
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
File: 9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json)
Hash identifier: IHv5CcFq2+KSjLoeephvy4MSmFBiMCGS5ycJzA8SLpE=
Subject key identifier: 0D:A9:83:6B:FF:C5:2F:46:1F:83:BA:F1:63:41:3C:20:74:FF:BB:10
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial: 019FA9078F0A69E38AB1A4D082B719D82C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
Manifest number: 1877
Signing time: Tue 28 Jul 2026 14:01:12 +0000
Manifest this update: Tue 28 Jul 2026 14:01:12 +0000
Manifest next update: Wed 29 Jul 2026 14:01:12 +0000
Files and hashes: 1: 2Mw_RsL7Tu1raZO7N_NmWBt_4Lw.roa (hash: JucO5ifrsP8q+Lpu01KX5CahDpNNuMFp8igwggz5f+4=)
2: 7Iz6U-UbML_bHt2iBpNhyMsUex4.roa (hash: kuOf+8ykZKiwJgvJAoLirBjFoMp1t2BI/tsXr1phgfs=)
3: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: eYxDy/tGbMByw0GITJmRqWa9/DZoG8DYoBZ10jNxjps=)
4: KTnr28UXB2AOhLUGojIXh3TKOoo.roa (hash: 8eiF90G8f4f8jQjBHQ0ai2Os8eR7L9120f3BRFVgphs=)
5: LKPNjW0FwzxJuXJJO8QeVx8xVKA.roa (hash: 7aAIkZ00eO3qTrf1/VDBo5PmzNCovWfeD3QFFzPD2+k=)
6: OhdvuW1MhWIplOiaXjr0jKrnav0.roa (hash: J4+sEU+gHBe6CqLgaPIzNFJg58JXNWIbDProtv3aR8c=)
7: XWplAHLb4h-dRGf7GRqU5aYBne4.roa (hash: vcUnwVhvidom6bWizccTCS7wF3vMreiwdFHr11qyWHQ=)
8: XgKbk-VfS5Fk-dDKQjpQqRf0_lY.roa (hash: iWT0RhDme3TLlIGDD9yrT4WHfNUoRqswY0iSVi2J+04=)
9: bu5zIhc9syS0fhKBovFQXcGQRxQ.roa (hash: /Bq2k4bmIQ5EUPK41v03YcsLqkRVvDHXfxrIn2yzw5A=)
10: epRr3ot_tO1I-RC0EsosxizeUW8.roa (hash: 2A4W4DbPWY16lTKuPfcljbBbTU9AeJIZxwLQ/cXz2wo=)
11: hIAZzuP6Gsu6ylCAGgkd82Ycc_M.roa (hash: SQISDbvDjBaLkSadlmENoao3YxR8/bK49Sgx969cf+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:8f:0a:69:e3:8a:b1:a4:d0:82:b7:19:d8:2c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Validity
Not Before: Jul 28 14:01:12 2026 GMT
Not After : Jul 29 14:01:12 2026 GMT
Subject: CN=0da9836bffc52f461f83baf163413c2074ffbb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:15:b1:ac:de:07:d1:de:a0:e7:38:8c:2e:cb:
cd:77:04:75:4d:3f:c2:c1:8d:11:b1:18:56:72:c4:
d1:9b:a2:b0:b5:96:60:8f:b9:b1:3b:a3:9d:13:35:
a8:d6:ac:f2:e1:ca:5a:30:94:91:b4:b1:50:a1:77:
0d:52:75:47:e2:01:9c:07:39:f1:5f:f8:3c:3b:ad:
c9:4e:23:b4:5e:e1:d4:55:18:c4:ef:6d:34:46:cf:
6b:3d:c1:d8:74:18:9b:1e:b5:27:a4:50:a4:bb:9c:
1c:1c:58:e1:b7:c1:71:01:5b:39:44:d2:f7:7e:16:
ed:08:9c:a0:8c:31:b0:07:ff:9f:81:b3:2e:a7:c7:
08:be:da:4e:0d:32:b7:74:7a:20:bc:1c:e7:eb:5c:
72:41:8a:0c:ac:f3:25:39:ed:ad:76:ca:52:77:38:
b1:af:23:12:01:de:cb:74:48:e2:af:ec:de:a4:d8:
2c:7a:d1:ba:cf:df:23:a5:77:56:9d:37:a6:72:d6:
f9:7f:75:b4:5d:df:53:88:e7:33:a7:cb:1f:c8:33:
58:2c:61:a0:18:a0:53:33:ea:c0:4b:7c:41:9b:83:
e5:48:9b:42:51:27:9e:42:a5:91:71:06:c1:9f:96:
05:2a:ec:7e:e1:19:05:ac:4c:cd:a8:29:a3:ae:1c:
d6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A9:83:6B:FF:C5:2F:46:1F:83:BA:F1:63:41:3C:20:74:FF:BB:10
X509v3 Authority Key Identifier:
keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d6:c2:db:3e:a2:3f:85:17:75:90:f8:9d:88:d8:3c:f6:1d:
62:6f:e3:bb:ec:6f:b6:d1:60:d6:f6:98:0b:eb:e3:84:5c:e6:
d1:df:13:4f:4d:6c:03:92:58:b9:fd:48:26:45:bc:3b:6a:7f:
73:17:48:78:0c:5a:0a:02:dd:37:f0:d3:41:37:fb:d3:b8:9e:
18:35:05:42:2f:9c:69:63:f1:99:19:c3:e5:d2:e9:d0:82:33:
0e:7b:ac:a1:0a:00:a8:9c:04:2a:70:9d:1a:2b:a5:ea:5b:63:
ab:86:41:f1:f3:50:ce:76:b5:5f:46:e6:35:b4:7e:78:b4:00:
8b:10:23:f4:d6:62:db:3d:1a:e9:b7:59:00:38:8c:b4:95:eb:
d6:34:57:99:b5:01:f2:06:72:c3:61:e8:36:53:6e:47:75:0e:
0f:27:7c:a8:6b:fa:7b:9f:bc:8e:73:85:4e:28:7b:52:fa:0a:
26:d7:8d:5a:fe:f0:e4:e6:97:4c:5e:28:d1:ce:50:c0:12:64:
f1:a5:0f:b8:af:f5:d1:ee:18:af:9c:60:18:cc:5f:7b:7c:50:
ef:47:8d:a8:a2:03:90:6d:95:9f:24:f5:36:61:fe:3d:1b:aa:
b3:06:bc:3b:86:ef:1a:4a:9a:57:93:0a:93:c3:52:2d:94:73:
4a:c6:bc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:30:41 2026 by rpki-client