
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier: E2LJJwsmgSyK/I3Ykx1bO7BDcXJ/qyALFMs7OMkg1Uo=
Subject key identifier: 37:D1:98:46:9A:76:FB:6F:A6:D5:5A:4D:24:12:9B:53:11:F8:D9:C8
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 01A0D9837E94EE06DF38436CFEE7B0669A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number: 0ABE
Signing time: Fri 25 Sep 2026 17:01:08 +0000
Manifest this update: Fri 25 Sep 2026 17:01:08 +0000
Manifest next update: Sat 26 Sep 2026 17:01:08 +0000
Files and hashes: 1: 42iMMMRyCj6t5Gb7iHxpdxdIZnw.roa (hash: oV05xJ3ianPj2d2p5u2rAJjPxzr+kZmbQ6SGxfEYdL0=)
2: 9skBFy-gVmDl-nkjxXAKgHcli-I.roa (hash: 7gSJ6zN5NW6BGUihBJnVoBFmgqEGP4fmTIDMGINspMU=)
3: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: a32Jiwx0rpOWgBnzNgCy95ZKPYbd7lOxTUeHk3hZjRE=)
4: CYN-6kj2u9HIpYoQ3hmgvSsB35k.roa (hash: uoS5teZaIQEfymaaNdwi0VIQaDXV2jMrircb9XoayTE=)
5: Cn2XHyeB81WqaZSjg7QBfwHD8CU.roa (hash: +H1tXQmNkJ0PpJOqloukby4uXtryrpKFGs7NDZGKF+U=)
6: Eh1zKu3hD9M9mfNTxR_zbWN_UoY.roa (hash: LmM/Lacelv6UENbWxP7rIgedmTwgXdIq3BTIdVtbP+c=)
7: GpC8kKK46MldSup1gVZrU7Mojzc.roa (hash: 6Lu5Oq012D9LKfKVQhXUujBxyGtMssHHbOSP5uQ8bhw=)
8: IzioJZxghFwgMTnVeVHHpMj-swI.roa (hash: wRkEhmwjz0Z3CuNMqban/3il9wF+W+3UoPcrnrnPUQI=)
9: NGpHbF0qELe-yypRyZG8QYDDkQ8.roa (hash: STZ8+oAAgWpB89YtrloGqm8ffW2z9KJfLq0rIu0hcT0=)
10: RHYHLfX7MZwqTOjtai1Px4dZdUk.roa (hash: 9gqUDjHutLNZlP+IlfjuYLEG7YjcoaY1UFU3hwr+l/I=)
11: U0T21bHsT2j1MueUQfzfVxTuFZQ.roa (hash: 8mdLmQ605wsI8HkkExAKeuL0NcxSn5gGLXOqg42+2n8=)
12: ZTRYP_xNQ-xHfjwU3V1iHE8I5Sk.roa (hash: 82wNZlZVa9PTuuaZD0iq9g3BjS5GghQ+K3v6FuHGgcA=)
13: eSvAFbt4I_ny3rlI1qsQVvR095k.roa (hash: ASQ/McMElv2jG1XUE+eDIGnRMZkt0bsbVgcxyB63q5k=)
14: fd8bJA8DM-0zr8RLGfMJuFRYj1U.roa (hash: AOSETmD6hQ/zex92QpyDr+KfP3AtnIbAXfSo/7qIWOQ=)
15: gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa (hash: YAjRepSXiV21hnlqtzGBka5AQsC2Q/c9dyI4/lADp+0=)
16: qfDAGHDDZhbG_VUXj0goKE-xsTE.roa (hash: 00PBxTZATabx2MDk9b4T2x5pqNTy64WZzmYqaLHUFhk=)
17: qp8bK0_zELwwRnea3kYnPZuv5kU.roa (hash: KKFbcXLRieVJeInE5UEIj+fyTeLEa9fncQ29NqsfdFw=)
18: u5dp8n3I7jflzjFJbZJ5BPdSfSg.roa (hash: SdwZS8EmIER4C5RBFO+zi0xPjMT8sLGC4SKpUhZ0ViQ=)
