
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json)
Hash identifier: WQ1UUnTNEa56QnrslycnV1qKddMG0rRzbbct6DMKPY8=
Subject key identifier: 96:82:D3:CD:BD:B6:AE:26:D7:BA:2B:DF:7E:21:01:81:BF:95:0E:96
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 019EBF5AF25F96AE8C48B31CB01A3D676154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
Manifest number: 12F2
Signing time: Sat 13 Jun 2026 05:01:08 +0000
Manifest this update: Sat 13 Jun 2026 05:01:08 +0000
Manifest next update: Sun 14 Jun 2026 05:01:08 +0000
Files and hashes: 1: 3toE35EUITjod3ujsTDiStr_B54.roa (hash: WJgv/cSPXzniu2qIWia9IFe1EIWa4yT2fM/TzcyszSs=)
2: 8nl2mLa9KaQYd0gtNecXWVE84vs.roa (hash: e0ZLWW8LXQsY4AnPfxVi/bqwxVjXvo2BrP7yTMcokRY=)
3: IyuNOfmUXirly0xEaKEHq8m71oY.roa (hash: uiMdpw1f0VdtzZapJik9ypl9f8HLQKGrIwk+Sh+eMA8=)
4: LnMXIwMA4GyT9W25g6vlAmH5RVA.roa (hash: dMM0G5yaZ5OJLvqzQdsXsSZhpUraOeB3HtKHktwhpKI=)
5: Qn401VjRXKGDOf7NfQhRPs5gtIc.roa (hash: BhSOyAZmERjzTEXW+u/72sABlpWtwlmScG97x0q/RGk=)
6: Uy3ys-nSv2z06iOsWIhlKc85XNk.roa (hash: 2YEBqEQjSApG0xmkrgbwP8dVN1caGGqbA7l5pUFPq34=)
7: Zj4CimCazX5aQkiTy0v6Bth5jY0.roa (hash: LI2qWr9NKIdpnEssjh+tl7eWkcbWzEM25rITA+Kd1d0=)
8: a3JMeBjtG8p-K8DB-gMejb1J5gI.roa (hash: /hvaDpNLcY8jqI3PSI+KI1FyULWGiSrZDc4FkjdXsPM=)
9: eGy-TWABgnLZkghosaJJHcTee5w.roa (hash: 3UQRNaZvYAqVrxrnLNkAfUX6kjr+I18WMoFH16wNXTg=)
10: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: SVt/vmy2VscsQe2Ca2NTIshjCdn8yxq9dPGjsnfpWNo=)
11: hlXzXwqfKevRV0ZOYD4xuZeyv68.roa (hash: ILiVM3fgCJT+94jYQT8N5fmuGvDZmGhhJIkkPyMYJ8o=)
12: j575I3ZxuQSG6sUJanicuzsQ9ME.roa (hash: MRXhloo4whFrLVxEGl5ycNzkpjmehaI6LH7jWYZpYC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:f2:5f:96:ae:8c:48:b3:1c:b0:1a:3d:67:61:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jun 13 05:01:08 2026 GMT
Not After : Jun 14 05:01:08 2026 GMT
Subject: CN=9682d3cdbdb6ae26d7ba2bdf7e210181bf950e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:92:97:f1:69:26:ae:c8:0e:59:c0:df:80:30:
73:e3:3d:d7:70:0f:18:52:8f:1c:57:b2:80:ec:c3:
00:58:0a:ec:30:91:23:a1:fe:c5:b0:4d:a4:a3:14:
08:e3:e4:1b:37:cf:8d:a4:04:41:58:0a:7c:85:35:
2d:ae:dc:e0:ba:46:92:e6:75:a2:df:95:5e:56:ac:
5d:07:02:bf:5e:ab:0c:72:6b:03:fb:5d:fa:9e:78:
14:9a:a0:24:c2:63:57:b9:61:0e:a3:f3:ae:8e:93:
9b:2c:29:12:6f:ca:d5:b6:f4:2f:45:c7:b2:45:9d:
81:b1:ae:07:0d:50:76:be:5c:3d:87:15:2a:d7:8d:
b1:ad:49:7b:e4:10:b5:6a:94:e7:4a:6f:48:83:ab:
b7:f2:b4:e3:fa:e7:67:67:8a:e0:b6:ac:86:0b:92:
99:97:70:9d:6a:f3:78:03:a2:46:c8:43:3e:a6:58:
d9:d0:31:61:a5:cb:ce:39:66:4b:5a:11:5e:5d:42:
94:f6:05:71:46:c1:d9:c9:4a:6a:c0:86:36:96:0b:
e8:c4:6e:ec:66:0e:3f:20:8c:f4:b3:77:5a:38:53:
4a:87:3e:e8:f7:4c:f3:89:06:32:ef:93:fc:1f:3a:
2c:89:ad:83:06:d9:4e:0d:ad:be:25:dd:ba:b0:31:
44:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:82:D3:CD:BD:B6:AE:26:D7:BA:2B:DF:7E:21:01:81:BF:95:0E:96
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a3:12:74:bf:cf:d1:53:03:fa:d1:47:90:80:13:35:19:20:
1a:cf:ba:5b:8a:5f:ff:06:d7:a1:7d:33:0f:92:7c:85:bc:45:
d0:36:4a:86:4b:22:3e:41:0b:6d:ef:96:51:37:6c:53:1d:20:
ea:75:83:f0:2e:7f:38:c6:54:4f:b1:42:00:a1:c3:c7:66:c7:
77:fc:28:f0:f2:5f:1e:da:f1:a8:7d:3f:46:9b:e2:b7:cd:ae:
49:1f:91:0c:a3:fb:06:1b:4a:eb:0f:04:aa:7c:82:21:57:74:
9c:7b:d5:97:50:08:c0:3b:06:36:17:21:23:93:ee:14:8f:fb:
81:40:ca:ec:0a:a9:6f:11:87:83:ca:ec:5a:9c:ac:bb:bd:37:
79:1c:25:3a:01:ce:a1:68:50:f7:32:78:a3:a5:78:24:31:9d:
98:a3:9e:e2:06:46:eb:43:f3:40:07:50:f0:b2:86:25:2e:ec:
87:9b:09:bc:f9:31:75:6e:36:ee:18:c0:16:6f:d9:ea:cf:d3:
f8:9f:28:6a:a6:dc:54:82:ce:04:94:1f:42:d3:72:3c:39:c2:
61:e5:0b:32:8e:2c:fe:74:92:21:82:95:74:5f:5c:a2:33:fe:
0e:a0:18:99:83:f1:85:b3:c3:c2:d6:ac:3a:98:e7:7c:e1:28:
90:eb:6a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:27:46 2026 by rpki-client