
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
File: 00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft (raw, json)
Hash identifier: BZGFyBeiEpbLAzum5DvRPCskfdQ+uVBdiZtiAqyAVoA=
Subject key identifier: A8:45:62:D6:1D:3D:58:A6:50:5C:7D:95:59:2F:B3:88:A7:0B:13:59
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 01A1073822D86A97F6934AB8529C70790B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
Manifest number: 0115
Signing time: Sun 04 Oct 2026 14:01:21 +0000
Manifest this update: Sun 04 Oct 2026 14:01:21 +0000
Manifest next update: Mon 05 Oct 2026 14:01:21 +0000
Files and hashes: 1: 00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl (hash: lww11pt7JBCP3MXMx3nWF+KkrgE8TxytVPsXT7yGaIo=)
2: 8SSXBbJAmh2M2VamgGPNaaqs-GY.roa (hash: SNkG8Uti9KHLJ03Y/sW0/JYA5jvGANqmsDmL+13iGPs=)
3: 8bHzMmkjwt_yLAGYCvMNqkW2FzA.roa (hash: 8QaTUHJyXu6B1zsCrAVs6lorOrcroP37WqlcGmictGo=)
4: HsCVKKjD5XsGJNbww6u4KL9dwZM.roa (hash: 3M5kednkV/Bpc4meaa5CCYnCsbM/CaiGU0hZ88NunW0=)
5: NYtD8bVg4NQx8TAKP74T5urzm7E.roa (hash: sxsaBiaFNQbBiCgqVAu/Abtwd8C0SzySQ3g1oDj/LxM=)
6: V53ImYGZRcSiwZly96RqveOoNtw.roa (hash: azvFCkwZ2KQjOHXGFjfKFi837tV3M4/95CWVi9X6v98=)
7: Yt82kfMh4tTFldct4S8Y42V4ySQ.roa (hash: jjNY9yqyt1O9yRK9Zvv5unUVKQa7w6A3b2RNVpEK9H8=)
8: arY5ZM21JvU8FdsZGH98G1qTSMQ.roa (hash: j1BM9OrNojX6adkKgiqQbkg+7Du0LVt3XOLbYtNaj3g=)
9: ei_p9st3qu-b1Ms5hTEU5BNw5Q8.roa (hash: o7eHJiRT0YpFeEhqjitwmm7MAPkx/mYorXzJ8V4EiZM=)
10: hME_11Akc2DjBOV6GNB4xEepRj4.roa (hash: +CviLfC4dubZAknm6xu1bo4yt9tI8UQ9eKP2X5vm4Fk=)
11: klZdZ8xiyHGKEf_gfoS4Gl7S3V0.roa (hash: PnFskfREpmwodvBbY9tSgM475PNufEhEVsxknIOHmG8=)
12: sUn-f-qK9eXwNyOmR3mfe7EM8No.roa (hash: MGpupH/5gZWb0QJDQlscqVzzSmxpIo72s/B8/Jhn89g=)
13: ujxgZgmwQlEmLaVxV7Z_Qkrr6BA.roa (hash: Ocs4zInZ4epjwCPVof7vdZVx4x829gapTPSS3WXGH9Y=)
14: x_QvBoOIA6vBeIKgjoFBOXwgqa0.roa (hash: YumGg/rjGkeZiLzIodCSXvp8gqP2A52SQH7tSRPZWGo=)
15: z1OUVqTuxE_6Zocr9uXXX6a_sTI.roa (hash: h8B0v2q6Vq0EI0FLxIYG2VBg4AiOV3z3eOv9vvKAQ0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:38:22:d8:6a:97:f6:93:4a:b8:52:9c:70:79:0b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Oct 4 14:01:21 2026 GMT
Not After : Oct 5 14:01:21 2026 GMT
Subject: CN=a84562d61d3d58a6505c7d95592fb388a70b1359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:37:c5:12:55:78:b5:b5:5e:6f:e6:4d:7a:
b8:ca:85:b2:43:c5:f3:7b:2e:a0:33:5b:6c:44:6e:
11:db:94:34:d7:58:10:7a:dc:3f:61:14:61:05:fb:
f2:38:07:c9:05:d4:73:57:7a:50:7b:b3:3a:dc:5e:
ff:24:57:05:54:26:09:5e:b8:34:86:0d:62:4a:02:
0f:e2:ca:a3:f6:59:25:32:35:26:f8:0e:07:c3:f9:
cf:0c:9c:3b:45:be:73:ee:ac:ad:19:da:62:0f:b9:
35:1c:a3:ce:fe:91:ce:1c:ec:21:7e:ef:ea:31:19:
8e:7f:9b:ce:cc:ba:79:9a:7e:9e:b5:70:39:88:bb:
f2:17:c3:1e:9c:e9:0d:71:4a:3c:6f:a1:cd:57:68:
5c:44:ff:17:84:78:31:bb:5e:5b:9e:17:21:b2:ba:
25:4f:71:70:8a:00:89:3a:7b:a7:10:91:c4:06:d7:
a0:95:81:d5:08:19:42:e2:c3:d9:20:90:d1:dd:06:
1b:4c:d4:a3:a7:1b:81:22:2c:16:aa:d3:40:36:16:
5b:21:0f:ed:0f:bc:a8:a0:8e:16:e6:a4:c5:ea:a7:
38:06:fc:36:34:c9:ef:ed:94:c5:b4:7b:5e:b0:ee:
c6:e2:ea:4b:a6:d5:e1:1e:2b:69:cd:5c:fb:4f:3d:
d6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:45:62:D6:1D:3D:58:A6:50:5C:7D:95:59:2F:B3:88:A7:0B:13:59
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6f:61:82:8b:c8:80:af:26:f1:65:f1:12:8a:83:1c:0d:09:
f7:35:70:57:00:cb:89:c2:d1:eb:89:8c:f7:fd:3b:60:fe:58:
88:8c:d1:29:32:cc:86:1c:aa:74:dc:c0:bc:6b:c1:33:d7:62:
14:39:ec:e0:08:c9:53:11:be:d1:cf:53:cd:53:51:72:eb:85:
ef:5b:a8:32:67:e5:0e:28:fb:fb:26:f3:4d:53:31:01:9c:1c:
d2:79:38:7a:97:2c:a0:2b:a0:cd:16:48:48:80:be:56:4b:d5:
00:49:84:8e:c5:35:01:9a:50:f3:e3:4d:8c:79:24:c4:54:55:
88:45:30:59:5e:58:bd:fd:fa:70:a6:0e:50:25:5e:3c:42:ec:
50:73:12:ff:61:68:62:58:aa:30:e6:23:ff:21:88:21:36:e8:
e7:09:1c:ba:ff:0b:ca:32:29:e4:68:1c:06:27:97:25:36:08:
ab:09:c3:da:9e:51:b4:73:9f:f9:7b:6b:b8:14:f2:d0:e2:e8:
df:c5:f9:18:e4:c5:3d:a2:54:eb:a1:12:a0:75:24:6e:c9:9b:
4e:75:6e:38:50:77:8c:16:6d:fe:33:f4:61:c1:8d:41:d2:22:
17:01:9d:d3:cb:7a:d5:f6:d2:09:23:0c:08:47:c5:9b:32:f8:
6b:83:68:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:41:37 2026 by rpki-client