
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json)
Hash identifier: /7J4hzRDvM4n/eFipP526aCU/pRybCCaDmElFMBpGkQ=
Subject key identifier: A5:5A:F5:AB:E9:60:A5:06:A7:37:C5:8B:FA:FE:1E:D0:60:C3:E3:92
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 019EBE111A90C5182ACCF829D681B88BE44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
Manifest number: 19B5
Signing time: Fri 12 Jun 2026 23:00:52 +0000
Manifest this update: Fri 12 Jun 2026 23:00:52 +0000
Manifest next update: Sat 13 Jun 2026 23:00:52 +0000
Files and hashes: 1: 3_yk5eFrwBov3U-c2HIugxbMWSI.roa (hash: kKYQPtwtsyFnBnK/TTMNwaIGIt9OfuH8gl7hmRir+s0=)
2: 5aufIPquq3w8czdEJb_x03ID0ok.roa (hash: SXHv0uNnbQMrAAz38TkQXV7mhkcxZQRjdTnk2ZFMJ+Q=)
3: 6NnumjbLaK5uH21Kvrb7OjjLMWI.roa (hash: 7pnfS7LcH0iQhlqpTMUeGOkYaMziCcKZ9vKU4S2fblw=)
4: C5KHI6RHNe-c2_yE7mE0xFRL3gk.roa (hash: +jtxc9DRUocKwAVf35hRGVq2koZLjGVbE1XT/GiZZ2w=)
5: FOMPy_BK9Fi89Du1DiZYEnZuYqY.roa (hash: cvZrm+ar43YelQ09ZwBvqrLgjuizfADCJwzl9al2n74=)
6: OT8ciThviWG76oS0x4VT1DU7_CM.roa (hash: z/3tt6KD2m+nhRRFPABZHX2/tqaQ7t/vcbTbJ5OkeGs=)
7: RaSDCVs_3yb1Ag2Siqma7OPDTfI.roa (hash: 1BDwjFvUC8jAom6YokpKMPw9vBJY33AEAijvzVkLCbY=)
8: Y7bbNd_D_GJxw7w73h3QtuIaUD0.roa (hash: 6H7OQcEN2pqdM3pakr5EUmL8sOX3gH9g5VYKISR0rPs=)
9: _JStqxohmn4P46Jzv1xfqnIG_sQ.roa (hash: yg2AC+9uSmhpqVYsI3pa8EbjhOZNSYHEU2+Rij7qWjo=)
10: _kSC6SxEhsOLshYqTVwsSFaNbLI.roa (hash: KB6xLUsnETAFSWCWhqb4kG0B7HnLwgn6REmfOJuSowg=)
11: bIbo_daevEia3FzSMEis2R2yTQE.roa (hash: 2f8dvTsv4PE91HZTf97I67YVmPlzEU+5RlZeN9O2YSM=)
12: dWDpJgjgHWUUxlAFcGw9oho9DCA.roa (hash: EeKrlvmSYyhLjmugOgYr/BAu9l1QdnUK48FOOPpwoHE=)
13: ixD-Arj77LHgfX3zc7lJeNIlCF0.roa (hash: IZQY7H0KoOl6mudSH5mbC7Fo+cS244qdxxA31tTlbtI=)
14: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: jnPr/KmB/axo22Kw0ROTRIm3JMcJgFJauqUIc3jX0zI=)
15: qutDbHBwHvwdi5EGALlPGyrMVYQ.roa (hash: cMdSXzsofITh70yCwGq+Cbopm8wIcWBaikFgYr1Fwsg=)
16: viXkXLZxJ-KrBDTHEU9eV2JpXfc.roa (hash: wxGAEO+n9Vh6k1iK9Pba4O/c6CbkZthcZ5GK3ng4+Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:11:1a:90:c5:18:2a:cc:f8:29:d6:81:b8:8b:e4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jun 12 23:00:52 2026 GMT
Not After : Jun 13 23:00:52 2026 GMT
Subject: CN=a55af5abe960a506a737c58bfafe1ed060c3e392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:1e:5c:f9:35:38:30:a8:80:21:14:5d:4b:
ec:5a:96:fd:3c:62:76:d0:af:48:35:a3:c9:1a:23:
14:62:50:f2:d4:b0:0c:37:b1:08:d1:51:6c:73:41:
94:dd:bc:8a:39:f2:f7:93:be:c8:98:fc:ac:68:0f:
8d:ab:00:a4:9b:ea:53:de:24:fc:3e:b9:a2:bd:f1:
bd:4f:d7:2e:b7:ae:2c:b6:69:7b:fa:fc:6d:4a:91:
a8:7d:ba:62:82:26:69:13:c9:cc:b2:77:7a:83:ca:
78:ea:2c:90:38:c2:62:d1:55:c1:74:d6:3b:ae:77:
95:57:1e:54:6b:4f:18:51:7e:d7:6a:2b:e2:d8:fe:
8e:6c:3c:63:98:fb:95:fb:32:d6:3d:3c:e4:ff:43:
70:62:eb:d8:be:66:a7:cc:5a:46:f1:7e:df:59:ea:
18:df:30:27:91:0d:26:48:f5:b7:2f:b4:7c:cd:fe:
49:a5:e5:ea:7b:32:fe:54:70:d2:7d:a6:d6:9f:b1:
7b:e0:35:8f:a4:e0:74:a6:ef:90:44:23:af:2f:0a:
75:5a:cd:8d:8a:c8:96:af:b2:78:19:6f:4a:04:af:
31:9f:6e:7f:0f:d4:5c:7c:cc:ae:88:5d:07:00:f7:
93:a3:84:4c:cd:1f:06:27:b5:af:a7:aa:d4:b9:0a:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5A:F5:AB:E9:60:A5:06:A7:37:C5:8B:FA:FE:1E:D0:60:C3:E3:92
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4e:69:ec:b8:db:51:ff:26:74:95:57:ce:57:f5:8a:5b:f8:
73:e6:56:af:37:b0:3a:27:2e:f9:9a:af:a0:1f:e2:fb:34:ed:
cc:8c:b5:46:e5:1b:d3:dc:69:51:ad:78:3b:bc:f3:8b:9f:a1:
ba:de:26:04:88:0d:82:21:87:02:36:33:72:c1:84:bd:2d:87:
94:69:4b:05:06:28:66:d0:1e:50:d6:31:31:74:fc:24:5e:29:
7b:8a:64:f0:6b:2b:3b:ca:d3:44:d2:a5:67:53:95:6e:70:de:
b1:84:23:a6:d1:d0:54:6d:84:7e:16:6f:a9:73:65:97:7f:b9:
19:cc:c5:2b:de:55:c4:21:7d:41:79:98:c0:50:0a:70:a9:cb:
5c:a5:6f:e7:69:31:eb:b1:51:ee:1b:d9:4a:d6:bb:5a:ae:26:
58:bb:ce:9d:78:66:d4:f3:35:70:60:88:87:26:3f:7b:53:5d:
1b:a8:c8:0a:56:99:ea:ab:a4:5e:29:4c:0c:fe:e2:62:16:d3:
8e:82:75:58:91:25:ee:7f:0d:ed:6f:1e:26:be:0c:d0:07:04:
68:d5:9d:e6:51:f5:79:d1:a0:8c:84:89:75:c7:b1:90:61:ab:
4e:b1:05:02:e1:ea:39:4b:47:fc:a0:ef:98:a4:27:ff:6e:83:
dc:b1:e7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:40:47 2026 by rpki-client