
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json)
Hash identifier: tSOfp6x0MHc5tsIAj4eGPB3EBodFWLUy/bxNk9AqV4E=
Subject key identifier: 66:30:18:12:48:09:4B:68:05:B1:D5:DF:F3:67:C1:86:90:CD:80:C8
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01A102803A0A4D030A5A8627344141607947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
Manifest number: 1494
Signing time: Sat 03 Oct 2026 16:02:00 +0000
Manifest this update: Sat 03 Oct 2026 16:02:00 +0000
Manifest next update: Sun 04 Oct 2026 16:02:00 +0000
Files and hashes: 1: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: ZmO3Ep7BQ870ubbgP/2+wz0Mh3Dkfcz04qRmI33tEIE=)
2: 7jf8I0eBdO6b1-zkApo8w-11x1A.roa (hash: TAvMnNu0WnFxQxz9XL8UPta+cg+ATM89elfXvIUl798=)
3: BLTLVOtXSHYCVOoxyeo_0IvC-JY.roa (hash: NYaQAuEgTk5rfLHUlgc+7BWUhoUqRHnvCyLgXnpHIrs=)
4: JCYdzJTMcHHvvNsrGsRbncy3QwM.roa (hash: +DWRjinwclN/RO9c2/UhMsI9n5ugj19x09Oj5LQrJ7g=)
5: LVzm6PScS-DUr1dRA7Al1IZOWMU.roa (hash: XX+xZLdfHxaIHsXWoOFRjP0yYXn9msAV6LYRZEB20lo=)
6: Naq_nl1pE5uhLvd9ifQny82LIis.roa (hash: OYltBhd5Cp/g4vCxZqMX6TRvztkTMT5cyE/NCsPsb/s=)
7: RAlCx5dBkXErr4GLU_5m2X54NZU.roa (hash: ObC2XXv43nkDqryZk3TpQdoXImX/CEh8RrHJ0Kt/ht4=)
8: TbKjk9biFGhLJW-0EAJ-G1mE3dg.roa (hash: NXGH0uYXNrJkmlvbFICP94ZCbP2H5y85Tnuyfhnefi8=)
9: WRpDDqEVnBPTCAUWhvtGHnRTNpE.roa (hash: w26uNtXV7/rSV+FlLM4bjKvRX0N4Aqz+ftFHbrZVRBs=)
10: d2sssZgiWQxoiwpeGhpD4-ZdyBc.roa (hash: eiBlGU6Gm1VLOcjq2l2JBGaaGY93PAF3cSre6J4TW8k=)
11: nkciQnEuEjOQTOgeL1hdYkyj4wg.roa (hash: BWV+AnPSsesbRoWnrQx/NY6wOXo+WFzBX3YuFsngh7M=)
12: prwVIWLchRMQh4wLMP_5AL-rJeY.roa (hash: pBy/6NiY8dt/IGcrx7wYr9+LEFZ5rOBd3e190L4AGRc=)
13: qFCJx5kPHVIDEJbLb768fD6gip4.roa (hash: CJnw0mwbH5wAlci3rG6FQARWz8se15SlPgqgPC5AzgM=)
14: ydtp6Ra8yv13dJRlj5U4vEpL5aQ.roa (hash: JitW8Hw4fE5VESE5RyEswxbTMms7e/IC9YGFZn0te0w=)
15: zgNSYrgLKBjJKEAyj0UQCw39lwk.roa (hash: A2YWYKZi8ufFfaCpWTZIhU0UIlJwdT93/7iunuMFhi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 16:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:80:3a:0a:4d:03:0a:5a:86:27:34:41:41:60:79:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Oct 3 16:02:00 2026 GMT
Not After : Oct 4 16:02:00 2026 GMT
Subject: CN=6630181248094b6805b1d5dff367c18690cd80c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:04:98:42:bc:74:f4:91:5d:b4:5f:9d:14:
ed:35:cc:f7:db:d2:f8:9d:b6:ee:64:26:f6:2e:2b:
22:71:37:59:de:8e:64:67:c9:d7:19:b7:b3:9c:c3:
07:3a:eb:0b:a7:40:e9:bd:e1:a4:b2:7f:d8:26:71:
58:7e:9e:8d:d1:a0:ba:24:ff:87:f7:e3:58:e3:61:
85:11:ec:be:09:a0:d7:1a:6c:4a:72:86:da:93:ca:
e9:5d:ed:16:59:d6:d1:0e:40:90:57:13:30:db:f9:
da:bb:3d:a3:64:9d:f7:86:8b:c9:40:d2:78:e7:cc:
6a:46:37:19:73:51:04:1c:46:ac:73:9b:87:b3:2c:
