
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
File: 7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json)
Hash identifier: TKRUeq04Hn7t3hNgsfKV2Ta1VZSfK8FU4PBFmIE3RQc=
Subject key identifier: CA:EF:AD:8E:10:54:56:4A:D8:AA:80:98:4E:98:99:09:8B:B5:16:32
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 01A1DD26C890F85F3662C5E3E50A661F29D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
Manifest number: 1167
Signing time: Sun 15 Nov 2026 03:01:08 +0000
Manifest this update: Sun 15 Nov 2026 03:01:08 +0000
Manifest next update: Mon 16 Nov 2026 03:01:08 +0000
Files and hashes: 1: 1-8EG5DRDWNCc8ZHM-Jb-FTzPY48.roa (hash: jWG7Upn+y2W0510FwJHQsAsw4DV2mqsd/e3gA/ude9g=)
2: 2wyh_QhMgMqC_O4n1IvcnhHRGBk.roa (hash: ao/nwpiJU1qsY5iD/g3xyfwFgyAPEV6fkSVForiTS1k=)
3: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: VPkxDhOyBXq51FEtuZ0otaPkCmWPu90vzkKpXnPRV5U=)
4: AWPFncfASof9UmgtmKs0YN8cliQ.roa (hash: zAYTVAVDS4Q8gNGe9Fxy0r6yVBNDTEzr7ZcSBy05V4Y=)
5: Cbwy7ZTHRdEOY7GRBfFj_luZf7c.roa (hash: 35gqWtEcP4/HxKKbREK7gqnsXOG4vXjbmy1ljsXsfXo=)
6: Cdey4x25Y71jAjsi-w5ror1Em9w.roa (hash: 9Nkc6pZ1LY8cZ4nIVazJu4RFkDfce5y0UNDPuC2XOUU=)
7: Fu5kT9TxojjMx5c9WVqjL4KHnHY.roa (hash: OkWCwFJEccvJXScWm+KM/QkYp8L4OehLKl/qIjl3hPk=)
8: GacdiJbZpZ2oPfuLkDSq7d3bcQI.roa (hash: N/ccnzBCW/DjGGmSnaIv65kdKTj/oWBrux25tNTGhTY=)
9: Q03PdSGrQJ1a3WGfZ-bc5I0qaws.roa (hash: 2OnqRPuaN0v+Zan9ND6ygbAA1lh/p4DcTNqdYBIoSGo=)
10: RUzsZjQOmWwABCIUkcshejkaol8.roa (hash: RBKNBE9V3LhFEz+JeieM4xs1FwZeU1f7a5C0ApeFYFE=)
11: U0sKMofxXdVOw-0XJTrnhs5_ivw.roa (hash: 2ArYsgltaFdadzwNfrDc7gLpkClQBPjzaHH3uLWf38s=)
12: dXpQm6W-fzeDoM6ANaDna4LeJJw.roa (hash: X+KL+RuBzuWO/Tf7EZrDXYxpoc28BH51yAUJezDMoh8=)
13: q6_QV7_dR_nUmUjkdnn1Ol_C4hk.roa (hash: e/CCQvEkZLvzTnUS4WnPQ1yCXPvY5eeas48ASlaEDPU=)
14: s9p2C__iZ2J7toPup5hH5iFxnWE.roa (hash: Wwc9AFxmcmbtflqnqTZJb0CV5saV+p6mA6lZ1ZeqouY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:c8:90:f8:5f:36:62:c5:e3:e5:0a:66:1f:29:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Nov 15 03:01:08 2026 GMT
Not After : Nov 16 03:01:08 2026 GMT
Subject: CN=caefad8e1054564ad8aa80984e9899098bb51632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:82:58:a0:48:b8:39:ea:f3:d2:c4:86:ce:
40:02:b8:1a:aa:9c:d0:7d:1e:ad:e2:1d:29:f2:6c:
35:51:80:e1:81:98:84:3d:88:3b:9c:62:a4:07:9d:
cf:e2:71:39:ce:c7:80:05:27:ea:d2:bf:cd:18:11:
2e:6a:82:4f:d5:53:89:2d:fe:37:a6:f0:c3:b1:5c:
57:06:0e:7c:e1:9d:e2:f3:15:cf:70:17:0e:35:e1:
44:31:c0:5b:9b:25:17:ca:25:26:28:cb:98:31:5e:
ce:ff:81:9d:d6:e2:67:9e:6a:7a:7a:68:93:fd:55:
68:fd:8b:aa:48:0a:4f:62:b3:f3:c7:e8:3c:fa:e2:
92:bd:82:f8:fb:94:57:0f:11:53:83:d0:03:aa:26:
fc:4f:92:af:89:08:53:3d:70:c8:be:df:11:cd:02:
e3:00:0c:95:69:f7:1a:bf:8d:5b:e4:49:35:59:7f:
92:69:e2:10:96:cb:33:73:ea:48:8c:9d:49:9d:ea:
ad:33:cd:c7:0e:8b:c5:92:6b:4a:5e:a9:1f:57:3e:
ef:51:82:d2:af:0f:fd:f6:e4:59:b8:c2:ec:e7:c1:
79:1f:ac:e3:74:0f:91:b4:f1:3e:e2:c3:91:19:08:
27:9c:4d:55:05:92:ad:19:8f:93:f0:6c:2b:35:87:
6a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EF:AD:8E:10:54:56:4A:D8:AA:80:98:4E:98:99:09:8B:B5:16:32
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b8:35:96:dd:28:81:2a:7f:ef:b9:bd:20:40:96:5d:03:81:
33:67:53:52:40:af:9f:77:52:1f:1d:16:fc:f1:45:d5:77:de:
97:39:03:a1:e2:8f:77:ee:c6:cc:87:a5:df:ef:e3:f7:08:f1:
6d:bb:03:a4:6a:a5:81:6e:47:ad:f9:f9:26:d9:34:8a:bd:e7:
14:4a:66:e5:5e:58:9c:b6:a2:2b:72:87:62:0f:8c:28:91:8b:
a9:e3:b3:8c:dc:67:d6:5e:c8:83:d2:9c:38:10:f2:22:e0:b7:
07:19:2e:37:7d:ee:94:67:3e:b1:9b:5c:5f:1f:36:85:02:b5:
f1:d6:d7:2e:e1:54:a1:5e:a6:0b:e7:3f:ca:4d:21:de:6a:49:
1e:fb:71:7f:8f:df:da:a1:e5:6e:5d:54:fa:ef:96:87:32:48:
2a:85:82:fd:93:74:23:1b:ae:c7:0c:6b:3b:bb:4c:59:d6:74:
a9:1e:9d:a3:ff:bf:85:a8:7d:10:74:85:df:91:d1:99:66:bc:
9a:b3:cc:02:4d:2c:de:fd:12:98:8e:74:79:1d:7c:c8:06:7f:
5f:21:56:6a:27:60:d4:37:ff:d2:81:cd:09:8c:31:0a:49:be:
3d:d4:bd:d8:b1:b1:4c:92:8d:27:e5:fc:cb:f4:be:11:b7:35:
6f:af:fc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:51:22 2026 by rpki-client