
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
File: UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft (raw, json)
Hash identifier: yBWpVvjs+u+8GDIWWdZQ9tdonPuAuE5xGd638tsxfQ0=
Subject key identifier: 29:37:66:A7:8D:CC:66:2B:CA:6F:12:DB:74:65:E9:A4:8D:25:54:AB
Authority key identifier: 51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
Certificate issuer: /CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Certificate serial: 01A0D5A736A124B4E28E763D96508A552503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
Manifest number: C4
Signing time: Thu 24 Sep 2026 23:01:40 +0000
Manifest this update: Thu 24 Sep 2026 23:01:40 +0000
Manifest next update: Fri 25 Sep 2026 23:01:40 +0000
Files and hashes: 1: 2B2WsXFKrE0PsjMLGDLFgrkoQHk.roa (hash: I2f8cSCJ55gr+41EbqG2bCbVCSI6WYHHpiTlmKWKwag=)
2: 351arMODSIyd3CJc9fgPAtsmlNI.roa (hash: Yo2IiguJDajHZ2abX/Lenjc2Oi/XsPFxr+IXj+TfOw0=)
3: O1bRHs3xt5FsIbl_ziUUS70e2Oo.roa (hash: GDAX7A9G25jk6iCRuWUSO9OYN1CP4Rha8hkEH61irKE=)
4: QnubMT8LlGCKqDGLx2msA8oQFZE.roa (hash: F29CsKJrPeic4M/8FQtLYPOvQ2ukLb2sF2KJke9Fycg=)
5: TVciBvbG1XVG5ssHlr4AadQK2fk.roa (hash: QwF4SWXY6yBXWUo8zo5vTIE9qB3GoAOkQodC/dlqVwc=)
6: UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl (hash: 6M9TIWgQv4bEJLm8KJzECVNy29r6Dwy82FS9Aa6sB+o=)
7: hs3fngFJt1NiocNCIA7qGPYWsTU.roa (hash: ToEvpANK+Yu0KXslqAyftUZpThJvK58TLmLx0aI2m1A=)
8: q8Tmc6EzFqnUmMxMTIt9c3dEYxI.roa (hash: v/Ru9OVe1/q99gN31o9CAbNDujPce0SS4XxW2atJ/R0=)
9: slPI9aN-JbfbvX_GY814pCJ8UFA.roa (hash: EeGAyjsGw6lAKae9brKTE8ngKeD+Md25/vDKFnzwqig=)
10: tm-LFqSPmanwgI1syFmGkI6nKdc.roa (hash: lIW2bmaFFTJOzvB2HW/qgxs6vnJmoBOrm3elLnIZeZI=)
11: tygQWENVMllkytSnL6uy2BmJtDA.roa (hash: NRsdT+DiuF+skvZYNUC1kJYT3am+ZHBeil1YQrMV2pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a7:36:a1:24:b4:e2:8e:76:3d:96:50:8a:55:25:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Validity
Not Before: Sep 24 23:01:40 2026 GMT
Not After : Sep 25 23:01:40 2026 GMT
Subject: CN=293766a78dcc662bca6f12db7465e9a48d2554ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b5:10:57:54:24:77:a7:62:cb:72:b4:42:d4:
e6:39:0e:c5:a6:0a:56:2e:9e:79:cf:f7:61:87:54:
c0:06:30:00:1e:34:42:b8:a4:e7:b2:08:7b:a7:6e:
5e:66:25:cd:f5:92:16:74:4a:b4:f1:a6:5f:e8:05:
a9:f6:ae:fe:eb:f5:c8:d1:c2:0e:b7:af:7e:18:13:
9b:13:09:41:f0:38:77:0d:67:c2:4f:d7:83:f0:9b:
83:d3:ce:37:8c:65:6c:b2:c8:04:73:1f:ea:0a:9d:
9f:9c:8e:0f:bf:0f:ce:a5:d9:cd:14:17:3d:06:95:
55:ff:93:37:cb:96:19:7c:c8:d2:63:e0:b1:20:a9:
1b:d0:0c:18:64:94:1d:14:8c:b5:ad:25:6d:b5:76:
c0:c4:ed:19:44:3b:d4:59:6e:86:aa:d5:31:38:98:
d4:08:4e:8c:32:a5:15:c1:c4:a9:4e:20:3a:2b:a2:
6a:e7:bd:af:a7:6e:ff:90:23:50:66:7f:32:40:77:
98:b7:9d:cd:b6:30:90:b3:39:e8:69:81:9f:ea:52:
8d:2c:96:f7:2b:96:05:52:07:b1:27:bb:b6:5b:12:
