
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
File: M8NCwGqsw1nTlDn_WN76jqGHV0g.mft (raw, json)
Hash identifier: lrkkGhV4ocfpU4e9bRda53SWZSFU2zAaOXg+auXzTNs=
Subject key identifier: 87:01:26:C2:85:32:95:F3:35:A0:E3:96:76:CA:0E:34:7E:09:03:83
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 019FACACDA7EDEA01DB78958593845915520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 07:00:36 +0000
Manifest this update: Wed 29 Jul 2026 07:00:36 +0000
Manifest next update: Thu 30 Jul 2026 07:00:36 +0000
Files and hashes: 1: 0_H--D3ld_V5A2GDwFkKX4GOiA0.roa (hash: 4e5kO9YfPo607NKs0GfVmGK8Ay03F7orhMQubGrK5s8=)
2: 2Y22JjtWrl0_nviPCh47UcoiEMc.roa (hash: MjixCwl1roku3r8M7cAmmfjxaUIrhcvJpiUdNlV6IQQ=)
3: 7aJymM8-A-Vzxrith_gpYUCnxLA.roa (hash: yavsVrmsFDM2twygwL9ROfhNDdkXtjYh0veEc5aPL6U=)
4: BREu-oLiWRVnvmr0OZpze-1yZho.roa (hash: JOSLUiFQMXinZ2s3xJFw5vOALrZZO+Y0VQuZomqNcNc=)
5: KQsPApaYWV1_80rHUTYo4kduGEc.roa (hash: DMlh9LVsGQgoH2sC6mgiD6McwaNhSBUcv3JC9I342EY=)
6: M8NCwGqsw1nTlDn_WN76jqGHV0g.crl (hash: 6aE0gA/puCB5EH+Uy9qVnEFuq7/1mQt8aqF1/+otTKE=)
7: QWYP1a7mE-901Npm0STCw-0_494.roa (hash: GGXXSRYOhg9nYn3L4Ohy/bvCK7SIobkN33noxERxNSE=)
8: TTEzQtE5d70mBmiMli4rrHXXguQ.roa (hash: xIxbskYOAuc9Yjyt/8RKTk7K32KNqi0KQcR/yqDrqdI=)
9: XiniKmHk48PTd4AWdTNpS7pWYPM.roa (hash: LdHpQkrTcb3/m2EigJdifn4oDDnwzMObaFnPm4GQZsE=)
10: ajM6u9AhobNFWsjqV0zszbZBQgg.roa (hash: 9dpjav4k95AK45D3gY5gAwzQc5Jmp0J5EfW5NA6MQrY=)
11: dal6AFPAMOKunkfF7hTY8Cuz5HU.roa (hash: IVF4Tz8JdO1RxYBDwDE4cvUkOAHOkcCD98baar1MrRo=)
12: hRwQ4mV8u9tsYeBBJi9cjl-qxEg.roa (hash: Z+XgNcTxGhoujnKCI9mZu3tfZCPpFoVHO4a9tPmkGVA=)
13: m7yZ_UyERPPI7rtLGNSBX9Jm9bw.roa (hash: ykcmm9r12Ob1/PzXbUDHvDBzZdTDZhIzOR7w4XuLSwc=)
14: qxewd6X7cZwHTA-zQMlA_OAvlN8.roa (hash: Ry7YnXFLSUjxQaaprtnh0Xvr7Lu/H9g4ex/4yimbRx4=)
15: shE5nirJjfzwtVvRNs6B8132Y90.roa (hash: bZPp9AYR6VCS07rIaJOgsQumohQ23Ohhw0oW9Q96CQ4=)
16: uRrZsstrzGEOJvLMKb6O233tS-U.roa (hash: hfakJlnSmscUlq1SwhM8hNCbJeeub/2zpsFlue2e450=)
17: wuPeAwGhCGGyy1vUlZnoXQ_te9w.roa (hash: Ya4gfqovf3JM8yFavds8OzJvokLnz9/3YHuh2owqYdI=)
