
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json)
Hash identifier: ZbACbx7pXcJJZ3IQ5GLMcxJcWiAUG7s9oH0DdIWfYos=
Subject key identifier: F1:39:60:AD:0B:B1:4B:BB:6A:21:47:06:B7:33:E3:7E:EB:4C:F1:BF
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial: 019EBFC8255BABB92EF75279CB70B44ECC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
Manifest number: 196E
Signing time: Sat 13 Jun 2026 07:00:25 +0000
Manifest this update: Sat 13 Jun 2026 07:00:25 +0000
Manifest next update: Sun 14 Jun 2026 07:00:25 +0000
Files and hashes: 1: 0uXHR2UhfdGKOw0-7UVbnfQAkig.roa (hash: Q9NPQXWKGQHVWf1Z/Oo69HPn4r2sOJMpx+RqofXuMKw=)
2: 1-jd9OcIMJ3MRmOrCPnxeklbAz-A.roa (hash: 4BT08aUJAH5XA8v2nUCY0ZzKbtYT4OuVlGjXaC8L51w=)
3: 3Hr9NkohHp-0dQh6eby1rDTTvtg.roa (hash: 31UMAD/tu8ErCfftbrPF1UHKdFAEb8fyigVMsh1vdjY=)
4: 50_RqUM3HM1DTyeXhDBU-vljMns.roa (hash: jLfna8CaKrQXjGhh5I5+7KDotyKYCpxYaW8lSXxCxYI=)
5: 8VffJRIzchhCe8rm2mAWoMqOrUw.roa (hash: ZlMVYfC0qcWAgUxCif3zol/JEVTmk18XMebsrNTaMMw=)
6: FXkLPO07K0oGiHX6N80HucLUmQk.roa (hash: pJpxLX/J3IKaGvymzNo/eP+WscosiFBoX/gscobrkA8=)
7: SviK5uP3P_320woFz7MJ74gfE54.roa (hash: cdu27i/9dSf6ELTxYPRMzucVjIzIdkrFCjEQ+8cX0Hc=)
8: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: Je8SSn9CKQjWL/O2n0YbZzmgvbvPydQdt3vwKsv9ts0=)
9: _yMstHwq62YtmKZbMo5Nl7N0BSY.roa (hash: fA5EOJqyYeCeRJjBOFQnKbcHaakgxJGZzArfMKvJW7M=)
10: mNIa-kBl--UJ4M4sTdW_ScZtluQ.roa (hash: APBGVJ5X0w1VXGqUTI7O+M7iTb0F7m1Cbhdbmsncrvg=)
11: vUnigMLcxEHFFYzam4W0EFuYfF0.roa (hash: qgrF46htEQCa+s16GhFv54cTmD+21CsD7rkwyl8dr1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:25:5b:ab:b9:2e:f7:52:79:cb:70:b4:4e:cc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Validity
Not Before: Jun 13 07:00:25 2026 GMT
Not After : Jun 14 07:00:25 2026 GMT
Subject: CN=f13960ad0bb14bbb6a214706b733e37eeb4cf1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ba:b3:ff:b9:10:97:ed:d8:a9:1b:13:6a:05:
2d:82:f9:ac:f1:fe:52:0f:1c:56:e3:20:89:0e:3b:
3c:e7:f9:85:da:47:c8:6c:6a:d0:f0:0d:f0:f7:a1:
53:13:42:dd:9f:53:6a:16:93:0c:0b:43:92:da:8d:
9e:9e:53:36:89:39:dc:c2:ba:90:9f:15:ae:03:43:
b6:82:6a:cd:09:99:58:3b:c0:ee:11:d1:fd:85:7c:
9f:aa:45:88:9e:d4:ae:2e:4f:44:50:6b:8d:be:d6:
d0:c6:eb:e2:bd:83:66:db:b4:34:aa:41:c4:28:43:
86:63:75:3f:54:24:15:8c:e4:b8:bb:9f:99:9f:e8:
35:79:99:ca:96:f0:27:94:1f:6b:7f:22:3c:7a:ef:
15:e3:fc:90:e8:9d:20:46:e8:c9:71:61:21:95:1b:
e1:c6:58:5e:fa:e8:7d:88:83:e9:02:88:fb:b8:a4:
db:69:0b:f6:4e:65:2e:ae:de:07:00:d6:0c:57:71:
