
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
File: UFkuaIlccGi0ZVUIkXrVu929Cl8.mft (raw, json)
Hash identifier: gamhLrskG4T6lL4Xc1stfc1pRtcVZvGDgT0H2Uqmp/M=
Subject key identifier: E8:25:49:57:92:02:2A:41:63:68:85:D3:05:C7:BA:C6:A1:05:F0:4B
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 019FA8D04B458584CB32D5FC917913A0AC40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
Manifest number: 1A11
Signing time: Tue 28 Jul 2026 13:00:50 +0000
Manifest this update: Tue 28 Jul 2026 13:00:50 +0000
Manifest next update: Wed 29 Jul 2026 13:00:50 +0000
Files and hashes: 1: 6cPzePL8SbPhYxlEre30SLCYl-Y.roa (hash: bpE4jQ6I0nBPjXRqOCXt82xgQ0N1iRPYG2gk58BlGfE=)
2: 7qKC_f93I4x5vZAkFd7YPrFcC7k.roa (hash: Fej8whp10bdKNIubAsMMxHxf8nDoH0W086yoYql/4Y0=)
3: AglMX7mwwb3rspJEIopyVPwTx-E.roa (hash: S+AWhAQbQR4GQpkHiPCQOCsaczJj/pHTNHnGM4CmrlA=)
4: ItLnYEbliO9uy4pN2f9Nx-cbnMU.roa (hash: SC8dz/gz97zrc/Tqdl9uM99+iCk/s/X41bIC+YpTYTI=)
5: MNvipI6k91242S53W3jqVcArQhc.roa (hash: 7sDpPYB99HElo2KA5xuF+lvuTcscLhsFKunpulQrN5o=)
6: MiUKM4-anjUIiLLo25o4aW1endE.roa (hash: 8GJk2lpNvqF8G6oHGKOgI8d2pjeWdDUhOm/xZPhFJK8=)
7: NFAuHU7LF_HyqchSKTj8EafONIY.roa (hash: 6n1a8gPcx7eZe6weWqKlrMFgR6RhTx10TMdXBJFAWF4=)
8: U2EVUUWlWvbUAILqaxAgK8pY0KE.roa (hash: P61yHP4ZBPMnRJW1hcXnzx/7WhRn7HOpJpj+yy4Yx4A=)
9: UFkuaIlccGi0ZVUIkXrVu929Cl8.crl (hash: TM0E0Qw3rTrHB7ec93St9P0bkWm8Koif73KKKO01J4s=)
10: WFdUi3XXatfTABnfBpngGAHzARo.roa (hash: kKjPRwwZCBaY9u1h1EFLYB9g9DPTFuUTOwPzWAxE6M4=)
11: bHuZc9mUYBcqpEDyA_8H3U2OWFM.roa (hash: LIqVQ9mxztvdOqUbAJcArQV2MAsX+TwnaJ0MIMH4BK4=)
12: dvCXrpuIgKHCZtQqB3diL4N4JNk.roa (hash: fvscbXWy0N/msqi2rtIwXgUHt2kq1AX6g+9LTX7Mfrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:4b:45:85:84:cb:32:d5:fc:91:79:13:a0:ac:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jul 28 13:00:50 2026 GMT
Not After : Jul 29 13:00:50 2026 GMT
Subject: CN=e825495792022a41636885d305c7bac6a105f04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:09:db:51:7f:ea:c3:7d:67:dc:c0:5b:a8:29:
2b:0c:0e:16:09:4d:73:aa:bd:a6:f2:22:1f:f9:e0:
63:d2:7e:e8:5e:c1:91:bc:f0:b9:05:64:b4:b2:15:
ef:fe:f0:31:1f:4f:e2:ea:87:fc:da:f3:74:29:5e:
6b:88:c7:3a:f8:9c:64:0b:5a:ee:d3:45:44:d8:b9:
f3:24:b6:36:43:7c:a5:dd:59:7d:7e:d5:7e:14:dd:
0e:d0:90:d1:32:8f:66:4a:9d:ed:7c:30:7e:56:f6:
6c:3a:19:63:4d:2d:46:88:9f:ac:cb:29:91:ed:98:
0e:7b:5c:dc:8e:24:b1:36:b9:dc:06:ca:bb:f2:d9:
47:fe:17:58:db:72:6a:e7:c1:68:17:12:2c:7e:00:
5c:0e:1d:12:64:e8:b5:a0:f2:f7:ce:fb:de:ec:17:
d0:b9:ef:cf:18:54:70:50:ee:b9:8f:09:6c:3d:98:
71:b7:b5:99:45:ea:6a:51:f0:80:aa:f4:8c:37:54:
08:e1:af:ae:df:c4:94:de:f6:ee:ed:42:5b:dd:bc:
5a:d5:74:98:62:3c:3d:ed:91:34:50:d9:03:f4:d5:
61:e7:6a:88:97:81:42:bb:2f:79:ae:95:7e:e4:b9:
86:0f:33:5f:f6:7f:00:ea:9a:74:78:7d:fb:55:ad:
4c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:25:49:57:92:02:2A:41:63:68:85:D3:05:C7:BA:C6:A1:05:F0:4B
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e2:ac:5e:f1:28:d4:ee:56:6b:99:9f:98:73:9b:de:f6:3d:
d6:bd:2d:34:a8:0c:30:61:a4:29:92:23:15:40:3e:f0:75:f9:
2f:88:e6:39:09:d3:4c:d1:e5:81:a1:e3:8d:9e:f2:52:5f:df:
90:e8:a4:81:3c:54:3d:bd:28:d7:fe:84:7a:c1:ce:f4:0f:b6:
89:86:6e:b4:06:c1:74:6f:c3:df:85:15:04:59:e9:b3:57:f8:
e6:4c:17:be:45:72:27:54:d7:28:18:e5:2c:21:90:13:19:c8:
73:87:d3:50:3e:61:22:9f:cc:9b:e7:56:78:4e:1d:db:ee:d0:
ca:e0:eb:16:9f:06:d9:43:f8:38:a1:3a:80:16:7e:24:82:8f:
56:7e:4c:e7:df:3a:5e:83:4b:e0:2a:b6:40:f5:bd:47:3e:a8:
d9:cc:20:6c:3b:49:92:ee:22:68:83:ce:26:19:87:17:0c:aa:
81:ae:a2:cb:de:64:af:14:20:26:b2:e5:30:73:f4:6f:89:5d:
b4:aa:50:df:7e:a3:16:52:52:e5:da:60:b4:1d:14:48:25:76:
9d:aa:34:1d:d5:e8:8e:c1:25:23:10:ed:f2:71:df:48:25:92:
47:87:e9:e2:bc:59:35:5a:8e:b7:1e:0b:64:fe:f9:e4:cf:38:
9a:dd:a1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:24 2026 by rpki-client