
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json)
Hash identifier: zlitrz/8tdwFSPk4A2Fn+gPGF+RMYmszVmGDLgGdagk=
Subject key identifier: BE:BB:83:83:3F:54:23:70:F5:E2:49:DC:39:6E:5D:9A:5C:9A:1C:6A
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 01A1DD26F1764F08D359F55FE620B1E10CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
Manifest number: 1B0E
Signing time: Sun 15 Nov 2026 03:01:19 +0000
Manifest this update: Sun 15 Nov 2026 03:01:19 +0000
Manifest next update: Mon 16 Nov 2026 03:01:19 +0000
Files and hashes: 1: 1A0OgYXG3iVS7dYyDn-eVIhO8eM.roa (hash: FrUEKKMZAguXIpXWScc68qO/IKUabeFzGLn6njmAiyg=)
2: 8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa (hash: kjvVcc0xOxJUg+x1ocm3gLplTcfZBpQ+nllVK3oSP4I=)
3: BYRF65R_gvTrOamV1sFiMyQQwwo.roa (hash: UcJdHpYQj1TR2O2eeL78WCxx+T3hnx4QNGLSHOCWD40=)
4: Clokdo8iEnkyRg1-72rcFdu0uTM.roa (hash: qI/NxfPHzKCTkxa3q3ZgfCGrWFBeBUVuUQo7H3Os6L4=)
5: IULcSReBl6BR3I_U3liy7HZAnac.roa (hash: 8rcQZaYhRzic9A6LKK6K6/YTQNKz/3wSmuzt2vfN2vM=)
6: X5-PcFCXcBmeXFytRndx1GWZR6M.roa (hash: CusHkyVTE5E1hf9Dcr6iJxa9rL7UUSerxewweRWup5Q=)
7: cpXyEOPsQYnhoiU9YXgEHRotygE.roa (hash: 1cwR9tQfEOIHfGITqs8rBDCiCASn32+xpW4m0FX9NNo=)
8: d7PUDxLVlQHb2Dc0NDQzVZOes0E.roa (hash: bMQ8wqEnr9dnX2pC6dva+/kVC86AP2FCZzjDGc+wVkw=)
9: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: WBzED5vWAyNM7oZG50xgM6VpIh9gSdchsF0FFTXdzFM=)
10: nZHqQhlAUfpi-xyQQIlLnT_5zVY.roa (hash: pyPCsxzb7EcyMnd9eFCWZ2gNgE3Dkb4SSpOIKliViJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:f1:76:4f:08:d3:59:f5:5f:e6:20:b1:e1:0c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Nov 15 03:01:19 2026 GMT
Not After : Nov 16 03:01:19 2026 GMT
Subject: CN=bebb83833f542370f5e249dc396e5d9a5c9a1c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e6:19:be:d5:aa:d7:1a:ac:7d:ea:7a:61:73:
3d:06:ac:b0:36:1e:94:8a:6e:7a:23:8a:6c:3a:b5:
f4:9f:60:3b:69:a5:3e:2e:e1:17:43:d3:ff:f0:da:
15:98:15:7e:b7:49:e9:1e:02:64:b5:53:52:51:8d:
65:19:13:13:0b:25:52:71:7e:70:bd:38:2e:8f:de:
c3:1d:03:7f:34:08:de:e8:1a:49:ee:3f:da:3c:8a:
02:a9:d0:d0:8b:d4:cd:d9:3c:b5:39:fa:3b:a9:28:
a3:9f:a6:0f:91:02:08:4d:e8:bd:05:8d:04:d8:29:
9d:94:ae:5b:e0:c4:0d:fa:f1:cd:35:fc:da:81:e8:
58:b6:d1:a2:05:10:38:f5:19:6f:c0:37:3a:de:03:
e7:be:ee:a4:11:c2:83:0f:da:d5:ee:be:c3:54:b2:
3f:35:7d:2d:67:ac:ab:9c:14:93:f1:88:9a:7d:7d:
62:5a:a6:e3:a1:50:da:a1:61:53:c4:4c:74:d2:69:
3f:6c:69:c7:ce:e4:65:4b:24:10:87:f7:02:cc:74:
b0:d5:ea:61:83:f9:8e:c6:78:01:ed:29:1e:cc:50:
22:7f:7f:a9:da:19:6a:57:f2:64:37:0c:ce:69:aa:
08:c0:1b:ac:76:8b:e3:18:1a:6b:61:0d:3e:df:55:
25:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BB:83:83:3F:54:23:70:F5:E2:49:DC:39:6E:5D:9A:5C:9A:1C:6A
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:29:3c:d1:25:3b:41:50:1f:51:5d:83:94:57:63:23:24:79:
24:53:86:0d:9a:43:1a:0e:f4:6f:0a:b3:df:f6:68:c9:c3:8a:
e2:ea:24:fc:d0:f9:89:4b:0c:1c:2c:88:85:ff:ad:77:a0:d8:
04:e5:1a:72:61:c8:a4:bb:29:97:f4:ed:bb:87:bf:b5:cb:dc:
c8:65:8c:84:34:f0:a4:dc:27:13:b6:f6:ed:22:ee:4b:72:a1:
0a:98:d9:d4:26:1f:12:b2:51:4f:a3:fc:53:44:1d:53:12:77:
37:eb:b6:a6:c5:e6:87:a6:f0:bb:7e:8c:61:ec:50:5b:e5:54:
73:ef:d1:ae:3d:8c:e3:38:03:4f:21:d4:68:26:5d:ef:d8:a8:
9e:ad:ca:8a:2c:0b:a0:cf:cb:fd:b3:3d:cc:31:99:b8:33:eb:
2a:20:ef:86:a4:47:5f:f6:e7:f8:68:34:e5:89:b6:3f:77:53:
71:22:5e:50:c4:51:91:0d:96:22:de:e6:0a:b1:40:39:02:cd:
ca:94:7f:39:1a:1d:93:27:36:22:9f:48:61:d5:fe:0b:6c:b7:
63:70:97:ab:59:78:c7:90:0d:fc:c1:f5:4a:9e:e8:3b:07:e6:
37:03:f8:ae:7c:c8:1e:4b:70:ab:3c:ad:93:f6:e1:18:2c:72:
a9:be:88:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:55:39 2026 by rpki-client