19: xuhDpHE2bnYdJOoJ6yInvIa6YrE.roa (hash: ohBVT4HyJLZk/hzU7rkg4mhr642F6fJ3Kl5PbeKWAPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:7e:94:ee:06:df:38:43:6c:fe:e7:b0:66:9a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Sep 25 17:01:08 2026 GMT
Not After : Sep 26 17:01:08 2026 GMT
Subject: CN=37d198469a76fb6fa6d55a4d24129b5311f8d9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:92:fc:dc:52:2a:d7:07:1b:5b:a6:86:d0:1c:
3d:51:57:70:02:1d:9d:89:0a:2c:a5:10:44:02:fb:
b5:28:27:40:c8:dd:db:7b:d6:58:5c:86:fe:e4:45:
9e:7f:35:18:cc:93:28:0c:06:c4:b1:78:d1:0a:2a:
c2:02:39:9c:7c:ff:0d:fd:7d:b9:a6:80:1e:05:b0:
3c:8e:12:67:ba:85:ea:34:fc:8f:6c:6c:c2:c7:c3:
7a:7c:41:9f:8b:c2:9a:0a:49:23:17:20:d5:82:30:
f7:40:88:02:d9:70:c0:67:e9:21:2c:29:23:3e:53:
4b:a7:43:2a:05:47:16:f2:70:da:95:cd:33:a9:58:
2b:c7:0f:b3:0d:25:9a:1c:f3:2a:1b:17:1b:20:4c:
1f:9a:25:4c:88:7b:df:bc:2a:10:2c:57:27:62:d4:
96:29:8d:73:4e:54:19:d8:6e:e7:5a:c2:16:ef:92:
85:52:df:1d:d3:98:18:0d:2c:0d:31:17:1d:1d:98:
69:dd:79:36:96:11:9b:10:83:e6:af:38:f2:44:ff:
92:71:d4:91:ce:94:3b:cf:95:ef:63:03:24:eb:58:
31:59:4b:79:ea:01:6e:bd:0b:2c:94:72:44:be:ca:
e2:c6:f0:0f:b4:51:09:f6:10:c7:4c:48:c6:bd:91:
e9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D1:98:46:9A:76:FB:6F:A6:D5:5A:4D:24:12:9B:53:11:F8:D9:C8
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7a:eb:dd:62:40:36:0e:43:58:5f:2e:8a:d4:07:7a:40:0f:
0a:2e:b1:80:c2:f5:7e:ca:90:09:5c:c0:47:a2:0b:4a:29:97:
34:a8:2e:07:ca:94:d5:28:61:b0:93:88:11:41:ba:6e:00:2b:
e7:02:a3:f4:33:93:61:b5:fa:0a:ff:8f:0c:cf:6f:90:61:a7:
f6:06:b0:b4:42:ff:66:34:08:2c:91:2a:e0:d8:65:5a:1c:dd:
ce:e7:01:83:b4:57:bc:ca:97:32:df:7a:75:a8:56:15:ed:ad:
0a:f7:02:8a:ad:ff:6d:59:5e:23:23:df:58:eb:9d:e9:ea:46:
24:4c:3b:1a:ec:e1:39:3e:32:5e:73:85:20:3e:85:bb:c1:8c:
57:fa:6d:35:1e:1f:dd:41:5f:bb:cf:dc:d7:ea:33:8d:f3:25:
72:d1:1b:63:90:6a:4a:d1:3c:19:13:52:9b:5c:98:f6:7f:05:
1a:89:62:bc:42:e9:54:3c:fd:fe:22:e2:a7:fe:18:c2:b3:8f:
75:4a:a6:b9:e6:03:73:74:63:8c:5e:6d:6a:63:4a:70:24:3f:
b8:8c:65:6a:b8:2c:52:fc:11:e8:d3:7f:68:45:1e:89:b7:20:
c7:e0:c8:2c:07:26:ff:55:34:b5:89:75:13:31:11:4d:68:a5:
79:f7:d2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:35:07 2026 by rpki-client