
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json)
Hash identifier: jcWEFhHG4yRe1FJLNzigO6DX2i16T7ISCEW1xl84De0=
Subject key identifier: B8:08:74:B6:A0:C5:72:15:3E:14:1B:F1:77:7E:C1:8B:5C:3F:DD:9C
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial: 019EBEECC43B2C09D495BFC599ACF7943007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
Manifest number: 196D
Signing time: Sat 13 Jun 2026 03:00:48 +0000
Manifest this update: Sat 13 Jun 2026 03:00:48 +0000
Manifest next update: Sun 14 Jun 2026 03:00:48 +0000
Files and hashes: 1: 1-GhRhgsSmBC7gWKhOHnpR776bf4.roa (hash: qnv9CLKULc4l872r6nllGPstkP0XkRt6PU8gP+XhJSI=)
2: 6v4HqsYH-6som_YpUpTifh8cS0U.roa (hash: o/bzOokvVjVdRRGlEanFfeM+ssve25vJEVqBsKnyXeM=)
3: 9vuOuOvj62P021fXQQxf0hIL-7Y.asa (hash: IV14GyGa+T6PyA00vxABTsOZmDpbofMON8dQI+vejQo=)
4: B1mlic3MBKdWlyRVytiTsaiFEpo.roa (hash: 9Ke9dxoY8TVa8fbx0FgxVlR01PX31ijJ+fbU+/+2oMs=)
5: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: o76pkA/fOvd+KmX/TiPCyXX6Sln0yWM+sTT88wgUmtc=)
6: KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa (hash: Hw3psnYEIeZVvc6w8ErUMeU8xREBKOKc8FzSPBoD+z0=)
7: WimZdTjw5Lm8MtebopYruWKL5rI.roa (hash: ZsNGt4iJIvs0TYMA8I/lIAfczIzjQsE/8A1JQl2JcVU=)
8: b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa (hash: J+IrH96dkk4qiDFeus4aE0u+r2utLyjmelYRT1wTqnQ=)
9: bSrLWTYwlUXSgoWh2AaTKv-yqmA.roa (hash: Xoy4Bu7OUAX9sEbib55m/isLQimqg72dL3LXY0l3BGU=)
10: eM1X7x8wZM8pIbppf3y2iwcpciE.roa (hash: BhDC27TkTu5DoQZF1Cb42Wxs7AL7Hko2eWVnucF5rqA=)
11: ex0_koM3Hnul1gB4FdrgAL4TaJk.roa (hash: r9XRIZzTUJ+UJFblQTe7FtwXbaQCKtxgvzkvKCI8IbQ=)
12: iKMbSLMsYD3IPy4aFTgWFbR5-7Q.roa (hash: FLy0rWO0Tm6EmloSEokoF4mkm9Xo/LOqQZJUxQFOv+k=)
13: li3Nzxt_F2UC_oHWeAWyOoIU6tI.roa (hash: qLkVwH1CtUNyv0xKh9iCCsPrbH80JJJwsrB9STz3pME=)
14: waZz0IyLkJZ2XZs5mcy2zeGt7KA.roa (hash: PLFFtAchWYCJ5jmh6ddgth619HvoXK3NBze7KzilKF8=)
15: y1ma_1MpKFwpBA0ud8_GPTkN9fs.roa (hash: wYvSLwWEiQxZIUgyNEOSCPvFdda8fgf6UgQ9JrolQ/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:c4:3b:2c:09:d4:95:bf:c5:99:ac:f7:94:30:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
Validity
Not Before: Jun 13 03:00:48 2026 GMT
Not After : Jun 14 03:00:48 2026 GMT
Subject: CN=b80874b6a0c572153e141bf1777ec18b5c3fdd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fc:4c:bf:c6:c6:fa:fd:c7:64:03:7a:62:d2:
c0:5a:3c:9f:3f:ca:0c:f9:77:1b:88:2b:81:bc:3f:
86:3b:8d:3a:4e:85:13:24:f4:88:11:7d:93:6a:a3:
eb:0b:2e:8c:a4:eb:f9:88:ff:0d:b8:1c:c6:a9:c8:
ad:cd:0c:89:27:83:f1:fb:fe:cb:96:91:69:3a:f4:
49:dd:a9:a6:15:8a:b4:6c:83:f8:72:55:78:34:19:
41:f8:e3:08:9d:29:06:c5:72:99:3c:9f:42:86:92:
df:0c:67:f7:ea:4e:f5:99:ff:c3:df:b4:d1:5a:78:
c1:52:44:69:6b:33:a8:46:f6:ce:6a:fe:39:52:d6:
72:7f:0b:a7:a1:3e:ed:28:46:29:c7:ed:5e:5d:50:
ff:54:ee:17:9c:ad:07:aa:1a:63:47:81:ec:6e:67:
05:f1:3e:6e:c4:7e:9f:dd:7f:2d:b3:b5:b4:d0:55:
d7:a0:e0:a1:c6:8b:ae:79:70:84:84:ba:b4:47:9a:
9a:ec:ba:df:27:bf:c4:68:95:11:a1:aa:63:5b:d6:
2e:5e:e3:ea:06:33:14:76:8b:23:74:57:3d:c8:11:
56:e4:18:7d:13:1d:4d:4d:22:e7:d2:67:97:46:37:
13:b0:3b:24:ea:0e:91:19:97:83:23:38:71:99:8a:
0a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:08:74:B6:A0:C5:72:15:3E:14:1B:F1:77:7E:C1:8B:5C:3F:DD:9C
X509v3 Authority Key Identifier:
keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a0:fc:b1:67:08:cc:2a:30:18:83:ca:e0:ab:6b:78:bb:38:
83:47:9e:b1:11:6d:8a:53:30:3e:74:54:7e:7d:59:5f:0a:87:
b1:49:09:c7:98:09:79:1f:4d:e6:82:01:95:f0:a9:bf:ea:30:
b1:18:eb:02:38:80:d4:5e:6d:8c:2a:b7:23:78:ba:9f:81:90:
e8:8a:f2:47:f9:0c:26:a3:80:b0:da:64:0e:b4:e6:ec:4e:5b:
0f:0a:3b:10:6e:da:1d:ca:e8:c8:dd:3d:12:f2:9c:f3:3e:a8:
e0:0f:62:51:96:1b:f9:c7:e4:46:14:00:ee:d0:11:f6:df:1c:
9b:40:1b:71:9f:e4:d4:a1:f3:4f:5f:1b:60:b0:c4:24:5c:4c:
02:30:66:5d:de:72:f7:13:3e:70:0c:01:1c:4c:a9:cf:af:bb:
bb:09:c7:b5:d3:fd:b5:e2:4c:d6:81:ae:15:14:da:fe:80:73:
d5:bc:1d:7b:cd:1d:fd:39:09:e6:de:27:da:d3:6c:aa:9e:a5:
cd:f2:5f:cb:92:f9:d9:47:8b:22:dc:0e:ee:ba:0e:1e:26:43:
84:38:c9:1b:d3:a1:d2:d6:ae:c4:5a:68:a2:43:84:78:82:01:
ab:d1:b6:f8:79:f0:3a:43:78:61:b1:63:c9:f5:ec:a0:f8:4d:
e9:72:02:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:08:23 2026 by rpki-client