
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
File: 9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json)
Hash identifier: XelzK/EW3KBzuAfBTWuBtxNgnm5QdpVFnPcWyEoKLL0=
Subject key identifier: B4:F5:56:43:4D:52:02:30:95:5A:A8:20:DC:43:39:39:13:23:68:CB
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial: 019FAAF6202190AD53274F977971C438975A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
Manifest number: 1878
Signing time: Tue 28 Jul 2026 23:01:24 +0000
Manifest this update: Tue 28 Jul 2026 23:01:24 +0000
Manifest next update: Wed 29 Jul 2026 23:01:24 +0000
Files and hashes: 1: 2Mw_RsL7Tu1raZO7N_NmWBt_4Lw.roa (hash: JucO5ifrsP8q+Lpu01KX5CahDpNNuMFp8igwggz5f+4=)
2: 7Iz6U-UbML_bHt2iBpNhyMsUex4.roa (hash: kuOf+8ykZKiwJgvJAoLirBjFoMp1t2BI/tsXr1phgfs=)
3: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: YuFjS88u7fzymm9mN/CvEYkMY+WdWNK5ErhJtw/eRAs=)
4: KTnr28UXB2AOhLUGojIXh3TKOoo.roa (hash: 8eiF90G8f4f8jQjBHQ0ai2Os8eR7L9120f3BRFVgphs=)
5: LKPNjW0FwzxJuXJJO8QeVx8xVKA.roa (hash: 7aAIkZ00eO3qTrf1/VDBo5PmzNCovWfeD3QFFzPD2+k=)
6: OhdvuW1MhWIplOiaXjr0jKrnav0.roa (hash: J4+sEU+gHBe6CqLgaPIzNFJg58JXNWIbDProtv3aR8c=)
7: XWplAHLb4h-dRGf7GRqU5aYBne4.roa (hash: vcUnwVhvidom6bWizccTCS7wF3vMreiwdFHr11qyWHQ=)
8: XgKbk-VfS5Fk-dDKQjpQqRf0_lY.roa (hash: iWT0RhDme3TLlIGDD9yrT4WHfNUoRqswY0iSVi2J+04=)
9: bu5zIhc9syS0fhKBovFQXcGQRxQ.roa (hash: /Bq2k4bmIQ5EUPK41v03YcsLqkRVvDHXfxrIn2yzw5A=)
10: epRr3ot_tO1I-RC0EsosxizeUW8.roa (hash: 2A4W4DbPWY16lTKuPfcljbBbTU9AeJIZxwLQ/cXz2wo=)
11: hIAZzuP6Gsu6ylCAGgkd82Ycc_M.roa (hash: SQISDbvDjBaLkSadlmENoao3YxR8/bK49Sgx969cf+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:20:21:90:ad:53:27:4f:97:79:71:c4:38:97:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Validity
Not Before: Jul 28 23:01:24 2026 GMT
Not After : Jul 29 23:01:24 2026 GMT
Subject: CN=b4f556434d520230955aa820dc433939132368cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:b5:cf:7e:32:22:fb:34:72:4a:a5:82:c3:
22:0e:b5:ad:dc:9d:f6:79:5e:8b:b2:38:c2:02:e3:
9d:c8:60:97:60:98:a7:23:ba:53:f1:ee:6a:95:83:
d6:23:6c:70:85:13:53:50:d0:60:1f:2a:b9:00:b6:
dd:00:e6:db:28:65:f0:ef:df:37:fc:f2:9d:c1:f9:
a3:5e:48:58:25:14:78:94:cf:a6:78:42:dd:be:2c:
83:6a:a3:89:65:bc:0b:d5:c5:5d:c4:f0:9c:ed:5c:
d6:43:bb:71:48:a0:03:d9:9f:f2:b1:e2:4f:ec:52:
ef:a0:8a:33:a0:e1:48:d6:a2:54:c0:1f:50:ce:86:
2d:94:40:ad:a4:e9:5d:7c:27:40:e8:ad:87:92:98:
24:e1:08:78:17:7f:a4:b8:a1:5a:1d:32:69:05:f3:
40:2e:99:55:ef:7d:e3:f4:01:ae:16:e3:b7:86:cc:
c7:77:a0:6c:52:09:84:e0:4d:de:8d:51:e8:49:67:
27:b3:4e:31:d9:6a:61:90:51:7f:a3:89:bd:d2:35:
4b:ef:9f:d3:44:72:1c:a4:b3:03:c3:99:e3:7a:65:
8e:54:2d:87:2b:0a:b7:b4:cd:eb:b1:58:04:32:96:
87:e4:06:7d:a6:b6:cd:81:ab:43:ab:53:c4:a7:40:
90:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F5:56:43:4D:52:02:30:95:5A:A8:20:DC:43:39:39:13:23:68:CB
X509v3 Authority Key Identifier:
keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:67:d0:1e:ab:39:d8:e6:19:85:a3:3b:16:06:8a:c2:53:13:
0a:d1:51:6f:4e:84:f6:8f:22:11:e2:30:0a:61:09:9d:40:03:
f7:da:63:4c:06:26:7b:24:0e:40:0f:6e:7c:ce:3d:7a:37:c9:
ca:81:03:de:7f:af:17:05:54:91:d9:43:33:3d:11:3d:51:70:
42:80:9f:97:77:79:f0:2f:b5:f4:f5:23:b4:54:97:aa:9d:9d:
06:ef:29:4a:b3:9b:cd:86:69:60:a6:b8:bf:a2:94:53:23:5b:
b9:0c:44:ca:89:57:a8:d5:04:e8:98:f8:8d:14:5b:45:6f:02:
89:50:40:1d:2c:aa:8c:c5:26:e1:db:5f:2c:30:9d:d2:1c:29:
56:74:a1:20:12:ae:88:db:92:ea:e5:74:f8:16:f1:a9:c5:18:
7b:42:be:9c:f4:f5:ce:96:2d:45:70:d3:45:54:d8:09:1b:c6:
82:bb:4d:af:46:3d:13:7b:b1:bb:61:5b:23:0b:0f:22:0c:69:
6e:51:3b:9b:89:a3:0f:26:e0:25:a0:26:50:02:27:f4:8d:70:
d7:a3:3e:ad:44:9a:e5:ae:c0:0d:1c:1e:e6:4c:d7:87:2e:15:
55:8e:b7:3d:60:c9:9e:51:fa:ef:e9:68:54:8b:ea:5c:11:6d:
bd:31:df:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:30:15 2026 by rpki-client