
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json)
Hash identifier: WlsfgN3j4Dg37z9lNZNxbiAGRc1ofH17GkVL8NFxwOs=
Subject key identifier: 81:D1:30:31:59:79:5C:17:9B:5D:2B:F4:8C:97:08:77:BF:23:CA:43
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 019EBE1117EB986D060A2DDE3028257F4402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
Manifest number: 1966
Signing time: Fri 12 Jun 2026 23:00:51 +0000
Manifest this update: Fri 12 Jun 2026 23:00:51 +0000
Manifest next update: Sat 13 Jun 2026 23:00:51 +0000
Files and hashes: 1: 5lFyIZmBLBFDx76RfuZHevsHQQY.roa (hash: PI10EPnFAgNZeRBfLyN6vfxKBB4r+mmccm1SKvgO9H0=)
2: 8JXNaaQmDQHdM4yP_RNeiswPEDI.roa (hash: UUO1y8o89Fboq48v1C/MZYuzKEwlodMmFc6P3ytbtj4=)
3: F1XFKolR75CvzOCyFlTtMYXp3UA.roa (hash: 1NsFIv/Vqxyf17zBRZ7ykgjIIYfbwgtJjmnNI1bztF0=)
4: Ho8BmWtRsGIfoh9TadeITydo350.roa (hash: jhic1+8GxEt2CK46n93QnO3HxEVdv0LVkgGPn/QSDf0=)
5: NDEJ4OPh2jQQg5h1HdKinOuNm1g.roa (hash: 6YV/mvu0IZaB1NRM8e6QdrWu4qWaOce8H7G5lo4LpOc=)
6: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: Jf91jLl6nhLPmCp+Jq2w0AuuRMbfAFqFpOVm2sC2cRw=)
7: Tj4Mcwc_96ZTjJYw-9rKbpG4AXA.roa (hash: 6X5APSqbz1P2mkb03h8c2CZF8YBdY33egLhUsQ1Fh0E=)
8: VlCsH-gKeuLV89RCvfubppUzoBM.roa (hash: E6tZ0jd2kOODThTzIfCZg56DVUHPrBwKWicp2pqqUq8=)
9: WLquCazhAB0ScMP5a1mkOMpQjSk.roa (hash: X6EOl+E5HOgYEVAmBJUO3eMgT+pMlGAkOYSNqnB4rac=)
10: Z7cr1HbCrsDtXUyxT8SJLiqzP6o.roa (hash: xU544IyvXcLXM7e3JvHPAxxk8EzCmMrxrlsPcRWgF9s=)
11: _Sp9nWnMGENvs_5RlKIg522yEo0.roa (hash: 5BiB2YKH8y+FxStt90RRFoc5lwCZkm5vmcOChmEykmI=)
12: gvMvxN1JHVPjgshkuwfHJsKx4dU.roa (hash: VUg2txUUu1/KKURpEb7Xa9x6WRrXiOxip3ohqdUTZeY=)
13: uGLn1rNehfP8gUHfuPWItHTs-Q4.roa (hash: rbb+/QdbyMdZWalyD4M+Cib5fxLsrq9/EvfwTaumIsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:11:17:eb:98:6d:06:0a:2d:de:30:28:25:7f:44:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Jun 12 23:00:51 2026 GMT
Not After : Jun 13 23:00:51 2026 GMT
Subject: CN=81d1303159795c179b5d2bf48c970877bf23ca43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:c7:ad:71:29:ee:a6:78:f5:43:80:2a:f0:
0d:0f:ed:05:fe:99:d4:66:74:3f:f3:c6:0b:71:cb:
a7:6d:a0:4b:5f:1f:f5:cf:90:c2:01:c8:64:a5:4d:
b9:33:bb:39:cb:70:18:28:bb:73:38:fa:8a:3d:8a:
d5:f6:b4:56:8d:ad:87:ca:7d:69:10:63:fa:2e:b0:
e7:d0:86:e7:60:38:2f:b3:af:2d:ce:29:99:54:90:
66:1f:8c:89:92:2a:91:6e:34:b6:43:f5:ff:3b:ca:
9f:00:e6:e6:a2:2d:3f:64:a1:6e:d1:3b:29:90:b0:
0f:84:45:3c:e5:fc:77:8f:24:b1:d1:ca:dc:2d:ca:
80:a4:f2:a6:24:90:56:69:54:0a:76:4e:d0:64:f2:
3b:4c:a1:ac:43:d8:47:86:c5:eb:87:22:13:c3:5a:
29:97:6b:46:f2:3c:ad:4f:c9:f5:8b:93:0b:e8:c1:
98:c3:77:06:91:a5:90:2d:97:23:92:dc:9b:2a:45:
1e:46:8a:6a:bd:16:f3:31:17:90:d2:20:00:7d:59:
67:93:6d:cd:c7:80:23:08:c0:86:94:8c:2c:0b:c1:
86:37:7a:31:7d:b3:19:6c:8d:48:8b:b9:01:2e:20:
f1:31:5d:ee:e3:ce:b5:b6:3d:8b:91:13:75:c9:df:
98:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D1:30:31:59:79:5C:17:9B:5D:2B:F4:8C:97:08:77:BF:23:CA:43
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:91:6e:06:35:8b:74:3c:78:bc:e9:97:db:2a:e0:aa:80:7f:
d8:ef:2c:2b:e3:a0:99:6b:e0:b8:0c:39:dd:26:27:46:2a:60:
2b:74:a3:5f:c2:8c:bb:7c:17:bc:41:ea:22:45:de:51:28:6a:
f5:99:ff:c5:0c:85:8d:4b:67:1b:95:86:44:70:44:bb:93:ce:
d5:ec:98:08:bb:94:ac:15:e5:ab:a6:46:fe:73:13:7f:0e:48:
22:7b:83:c5:bc:c3:65:31:b5:8b:47:d3:3d:5f:8c:b4:ba:86:
3e:83:22:5c:f0:f2:54:35:51:07:29:08:d0:d9:64:09:ba:91:
e7:55:4b:0e:9a:b6:e1:28:17:61:af:f5:d6:90:8d:ea:cb:8d:
c3:3d:fc:4e:e0:42:14:d4:32:e5:f3:00:58:b2:c2:4f:24:b1:
12:c1:01:5b:db:69:23:35:0c:ed:e0:c9:7a:02:53:9d:8e:6f:
ca:1f:32:da:c7:93:17:6d:4d:88:d8:37:d5:11:72:91:55:68:
e4:8f:1d:15:dc:30:c4:17:a4:9c:2f:97:95:3a:e9:0d:8b:1c:
6c:fc:d4:c9:3f:7b:38:dd:d9:aa:29:85:2a:28:60:60:71:0c:
13:d0:38:32:f0:53:87:a0:28:88:8b:26:de:87:d6:c4:ae:17:
52:1c:06:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:25 2026 by rpki-client