
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json)
Hash identifier: ydZuXPwBSJ6/CBPP435WkbD84lASyM2753as/2bHtdM=
Subject key identifier: C4:EC:41:75:DD:D3:E3:44:95:E7:AC:2F:3B:60:09:AB:D6:0A:A3:67
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 019FA8622CFED3E3F561A7BB4E801DF05359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
Manifest number: 19E2
Signing time: Tue 28 Jul 2026 11:00:34 +0000
Manifest this update: Tue 28 Jul 2026 11:00:34 +0000
Manifest next update: Wed 29 Jul 2026 11:00:34 +0000
Files and hashes: 1: 5lFyIZmBLBFDx76RfuZHevsHQQY.roa (hash: PI10EPnFAgNZeRBfLyN6vfxKBB4r+mmccm1SKvgO9H0=)
2: 7238-yc1zsJP5-yGaMOBc9f0LR4.roa (hash: URHGrmmmyevt5Yc3E+g4gLi9Y6wbhMdw/A5AP3gBz1Q=)
3: 8JXNaaQmDQHdM4yP_RNeiswPEDI.roa (hash: UUO1y8o89Fboq48v1C/MZYuzKEwlodMmFc6P3ytbtj4=)
4: F1XFKolR75CvzOCyFlTtMYXp3UA.roa (hash: 1NsFIv/Vqxyf17zBRZ7ykgjIIYfbwgtJjmnNI1bztF0=)
5: Ho8BmWtRsGIfoh9TadeITydo350.roa (hash: jhic1+8GxEt2CK46n93QnO3HxEVdv0LVkgGPn/QSDf0=)
6: NDEJ4OPh2jQQg5h1HdKinOuNm1g.roa (hash: 6YV/mvu0IZaB1NRM8e6QdrWu4qWaOce8H7G5lo4LpOc=)
7: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: LwguieYsdkzOSKBu6Z42cu6o7rVjBY5Ok7at+PSIwVw=)
8: Tj4Mcwc_96ZTjJYw-9rKbpG4AXA.roa (hash: 6X5APSqbz1P2mkb03h8c2CZF8YBdY33egLhUsQ1Fh0E=)
9: VlCsH-gKeuLV89RCvfubppUzoBM.roa (hash: E6tZ0jd2kOODThTzIfCZg56DVUHPrBwKWicp2pqqUq8=)
10: WLquCazhAB0ScMP5a1mkOMpQjSk.roa (hash: X6EOl+E5HOgYEVAmBJUO3eMgT+pMlGAkOYSNqnB4rac=)
11: _Sp9nWnMGENvs_5RlKIg522yEo0.roa (hash: 5BiB2YKH8y+FxStt90RRFoc5lwCZkm5vmcOChmEykmI=)
12: uGLn1rNehfP8gUHfuPWItHTs-Q4.roa (hash: rbb+/QdbyMdZWalyD4M+Cib5fxLsrq9/EvfwTaumIsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:2c:fe:d3:e3:f5:61:a7:bb:4e:80:1d:f0:53:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Jul 28 11:00:34 2026 GMT
Not After : Jul 29 11:00:34 2026 GMT
Subject: CN=c4ec4175ddd3e34495e7ac2f3b6009abd60aa367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5b:a6:a7:a6:87:58:a7:04:00:2e:7f:0c:ad:
6b:75:28:88:9a:0f:b0:36:f3:df:0b:e0:2b:77:d6:
93:59:7b:2b:f7:ee:94:01:58:71:a4:9d:dd:12:cf:
e2:b4:92:55:8f:7f:ec:51:a6:db:78:8a:fe:6c:4b:
82:5e:09:aa:0e:a2:60:ed:dc:32:e1:df:75:40:7a:
e1:da:00:78:18:f8:00:8c:80:eb:95:d4:87:e4:96:
8a:ee:a5:38:b4:fc:d8:ef:b3:5a:c4:cd:44:1d:51:
34:fb:59:c5:92:fd:7f:73:5d:22:0b:2a:4b:30:b9:
70:5a:d3:e8:75:3b:8d:5e:03:a6:f2:27:76:bb:d2:
7b:27:ad:83:4b:69:b1:57:3d:28:72:ed:f8:ab:35:
fe:08:6d:85:35:62:f0:30:a6:a7:d6:90:79:7d:25:
21:9c:a4:5c:c3:46:54:d9:74:5d:94:24:01:19:6b:
