
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
File: 76W2I0ehtkzqSaKrOrSYPDSGH7I.mft (raw, json)
Hash identifier: LsWmz1KUOsUdM3SKtgNotQ/cO8kqpg1BJOGKWi/tkKg=
Subject key identifier: EF:D8:F5:65:5B:7F:64:19:C2:55:79:C0:95:59:4E:9F:FD:9F:ED:77
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 01A0CD47ACA118223C4FB8356CB7297AC768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
Manifest number: 04B4
Signing time: Wed 23 Sep 2026 08:00:21 +0000
Manifest this update: Wed 23 Sep 2026 08:00:21 +0000
Manifest next update: Thu 24 Sep 2026 08:00:21 +0000
Files and hashes: 1: 30rSP67H4gX5RMgOxT5dBfg20_g.roa (hash: pLbD0z+swzOFRKhR78b058ocPOqvyBgBR9Tg94u9QPE=)
2: 68EZrauB0qv4UqFcrYI1HWiTafA.roa (hash: bosTecBYxP1S8RTUkYY+Q2j0KSr6GAn+ipiGx0hncVw=)
3: 76W2I0ehtkzqSaKrOrSYPDSGH7I.crl (hash: 8CAvYvxDtGuvtdI53BzccobOdsj1Q6RLJ7VwgGnfI5U=)
4: C3ruCzQFpObijbg6nKyWeHWjy4U.roa (hash: Y2PICPggtqJuBNrLg9GLriE7TFiGRSa8ctzypTp0k5Q=)
5: FOVnA7fzKyM0Cd5APfuCDllFHqI.roa (hash: /KXASaDL9GJu3XgGBmPZMKdfaA+uKruntNpUP5JVRuI=)
6: FoL3qyEY48cw05gLQhNBtfACHmc.roa (hash: yngu0V2+UyneI185UKcvs0YYxoSzgQOcyO77l7Bzxy4=)
7: M3YvO3dRBUI3j6GH6zoCRrsgabE.roa (hash: P69ndgMJ0iBMDkBYuqCtuk6h1y6LBH+odfA2qJ6I8BI=)
8: V9bz-LIlrLlNcy_JnZK_x-nhl2s.roa (hash: EweRvUyQqzzdZsQlbOmurMzzeItcgxBnOe1Rf0PMP7c=)
9: WOK1iT_PCPPQV6sHVEx5Px_Y9fE.roa (hash: 94hNqjQI8cFTU6a6Kw0AEcP1Xdns+Wtf+3N07hYhGa0=)
10: fzWlLGEPBxz1DR-_ybKSosveito.roa (hash: PMju7hqmYk5olTtNec80dTLKx9r70k1T9axrJxxCFmQ=)
11: iuSpcrmsV4f1Ysb1cVg-3onOaZA.roa (hash: c9q3XFMjCEy0sE0Ce3zydIbkqouf4LIzsM2RvAlYwio=)
12: qNh0UmKDnVwJ1plmvMfwyW-_x6g.roa (hash: uoI/K/0CWRIMUiMbHvxIttKDmhXri5vSIGGaQwk3CeE=)
13: sDq5U53kui-SouGQwvgx88wuoqc.roa (hash: cLZsm7xp+yinJ4qALYPDYjVVs4ZwSgrcr5htqd8PthY=)
14: v6Pv-kEkRrfjzOCed_kUA65966Y.roa (hash: CoHSYThzOG+8tdxTbQ2/cIgxRpJ0V5Salz29wa/zebQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:ac:a1:18:22:3c:4f:b8:35:6c:b7:29:7a:c7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Sep 23 08:00:21 2026 GMT
Not After : Sep 24 08:00:21 2026 GMT
Subject: CN=efd8f5655b7f6419c25579c095594e9ffd9fed77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:be:0b:2c:1d:77:06:e4:55:16:0c:6f:a7:
76:97:19:04:51:2a:15:cf:a3:a3:19:9d:ab:20:42:
9b:38:7d:da:ff:75:43:d3:e0:82:9e:95:ea:ab:bf:
01:f6:a8:3a:65:fc:46:0c:16:2f:d6:8f:ed:1c:91:
33:19:8f:26:a6:19:d6:8d:58:d7:1b:91:fe:7d:5d:
5c:e8:93:4c:f6:a0:85:21:d8:89:92:c3:85:d6:73:
69:ef:2c:dc:1b:f8:5d:95:af:a7:9a:75:b8:22:5e:
a6:06:56:67:9d:9f:47:db:9e:f8:26:53:b4:45:93:
59:3c:f5:0e:7f:1a:f8:f3:a9:ad:64:6d:38:b9:7a:
ec:9a:80:f6:f3:bb:33:3b:31:56:ad:09:23:71:a5:
c1:34:c4:92:ef:48:a9:f9:5a:17:37:af:50:e7:01:
6d:fc:81:b5:01:ec:70:2a:29:70:cd:35:35:da:80:
d0:2f:e8:22:1c:db:31:0d:28:44:2c:96:b1:7f:7a:
e3:0f:86:7e:65:5f:3e:76:16:30:3a:db:22:e8:a5:
18:22:4b:18:f0:18:38:46:29:47:18:b7:ae:c0:e8:
c7:26:9e:ee:f7:18:9c:2e:5f:4f:d3:fa:69:c0:6d:
db:f7:63:0c:3e:6e:99:42:a3:c6:a0:0d:1b:54:dc:
ce:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D8:F5:65:5B:7F:64:19:C2:55:79:C0:95:59:4E:9F:FD:9F:ED:77
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ef:0c:d6:0b:15:cc:23:0f:25:71:60:28:7e:92:f0:2c:86:
12:15:6a:5a:1c:4e:fb:fd:e3:26:91:fc:0c:fa:ba:92:61:53:
fe:85:1f:e5:48:07:b9:e4:90:c0:cc:b5:f0:bb:84:47:a5:db:
e7:e3:c5:62:53:3e:df:a2:8c:ed:76:40:7e:97:ce:73:91:0d:
80:c3:1e:79:fb:65:d3:0d:00:30:66:d5:40:c4:68:a2:db:fd:
f8:13:6a:8f:ca:4c:bd:a8:61:72:31:de:f1:98:fa:13:d9:a3:
5e:38:3f:36:b7:af:53:46:85:63:87:d7:16:5c:09:98:28:63:
f6:30:9f:e1:e1:34:44:41:a8:22:c3:c2:6f:0b:54:47:6a:6f:
32:bb:81:f6:88:f0:c7:43:2a:cb:12:03:3b:20:db:aa:00:4f:
dd:14:d9:a1:8c:45:49:45:0e:40:1d:89:ba:92:ed:77:e6:61:
7a:60:53:d5:52:19:38:06:4a:be:7e:80:7e:58:04:04:18:71:
62:66:af:f6:90:1e:db:15:e5:d3:2b:f4:29:ea:ff:40:18:be:
d5:3d:b6:89:bd:56:70:38:ad:4e:87:49:34:99:ec:f1:b1:42:
f6:b7:92:75:1e:36:65:c4:01:6b:2a:94:77:d7:75:81:0d:2e:
e9:a8:47:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:27:43 2026 by rpki-client