
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
File: _E0Gl4lpqL2rbWNZBi13geA0Sco.mft (raw, json)
Hash identifier: IDoIDmz4Lb09cFKl9VLH7oo2EwkYomXe+sXjsiQo+G0=
Subject key identifier: DF:B8:55:A4:A0:22:43:AC:0E:72:CA:1D:40:FB:08:CC:1F:C4:F2:2E
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 01A0CEC8A3FD6B9FA8B585D002AEF9BFF822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
Manifest number: 1A84
Signing time: Wed 23 Sep 2026 15:00:50 +0000
Manifest this update: Wed 23 Sep 2026 15:00:50 +0000
Manifest next update: Thu 24 Sep 2026 15:00:50 +0000
Files and hashes: 1: 47j10L2FA0h0SXWX0_tR6wJ7Q0o.roa (hash: 7u5kHtfhaCssp4lrIEgNlB6JTB2fBx54wnUP6zs21K4=)
2: 7iV8Im81eBthIsfk2nHn7mrcL0I.roa (hash: DMePp37AdPaqIdkG+BXAwHKQ/GhPpo+29tJyj4JJmcA=)
3: 9L3U50vXnrZHvDkXweg9rCkbhrY.roa (hash: Y2oEmMQ+H+sFspRu0+it/tWlZrUGUN5NZppwSwZgOH4=)
4: AdKsvqaXiePPmCvq4AXis3AzPUE.roa (hash: mDooRsVJYcbpnCTMKMMlLqlbhhCwSBdmXTbtG5YkI+c=)
5: GQHGzy31Y1UPpJ6RA2opHrfR_lw.asa (hash: MRpibHtTwPHhX0RMT2EhPOPMcjncVJE99qXqWcHjWrI=)
6: _E0Gl4lpqL2rbWNZBi13geA0Sco.crl (hash: /2jy+ZQFq6PJTUpyk6zTAwMPxyiuEwa8tkJN7NHj5Yw=)
7: ejT2O82rAZ_iuHzk2T-2HoOL_ac.roa (hash: ia9NgZrL/DdllfSMu50SQNusjrApTyAFAcYBy1z+uwU=)
8: fpfJfS_0BfVlwGpnzcKEFoZJphs.roa (hash: 2jUL3U2b9HcRGTwEQDd4xTGEfKZgzgW50XHsjSJkMpM=)
9: n8JXJeOOoOd0ZB8psyxJVOa3bs0.roa (hash: 2oRtWGrNewLpxhVsijupAz+Nq9JEWrlYaXgCA/HOxYE=)
10: vsBaA-DAjB_pb-CXPiGUcKQM0Vo.roa (hash: 8fTcamSpnyKmu51ZjoDnGRELER/PxBhqwN2tDlXJQV0=)
11: zl9a2F2XfJaNTOt8qhBiHTQEm7I.roa (hash: VZiQjj4p8R2MxeseRwU4vGaPWJyrD8qmEk6zhfGY7qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:a3:fd:6b:9f:a8:b5:85:d0:02:ae:f9:bf:f8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Sep 23 15:00:50 2026 GMT
Not After : Sep 24 15:00:50 2026 GMT
Subject: CN=dfb855a4a02243ac0e72ca1d40fb08cc1fc4f22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1e:d5:13:52:7e:4f:4f:b3:3f:52:88:78:f6:
28:ef:f1:96:1c:a5:a8:ce:d3:73:a1:40:65:23:79:
3e:35:f1:0f:b5:19:25:93:c2:f5:2e:e5:9d:33:e8:
de:a9:fc:e7:c1:ba:46:24:a8:24:2c:de:8f:89:16:
03:76:79:ff:93:37:bb:50:98:0a:6a:eb:73:e9:2f:
bd:bc:65:25:b4:af:0b:98:1f:09:6f:bf:fd:28:f1:
8f:6f:a7:a1:09:35:2a:67:ce:d8:f9:38:11:af:30:
87:30:10:a8:43:a1:5e:72:61:d2:30:96:70:c3:9f:
1b:1e:30:5c:c0:3d:35:4a:b3:0b:0c:97:c1:33:38:
0b:94:9c:18:17:c5:74:f2:ab:f1:19:04:7f:5f:a3:
10:b9:02:d5:7a:ae:e1:9b:6f:b6:24:dc:22:19:8e:
2a:c2:13:59:8a:7e:eb:ba:cc:f2:40:ea:12:b4:e5:
26:77:07:2e:42:45:5e:46:66:03:2b:9a:c0:b9:bf:
74:14:55:ad:37:f8:fb:09:11:86:f6:71:4e:7a:df:
64:ca:56:56:b7:80:2b:c1:52:14:0e:db:32:92:90:
17:14:ce:c4:37:91:f9:83:81:95:8e:c3:dd:a2:a8:
53:53:62:27:b2:ec:d3:57:72:79:a9:66:db:7f:c5:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B8:55:A4:A0:22:43:AC:0E:72:CA:1D:40:FB:08:CC:1F:C4:F2:2E
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c9:81:96:0c:ff:12:af:51:bd:18:c8:45:08:35:39:38:74:
e4:54:27:3c:89:bb:0e:f8:b9:1c:ca:75:e0:f1:fc:86:8d:1a:
9b:fa:e8:8a:de:e2:3b:4f:a1:24:56:04:ab:77:ab:58:3d:a6:
a6:ee:bb:c6:fd:10:98:5d:19:56:87:c3:6c:5c:9a:92:2f:fa:
33:19:f2:08:3b:23:4c:77:a7:23:7a:b7:83:75:89:8b:64:0d:
a6:50:54:f9:8c:b3:d3:ee:0e:67:d6:ca:62:74:38:9c:7e:24:
2e:ec:73:7e:00:e6:3d:9a:11:f2:30:68:1d:3f:e4:a2:90:e3:
4c:32:11:7b:b3:77:39:36:13:e2:fe:42:d9:49:0e:a1:d1:c3:
94:62:0e:56:da:f3:51:30:6f:ac:a8:3e:5b:96:a8:f4:ca:7d:
42:2a:f9:8d:6c:6f:18:ce:ee:15:1c:7d:2b:e9:99:39:47:47:
36:e6:f8:f0:d0:1e:6d:d7:b3:30:6e:26:00:92:64:50:b4:e7:
f2:70:bc:c0:f6:c0:25:80:21:0a:16:41:58:82:76:98:9e:62:
53:2e:3c:9b:31:35:31:3b:f1:d2:e8:51:c3:ea:a1:e4:14:6e:
d2:01:f2:f4:a0:1d:df:d9:97:66:3d:5e:75:67:55:bc:ef:5c:
7c:ca:36:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:42:39 2026 by rpki-client