25:f0:59:c1:6f:37:e8:f9:a2:36:c1:e5:7e:ab:be:
27:55:44:c9:35:3d:ad:22:c1:7b:98:35:5f:25:66:
88:b7:7e:ae:b4:2c:67:2a:a4:15:11:21:a8:4c:11:
c7:d7:66:0a:83:3b:0d:75:cc:2b:5a:fb:8b:59:28:
21:a8:77:bb:1a:35:8b:0f:5b:60:7d:7e:be:1d:0c:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EC:41:75:DD:D3:E3:44:95:E7:AC:2F:3B:60:09:AB:D6:0A:A3:67
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f7:de:67:68:10:54:3a:f8:7e:fb:34:c4:4f:c0:c7:39:e9:
47:43:cf:66:65:d9:91:17:27:3c:a8:e2:35:4b:8b:08:b3:3e:
61:d0:eb:d1:07:91:6c:27:b1:eb:ae:39:46:10:ec:f7:8d:b1:
78:7b:d6:0c:cd:5e:f6:89:4f:ca:45:15:2a:ec:3d:77:f9:35:
ef:1d:a2:cf:d2:a3:a0:22:b7:cb:90:df:39:cb:da:4e:e6:30:
db:d0:48:73:95:d3:a3:7a:71:1a:ac:b6:1e:1e:b1:b4:a3:06:
98:8e:e7:e7:18:92:66:95:8b:86:a3:8d:e8:0f:1a:31:83:4b:
cb:4a:01:9c:b9:a8:c8:d5:08:ed:cd:03:f8:3f:fb:54:96:af:
5d:ba:84:95:21:b1:25:0f:1d:82:46:7f:b7:08:64:7d:73:d4:
b0:8b:9a:a4:a5:e4:1f:64:4b:fd:50:53:bf:bd:8a:e0:66:51:
8f:47:03:93:60:65:d8:96:43:ad:2c:cb:12:ab:10:27:bf:bc:
01:91:a7:35:73:e1:a4:df:c4:d4:14:e6:ea:c1:23:96:c8:fb:
ec:dd:fc:6b:ee:f7:e6:e2:e4:26:a5:a2:59:01:ca:61:cb:7f:
16:a7:db:4c:78:c4:20:ce:a6:ca:ac:fc:38:c9:52:1e:7d:8c:
d8:48:d1:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oYiz+0+P1Yae7ToAd8FNZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx
ZjZhN2QwHhcNMjYwNzI4MTEwMDM0WhcNMjYwNzI5MTEwMDM0WjAzMTEwLwYDVQQD
EyhjNGVjNDE3NWRkZDNlMzQ0OTVlN2FjMmYzYjYwMDlhYmQ2MGFhMzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41ump6aHWKcEAC5/DK1rdSiImg+w
NvPfC+Ard9aTWXsr9+6UAVhxpJ3dEs/itJJVj3/sUabbeIr+bEuCXgmqDqJg7dwy
4d91QHrh2gB4GPgAjIDrldSH5JaK7qU4tPzY77NaxM1EHVE0+1nFkv1/c10iCypL
MLlwWtPodTuNXgOm8id2u9J7J62DS2mxVz0ocu34qzX+CG2FNWLwMKan1pB5fSUh
nKRcw0ZU2XRdlCQBGWsl8FnBbzfo+aI2weV+q74nVUTJNT2tIsF7mDVfJWaIt36u
tCxnKqQVESGoTBHH12YKgzsNdcwrWvuLWSghqHe7GjWLD1tgfX6+HQy3NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTsQXXd0+NEleesLztgCavWCqNnMB8GA1UdIwQY
MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt
MjdmYmM5OWVhM2M2LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2
LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu/feZ2gQ
VDr4fvs0xE/AxznpR0PPZmXZkRcnPKjiNUuLCLM+YdDr0QeRbCex6645RhDs942x
eHvWDM1e9olPykUVKuw9d/k17x2iz9KjoCK3y5DfOcvaTuYw29BIc5XTo3pxGqy2
Hh6xtKMGmI7n5xiSZpWLhqON6A8aMYNLy0oBnLmoyNUI7c0D+D/7VJavXbqElSGx
JQ8dgkZ/twhkfXPUsIuapKXkH2RL/VBTv72K4GZRj0cDk2Bl2JZDrSzLEqsQJ7+8
AZGnNXPhpN/E1BTm6sEjlsj77N38a+735uLkJqWiWQHKYct/FqfbTHjEIM6myqz8
OMlSHn2M2EjR5Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:10 2026 by rpki-client