
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
File: L6FqsGAgBndApMH7R6kSYi8dByI.mft (raw, json)
Hash identifier: ISllmOyz1uRTnVQ4lKHWJR8wWTsQXvO1eDjsgf0Q0Hk=
Subject key identifier: B3:E9:EC:7E:6E:30:5E:AE:C0:2A:E4:31:88:8A:9D:B5:40:5F:58:12
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019FA90786FC284AA7358AA6BE90F9CA0FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
Manifest number: 1A3F
Signing time: Tue 28 Jul 2026 14:01:10 +0000
Manifest this update: Tue 28 Jul 2026 14:01:10 +0000
Manifest next update: Wed 29 Jul 2026 14:01:10 +0000
Files and hashes: 1: 06fSg1kB8ckHlCpjtqtFvEEoGmo.roa (hash: f48NpMpstUXIPO7HPVODVDToQ8B0NiDFbk8U3q4Yolw=)
2: 1zTKaDP4-Zj9mUt7-S5YAcY_mVo.roa (hash: 5+5yfPGg5lDhghBfx+dnbTS3tC9lex/WG7QMbZj26A4=)
3: 3Qr0L0RQ_Z8R5Cc74oenvNgwB5I.roa (hash: pkT85WzVKfS8+6maKuMZ3/z/S227uMf4I4OAK0s81z8=)
4: 71fh7xRTZMQEFeADtvBms8Jxriw.roa (hash: TUhapUQZ7I+Jwf6YXi6D4YZvbKOEtBxwBuVU+O4dqaU=)
5: 7XKrY6sRi0TOpYVIC72L4eR2QMQ.roa (hash: dRjz/HPxAbIEZD8TfYo3oBDmUxS8I/PLZra+7sLx66k=)
6: DEqgDw1OjuvCUcoY_GFoXdYUL-g.roa (hash: uaVIfBigKYn9jPBacBnYHFMS2xbXYfQ5wT7j6FjYz1s=)
7: IEYsZgA5S8VfmxdDgbohhLTNNns.roa (hash: iEIpm0ezjdj8b3/qEAPdEkQRFU/FlcYxVmHq5++f9/Q=)
8: ITJ_4YK0o5n4s0S4B56m9EJ0ogg.roa (hash: kcpE8+HMiQBohKY0fa+TOjXFBG4SK95c0ErHWF7t+v8=)
9: J-fPqsN-bTywutCgBgm0oMsMZn4.roa (hash: GwWRnUTMSKlctTV12vVbv4ww0CbgnMjaJS61PVU8Qu8=)
10: KH7cexp6-l1q-hMz0XztCASAh_0.roa (hash: n04fnnbHSBbrosj8SpMmI2CoVRjTOGfNu9TSTWPU2ig=)
11: L6FqsGAgBndApMH7R6kSYi8dByI.crl (hash: dhJ7Jim57JOHkio8JL7WHAhS7UZNeUTgNj5W/9NtlLM=)
12: LY1fBMtbeXqoPs6JAb2Fp7GAya0.roa (hash: Qr2vedHCJgdf38v/J9aAhF6BgY1+sX1GDop+VSlJ8A0=)
13: QV6aNnm8UURvRuqfgI_kdEPt9EA.roa (hash: qGBvHUvU86fHU5nWskcmW6tvE6Bk4I7Gn2L3djwCsps=)
14: Touy1G_QPr8UYTeYYQtRpqJk_5g.roa (hash: KcWcsKPmd8sllWoi5Lk5MB90LqzJor5vq1GKXnj4Hx8=)
15: a4eZtsxSoUsQLsQJUSldo0nW-QE.roa (hash: qETNMjbbv6m9d693TJqiz1wFLU2GtcYO5aUb7bDUTdw=)
16: iFHV-4_PQZAPSbyP-_eKAC5sXQc.roa (hash: YPZedpyXjCCm6shSV1jcGheCVvP+CziI5XLPjJa9XgY=)
