS_8wrDB0.roa (hash: R59taLcL8XgECkHUD04YKkgGCAVhyLMLkoR8FN3GBXU=)
11: CuwON2MJZtvZI4g-9no7hDi-jTM.roa (hash: t4dkHT6G4U30/rLqAkRNH5wHWvEqi8n3uM1IPVPedwg=)
12: HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa (hash: jPcgyS0A0CPg28Gnyk8yUak3J7zu53iE6b9g60+fx4M=)
13: Rr2zhV2BMuYwAMQjOZC17bpA4NM.roa (hash: EMKdr17+gur82xEd8d0NLRU71QAL7ROjLErF0ye4dUQ=)
14: V2KSUUK3NKjzpMrOniGAS6f0lYc.roa (hash: HcEBW9Swj6mWiXzSBMZMgQ58umIWR03BqrfbmgIYn1s=)
15: XJXC8rN2wu4yrnBhr9DvP03wKlg.roa (hash: pCQBoLdKmxtmBQ2vu5ZofXpEqg/wmN1dQJ6QlNip1Wc=)
16: Xi1n82G6gX7UAY2_fbZogWirIn4.roa (hash: DgSYKj3HKBtQlWF7ILEGvT4SnZn/5ZATo7Dhfv1URjQ=)
17: a-kJ5knumGsOVePmAFmyw3gQk6M.roa (hash: n8W4R2uTKKGh4Y7lziZkfCB7vbLNy8V5BszYGmNeHKQ=)
18: a3awGspUbD83lR3SbJMhhWhWXUU.roa (hash: 4wacv1ZaHYO9NbaUGd81FOMwUiV7hBGJzXqLo1BRDrY=)
19: bAQWAvcm3T6rfyaf7ljIBvlFtAM.roa (hash: 2DAvyPmgh36vWxZnNmX769qlQ+GKNipPDNKBhtCFjHA=)
20: cpXnQ54ogNeEFY_Pmix7pjKtsVY.roa (hash: kjAIzOeWynNpPehvnohJeIDqQVE5YFpuq0XNwmJJBro=)
21: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: JCe2GjtdB09MnHZ9rm+DJq1MeA3o6v6aTQ8XotgTbMU=)
22: eEhMeiaypyt_S7BVopD2YgmSnOw.roa (hash: uB9NgFQsx1uvRWrD7GiIwr7cOwywAd7AGSIePb5dgOc=)
23: h_6Her04c1VJUqOWTEw-vF2QdJM.roa (hash: yF/TMLj4VWrNBEx6DvDlSkH38v+bAFKzWGIqdaI3ArE=)
24: hdqbXqEEo0WcDbUPmcA4zHyMx9g.roa (hash: wTfh43Z2dxSuhlyGF6sDvzrntnhstLzn2fKCtG4m1og=)
25: hok6Qp96mKVdQQjarDAvvs1bUeM.roa (hash: 5zV7NiDuzjvbffwRhWRdC6edDv2RAzy2F0ZnadV/k8Y=)
26: jiLj3J5Bo3BCH5suARVlgU11bTo.roa (hash: LLpF3BIcUDVwpwXHzsowIz6eBq6bJYstoP6xzZ9ogdE=)
27: k2hVczUytlMTlC7CthfEzA0_AVM.roa (hash: RZTmxWFEle9vhsLQ7A7rVZuwhzSq7fez8fzezedwpMk=)
28: nFYNbXy0JhIyEmPla3EPZiB915M.roa (hash: 4Q1qQA0cyqLu7/tHU6Hpa7PqUUZygk8E+2ueMWgOYPc=)
29: r-spS_s4o3tHQBEBuSgZxxRzODk.roa (hash: r+m8p33XcobkJHbwUm4VvDqKa1R52exPo6p81YpRS1w=)
30: sQrvyzK7N0wULm1wo0uM6xtxoDE.roa (hash: RQiHy4v+nKjO+WuHpQyymNIHaVpKrkrIV4MD67pQ4Kg=)
31: u2zHl19ZbKXvPmvwNMcLmzmNdVQ.roa (hash: WRAI6nEvaTJojleXKNb/BhG/0hyUOSj983OO/f7RP2A=)
32: wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa (hash: nD3Q9hGrHrUTsDLGxXCpl182FjBypKufxutT4cbNcEU=)
