
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
File: aZHFbxGnFxxhUyOXafVXvroQGC0.mft (raw, json)
Hash identifier: PYsFr+JUAuNCxVRy+jacAiNmqIH3TDj5anY2jiiYUUw=
Subject key identifier: C9:3E:F6:C5:93:35:88:5F:45:D3:ED:60:AE:DD:60:80:EB:DF:20:9C
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019EC25C55C7E5AE183C8AC97EA6A4AB5036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
Manifest number: 0CF4
Signing time: Sat 13 Jun 2026 19:01:31 +0000
Manifest this update: Sat 13 Jun 2026 19:01:31 +0000
Manifest next update: Sun 14 Jun 2026 19:01:31 +0000
Files and hashes: 1: 0detsVv3VnmYHeQurxCIjBtID8c.roa (hash: 0pX6b3eXTKL9E1Fk4JhvGHfk6VrtSr0roszLfXSq758=)
2: 0z8pTI41iPuVrCQVQ1wuJedcLng.roa (hash: e+SXHoPepQrK1mT7vZuMdVv/Sb/mCHdwtmRTk5f2KY0=)
3: 1-1lvKVidMjz9SqtbPt81s0r7r0I.roa (hash: ZlBElaLY1A20NV3b70L3QV0eyy9Ku8m61r7maErkkKY=)
4: 2_-FI-AoJnOM9FRj9JIZ87TxIGU.roa (hash: fYqLfLAgXXv2j6Hlh2bmzcVErlr45q7qc3mJo6wcwjY=)
5: 38r2X0leHHTAmJ6zVJSwuzoD2E0.roa (hash: uyTAZ2GgNW9/wIH0EkQGQyRV3AY/RO2eHsNraGcFPPk=)
6: 7rTnCYh3ccijqtDYhIONfakeNR8.roa (hash: woFm2gn7FuVMAeShemzXKVcohH1CrzUdYLzQudjlSh8=)
7: BK8IgDa2YWfH15KeQoypNaZ7M18.roa (hash: 6BpUvOIxTW0cg027WM/QNtn7tQ+zM4t80RnLiUv7sIs=)
8: CZCLA3Cj6YYp_k_a7y0b2rbgyzo.roa (hash: SaDoVmzs9e3hbWzh+uCnOLVQP2mnuXiNzqqPyyTBq2o=)
9: F0KEI4lW7Epb_3eoekIpwBqbc2E.roa (hash: UC+E/xpST3sk4LrjHrlkIcP31YMZn/3d6DZdEgG8Rdg=)
10: FQ6e3qLq07N7c6vb8xSdMPOMvJc.roa (hash: jL7hfr1fG9q8Db+UI2ObK7nG/hXNzIiR02v0n72Zs0Y=)
11: JrpsDD8G_9HrVRADrUGdVzpQ0GM.roa (hash: PfSJmHGRfRFt+GOTf/z8aUHtcRQ35VQoUt2Ubm4KDs4=)
12: Latg5HfFxVV45cY_wXpQ9M7y2UM.roa (hash: AMl3v5ozRzV/5w1KglWOLAOe0okRBu64taR6MmvtD44=)
13: N0sDm-EFGV2amFYWHwErrX3Dbus.roa (hash: Xmo1dvVrCIWSNTaeVoMmKU+6tNLC/YtQosQjQwiD/3c=)
14: TUeOCNWhVd8O5zPa3qd_BHP7vqA.roa (hash: MnI1DWmQOBu59gydi5H0d6hzuefnDZXVAyw8JZRJmJo=)
15: UypHuJtN1zmqt0Zba9DljNJ2WgY.roa (hash: PFDshKDp/mzgsdaZsjSV8dCLT3xJ6p+HUpwQxcGrMuI=)
16: X3BpdcrulpgtepJF9zuahb_VK1Q.roa (hash: taCCefT+4dHHdbGpdMXNmS+leAtxYaJiPmPLHRNTSgE=)