18: y-LHl9JCf1vCgH9ww0oXT09BT3E.roa (hash: U2dDyow3uUPlXZ81c884FwuRrB1qQId+nf/6dQa9SLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:da:7e:de:a0:1d:b7:89:58:59:38:45:91:55:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jul 29 07:00:36 2026 GMT
Not After : Jul 30 07:00:36 2026 GMT
Subject: CN=870126c2853295f335a0e39676ca0e347e090383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:16:19:c5:5e:d7:fd:b2:75:0c:fc:ba:13:
ae:2f:56:cd:93:8e:dc:5b:10:d6:ad:28:28:94:78:
a3:d7:39:8d:40:7f:03:13:ae:b2:b8:09:69:ff:b1:
7a:e8:59:dd:f9:db:01:49:51:23:eb:e4:76:de:f7:
24:95:63:c2:48:5d:2f:c1:6e:6a:8e:8b:88:e6:35:
54:24:61:8d:f5:04:26:5f:0c:18:ff:6e:15:fd:f2:
d4:28:96:c7:bb:ad:ee:00:49:1e:c2:4c:6f:99:90:
b3:c8:ea:63:e0:83:65:43:c5:80:bc:b9:d7:a0:12:
41:16:7e:f7:24:bf:20:eb:d7:96:0f:f0:d7:27:de:
3f:44:7a:5d:89:c9:89:0b:fa:3b:e0:03:61:7c:1c:
ab:9f:9f:80:5b:dc:56:c5:8b:2a:d9:69:7c:5f:da:
89:67:78:9f:5c:5b:e0:3f:bf:07:50:3e:d0:6c:b7:
51:df:d8:25:c4:c9:d9:9c:00:50:b6:ee:00:bd:18:
97:43:4c:36:d9:02:80:15:3d:cb:85:17:6c:7c:de:
27:07:f8:84:09:41:61:bb:8f:ac:0e:b3:75:a3:59:
80:44:33:c2:25:55:61:2c:38:ba:e1:4c:cd:ab:3b:
ba:c9:97:54:ac:bb:f8:c9:bd:f2:27:d2:e5:b3:ef:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:01:26:C2:85:32:95:F3:35:A0:E3:96:76:CA:0E:34:7E:09:03:83
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6f:82:35:88:c3:65:bb:eb:24:97:12:a8:3d:a0:cf:96:5d:
2a:58:d3:c0:e8:cb:95:bf:d4:0c:1a:95:ac:d5:b7:c0:6c:5e:
83:4e:ca:11:12:1d:a9:ea:ae:77:67:a9:73:b1:93:c1:0b:e0:
f0:d9:36:09:c0:a4:0c:3e:93:e3:53:2d:ea:0b:76:f5:27:2f:
53:82:98:25:05:d9:15:22:33:9c:51:e9:dc:b3:b4:ca:8c:5f:
a2:14:39:a2:2c:94:28:45:e0:e7:7e:fe:6c:99:17:25:10:8b:
47:6a:ad:7c:b0:98:f1:e0:fa:f4:ec:00:c2:fd:90:ad:bd:5c:
8d:b7:5d:4f:3d:86:93:55:c5:81:ba:e7:5e:82:9e:5d:d5:c3:
dc:e5:62:7d:17:42:ea:6c:7a:1f:a9:06:e0:d0:3d:84:de:c1:
24:ad:7c:2a:f8:2f:c7:89:5e:80:9a:b6:78:01:4d:79:86:b4:
0f:73:fa:43:ab:b2:59:59:c8:38:69:f9:ea:31:21:cc:3c:68:
45:ed:08:dc:0e:0d:c5:17:db:c9:c6:ef:07:c1:87:a4:4b:c0:
0c:78:8e:4c:eb:db:80:04:42:cf:17:79:23:3b:f5:5d:b7:f4:
0f:19:37:f1:35:7d:e9:32:b8:09:7c:35:53:a0:f7:bb:38:70:
2e:05:a8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:33:14 2026 by rpki-client