17: ikqYwXx4ATF9s6KHl2PLmUXCWlM.roa (hash: B0bQ9MUv2KBsMgq8JKkZLtmuuK5t3EQXBliyDo6a9w8=)
18: inyGcps89W0KJ12qgHdULfVbny0.roa (hash: u8DcCG0CcvnANGvMJRgwaWdMSpZ52dquk6zoYwmbVJ8=)
19: jRWtyYMGTuWg2E6keQtB_dgm3p0.roa (hash: iF2FFz6WfUZwQrceNhMGsrL5i0NWuW8PDnRcyn9YNrY=)
20: mtDwEEkyMUTFQsVD2xWiMsclsNg.roa (hash: otI/kdHEMKqs117vG+0L9MMD5llSGZlMnN8DxtGe3YU=)
21: otaASQB8GGspCrnWLO5XzeVcDtk.roa (hash: oDtuQThG0LQMGhrXFrB1ol0UNfbRDq15W0nys4vTqB4=)
22: r3uWhWQfYQ-7I96xPQgZcGOfgm8.roa (hash: 3XA1JsyB/6+JdqSvjZhGBEJokLbWA2Jq/KVD4Zxhe/g=)
23: vnZI4Od1GtuWmbcfTmasYrA2CVc.roa (hash: hJx0ALHEmU6KnL133ic1OuF6Y0ua/ikvZuJIZHg4VQo=)
24: wnrT0lCYLHW2wtAS-UsPdzbCuE4.roa (hash: BRm89z/l+kKbdn26JzqMifrc7bDhOG/Y4poCpOQIQ3U=)
25: yUTmeS-NkDfKbmdfTdkhxc4774c.roa (hash: agdIY8JzBTM9yK+Bw0ruFZ9HCc1JBNpz+/JAwoXldN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:86:fc:28:4a:a7:35:8a:a6:be:90:f9:ca:0f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jul 28 14:01:10 2026 GMT
Not After : Jul 29 14:01:10 2026 GMT
Subject: CN=b3e9ec7e6e305eaec02ae431888a9db5405f5812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:fc:a4:ea:17:76:30:43:90:83:f4:86:e1:
23:3a:f9:e4:48:65:78:2b:7e:32:28:8a:4f:81:ad:
a8:15:af:06:f0:fb:bb:93:f1:35:c1:cc:29:6b:63:
d7:59:53:23:f1:96:f0:9c:88:fa:2b:88:2c:70:bf:
0f:a2:41:6f:f4:98:f9:3a:6e:3c:c5:87:ef:ec:59:
e3:03:bc:f6:ad:1d:bb:67:8f:b5:ab:2f:ba:ac:3c:
24:8a:40:d9:33:a9:37:53:71:5f:87:78:2d:a1:91:
6a:e5:9e:35:f0:f8:fa:bb:30:a6:b9:7c:3d:f4:37:
19:fa:16:bd:e3:2e:6a:24:9e:2a:35:08:da:64:0e:
ec:a7:1a:df:e1:7a:f2:fc:45:91:71:2a:27:f5:cc:
5d:2d:86:58:21:52:9a:4e:62:36:a4:94:6f:d3:9b:
96:73:fd:80:29:07:87:d5:97:da:61:f3:ed:a2:6d:
b5:5d:a4:a8:6d:59:19:d0:1c:c1:1c:c7:d4:7d:dd:
5f:c4:5c:f5:eb:c7:70:ac:9b:0a:91:42:2a:1e:14:
79:27:01:f4:1d:6c:04:c2:02:77:0b:2a:b8:65:2f:
db:0e:12:79:45:ff:8d:8f:bd:b5:bc:87:71:31:97:
31:1a:48:10:f6:b9:94:a3:38:20:56:2a:61:48:cf:
55:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E9:EC:7E:6E:30:5E:AE:C0:2A:E4:31:88:8A:9D:B5:40:5F:58:12