17: _opU9Zflr19Qgw9wxcT5CzBzFeE.roa (hash: hVBzTOs1aH7AxZYfWOOyLBurJardjc8RPMc3Hjjv5+g=)
18: aZHFbxGnFxxhUyOXafVXvroQGC0.crl (hash: Yumo6mdcFIwa3wyH7plDkZIDr5Y52ibfCAcWPqK9kpg=)
19: enYE37jQOciNrH4vp2_3FdUT0io.roa (hash: PoAlpwtftho9gluuF95P6FYOuD1hDRKv7R9Nta21XGo=)
20: fzJn3KF8bcdzSxxYVGgg9WhSu_Q.roa (hash: F8Y+icGMTI8B4xLO/6DQSh7tnQktMHf3JcYVYNoK3Qo=)
21: j6F5nKl7VxhTCPP7Z6aypppg1qg.roa (hash: b/KmdMBh7vGAQW3XZYIqLqb1iW1YZRpjzYx/XN6MR5Y=)
22: jyvaLm1-JBzFljrC8_Pb4f2rr4g.roa (hash: ED9eP9++ZKN93T06UmXrcQZgNRabnKbGllXuzLNPqM8=)
23: kixICLXOmPgu8FWZWfXHuIRO438.roa (hash: cTh5X1HFCvqIfu9CuWKrZS1OtvrioydB2WrZsvVbvmQ=)
24: l7FVy9qV9r7TJi_Vr2KpMSypfts.roa (hash: BO7WgU3AlrlmLiXeaJCpacGRr3Q1uOzmvzOfD3QKH6s=)
25: n3z1BrcrJJiu7Hcuv_B2v_5F6XU.roa (hash: pHSKP6x04OxMC7fdYY2ivdUheOazHyRyV0V+hl8Y7YY=)
26: ol5o-VeacDxR8G56FJbb2bssCJU.roa (hash: HWf9NNfp469bQ5Wf7jn4TMJbz+S/ZW2Aq8n1tyLEU+8=)
27: qBWm7A0WS3zBN-JGFS-9sK_Eh6w.roa (hash: 4LBBNQp4gDvDBqUejc/thQ1e9DZu2ZKGjdRJpeYildA=)
28: qJ6pc4FQIOGrKblUrmzqpKhY1W8.roa (hash: h1N79r6IwikpSxLGbvCodpvdgy0jF1MGCYu94qAhjf4=)
29: rMgOJ88XbhiPYGzsRStVGI5NH64.roa (hash: 6JK6wqTEVHHzKJFjULh6/7bms/veYid22s3prarQ2wQ=)
30: sDlXdZDu1orv91IpZDPEuqp1DX0.roa (hash: TcyOoNpXI7p/qfK91VU6zu8UKYoWj+zgwXX+FpfeRKk=)
31: t9VfVoic7D0Eb12yRbnLassyYY8.roa (hash: OIvXTMlAaBLVGYWH+/8UMptxQ45gYDbOsCNpVMjE62A=)
32: tEnzcmF181z_Fz4dFzQyfZ882o4.roa (hash: RBYNG12SzCTfXGwx/F5qbQVTQCBmyDYwNw6MWUM/ecc=)
33: txBk-VXH5xe4UoDume1p4XjQxe8.roa (hash: fvggVxYxk2NuJg8YSSyrCKqxJryG0wPDwlaCqOHmZFc=)
34: uBIYg6HBl9Jf8Kf0_1APF11RXj4.roa (hash: Cy62Nntc/tzkP5N8nJbuKZSP38j9mL0EAGyc0aabhl4=)
35: vDwD98yktnvAwmcDkgoxzIt5lCc.roa (hash: 47O3EM7Fv1PyIlfL1Ust6IBoybNxBv0++K0mVFDHqdc=)
36: wTgQ6fCMDPpS81pwpnjiyHzyTpc.roa (hash: ixnoZEKtVyJai2PVSvQa52pLsUnTfY2h9ItkAule9hg=)
37: y6XyUstS_SjZUuRcmwKI2O2hK4g.roa (hash: 6KaNgtch9hdulImqbKsvBI0tlfN0LaRnEF0phbzSwYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5c:55:c7:e5:ae:18:3c:8a:c9:7e:a6:a4:ab:50:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jun 13 19:01:31 2026 GMT