e5:f9:a1:be:63:0f:93:2c:d7:4c:2d:ab:b8:5e:13:
99:35:7c:88:e3:62:ea:22:9b:bc:cc:e5:67:ad:89:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:37:66:A7:8D:CC:66:2B:CA:6F:12:DB:74:65:E9:A4:8D:25:54:AB
X509v3 Authority Key Identifier:
keyid:51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6f:00:23:16:85:9b:95:88:a6:fc:13:43:b4:02:9d:3d:87:
36:0d:76:2b:1e:be:43:92:2f:88:21:85:c3:6f:f4:8f:16:7d:
63:51:f9:0e:91:31:aa:16:96:9b:14:5f:21:7d:ce:76:1f:b8:
46:ba:06:c0:66:24:fb:2e:12:2d:d5:68:2b:d8:99:2a:a4:63:
e0:37:7f:00:7f:db:01:b8:6f:08:9e:97:4d:7d:b5:ad:fd:f5:
1d:a4:1d:7a:a1:5b:c0:dd:05:80:85:9d:56:a2:a1:66:5d:cf:
a4:38:09:ad:27:5e:80:31:2b:7e:fb:8c:15:ae:94:e9:b7:aa:
48:93:ff:3f:15:4b:f3:e0:65:b0:a5:9e:92:9a:b9:4f:e5:4e:
23:a5:b3:9b:d2:de:10:c2:23:1b:f5:b3:68:77:03:b4:62:43:
2d:31:15:89:80:df:8e:df:1b:a1:c2:3c:b0:85:4e:21:12:9d:
db:6a:53:58:6f:7f:2d:97:3b:05:c8:66:3c:89:56:69:01:ac:
e7:da:ef:da:27:21:b0:37:9b:9c:14:30:fb:fa:9a:70:35:5d:
62:8f:53:00:3e:32:1f:e9:90:39:0e:57:9d:7a:11:5f:d5:74:
2e:18:09:40:55:20:5e:85:9f:2f:22:b5:0e:7c:d0:92:42:bf:
9e:da:2a:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVpzahJLTijnY9llCKVSUDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxOWQ4MDJjYWY5YWE4ZjQyN2YxZGQwODU1NmM4OTk5NWYw
NDc4ZDEwHhcNMjYwOTI0MjMwMTQwWhcNMjYwOTI1MjMwMTQwWjAzMTEwLwYDVQQD
EygyOTM3NjZhNzhkY2M2NjJiY2E2ZjEyZGI3NDY1ZTlhNDhkMjU1NGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bUQV1Qkd6diy3K0QtTmOQ7FpgpW
Lp55z/dhh1TABjAAHjRCuKTnsgh7p25eZiXN9ZIWdEq08aZf6AWp9q7+6/XI0cIO
t69+GBObEwlB8Dh3DWfCT9eD8JuD0843jGVsssgEcx/qCp2fnI4Pvw/OpdnNFBc9
BpVV/5M3y5YZfMjSY+CxIKkb0AwYZJQdFIy1rSVttXbAxO0ZRDvUWW6GqtUxOJjU
CE6MMqUVwcSpTiA6K6Jq572vp27/kCNQZn8yQHeYt53NtjCQsznoaYGf6lKNLJb3
K5YFUgexJ7u2WxLl+aG+Yw+TLNdMLau4XhOZNXyI42LqIpu8zOVnrYk53wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCk3ZqeNzGYrym8S23Rl6aSNJVSrMB8GA1UdIwQY
MBaAFFGdgCyvmqj0J/HdCFVsiZlfBHjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVoyQUxLLWFxUFFuOGQwSVZXeUptVjhFZU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jZDM3OWMtYzk1MS00NjMzLWJiNTYt
MDcxNzY0NjkwZWNmLzEvVVoyQUxLLWFxUFFuOGQwSVZXeUptVjhFZU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jZDM3OWMtYzk1MS00NjMzLWJiNTYtMDcxNzY0NjkwZWNm
LzEvVVoyQUxLLWFxUFFuOGQwSVZXeUptVjhFZU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuG8AIxaF
m5WIpvwTQ7QCnT2HNg12Kx6+Q5IviCGFw2/0jxZ9Y1H5DpExqhaWmxRfIX3Odh+4
RroGwGYk+y4SLdVoK9iZKqRj4Dd/AH/bAbhvCJ6XTX21rf31HaQdeqFbwN0FgIWd
VqKhZl3PpDgJrSdegDErfvuMFa6U6beqSJP/PxVL8+BlsKWekpq5T+VOI6Wzm9Le
EMIjG/WzaHcDtGJDLTEViYDfjt8bocI8sIVOIRKd22pTWG9/LZc7BchmPIlWaQGs
59rv2ichsDebnBQw+/qacDVdYo9TAD4yH+mQOQ5XnXoRX9V0LhgJQFUgXoWfLyK1
DnzQkkK/ntoqYA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:24:04 2026 by rpki-client