3f:46:b8:40:7b:bf:2c:3a:ad:f2:04:be:e9:25:7e:
58:c1:d7:e8:c2:6f:18:34:8e:0c:53:c1:71:ed:56:
91:a1:b3:36:77:7e:5c:f7:bc:5b:12:32:1e:ac:47:
8e:3d:05:96:5e:00:cc:a6:86:4f:95:15:e2:68:f4:
d7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:39:60:AD:0B:B1:4B:BB:6A:21:47:06:B7:33:E3:7E:EB:4C:F1:BF
X509v3 Authority Key Identifier:
keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:82:76:0e:7d:b8:14:b9:28:f6:d9:28:b1:80:c5:8d:b7:48:
5e:be:bd:98:e3:19:86:2c:4a:41:e6:ee:bc:26:fb:21:80:21:
6c:3e:42:d6:6e:02:e8:f1:56:a4:1b:b3:d1:71:52:b9:06:36:
f3:27:0c:93:1b:71:29:60:85:04:7a:1c:db:a9:77:10:9d:55:
70:43:69:d6:aa:a0:40:3b:3d:ff:80:07:9d:47:49:ea:6b:9f:
d8:75:c6:cd:30:ff:9a:87:35:6f:eb:36:6a:89:1b:53:fa:05:
e9:0a:00:16:fe:e9:cb:f7:61:61:27:f6:f8:5f:0f:b2:7e:99:
f6:91:8c:4b:8b:43:78:15:46:23:fc:6a:f5:14:a1:07:48:91:
ec:8a:29:81:61:b5:ad:1e:54:ad:6e:3d:b2:5c:d9:1a:49:8c:
97:16:a2:84:20:d1:d5:33:ec:9e:63:f4:95:e7:81:f1:c0:69:
3a:25:36:ea:88:72:90:0d:48:dc:0d:62:bb:92:f6:4b:6b:9b:
f1:8a:34:de:0e:3d:aa:75:d0:37:c7:c9:50:fb:de:83:9e:bc:
2f:b2:0e:a4:56:b0:8a:96:41:dd:05:47:a9:a8:df:a0:db:4c:
dc:ce:aa:4a:62:10:b7:1c:c9:33:e8:e2:0e:65:af:55:4b:14:
55:a4:d6:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yCVbq7ku91J5y3C0TsyDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl
NWY0YjkwHhcNMjYwNjEzMDcwMDI1WhcNMjYwNjE0MDcwMDI1WjAzMTEwLwYDVQQD
EyhmMTM5NjBhZDBiYjE0YmJiNmEyMTQ3MDZiNzMzZTM3ZWViNGNmMWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bqz/7kQl+3YqRsTagUtgvms8f5S
DxxW4yCJDjs85/mF2kfIbGrQ8A3w96FTE0Ldn1NqFpMMC0OS2o2enlM2iTncwrqQ
nxWuA0O2gmrNCZlYO8DuEdH9hXyfqkWIntSuLk9EUGuNvtbQxuvivYNm27Q0qkHE
KEOGY3U/VCQVjOS4u5+Zn+g1eZnKlvAnlB9rfyI8eu8V4/yQ6J0gRujJcWEhlRvh
xlhe+uh9iIPpAoj7uKTbaQv2TmUurt4HANYMV3E/RrhAe78sOq3yBL7pJX5Ywdfo
wm8YNI4MU8Fx7VaRobM2d35c97xbEjIerEeOPQWWXgDMpoZPlRXiaPTXlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPE5YK0LsUu7aiFHBrcz437rTPG/MB8GA1UdIwQY
MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt
NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh
LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4J2Dn24
FLko9tkosYDFjbdIXr69mOMZhixKQebuvCb7IYAhbD5C1m4C6PFWpBuz0XFSuQY2
8ycMkxtxKWCFBHoc26l3EJ1VcENp1qqgQDs9/4AHnUdJ6muf2HXGzTD/moc1b+s2
aokbU/oF6QoAFv7py/dhYSf2+F8Psn6Z9pGMS4tDeBVGI/xq9RShB0iR7IopgWG1
rR5UrW49slzZGkmMlxaihCDR1TPsnmP0leeB8cBpOiU26ohykA1I3A1iu5L2S2ub
8Yo03g49qnXQN8fJUPveg568L7IOpFawipZB3QVHqajfoNtM3M6qSmIQtxzJM+ji
DmWvVUsUVaTWig==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:13:54 2026 by rpki-client