Not After : Jun 14 19:01:31 2026 GMT
Subject: CN=c93ef6c59335885f45d3ed60aedd6080ebdf209c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8c:8d:98:e8:ee:83:de:80:78:35:05:37:c6:
ab:ff:2a:61:9e:37:a9:7d:a4:2a:05:c1:5b:0b:e8:
33:5e:e2:e4:cd:47:9b:ad:89:a6:a7:6d:43:d8:cc:
0d:ef:76:2c:eb:5f:bb:82:cd:ef:80:0a:76:39:c0:
2e:67:7b:41:a0:15:6a:ff:8d:d6:2c:70:bd:15:27:
bf:15:d8:93:85:3f:bf:7b:72:c9:0c:af:53:c4:d0:
bf:94:4d:ff:44:81:e4:08:be:5a:b7:5f:d8:8f:3a:
dc:d8:cb:9d:b2:60:0b:37:0c:0b:06:64:84:f3:07:
72:98:b4:f9:71:a1:23:e4:a8:29:66:2d:5d:4f:55:
f2:67:37:18:82:8e:02:98:10:25:6c:3d:07:fb:44:
70:2b:43:56:1a:21:4e:d3:bc:c3:ee:5c:e5:de:0d:
56:3f:75:e3:40:a3:8c:03:9b:f7:3d:bb:94:0f:d4:
de:ef:85:a1:7e:48:24:21:0c:eb:24:02:0b:64:2c:
0b:5b:1e:56:da:c2:17:5d:82:69:1b:95:69:09:07:
ca:bb:1d:52:65:41:6a:59:f1:83:02:21:26:69:5b:
f0:32:fd:3c:17:ad:00:aa:61:25:bc:25:23:41:ca:
f2:68:a6:05:a0:e1:2f:25:ec:6a:f9:9f:0d:e7:ca:
32:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3E:F6:C5:93:35:88:5F:45:D3:ED:60:AE:DD:60:80:EB:DF:20:9C
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a8:68:d3:56:54:da:f3:a7:9c:41:ee:c0:5b:f3:ae:a9:41:
a5:a7:bb:0b:4c:12:25:b2:08:a0:9e:2e:41:c3:4f:35:4f:c8:
35:2d:22:55:c2:98:ad:ce:cb:ee:4a:cc:47:e8:bb:d8:56:70:
94:4c:cb:fb:b1:91:6c:33:61:1e:da:05:2f:f0:b6:34:6e:97:
6c:24:3d:42:81:f4:b7:83:d5:9c:54:4a:47:99:af:c6:af:3b:
f6:ec:68:9f:de:5c:c4:9f:b6:02:da:9b:74:1e:3b:db:22:9a:
2e:a4:9a:69:8c:71:3e:bc:57:b2:ff:80:40:94:86:ed:ce:20:
67:ec:6c:de:01:70:10:e7:f9:d9:ad:b5:c2:e0:98:26:f5:e5:
53:33:f2:f0:bc:ae:93:8d:0b:1c:e3:9e:0f:e0:56:91:1e:10:
42:e6:60:34:66:f6:3e:68:47:94:ec:22:fc:eb:34:c5:82:4e:
b7:b1:c7:c2:7f:9e:e8:ed:5c:ea:e9:77:fa:2a:a9:b9:6d:4e:
62:05:da:31:e4:10:1d:58:e1:97:27:d3:0c:00:7f:18:57:6e:
be:a0:ae:46:ef:4e:3b:13:46:2d:58:4f:d1:5a:d1:d7:2a:bd:
29:18:22:de:e4:e2:c6:61:60:8e:b8:3a:7a:08:bd:b1:aa:39:
95:46:62:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:21:17 2026 by rpki-client