
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
File: s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json)
Hash identifier: kNPK083ic9MZcovrDwBvwOo+oD6vFGfUIxnwEeZAXZA=
Subject key identifier: 1A:C2:06:3D:8C:49:4A:00:17:C4:42:21:66:E4:70:8B:F9:03:0F:9C
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 019EBF23BDF712A300741DDD7524348D2346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
Manifest number: 196C
Signing time: Sat 13 Jun 2026 04:00:51 +0000
Manifest this update: Sat 13 Jun 2026 04:00:51 +0000
Manifest next update: Sun 14 Jun 2026 04:00:51 +0000
Files and hashes: 1: 0SfcrueR4QFb8tc3xCE9ChZKK7I.roa (hash: IdDOQHOx8rCnzoVeUvZ2P/Vc0fq61+r5BuBjfqgD4w8=)
2: 2-9TE0hGien7uJimnUsiIL-slx4.roa (hash: ITBjj6tI+9B/OwJk2K8Dzw0Ey9IFfvrN1KI8kY4JXFU=)
3: 4yoK_eJAZQm-WbM5DBSju_S_g9Y.roa (hash: lgK4wDh2/dU2RT27074ZUCpZTP9aGuib0EW4Skf9pnw=)
4: 5wHePNmHiLxtlCYvlaGW1MyLNGY.roa (hash: 19szNpHnnm6pkaW4TlJOhu+0nXLMQC+WoPm1n3sfLvM=)
5: 60zN1G8HfzYuFPygt3H-4b18ytU.roa (hash: ZIesJxWGT7Q67L0RiBjzfL/tP6joKKOh3GhApUIGf8w=)
6: XD3CHImTefD8FuenptmC1xt8ItM.asa (hash: zINZ70P1S66UVaG5a/xPv//b9AHB0SJycGjf91yrXwY=)
7: a18LnE9DcgG7zugO6ioQ3Y7CS7U.roa (hash: YrbotmHDUF9LRM1RQzShBPkq+JRfuxMVJgnz/gexBZA=)
8: cH5VUqUcKkt9HSVAYge0hus4RzQ.roa (hash: wbhN9oe6hbcxDEr+Ij32oivB3HfT5mVhEID8dWUc5rw=)
9: dIGZhkcQjwXD6TRRSDLTBNo_khY.roa (hash: iHaZdF9YmqdeJqR3BWg40wlZURcExcqa9x9g9e5Q+Sw=)
10: e7AhsDGyXnglWGP4F2vWjFKoYe0.roa (hash: e/toQQVnqhq4qPJ3Y8N1Xo0D5ymFTKzkV6/84IOgDm4=)
11: esK7vUUmoe40XTn02C1nePqnmu4.roa (hash: OEIBdY80QQKHjWxchlaPmmZgXh8xpcGsK6uCERu5/OA=)
12: fgRbMqN9XRQOyHROi59mKV56wUg.roa (hash: Py8QfC6Me9kljX65ogBUdQo8JbMweZ02w9NGup3yJr4=)
13: micpmXuBXJ3dOE45zxgN5f1tySY.roa (hash: timEpEuW2bJbH8o0L2R6fxPkiFxXOpRncmuh270Cg8o=)
14: qPo7YKl9p3tCFKkxOPVMkK7H2_E.roa (hash: H4C9ry+5IfYnCURh7FDnZSYaZWLRwKVBeS8DaqAWsew=)
15: qtDoqnaV9ZZGBUq4tRSN1Fvz-j0.roa (hash: GSE9R+oyIw7xMTL0Ep+U9AxHVf7kythML3j+Y7ovTM8=)
16: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: iyZ+nF5Sknrp/ZlOLz9KveC7Y4sXmv1+CorXeaUN8zM=)
17: xwR5dZkRnrr1skSXQMNYngkeNa8.roa (hash: hOBraH+aXlwWcJU3uccn3dhXaJ0+izS/UP4kbWzbnEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:bd:f7:12:a3:00:74:1d:dd:75:24:34:8d:23:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: Jun 13 04:00:51 2026 GMT
Not After : Jun 14 04:00:51 2026 GMT
Subject: CN=1ac2063d8c494a0017c4422166e4708bf9030f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:5e:f6:04:bc:2b:93:dd:9a:60:c1:81:a8:
61:55:5d:fc:51:7a:3d:10:52:cc:a9:6d:bd:d7:29:
42:42:8c:06:2e:97:a1:c3:7f:05:79:a0:eb:88:f5:
ba:2e:a8:56:51:9e:c6:2b:9d:0c:74:84:f1:1a:aa:
a0:39:6d:76:6b:0e:88:51:40:5a:28:1d:12:18:29:
1d:ab:ca:e6:fa:45:39:59:fa:a8:57:11:74:ff:b7:
a5:0c:7f:fc:6e:12:c4:1d:ab:98:72:dc:35:65:e6:
