
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
File: bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json)
Hash identifier: j3ofFKM07SOzkA8PX4L7+aYiGtsC4rYtKIsQioo4gbI=
Subject key identifier: E4:D5:39:B1:1C:16:4F:FB:7B:D5:E2:0E:D0:4F:C0:E3:4D:16:FA:8B
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 01A1DCF059484434F9266A813493A3BC6F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
Manifest number: 0E51
Signing time: Sun 15 Nov 2026 02:01:41 +0000
Manifest this update: Sun 15 Nov 2026 02:01:41 +0000
Manifest next update: Mon 16 Nov 2026 02:01:41 +0000
Files and hashes: 1: 5FHJTMovIyafBSIoWEyalm3rI5M.roa (hash: 7pR5dvgxZrfBVlojZ8DgehqyTZVyIf8AxZ2O6MrCJ8c=)
2: 6E9LTAyzQt1FEPfr7FhyMtAFg2M.roa (hash: TGRGd7XnfyAu8YWaQ6cS2sAir5AhkX//ozfCRednwtk=)
3: 7hJafOPCpVSEdxOE76y6niPbYbg.roa (hash: W1rV0T1F6RwXszjsED1ynOIbEQcRvX19VVt3Nz1sIkc=)
4: BErn-fY5VBXxD2VyEYJN-JdQUW4.roa (hash: suKr1RNc8jf4yYkym4zmqDLZzivo3iXfr9FhGIfjNng=)
5: BUT1NMkorMdojGeQxT5hIJgs8Nc.roa (hash: yZ0THgxl4+lAG7xhsfPweM9P6nUbmimKZfn0DgScC+E=)
6: BfGhYoXLz-5I0FN0nL8DXjOx6EU.roa (hash: Ss4hP6Q3/Oalsvet7/zlDLfrMD1Bv1uUMHsdssewtYI=)
7: DA1lpibgFq5-y_Y3ZxUgcX7RgTo.roa (hash: jnR91XQH0HnolepDmgrXE13NqGBnutXBwTg3aasEMIc=)
8: GVUEDUnF5jUjS5nadTHF8d_a8jM.roa (hash: CNVQH1UrdXTDRK5lM23G9sOU0bUyYlN7wDHyKz8bSA4=)
9: HIFyOEF6o7Rsq5goVjW52OhadgI.roa (hash: k9ek9boUBYYEmOjPJ57YH83oUBsMeWYZC5hDknA/Hs4=)
10: IdbA3ga81eRnRIoyM9ZFsnJoq-0.roa (hash: X6pEz6Y9VtUR71wHETOjVXSfvkgFN13w55bg4lUbPVI=)
11: KlqwNeDSNI-6gcYLBNO5DzJcKIE.roa (hash: Qw0dDm30Ph7VrT6EudqSthxSPTm302Z+oCp8QJLF0jo=)
12: RbdrFxMpPdVSzRp_C-Rku8BRui4.roa (hash: i6eqmLVwiqXYOO52UX4iIvTthJpungIdi65hhhhuuR0=)
13: RuFU5d7ARVr5r4PY4vOdxriie6Y.roa (hash: yyiFBcac7vrMWH3pU/fo+ECKDfP8bGIkfxHEMC+At54=)
14: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: QrgDUXvoFLC79Tmxb+j7TZH/kfL8+Z5V8EnqmbYwR9U=)
15: bVPAHIj80WWce7a3M1XCyh6YdoE.roa (hash: sdPf2Cf+3VFGeiSN/Ap92x67gRehKgw0gxPfYcFUmLA=)
16: lSC4RzevQeRkikifsAt3gR84fxY.roa (hash: CDC2+wQFTPEwC0Sq9Rnp++UpyacRzQctOXOPJvW93xc=)
17: qEbYFQoXre_OuLtdayPj8liTJCA.roa (hash: jvondzJ1t0alplZUpmymkMm3ArgabFjZkTrg9UVcZXU=)
18: rMHgLwq1dgxl2KpsUSthXs0MWBk.roa (hash: Yk8LFVOWtBI6Eap7t4JN9HPbcuGjrW1IcCeKsknRw5I=)
