
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
File: 58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json)
Hash identifier: cpw8Gi5IT1RwHKoHFZyD1h3WOqKwYIrnYrYw/Awc12s=
Subject key identifier: 8A:AE:64:DF:76:EE:99:81:BE:99:F4:9A:D0:B4:F9:67:20:5B:1E:3B
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial: 019E1F7EB850E3312659AE48265E0A65EC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
Manifest number: 0DC3
Signing time: Wed 13 May 2026 04:00:58 +0000
Manifest this update: Wed 13 May 2026 04:00:58 +0000
Manifest next update: Thu 14 May 2026 04:00:58 +0000
Files and hashes: 1: 1-iqnIyKfffTeip77QQglSkGC66k.asa (hash: tm5ocWQ4F8iL11rdh167B46m++zYGle2Ua0389CC5aI=)
2: 1-nCQN0VaQ2ael-H6q4WDuaNQ3YY.asa (hash: KIdLVAXXfbqG6AUAL9K0nR+wv3qEFvVz82UnXZsV/e0=)
3: 4drBeY0WR_A1GPJtZA4YXlykfh4.roa (hash: uPxG8eo/1XvDANn6qBOuvVB20xa9nluualatLIHzSnQ=)
4: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: SOFajTtHw0QJ24LhfJ/hpk8BeCNBjbpFdys7jDi4PSo=)
5: 7uHJu7In6geY62mGLWsA-BkgXxQ.roa (hash: pCDrNYSeQf8254wV63If3iDd+pDCOI3GCLUFpM1rWQ4=)
6: BOsl0qn4uIqkA_a-sd3d5l-tYXE.asa (hash: WTaPLVm9v1a65g9j7GNkbyW3n2otJVScGC1bf2hl4GA=)
7: BoeMKNwlhEwpOy1dRFh8Q6mpryA.roa (hash: hmgm/Pnh2iZKFyyt03L0VwIKzZWIKaWyCr/JtLV+SZ0=)
8: FWeLMrqzdI4hd96orsYQfK_d0Zc.roa (hash: /u234PjKVouqOKntVh4TgCtWCyFv7L7LbMqlU2f96A4=)
9: OpTtVKAksYNEjp3sCGLjB77TEtQ.roa (hash: CAYkdDo7AOeXQO9VIZQbkqyLJ0Mm55TJfWGJgk3xupc=)
10: m_98aREObyeD712Ey5gRbDiZuLo.roa (hash: O+Oki3q+yMkC01ENxqqfabIW79L+GAIiTNddxHZ4sdw=)
11: o0nlrJylYIGYsWBjRFGVnG7mqFk.roa (hash: ytLMden+iVQSZ4MVhXxgpNGbvtp5EMg2V51G3jlU0Tc=)
12: qEsk61krs4UNghsWKgM1rpZTsAA.roa (hash: zR7J3cxzeRnLNGTYl/CdMoo52lC6GVsx4Ud+EzU7nAE=)
13: xSo_S4mp4KylJ282tG2KBfx1kB4.roa (hash: y6cL2LAD2UaFnNZj8A3tj8qtOaCatFdh20b64QN2mxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:b8:50:e3:31:26:59:ae:48:26:5e:0a:65:ec:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
Validity
Not Before: May 13 04:00:58 2026 GMT
Not After : May 14 04:00:58 2026 GMT
Subject: CN=8aae64df76ee9981be99f49ad0b4f967205b1e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:72:50:b7:9e:47:53:a9:05:4b:a0:45:99:
62:51:c6:0f:f8:29:ac:7c:bd:5f:38:de:a0:50:7a:
46:1f:11:d0:3a:17:e3:c4:ae:e6:30:fd:ea:9f:4f:
da:79:4c:cb:3f:49:a2:e9:ae:82:94:10:de:43:02:
3c:5e:17:26:fe:22:71:3c:1e:1c:19:4d:e1:25:8b:
4e:75:32:24:27:5f:ad:df:d8:07:b6:df:57:ed:cb:
f5:f1:78:a2:9c:a5:18:a5:ea:e2:23:e8:21:fe:58:
2b:22:f3:6c:ad:40:92:55:20:29:8f:ac:f3:89:5f:
47:8f:f0:9d:d0:65:64:9a:e8:3e:79:aa:a8:18:f2:
93:a4:77:0d:a6:2f:f0:5e:01:36:f9:68:30:60:b0:
de:28:43:90:ff:2e:d5:ae:ea:e0:19:8b:5f:82:ef:
b1:12:0a:ef:fc:fc:43:5b:8c:70:85:7c:09:e8:4a:
9b:7b:81:3c:10:8e:bb:58:cc:f4:74:1c:18:e2:d1:
c7:a8:5e:9b:27:8b:99:a2:ad:db:0e:a3:49:d0:b4:
a8:5a:88:8c:da:88:8a:53:05:3f:d0:97:19:5d:3d:
c7:7b:be:5b:76:61:9f:8c:14:d0:e1:28:82:60:a2:
b0:69:dc:5f:40:34:0f:d3:6d:7d:99:75:75:7d:0a:
28:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AE:64:DF:76:EE:99:81:BE:99:F4:9A:D0:B4:F9:67:20:5B:1E:3B
X509v3 Authority Key Identifier:
keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a6:52:05:da:06:25:16:b2:97:ec:e1:91:c3:31:e1:a5:10:
b0:cd:d8:09:fe:13:3b:bc:d4:b5:2a:76:36:3f:85:5e:ac:4a:
db:ae:87:af:ce:24:2b:a0:90:be:21:58:f8:0f:49:8c:ef:f8:
96:31:89:21:ed:c3:40:ca:1a:a7:ad:4a:90:c6:85:79:fa:4a:
07:f0:5e:c9:b4:43:e0:36:fc:fd:00:42:40:e2:ad:b1:df:da:
91:aa:c6:32:fe:e7:c8:22:e3:38:dd:4c:c9:48:24:e3:3f:85:
2b:4e:e7:4a:73:d8:32:8e:8c:92:2f:78:42:c3:ef:38:5d:36:
ad:04:a8:b9:b1:5f:8a:ae:d9:ee:05:1e:1b:05:d4:b9:f9:b6:
05:a2:c7:16:81:c9:3c:78:99:6b:5a:a6:2f:c5:17:86:ef:eb:
bf:aa:93:f5:af:a5:bc:e7:95:47:69:3a:2d:20:f1:08:aa:5c:
27:1f:5a:11:af:18:84:a5:af:94:6a:79:2a:3f:01:50:9d:25:
2e:af:e5:ba:28:c6:89:3d:de:90:24:f5:e4:df:51:92:e5:e0:
f7:07:09:35:42:83:5f:09:a6:c6:81:a0:5f:a5:a0:a5:e3:53:
cb:14:e6:a4:01:f2:ff:73:ca:80:8b:b6:a7:3d:b4:65:89:ea:
27:41:5f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:11:22 2026 by rpki-client