
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json)
Hash identifier: tjS+RXHYj4DOZgmJUHarI1eELEELwEt8aPL7N/xqlG8=
Subject key identifier: 32:BA:F1:96:96:FF:5D:2D:AD:15:DA:D8:F8:D2:92:E4:C9:64:80:2B
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019FA9D853C8BEB13DF5D2391B615033A380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
Manifest number: 198F
Signing time: Tue 28 Jul 2026 17:49:14 +0000
Manifest this update: Tue 28 Jul 2026 17:49:14 +0000
Manifest next update: Wed 29 Jul 2026 17:49:14 +0000
Files and hashes: 1: 1RXLSMCQxm6vHzpOwWgDUAInFdg.roa (hash: tiFDxiab3e0Tsjr6KVenyf0JU8F/yU/38yIyF4rjX4k=)
2: 1VWiLulxOxhHgQKw7IEXoo5ATg8.roa (hash: x6H4n3WYeW4YeYZUn/i7tLDaV8onmgp0QC27YOXzSKw=)
3: 2hZ530f2raEI-bxy4Ge1DWkjBYo.roa (hash: Bao5s0a1GnYLM+RTX8Ltx08DQ1ef+ti6Rlh4XL0TsXg=)
4: 3k_DXo4ofAXcZYPDcNLzBletpVk.roa (hash: ziaq+fvQdyZn6u+jlF4Bvlh3Rp/2kXUfv41qFJFnMKU=)
5: 55iMg0IqIvTTTaaD18TQWd53G8U.roa (hash: hkh5sXfYdaVp6m20oi5m27sE7i3ZzTQje8FmNlvZJcU=)
6: 6fueTwx89YJUS6Dpp5Y2h_u_XrU.roa (hash: lzYvahX3CMPBOibhapx+4QK+QwG3tziddPkBj6Q8iy8=)
7: BTaCybUURTBQi0VNgpk9RgieWQU.roa (hash: t/hsl4bRfHXT9QYyQUbp81UsQcklFdAa9CwiBUgRca4=)
8: Cy393HmMTcAn60r5mHO2k2Dg17k.roa (hash: r8l9XvoJeBvAXNolGJ2W46Taz9bFIMoIIMpX642FPsI=)
9: JHXRcwdGLV-x0tFgIpk_GdvVv9E.roa (hash: 3yZYckxEFNC5HpjyWQ7bKTfulKrPrYVmR0yC4V1+t6Q=)
10: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: Xt0PXJrAxmbN/u7owxqhjwCF2E8GNgIRGGVYi01M7HY=)
11: MzS0a-if8StAwGvSc_KLQZwctYA.roa (hash: Ih3ENOBKFmZrJm9qAmqbuLfexG64Qa2fws7qqr9UsAE=)
12: PMzy_qV1UY_0ZKB9kdOVuYWTmmc.roa (hash: TRI6XfkqHbFEpL8yBzCDgc2XJwsdsYj0moGkucrDeNs=)
13: TjyKjzgVxClAneVTofUpEpODO4c.roa (hash: P6CkJUB0bWvv80EbY764u+5wuiSaj13NOmKLygDqt9w=)
14: Tq4nexBl7Bhl88T7x0Q2h2tatk4.roa (hash: pFK6MA84kt09PJZi3gnwpQ1THUutVL/OXU5GSC2uBmo=)
15: c7t6wQUV-ONFA6vcvfwHnvEUxNk.roa (hash: 716daOJ6FBCxynQboT89eYOdyvqH+pTwI+F2BmxRbnA=)
16: ifM73hFNDS-HrpzAXJZiRxf-Neo.roa (hash: k9cUGDKroPZ+BsMFJtunA+HgnGfK8aKvAASRzcpd1hE=)
17: ijRESvjuFsPkeA-Kyvc-Amtbhmw.roa (hash: vfx7UefHLR8jxOzWuroODVBFFWPo5JW3hdLXsh9WZmo=)
18: m9gc2-3kvu1ECXe8zpu0Ico1Ebo.roa (hash: 1h9SEvwGU1RX/xwx1Rkt4nh0FAFsqK4wE3FVRKxswsI=)
19: p9Ga5zssyIhFHrJi5MZ47Pyznvo.roa (hash: Ott2sOPVA987hz4zVP2oRFvzjlidIeKw8Px9ILdJfjs=)
20: r-29DfcBFqtrQoxy43Ck9AGvEJA.roa (hash: Vf08Uzf29by4OovXTt6InS//E1CSQstRVYxDVQ9TYww=)
