
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
File: 58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json)
Hash identifier: rmh0V7Wq6ERJslNP+dMqYmnr92G0vBSsLj6CdOHtH34=
Subject key identifier: BA:4F:E2:0E:07:86:9D:FB:91:8D:89:9D:74:28:3D:A1:CE:84:78:FA
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial: 01A10E15426014CFBF2C8D5B37AFAC88164E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
Manifest number: 0F49
Signing time: Mon 05 Oct 2026 22:00:36 +0000
Manifest this update: Mon 05 Oct 2026 22:00:36 +0000
Manifest next update: Tue 06 Oct 2026 22:00:36 +0000
Files and hashes: 1: 1-nCQN0VaQ2ael-H6q4WDuaNQ3YY.asa (hash: KIdLVAXXfbqG6AUAL9K0nR+wv3qEFvVz82UnXZsV/e0=)
2: 4drBeY0WR_A1GPJtZA4YXlykfh4.roa (hash: uPxG8eo/1XvDANn6qBOuvVB20xa9nluualatLIHzSnQ=)
3: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: UAyWrwAnzjyce7m5kyS/PZjgLx2igUT27HGW5yj43do=)
4: 7uHJu7In6geY62mGLWsA-BkgXxQ.roa (hash: pCDrNYSeQf8254wV63If3iDd+pDCOI3GCLUFpM1rWQ4=)
5: BoeMKNwlhEwpOy1dRFh8Q6mpryA.roa (hash: hmgm/Pnh2iZKFyyt03L0VwIKzZWIKaWyCr/JtLV+SZ0=)
6: FWeLMrqzdI4hd96orsYQfK_d0Zc.roa (hash: /u234PjKVouqOKntVh4TgCtWCyFv7L7LbMqlU2f96A4=)
7: OpTtVKAksYNEjp3sCGLjB77TEtQ.roa (hash: CAYkdDo7AOeXQO9VIZQbkqyLJ0Mm55TJfWGJgk3xupc=)
8: d9wb1eF6Kgr5egZh0GmYzM3mWyU.roa (hash: j4UwBax/dxRdEVE/m/yu7Cwiok31VxQpLQtQWVklMoM=)
9: m_98aREObyeD712Ey5gRbDiZuLo.roa (hash: O+Oki3q+yMkC01ENxqqfabIW79L+GAIiTNddxHZ4sdw=)
10: o0nlrJylYIGYsWBjRFGVnG7mqFk.roa (hash: ytLMden+iVQSZ4MVhXxgpNGbvtp5EMg2V51G3jlU0Tc=)
11: qEsk61krs4UNghsWKgM1rpZTsAA.roa (hash: zR7J3cxzeRnLNGTYl/CdMoo52lC6GVsx4Ud+EzU7nAE=)
12: qaVO4z7HM3tbkG5gEvMn68wSuWU.asa (hash: JAi0GABFFurEvBhUtWlfXnuuHV8d7a+Pj2wZEVd8Pus=)
13: uFDhrp45x2S15YuMbH58dJYEMFI.asa (hash: AUBNykXKGbFKhvh9Mvpa3SOfRAcYIzZmiYje8ZwFI3k=)
14: xSo_S4mp4KylJ282tG2KBfx1kB4.roa (hash: y6cL2LAD2UaFnNZj8A3tj8qtOaCatFdh20b64QN2mxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:15:42:60:14:cf:bf:2c:8d:5b:37:af:ac:88:16:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
Validity
Not Before: Oct 5 22:00:36 2026 GMT
Not After : Oct 6 22:00:36 2026 GMT
Subject: CN=ba4fe20e07869dfb918d899d74283da1ce8478fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9a:38:b1:ce:53:a9:fa:6f:57:00:23:cd:bd:
ba:a9:2e:b4:78:2b:8c:56:dc:ef:f8:4e:3a:f1:59:
be:56:f6:18:c1:83:f2:76:37:67:a0:a3:53:14:08:
2e:9a:2a:9e:79:40:a3:e0:f0:04:84:1f:32:ae:a4:
a6:45:48:65:d9:3d:b4:15:4d:92:4f:ad:a0:1b:6c:
f2:77:82:01:0c:d6:ae:8b:1e:fa:81:b1:6a:ab:cd:
8e:1e:9e:04:da:ed:5d:01:7d:5d:60:9e:d2:b6:e5:
c2:47:3a:1f:60:0b:c5:7d:c5:8e:7b:8d:cb:33:4e:
59:5e:10:56:5f:89:5d:d1:a2:63:e1:62:4c:2b:1c:
9a:93:78:e2:6c:a6:a4:bc:37:cb:38:d2:a4:26:62:
07:d3:6c:09:11:92:44:e0:45:fc:63:82:a1:f7:a0:
cb:9f:f9:89:6c:6f:08:5a:e8:2d:71:29:13:7e:c8:
62:ca:bc:1e:85:d7:cb:b3:de:2b:f4:96:4f:69:c3:
40:e4:4e:a0:8f:e9:22:e9:ab:0c:af:03:44:4c:94:
67:ab:6f:74:6a:f6:ef:ca:fa:6f:56:a0:5b:a5:7a:
9b:7b:9d:a3:c9:03:3f:e6:7b:7e:5c:85:31:5b:09:
a8:a0:62:d6:ce:93:27:56:94:68:5f:9c:a5:3e:83:
25:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4F:E2:0E:07:86:9D:FB:91:8D:89:9D:74:28:3D:A1:CE:84:78:FA
X509v3 Authority Key Identifier:
keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:72:bb:3d:a7:00:f9:d4:95:8a:e5:89:cc:8b:13:30:3b:55:
f3:7e:3f:1d:da:f3:64:f0:8b:7a:1b:cf:fe:3c:7a:d5:1e:b9:
a9:c2:36:7e:3a:22:84:a7:8e:5c:19:1e:ea:41:45:0f:32:34:
2b:80:c0:53:74:87:15:5d:10:34:64:eb:25:62:ca:32:a4:6c:
40:82:19:e2:2d:c1:fa:05:02:83:8d:fa:4c:05:77:65:03:74:
7b:5d:01:ee:b5:5e:62:f2:11:37:da:f3:cf:49:38:a4:be:85:
67:23:f3:c2:3d:88:7a:7d:2d:e7:f4:4b:4c:11:3c:bd:8d:e8:
24:37:f8:bd:ea:47:63:55:a1:30:70:98:4f:42:81:f5:44:15:
81:0e:48:52:86:f1:74:de:8c:8d:e8:b3:25:a7:c5:5c:2d:6a:
96:34:43:5b:1d:bb:45:21:c0:6e:25:b8:aa:65:22:ef:22:cc:
61:9c:e4:8b:f1:79:a0:ec:55:d8:49:8c:6d:6f:21:3d:82:ba:
91:75:79:49:82:51:26:b4:ed:57:6f:96:f0:ae:44:3d:52:85:
59:ec:75:0b:01:57:44:01:07:b1:2e:54:50:d1:52:0a:03:b5:
85:e9:ea:01:db:f9:67:39:fa:3d:ba:c0:c0:de:ee:97:d3:66:
2e:49:91:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:40:58 2026 by rpki-client