19: xrze8vo27kvzGHLArTlKKxLK6X8.roa (hash: 472z94Y4BGd5ZtO+s4jKvuHuf1XPqa3fnP1IMEj/HWY=)
20: zvxcn_GD8_hUJXGGJ7rjFFwAQB4.roa (hash: AG7WeXLfc9bch8+moQNIG4Gui1kugzTC1jXXmZYVyJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:59:48:44:34:f9:26:6a:81:34:93:a3:bc:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Nov 15 02:01:41 2026 GMT
Not After : Nov 16 02:01:41 2026 GMT
Subject: CN=e4d539b11c164ffb7bd5e20ed04fc0e34d16fa8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4e:51:66:0e:e0:65:0f:12:28:5d:62:1f:34:
b2:95:40:d0:9a:13:4b:35:56:24:ac:f7:15:21:5c:
53:54:1e:3f:56:71:0f:5a:f5:9f:31:b7:22:66:95:
df:77:6c:30:ba:a6:77:23:ec:cd:77:75:5d:8c:01:
d6:7d:8f:30:eb:dc:4e:a5:90:1e:f8:c3:cf:d6:37:
e4:f6:83:77:ae:4b:73:82:d6:6a:29:ac:fe:0b:f9:
89:9e:96:10:b2:cb:32:f9:a0:b9:d1:72:15:e8:4f:
48:50:cb:2d:51:57:5a:55:1f:1a:cf:55:2c:cc:6e:
3f:05:48:70:00:49:8a:10:2d:7b:5a:26:20:cc:33:
b4:5e:7c:94:30:b6:67:b5:dc:eb:cc:1f:eb:2e:8a:
1f:de:84:d4:0a:63:1b:a5:6a:93:6e:01:d1:4f:e5:
2e:5a:56:9a:4e:9c:77:fc:b3:f5:cc:37:5e:0b:a1:
b7:e9:16:32:73:3d:bb:98:69:cd:d6:84:3a:1a:40:
d0:03:53:84:5c:c4:57:84:8c:60:fe:e6:bb:9d:7d:
e4:7a:ab:5c:16:87:47:6f:5b:05:4a:36:db:40:23:
04:86:15:60:57:32:82:a0:3a:31:de:36:c4:a5:c5:
08:14:14:45:83:63:6d:61:09:5b:01:94:43:9c:26:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D5:39:B1:1C:16:4F:FB:7B:D5:E2:0E:D0:4F:C0:E3:4D:16:FA:8B
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:00:7d:46:34:d1:ae:35:9e:cb:f7:25:b1:36:77:3e:44:c2:
87:5e:c2:c2:51:29:e1:b5:cf:a5:d3:79:56:6e:ae:4b:2b:60:
ee:e4:af:5e:81:27:14:65:05:3d:4b:26:7c:c1:de:82:0b:a6:
7a:57:23:06:37:b6:10:5f:89:e2:9d:ea:a7:f0:36:cc:26:52:
ad:28:1c:c0:3e:48:10:f7:c6:b5:bc:a6:ab:e3:b7:36:01:67:
c0:ed:10:6e:eb:ff:f5:c6:53:6e:b2:20:84:4d:56:99:68:5f:
f2:6e:e5:df:37:29:af:9a:39:3b:07:7b:2a:aa:a6:63:40:ef:
e1:a0:66:48:58:e3:a6:cd:36:3f:fb:5a:62:3d:f7:bd:a7:54:
67:a0:69:f6:73:5b:11:e6:30:cf:6e:dc:58:4b:d2:72:d2:f4:
57:27:cf:d7:88:ba:5d:d5:b5:e2:b7:e7:c6:09:81:67:f2:d3:
ac:08:b5:31:88:77:42:74:c7:ac:60:d5:d7:95:51:2f:11:08:
fa:57:3e:0e:69:40:be:75:af:55:be:1f:47:90:09:a4:18:6f:
46:69:92:b2:25:8e:34:75:34:eb:43:dc:d8:63:e9:81:8a:85:
b9:ea:47:90:f6:96:98:d8:fe:b9:f5:63:9e:39:62:7a:39:d2:
23:10:62:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:26:31 2026 by rpki-client