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:79:92:7b:2a:04:83:b3:91:cf:30:ca:eb:17:af:05:05:7b:
51:ea:2e:c1:7f:e2:59:6f:7c:51:b1:89:63:b6:e5:1f:28:d3:
d8:d4:44:5d:94:c5:d2:64:40:c9:23:4b:cc:14:3d:97:2d:01:
ce:4d:33:ef:b7:23:57:9c:a8:49:0f:52:16:24:8d:6a:a4:5a:
cc:35:6f:03:2c:ab:eb:fc:77:9e:0c:36:a1:5a:0f:fc:f6:8f:
23:4e:35:a4:ad:06:5e:b9:3f:f2:42:68:bc:31:b8:45:81:7d:
ed:4b:78:e6:23:65:64:de:62:2e:16:ad:f5:cb:88:33:71:89:
1c:5e:fc:dc:40:6f:c3:59:f4:b8:ce:d4:af:c2:05:3d:e1:bd:
1f:fc:f1:fa:ad:2b:1f:d7:2d:3a:45:0b:e7:7c:44:23:01:69:
7f:e3:bc:83:23:7e:35:aa:e6:9a:48:c3:31:25:f0:0f:f4:7b:
44:9b:30:4f:31:76:eb:1a:56:e6:9c:c9:20:8b:b2:4c:6d:58:
ad:67:1b:f3:aa:73:00:34:9d:25:a0:f0:77:30:dc:d7:9a:1d:
62:67:cb:56:90:e9:87:cb:fb:e8:27:29:ba:d9:71:f0:f1:b3:
93:45:06:fd:4d:2b:cf:09:bd:69:b7:22:82:92:df:ae:c4:58:
38:d8:7a:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pB4b8KEqnNYqmvpD5yg/sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjYwNzI4MTQwMTEwWhcNMjYwNzI5MTQwMTEwWjAzMTEwLwYDVQQD
EyhiM2U5ZWM3ZTZlMzA1ZWFlYzAyYWU0MzE4ODhhOWRiNTQwNWY1ODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ/8pOoXdjBDkIP0huEjOvnkSGV4
K34yKIpPga2oFa8G8Pu7k/E1wcwpa2PXWVMj8ZbwnIj6K4gscL8PokFv9Jj5Om48
xYfv7FnjA7z2rR27Z4+1qy+6rDwkikDZM6k3U3Ffh3gtoZFq5Z418Pj6uzCmuXw9
9DcZ+ha94y5qJJ4qNQjaZA7spxrf4Xry/EWRcSon9cxdLYZYIVKaTmI2pJRv05uW
c/2AKQeH1ZfaYfPtom21XaSobVkZ0BzBHMfUfd1fxFz168dwrJsKkUIqHhR5JwH0
HWwEwgJ3Cyq4ZS/bDhJ5Rf+Nj721vIdxMZcxGkgQ9rmUozggViphSM9VUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPp7H5uMF6uwCrkMYiKnbVAX1gSMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3mSeyoE
g7ORzzDK6xevBQV7UeouwX/iWW98UbGJY7blHyjT2NREXZTF0mRAySNLzBQ9ly0B
zk0z77cjV5yoSQ9SFiSNaqRazDVvAyyr6/x3ngw2oVoP/PaPI041pK0GXrk/8kJo
vDG4RYF97Ut45iNlZN5iLhat9cuIM3GJHF783EBvw1n0uM7Ur8IFPeG9H/zx+q0r
H9ctOkUL53xEIwFpf+O8gyN+NarmmkjDMSXwD/R7RJswTzF26xpW5pzJIIuyTG1Y
rWcb86pzADSdJaDwdzDc15odYmfLVpDph8v76Ccputlx8PGzk0UG/U0rzwm9abci
gpLfrsRYONh6Xg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:23:20 2026 by rpki-client