21: xsyFP3WB5Usaew7SGQRO9fW_v3w.roa (hash: LxeGCJgt6lWaEJ/RMO1YX/wb1GOfng/XVidChMvRHe0=)
22: yzKmZsge7trUv4Txs2kYPlL6-RE.roa (hash: wcxVH/6cau217WxdwHGYfj7PaYBWv7RknCW4wcCZPgM=)
23: zNK-oPXBuxp1H51GnlCM2lcNtzk.roa (hash: Vmb62CjMyELzaU8/TRy0Rr8Z0jw/kF2X0pLfeCoCANU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:d8:53:c8:be:b1:3d:f5:d2:39:1b:61:50:33:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jul 28 17:49:14 2026 GMT
Not After : Jul 29 17:49:14 2026 GMT
Subject: CN=32baf19696ff5d2dad15dad8f8d292e4c964802b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:bd:42:73:82:2d:66:13:d3:c0:c3:72:48:
b2:66:e8:05:a5:42:a1:43:90:ad:0d:12:04:ad:e3:
f3:3e:16:8f:35:71:ab:d3:27:9c:62:6a:f2:c1:e3:
ad:ee:10:cc:11:f3:26:61:92:f7:63:cb:79:62:0f:
03:ec:4f:a3:e2:fa:b4:05:14:3d:1d:24:b8:15:e8:
72:21:1f:3e:af:db:f4:e1:c2:4a:bb:77:cd:42:8d:
ba:63:16:ce:67:e0:c6:29:e8:4b:85:7f:8a:27:ae:
bb:9e:ee:fd:1a:e0:00:c3:c9:f9:e1:9c:23:01:e8:
26:3f:dd:db:1a:8b:cc:6e:12:6e:13:7d:0f:6b:08:
5a:e4:1f:21:1a:51:1b:12:f3:1d:6e:4e:e0:a4:c7:
63:69:d9:5a:da:ad:80:e9:55:c0:b2:61:f4:fa:11:
35:5e:ad:16:39:0a:f6:76:ba:e6:fa:dc:19:4a:8d:
04:eb:71:7c:57:cf:29:b4:25:22:7a:41:97:bc:e1:
da:67:40:3b:7d:33:a4:9b:24:f3:f3:22:b9:9e:85:
ea:64:e1:89:a3:67:5a:e1:df:bf:99:b6:9e:4d:49:
77:b7:cf:10:af:c4:f9:95:58:3f:17:06:cd:5c:e3:
24:28:5e:93:be:28:80:1b:c9:be:12:ef:21:67:eb:
3b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BA:F1:96:96:FF:5D:2D:AD:15:DA:D8:F8:D2:92:E4:C9:64:80:2B
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:39:5e:a9:d3:b6:66:f6:98:a4:20:92:3a:0b:af:28:ba:0a:
58:ba:c9:70:ff:22:5f:cb:89:ca:f7:0b:62:05:cd:00:d3:71:
3b:c4:42:73:59:7a:91:ea:42:3b:0b:93:b2:48:9b:2a:99:67:
eb:fb:48:61:da:63:2d:52:01:67:e7:0b:ea:a2:39:39:60:d8:
f5:40:6e:9c:f7:ae:da:9a:bd:2f:29:46:7d:bf:db:8b:5b:41:
09:cd:18:1b:7c:54:66:49:7b:a6:e8:9b:81:2d:42:9a:29:03:
95:ff:e9:2e:13:20:5e:e6:11:26:04:5c:c7:75:26:1a:65:3d:
1f:28:c7:de:67:ff:cd:16:87:e9:0f:e6:10:e0:50:3d:ef:89:
12:23:bb:5e:78:ce:00:f3:d4:5a:ab:a9:33:83:de:ab:08:92:
b8:a6:43:9e:d9:70:9f:9d:72:73:f2:bc:fa:8c:d5:d5:70:a5:
f5:8b:e2:77:10:da:25:1a:2c:80:f7:8d:ce:6f:c4:8a:82:65:
e4:eb:38:b1:a2:fb:cd:45:7f:5b:7f:c7:7d:f8:d2:3b:4f:fc:
70:e9:92:1b:c2:bd:c0:a9:b3:2b:1f:93:d1:94:51:7b:66:fd:
40:31:0d:f8:e1:ca:82:3f:43:81:43:03:00:1c:bf:7e:50:c3:
4c:66:cd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:44 2026 by rpki-client