
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json)
Hash identifier: R7Al/6GF6uH1xoTo+vraloaQUrU97Rw4Xtz20rVzjUg=
Subject key identifier: B7:22:51:E3:CE:67:A0:70:17:77:9E:D6:D0:00:A6:D3:28:46:20:F5
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial: 019FA7BDB1F5C39093E58AFAFCA9991F4893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
Manifest number: 19EF
Signing time: Tue 28 Jul 2026 08:00:54 +0000
Manifest this update: Tue 28 Jul 2026 08:00:54 +0000
Manifest next update: Wed 29 Jul 2026 08:00:54 +0000
Files and hashes: 1: 20sKUViZ_Hjr1_tKwt6E16rEi4A.asa (hash: +8vZKz+2gviXypf2joFi3QZPabFG5GEATLlv5LqXS4o=)
2: CvSQt69yariNUKKDqC1XPhdiuj8.roa (hash: pwys1feU+wf6rJfc3msKGN9u6EyFPrysSrktRwzgGX4=)
3: Fyhcvg0fPg6HNZeGx-fuI9q3TG4.roa (hash: s3i5jOLFeKaJCCjPZix9kmPk1E24LFggTy6p8YPrOME=)
4: QOv9AtzM59S_WNU7KUIEWRfJl68.asa (hash: 6O0jKZ/+i/G9w5+oF5K0c5UTn7UqPYc3SNDvmBucH+4=)
5: _aX_04oA-sEKgu-zFqSKB5o59IU.roa (hash: vvrDSoMTojkEyhL+KDnVE26ozWnsURm+/ty33yW6e80=)
6: a4kSWXHUjeJ3UXaQ-vc8USD7130.asa (hash: lbgYBLK33JoEr+PhrlEn3no20wzVFGeWMxTDLDLfyNY=)
7: e5VirbuAOkg1PBFK0M3mtZcI84w.asa (hash: EqbpkcZPOaxJPSydnA3m+kgJNXbf/c0LEhfWDvh4rJY=)
8: etDwmKHRsmxardQ7oN51mJmZIhw.roa (hash: opNFqZKtASaNlG7rrJ6biyzhYNQY/KrhB2hbLqtKqI0=)
9: hYI8_W7KbcINcD3rIBl0TxlFsr0.asa (hash: ul9ROLDfaYD/lTgozmnX7AY2tTIU1gHVBphVJS56cV4=)
10: k7Eva3BsYTKaJgiYaLtXuPfGCXs.roa (hash: S7y3L8mFY/zmqOAsq7ao1VYi9SoF04UMS+/L5vkE7Fs=)
11: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: hpX/zGHcplpfbwvmkc8HfFIj8jZtxevCdXz6WNfnVBU=)
12: xywW8VsvtWulmUgX-o54Ju69bE8.roa (hash: 4C5SlKS6xYjsyyHEt/gap8Ho2+t7PTtjb6goXCdrV64=)
13: yPa1ORKwdYO21oPHsCqaSGK2ss8.asa (hash: rF3Bv82DUAK46dZh7JdvizZgf5EoczF43qjQleVqEKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:b1:f5:c3:90:93:e5:8a:fa:fc:a9:99:1f:48:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Validity
Not Before: Jul 28 08:00:54 2026 GMT
Not After : Jul 29 08:00:54 2026 GMT
Subject: CN=b72251e3ce67a07017779ed6d000a6d3284620f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:d7:d1:ed:e7:78:a2:f4:c3:e6:aa:e0:fd:
b3:0d:90:68:60:4b:d1:b7:7d:8b:e8:66:29:d0:8e:
48:64:10:fa:a6:4a:7d:96:23:43:a5:87:af:50:3f:
ec:61:7d:7e:84:97:7f:2c:43:07:d8:80:70:d1:5e:
d3:5f:4d:64:b6:ee:5b:c3:0c:f2:b3:ab:52:3e:1d:
3a:0e:2e:c2:6c:85:b7:b8:ca:0a:af:b0:bc:58:d6:
22:ee:ea:b4:ae:20:4b:8f:63:de:4b:65:6b:3e:03:
34:3e:b0:82:4e:32:05:09:04:2d:27:c6:2f:9d:36:
a3:bb:0d:b9:b6:84:bc:f5:6a:35:54:df:40:52:04:
9a:75:56:87:a5:ca:24:af:bf:6e:af:69:0f:80:fc:
53:13:52:fc:65:a4:61:e1:cf:13:ac:24:be:ac:95:
19:05:ff:14:46:31:9e:23:d7:88:ad:58:1f:2e:a2:
da:e1:9a:50:7a:56:d3:eb:7f:8b:8b:86:b9:44:51:
b6:ed:8a:fd:64:6f:4b:d4:af:82:e4:3d:e2:29:c0:
cc:fc:a3:a7:a4:27:de:8a:b9:4a:bd:e8:f3:38:88:
a4:5e:30:9e:5b:d5:1d:55:df:c3:ee:d8:e0:73:8b:
5f:83:fb:1c:be:d8:49:94:c6:b3:2b:26:0a:2a:4b:
49:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:22:51:E3:CE:67:A0:70:17:77:9E:D6:D0:00:A6:D3:28:46:20:F5
X509v3 Authority Key Identifier:
keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5d:20:eb:c2:88:4a:14:fb:4a:d8:75:da:4b:bc:f8:2a:82:
1c:fc:1a:24:85:2c:15:43:91:ec:71:76:0f:17:8f:dc:22:3f:
91:b4:ed:83:58:d5:5f:25:e6:49:83:ba:0a:ff:14:cb:be:ed:
b4:4f:1a:e3:49:75:5a:cc:77:fa:4b:9e:fa:be:d7:fa:fa:11:
49:cd:58:14:ef:98:d7:eb:fe:53:98:d9:ec:34:bc:90:fe:70:
a6:7a:d3:6b:0d:c0:aa:ef:fc:7f:36:9d:e8:c5:e6:7b:93:b6:
10:3f:32:0d:21:8b:58:59:89:c7:97:82:a2:25:0c:7b:6d:17:
7c:e0:8c:a2:5e:c4:f3:a9:aa:66:18:13:6a:c2:a6:bc:00:ac:
e3:e6:a8:45:aa:94:1c:61:18:b8:e8:b9:68:a8:22:dc:fc:aa:
c0:c5:94:4e:16:3c:c4:99:9a:79:3b:b4:5f:2b:da:5f:4d:f2:
5f:30:9e:d0:88:c6:81:1d:ad:fb:6d:99:7a:62:d2:6d:c0:cd:
f6:73:ec:9c:b3:31:02:5d:43:99:76:26:40:62:8b:58:74:7f:
e0:a6:e9:78:54:c2:e5:31:91:91:f7:b0:9b:10:3e:e4:a8:05:
04:47:8b:ae:ce:9a:90:cf:60:8e:02:36:b5:eb:6e:e3:4e:6e:
0e:35:17:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:25 2026 by rpki-client