
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier: iFQEniUO3/clvZMT5geD/2PopN1M934noVtJBjedbxU=
Subject key identifier: 35:D0:48:8E:AA:AB:CD:52:07:CA:CC:CA:EC:56:56:52:27:8E:FE:84
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019EBF5AF7283224AF7259C6E3361F36B8CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number: 0890
Signing time: Sat 13 Jun 2026 05:01:10 +0000
Manifest this update: Sat 13 Jun 2026 05:01:10 +0000
Manifest next update: Sun 14 Jun 2026 05:01:10 +0000
Files and hashes: 1: 0-M2wHYVJo6WO_dOM_FrtWqv32g.roa (hash: Syur9QoTGjJsrlDvPR/2jwpPclrs3Zqpe7DQd8jDoYk=)
2: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=)
3: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
4: 9GJllxYCYuwNzBFKMnz_oxHLdWY.roa (hash: YYCua/crN7Zq2OAzCbcmSx0UG9y/gFrgV5F+Ua0iFZc=)
5: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
6: BvHi-9W8GTD7LuR4KI3K7NccH7M.roa (hash: zHRB/Mgz4Rp30xaIRw2vIwtiSLy6piaCCU+qGs3mVdE=)
7: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
8: HSZJOMMgqldMqXCQrjEqHsBDzGw.roa (hash: 9AQVGhxSXSd9IT7bQVwCvuQJIeCspjGvlwwEhQZYorE=)
9: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
10: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
11: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
12: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
13: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=)
14: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
15: alomw2OsWHbd8tHr8rQUVSaTf48.roa (hash: /SgtQ+hB/USe7wR/Kp74UDlxjPB2bz9JIMvjDNTyblY=)
16: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
17: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: x2kHYUSv7xcl/llXDz/CRsb+W8DthS4tojR9ZQStnfo=)
18: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
19: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
20: pOZHVjX8onM9oBBZ12RCzAbquBs.roa (hash: pOOINsyyZRyr8GyLY4+525uladm5E7MLq4xyYrftyKY=)
21: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=)
22: yzHgZlCQT4Y7B8Y00NhRaB47xTk.roa (hash: FPbEBqFmlrQorlve4YibsVGnSYZoskFcy6Qs1bK0kdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:f7:28:32:24:af:72:59:c6:e3:36:1f:36:b8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jun 13 05:01:10 2026 GMT
Not After : Jun 14 05:01:10 2026 GMT
Subject: CN=35d0488eaaabcd5207cacccaec565652278efe84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a8:f6:11:fc:97:2d:40:b5:ff:c8:e1:a9:c3:
a3:cd:9c:ba:c5:ee:c0:4c:78:e5:38:a2:d4:92:bb:
7f:9a:d4:18:ee:5e:dc:da:34:32:10:b9:5f:c3:db:
23:6a:e9:ae:a9:9c:d8:37:3a:b2:4f:1e:12:b2:9e:
fe:2e:cc:f0:33:d9:09:8c:3b:10:f4:3c:98:6f:82:
04:13:0d:2f:81:2f:47:bd:89:d6:13:6b:a8:0e:63:
97:ee:e5:7b:a8:17:f5:1a:ba:06:62:ca:f5:6a:2d:
4a:65:b7:1e:91:ab:b8:84:6a:30:89:fb:bc:7b:44:
97:a4:ca:13:13:7b:b0:3b:78:89:4e:2f:e8:08:4e:
ea:4b:0f:9b:11:b9:f5:1c:b0:30:0e:9d:42:91:bf:
02:dc:d0:93:80:69:51:e1:59:45:76:e9:cf:1a:cb:
8c:a2:b1:fa:aa:55:aa:a0:82:d2:66:cd:40:96:b2:
e5:aa:2c:29:fd:62:15:70:7a:d9:af:e5:34:53:f0:
f4:2f:a1:09:b3:de:e4:c9:00:52:c9:2a:9f:8b:b4:
e1:11:c1:6d:63:10:31:33:60:a3:21:f0:e6:13:c9:
ed:55:76:05:20:e7:24:56:a1:4d:f6:d9:24:1a:af:
e0:62:e8:68:46:b2:98:c2:a7:99:6a:13:48:88:b4:
bf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D0:48:8E:AA:AB:CD:52:07:CA:CC:CA:EC:56:56:52:27:8E:FE:84
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:28:cd:1c:bc:91:d2:24:27:10:ec:b0:16:c7:c5:1b:36:56:
bc:41:a2:53:b9:01:68:4e:c6:69:19:8f:23:a6:45:98:8e:61:
e1:4e:88:85:7b:85:5e:11:57:1d:c2:c8:89:81:15:c9:75:56:
e2:92:cf:d1:38:c6:ad:ea:f6:f2:15:b6:a7:9c:ef:db:3b:08:
69:80:26:72:6a:9d:45:01:6a:18:60:de:27:47:5d:df:51:c7:
63:d5:70:0b:db:ba:d5:74:c1:88:ce:78:dd:6a:72:64:e7:35:
23:33:c7:75:83:5b:5c:1d:28:17:0f:bd:49:a3:f8:63:db:bf:
31:e9:c8:d3:e6:74:cb:ee:9a:23:21:3a:8c:bc:17:af:c1:35:
46:24:55:a0:78:1b:c8:a7:de:69:df:5e:26:cb:f6:67:1f:9d:
db:2f:be:d2:ec:6d:7a:28:1e:e0:e7:c1:b0:32:a4:7f:88:78:
1e:95:0f:a7:9b:8a:2d:c7:3a:4f:d6:fb:e9:57:6e:45:60:b1:
8c:05:cf:d4:1a:50:a2:68:0f:3b:b6:a9:97:f0:1b:08:98:78:
4a:85:10:53:ae:a1:83:74:f6:d6:59:64:5d:ed:81:52:e6:12:
0e:3e:36:41:26:83:e0:e5:a1:97:16:82:bf:3f:65:6c:f7:fa:
fd:01:da:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:44:21 2026 by rpki-client