bb:5e:9b:04:85:a4:f0:13:19:06:15:bc:66:54:47:
a2:9e:f0:fa:2f:86:89:0d:a4:d3:3e:63:cd:8f:90:
45:a4:0e:64:3c:eb:8c:31:dd:32:60:f3:b7:a3:83:
9c:71:f8:db:d4:19:2c:d4:0b:df:74:8d:f0:e6:37:
ce:54:6e:b2:d7:8f:18:10:eb:41:ef:f9:cf:6e:18:
88:cc:0c:8b:64:63:57:70:04:68:58:64:ff:27:25:
0b:8d:c8:03:59:fd:46:45:00:89:bb:86:e6:8f:ee:
83:d2:84:c8:c5:ca:4a:ef:19:92:4b:c2:e8:b8:8a:
1c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:30:18:12:48:09:4B:68:05:B1:D5:DF:F3:67:C1:86:90:CD:80:C8
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:87:ad:ef:2c:04:b5:79:48:e8:46:b1:ed:a5:58:47:52:e8:
37:e0:de:6d:53:c3:07:5e:f3:b2:cb:1d:f0:96:13:fe:53:aa:
fb:a5:06:6f:58:76:d2:79:05:d5:2d:00:b0:b1:54:60:cd:40:
f9:4f:02:f1:e7:30:ea:07:22:67:db:29:45:ab:34:71:d1:7d:
98:ab:d6:d6:95:0a:c3:b2:d6:a9:cd:69:16:bc:69:64:b5:34:
3b:b6:c1:77:f8:4c:92:66:00:30:f5:9f:1b:db:51:ff:1b:e2:
44:c5:b8:b0:51:27:a8:a7:30:07:69:b7:84:80:6c:25:dc:c0:
62:90:12:7f:18:7a:05:12:31:41:b5:69:b5:7a:d8:e1:e3:4b:
51:b7:4f:53:da:65:90:dc:dd:d9:bd:1f:81:ed:64:55:ed:0d:
b7:08:b4:98:13:0c:ec:2f:42:72:d0:23:c0:6d:64:06:42:de:
42:cd:14:7f:57:03:0c:7e:43:f3:dc:67:03:a7:68:27:78:1e:
a8:9f:1b:88:96:8c:1f:9e:a1:99:7a:eb:cc:54:02:38:90:9c:
3f:b8:39:eb:62:47:c5:ba:d9:cf:eb:a3:77:9d:44:19:b5:3e:
91:97:ea:6a:d2:02:c5:56:b9:e1:c2:4b:5b:2c:95:a4:84:4b:
bb:45:98:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECgDoKTQMKWoYnNEFBYHlHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm
NjljZGEwHhcNMjYxMDAzMTYwMjAwWhcNMjYxMDA0MTYwMjAwWjAzMTEwLwYDVQQD
Eyg2NjMwMTgxMjQ4MDk0YjY4MDViMWQ1ZGZmMzY3YzE4NjkwY2Q4MGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzoEmEK8dPSRXbRfnRTtNcz329L4
nbbuZCb2LisicTdZ3o5kZ8nXGbeznMMHOusLp0DpveGksn/YJnFYfp6N0aC6JP+H
9+NY42GFEey+CaDXGmxKcobak8rpXe0WWdbRDkCQVxMw2/nauz2jZJ33hovJQNJ4
58xqRjcZc1EEHEasc5uHsyy7XpsEhaTwExkGFbxmVEeinvD6L4aJDaTTPmPNj5BF
pA5kPOuMMd0yYPO3o4Occfjb1Bks1AvfdI3w5jfOVG6y148YEOtB7/nPbhiIzAyL
ZGNXcARoWGT/JyULjcgDWf1GRQCJu4bmj+6D0oTIxcpK7xmSS8LouIoc4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYwGBJICUtoBbHV3/NnwYaQzYDIMB8GA1UdIwQY
MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt
ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj
LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMoet7ywE
tXlI6Eax7aVYR1LoN+DebVPDB17zsssd8JYT/lOq+6UGb1h20nkF1S0AsLFUYM1A
+U8C8ecw6gciZ9spRas0cdF9mKvW1pUKw7LWqc1pFrxpZLU0O7bBd/hMkmYAMPWf
G9tR/xviRMW4sFEnqKcwB2m3hIBsJdzAYpASfxh6BRIxQbVptXrY4eNLUbdPU9pl
kNzd2b0fge1kVe0Ntwi0mBMM7C9CctAjwG1kBkLeQs0Uf1cDDH5D89xnA6doJ3ge
qJ8biJaMH56hmXrrzFQCOJCcP7g562JHxbrZz+ujd51EGbU+kZfqatICxVa54cJL
WyyVpIRLu0WY6w==
-----END CERTIFICATE-----
Generated at Sun Oct 4 00:09:29 2026 by rpki-client