
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
File: 9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json)
Hash identifier: SNc3+XkrAMaRj4bYw0+eA7CcPTbejuBEZbYJcp811/g=
Subject key identifier: 9C:04:6F:00:82:ED:99:71:62:06:2C:4C:2C:1C:97:5E:0E:F3:F3:D4
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial: 019EBF5A300A9F48FC252373E7A6E50D5833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
Manifest number: 17FD
Signing time: Sat 13 Jun 2026 05:00:19 +0000
Manifest this update: Sat 13 Jun 2026 05:00:19 +0000
Manifest next update: Sun 14 Jun 2026 05:00:19 +0000
Files and hashes: 1: 1-3IPJhNn2z6uBNLHxMmCKfvzzKc.roa (hash: NdBkfOzbM5bOy0bYu/5qjiwop0xpNPBqxYjexeBjzV4=)
2: 2Mw_RsL7Tu1raZO7N_NmWBt_4Lw.roa (hash: JucO5ifrsP8q+Lpu01KX5CahDpNNuMFp8igwggz5f+4=)
3: 7Iz6U-UbML_bHt2iBpNhyMsUex4.roa (hash: kuOf+8ykZKiwJgvJAoLirBjFoMp1t2BI/tsXr1phgfs=)
4: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: Ll3rxzhRAhdH0c6RCBjySccCXbYlMV9FSI70TSEDtHA=)
5: KTnr28UXB2AOhLUGojIXh3TKOoo.roa (hash: 8eiF90G8f4f8jQjBHQ0ai2Os8eR7L9120f3BRFVgphs=)
6: LKPNjW0FwzxJuXJJO8QeVx8xVKA.roa (hash: 7aAIkZ00eO3qTrf1/VDBo5PmzNCovWfeD3QFFzPD2+k=)
7: XWplAHLb4h-dRGf7GRqU5aYBne4.roa (hash: vcUnwVhvidom6bWizccTCS7wF3vMreiwdFHr11qyWHQ=)
8: XgKbk-VfS5Fk-dDKQjpQqRf0_lY.roa (hash: iWT0RhDme3TLlIGDD9yrT4WHfNUoRqswY0iSVi2J+04=)
9: bu5zIhc9syS0fhKBovFQXcGQRxQ.roa (hash: /Bq2k4bmIQ5EUPK41v03YcsLqkRVvDHXfxrIn2yzw5A=)
10: epRr3ot_tO1I-RC0EsosxizeUW8.roa (hash: 2A4W4DbPWY16lTKuPfcljbBbTU9AeJIZxwLQ/cXz2wo=)
11: hIAZzuP6Gsu6ylCAGgkd82Ycc_M.roa (hash: SQISDbvDjBaLkSadlmENoao3YxR8/bK49Sgx969cf+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:30:0a:9f:48:fc:25:23:73:e7:a6:e5:0d:58:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Validity
Not Before: Jun 13 05:00:19 2026 GMT
Not After : Jun 14 05:00:19 2026 GMT
Subject: CN=9c046f0082ed997162062c4c2c1c975e0ef3f3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b9:e5:29:05:f6:fa:1d:35:3a:cb:cc:f1:5c:
04:c1:c1:58:2f:a1:59:52:19:22:73:e6:ec:0a:c6:
67:c6:4c:f3:47:90:9c:65:fa:4b:57:e6:38:1d:63:
66:fe:f0:61:3b:ce:7e:dc:ea:f9:28:81:26:26:c1:
b3:f0:e0:a0:6f:21:e6:23:b5:8b:67:39:ff:52:1f:
8d:56:f6:cf:36:06:de:fd:9f:0a:6c:18:f5:b0:be:
d4:b7:bf:66:8a:7f:2c:08:70:73:17:da:6d:da:28:
25:e3:47:6e:45:ef:b5:a2:93:ba:d9:32:68:0a:70:
90:d1:b1:7f:12:ab:ea:14:25:6e:0e:94:5f:1c:5a:
f4:53:f4:36:b3:fb:47:b1:99:c2:53:ca:e0:43:91:
15:b9:18:f1:de:04:b0:eb:39:04:5d:69:84:04:c1:
54:99:21:6e:c3:d6:b7:fe:d7:16:18:28:e8:4c:c5:
de:5a:cd:9e:20:07:e0:dc:6d:78:28:77:7e:a6:3b:
03:8e:c6:81:b3:f5:e9:9e:c6:f9:5e:9b:8b:6c:7b:
83:be:1a:7b:6c:3c:87:e7:4d:09:45:ab:4c:bf:50:
bf:59:3b:76:3b:66:7a:4f:bc:f9:9c:22:c4:41:d1:
88:f2:42:76:ed:95:d1:bb:af:86:da:e8:42:ca:3d:
af:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:04:6F:00:82:ED:99:71:62:06:2C:4C:2C:1C:97:5E:0E:F3:F3:D4
X509v3 Authority Key Identifier:
keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4d:8f:c9:72:72:c9:05:a7:4c:1f:58:9c:dd:b8:9d:14:c8:
1f:78:9e:67:a4:1b:44:13:3b:e1:a5:ff:ef:e9:86:52:11:49:
df:8a:d1:3b:fc:a8:8d:92:ae:47:46:e7:41:cc:b6:1f:7a:63:
bd:45:12:e1:ac:73:4e:b4:ae:75:a2:10:ae:4d:2b:43:e6:8e:
aa:32:43:3d:88:54:2d:08:e9:67:94:a8:da:46:00:56:6b:f3:
0b:5f:00:55:3f:8e:87:6c:d5:75:d2:58:31:10:7b:d3:5a:25:
8d:15:b1:f9:2e:cb:23:f9:f3:31:a6:e8:b2:98:8d:9e:50:ee:
dc:08:4c:e9:e3:ef:26:7a:86:5f:22:3d:6b:fe:98:79:10:18:
ab:33:88:50:49:f0:4b:08:17:cd:20:e1:cd:7b:8d:70:f8:d9:
32:91:5b:5a:c1:d0:c4:bc:8e:53:93:7b:74:bb:45:ab:13:e7:
50:4c:76:a8:3a:23:4d:df:80:50:ba:d6:27:fd:35:40:65:ab:
b8:0c:54:84:ac:ea:20:80:a3:e3:b5:8d:43:d4:ea:7b:cc:de:
68:39:19:b6:c5:69:f9:05:56:e4:ab:15:20:6f:9d:43:63:d5:
63:57:db:09:58:46:3c:a1:6f:48:56:fa:bb:6b:96:a8:67:06:
44:2b:e9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:05:07 2026 by rpki-client