13:27:37:49:f7:6a:fb:8a:43:73:cb:70:1a:8b:4d:
b5:b5:43:b6:c0:49:f8:18:33:48:ab:2c:27:24:49:
d5:25:3d:95:f8:9b:5d:09:a8:11:c9:dc:09:4b:06:
e5:c2:31:e7:bf:95:90:55:7a:91:4c:59:06:6a:5e:
e1:a8:3a:35:1b:4c:29:78:d1:f4:16:85:21:3f:09:
71:67:02:7e:d7:09:62:17:a9:bd:80:9d:57:4c:b6:
3e:69:63:7a:ff:11:e1:c9:39:ba:b4:74:0b:a9:9e:
cc:5f:28:e5:f5:7f:57:2f:60:cb:a6:01:51:00:c0:
90:59:08:66:33:4c:d7:dc:1c:ae:5f:40:88:46:e3:
34:ae:4e:ad:88:c7:3b:f6:b2:d8:5e:9a:12:03:5b:
00:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C2:06:3D:8C:49:4A:00:17:C4:42:21:66:E4:70:8B:F9:03:0F:9C
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d0:6e:3c:43:5c:6f:3b:f8:9a:36:14:7b:89:da:39:71:c6:
83:fd:15:d1:cc:5f:36:d6:56:8b:b0:36:65:9a:c7:bb:75:ee:
59:17:7a:2d:ea:33:e8:a1:0a:65:39:3c:bd:41:b6:ba:14:5f:
5e:f3:80:d0:2b:0d:11:65:f2:05:b5:f6:33:2d:30:89:ae:2c:
4e:cf:f1:48:2e:8f:4c:1b:99:5a:48:98:7b:68:58:52:fd:b1:
46:ec:13:a8:99:23:95:e0:74:7a:1f:86:64:0b:a0:09:a8:57:
53:12:41:81:f8:62:42:1f:85:c1:69:27:81:1b:1c:0b:2a:d3:
14:1d:a6:3d:86:d8:d0:fb:af:1d:1d:f9:5f:07:14:32:ae:81:
15:c0:44:40:a2:50:99:77:e6:a2:b6:bd:a6:61:aa:4a:1d:21:
94:86:52:d1:07:23:b9:24:e6:d3:41:97:ad:56:93:0d:9a:75:
4a:35:c9:14:7b:60:82:28:82:77:cf:8a:5f:bf:7d:b9:91:99:
3d:26:d4:6e:52:a6:b2:77:08:eb:a6:5b:46:7c:06:77:e6:70:
c7:f1:cf:47:cb:5c:a0:53:c3:fe:ed:77:8f:24:38:fa:f8:a6:
79:62:b9:ea:3f:77:d9:0d:d7:7a:6d:35:3c:bb:af:2f:b5:d5:
56:5b:42:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/I733EqMAdB3ddSQ0jSNGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm
NmVhYWUwHhcNMjYwNjEzMDQwMDUxWhcNMjYwNjE0MDQwMDUxWjAzMTEwLwYDVQQD
EygxYWMyMDYzZDhjNDk0YTAwMTdjNDQyMjE2NmU0NzA4YmY5MDMwZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBNe9gS8K5PdmmDBgahhVV38UXo9
EFLMqW291ylCQowGLpehw38FeaDriPW6LqhWUZ7GK50MdITxGqqgOW12aw6IUUBa
KB0SGCkdq8rm+kU5WfqoVxF0/7elDH/8bhLEHauYctw1ZeYTJzdJ92r7ikNzy3Aa
i021tUO2wEn4GDNIqywnJEnVJT2V+JtdCagRydwJSwblwjHnv5WQVXqRTFkGal7h
qDo1G0wpeNH0FoUhPwlxZwJ+1wliF6m9gJ1XTLY+aWN6/xHhyTm6tHQLqZ7MXyjl
9X9XL2DLpgFRAMCQWQhmM0zX3ByuX0CIRuM0rk6tiMc79rLYXpoSA1sAGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrCBj2MSUoAF8RCIWbkcIv5Aw+cMB8GA1UdIwQY
MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt
ZmY1ZjFhZDY5MjY2LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2
LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdBuPENc
bzv4mjYUe4naOXHGg/0V0cxfNtZWi7A2ZZrHu3XuWRd6Leoz6KEKZTk8vUG2uhRf
XvOA0CsNEWXyBbX2My0wia4sTs/xSC6PTBuZWkiYe2hYUv2xRuwTqJkjleB0eh+G
ZAugCahXUxJBgfhiQh+FwWkngRscCyrTFB2mPYbY0PuvHR35XwcUMq6BFcBEQKJQ
mXfmora9pmGqSh0hlIZS0QcjuSTm00GXrVaTDZp1SjXJFHtggiiCd8+KX799uZGZ
PSbUblKmsncI66ZbRnwGd+Zwx/HPR8tcoFPD/u13jyQ4+vimeWK56j932Q3Xem01
PLuvL7XVVltC5A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:20:14 2026 by rpki-client