33: x3F23iRQbtjJBNjfKFqgqyoJJL8.roa (hash: EUZDFPNG/vNavhD9eHX3iVCctpxXMUJXztOTBmE2pTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:61:ff:98:97:cf:31:09:86:e4:29:e0:40:3b:48:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jul 28 11:00:22 2026 GMT
Not After : Jul 29 11:00:22 2026 GMT
Subject: CN=bc8962b00d188394d4c1d094a980353a7255c72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:cd:b7:6c:1b:8e:28:ea:30:53:47:7e:6d:c0:
50:56:dc:47:4d:10:f5:7f:05:16:20:d1:94:ed:b3:
36:74:1c:24:89:e9:e9:cb:ef:48:28:79:9f:1a:40:
a9:40:52:76:5c:10:aa:44:bf:29:f5:fc:f3:ea:09:
64:3a:d7:62:d1:3e:f1:27:a5:9a:b7:e9:3c:10:69:
97:60:e7:c1:0a:eb:4a:0a:20:f6:f8:c4:e4:9a:26:
c4:d0:7c:4e:68:d9:04:12:c6:76:eb:5a:20:62:8b:
34:e3:2f:85:fd:d5:2f:4c:06:75:2a:2e:f2:57:ff:
51:ca:5d:bf:6f:49:c1:5e:b8:e6:9d:8a:62:78:e2:
6a:55:47:06:59:cc:91:c4:26:a5:f8:5c:a2:8b:31:
bf:ce:48:fc:79:2a:23:dd:c3:4a:cb:76:10:b8:02:
26:41:90:aa:6b:ed:00:f7:6b:1e:21:f8:3a:c0:ff:
f7:88:2e:2c:08:76:ec:7d:73:e8:9b:76:4e:fb:bb:
f3:d4:12:a9:3e:d5:e7:f6:8c:74:f4:d1:2c:f0:25:
ec:ee:c7:6f:fc:58:94:ae:cb:67:e8:05:b9:d5:37:
50:67:6f:42:cb:e7:09:23:a9:62:43:07:0e:5a:bc:
33:4a:e0:d6:25:80:49:4c:d4:de:48:4f:6b:9c:c3:
c8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:89:62:B0:0D:18:83:94:D4:C1:D0:94:A9:80:35:3A:72:55:C7:2A
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:92:b8:22:88:47:2e:d7:7c:ef:c7:a6:fb:3b:c5:1a:31:b9:
8e:ea:6b:ac:69:fe:1a:b8:d5:73:02:a0:8c:c7:ab:e4:f6:5e:
5f:26:96:04:12:61:9c:5d:83:a8:bf:d2:0e:58:8b:4d:92:91:
72:a4:c8:ab:ff:a5:2d:03:e2:bd:7c:a0:41:1d:ca:13:b3:76:
2e:b7:df:8a:af:e8:c0:0d:47:2e:cf:53:d4:b1:27:6a:30:85:
af:45:6f:33:2f:68:85:9f:fc:9c:58:77:35:e3:43:a4:fe:1a:
0d:56:e6:68:1c:06:1f:6e:b2:e4:cb:c3:77:99:e7:57:c6:4d:
92:3b:15:72:3a:88:b9:b2:a9:fd:a2:a3:6b:f8:10:2e:07:be:
57:94:11:5e:8e:75:23:c0:d8:f8:c2:a4:ad:f2:f4:c4:9b:fc:
b9:7a:f0:2f:71:82:1d:63:6e:11:72:1b:0f:33:d6:00:57:3a:
53:df:e2:01:3d:f2:bf:62:8d:fb:5b:db:c1:eb:27:6a:b6:cb:
47:86:94:43:65:7b:2b:7c:ba:6e:13:f7:d3:ad:31:95:29:07:
b7:37:48:c6:64:0f:db:9c:80:f7:df:d4:a0:22:3a:2d:d4:7f:
e7:8a:f0:1b:96:96:8f:3c:f6:ad:9a:4a:81:4c:22:d2:ff:1d:
16:52:50:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:04 2026 by rpki-client