
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json)
Hash identifier: xv8tnmemoltMIo3bm4pkKzzYZj0xd4COu5yTCqq1ux0=
Subject key identifier: 6F:C0:8F:C6:2F:68:AD:33:43:EA:47:75:50:E1:C3:52:81:1A:80:09
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 01A1DCEFD8E7AA1F05AEE067374629620D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
Manifest number: 1B10
Signing time: Sun 15 Nov 2026 02:01:08 +0000
Manifest this update: Sun 15 Nov 2026 02:01:08 +0000
Manifest next update: Mon 16 Nov 2026 02:01:08 +0000
Files and hashes: 1: 3_hTG1VNNECdXWtHf_y7Mh1I0-I.roa (hash: WyvWKO62KaRIQphftD3eJM5VgxI16MZECLiFVVDTedM=)
2: AuHoEVrnl-1LwAXvi9txhNUCs-o.roa (hash: LebcNjlhptCuSycNyI8Gq5rf+emsaNgyhh5yVvxRTjk=)
3: FAEbHhLRRaDRbR_4ejpb1QHrGsk.roa (hash: EK6RNwivTo0ew9QPDVu62GQI3mFybABhS1y9MjMOYEw=)
4: Haj6URZpFS-mdAGIc4wmMOS4lM0.roa (hash: EtXPHXKoqXDb9Vz60AGE1NwlxpAVrwFBgi6KRxclp1c=)
5: QWzql91pb8AqydKLph2Rk8pMMJg.roa (hash: V0Cy33zvO3+B6j6F2O8VNY3jtZCF/pRG1qa2knevRzE=)
6: R1ACp4N7msvtcVocj7URglX5xNE.roa (hash: s7Zox0ImjXt1GDu6UZLCgSH6/GocPu93iShhVHA6YQw=)
7: bniESOAwEJ3WL8_KzHYZ3-fFUKE.roa (hash: t+surPIg+2rXPUx8NHZjclxfI1SSYNmZtqZYBFqewLY=)
8: n2c2A4aLrP9Nmm7zFRLn0TmvRwE.roa (hash: qKmltpUjZcaLW2FolvCbNT5Sz4SxQTiZwUNd7tmk66A=)
9: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: 2pBBgcyexzn+DcxlDkpV8DCvpLxOZMZh1/l3YNvZ5rY=)
10: tzVYq6Bsso_YdRE_X-B1xHv2bJc.roa (hash: LMTBBvAqP/wFQU0BQSC3lLd1n7Ijck49vWZwgtvAiGs=)
11: yg9CvK7YsVgoTv4cPVX2srKo0uU.roa (hash: k87y5f3qtoVggaVvKGB+/23YD6IKa8AY5DqudY2fvWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:ef:d8:e7:aa:1f:05:ae:e0:67:37:46:29:62:0d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: Nov 15 02:01:08 2026 GMT
Not After : Nov 16 02:01:08 2026 GMT
Subject: CN=6fc08fc62f68ad3343ea477550e1c352811a8009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:15:48:ba:ba:2d:91:ff:b7:66:ee:dc:55:8c:
61:8e:38:c0:a0:cd:62:b4:f6:d6:a6:df:5e:f8:1b:
d9:5a:56:26:c5:bb:40:b2:94:25:fc:3f:47:95:0d:
a4:ef:05:25:b6:63:68:37:49:be:41:18:5f:67:0e:
56:a3:91:82:bd:c8:7a:87:32:6e:cb:70:dc:4c:09:
45:f5:2d:cc:12:59:c5:69:fc:f4:df:d4:cd:1a:4b:
28:13:df:69:fd:26:e8:52:8c:15:c9:35:a8:ba:78:
38:6e:88:af:b5:d8:c7:b7:0f:06:a6:5b:24:30:7f:
06:ee:4f:c5:02:d9:7c:0d:a7:3e:e1:a6:a3:e9:1c:
05:15:40:86:71:bb:0a:ba:0c:9b:a0:67:ef:b9:f7:
94:19:4e:18:18:70:0d:a4:6e:0d:4c:fd:5d:78:3a:
47:32:c4:d7:df:98:2b:fa:dc:37:11:7d:63:a0:0d:
b9:c9:99:5a:1a:a9:09:66:1a:1e:8b:33:9c:14:45:
0f:81:f3:ba:7c:75:59:d3:bb:67:69:cd:1b:4a:f5:
06:cb:46:c1:da:37:77:71:4e:20:69:b6:36:98:81:
0f:a6:0c:d9:35:d8:51:25:9f:a1:25:6a:67:44:d7:
01:a4:a6:a8:d5:59:f9:62:ba:91:ff:f7:ed:8f:95:
c7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C0:8F:C6:2F:68:AD:33:43:EA:47:75:50:E1:C3:52:81:1A:80:09
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1d:88:2e:ed:10:b6:07:7e:25:4b:d4:d1:1a:c3:c5:8b:44:
b7:b8:bf:56:b7:0b:91:40:64:a9:76:69:da:32:8c:4a:ef:10:
d3:14:a4:74:b3:5e:18:12:61:51:42:3b:4d:96:62:c3:bf:37:
5e:fc:ac:37:6d:41:98:bb:bb:4d:2f:e3:5e:cb:e9:71:b0:0e:
c6:d4:09:58:67:00:cf:b7:9e:30:3f:0c:ae:de:ad:f0:68:ce:
9e:a9:e5:d2:dd:3a:3e:45:39:7a:82:7a:b4:78:d4:d1:e2:04:
1e:ed:04:4e:51:64:02:c2:2b:cf:32:29:d9:a5:af:41:06:2f:
53:f6:7e:a0:eb:12:14:d8:5b:db:0c:3e:3a:3b:c2:25:d2:e7:
59:5b:c9:91:d1:d1:e0:bf:1a:c2:6b:ba:f6:c0:44:04:68:5b:
8d:78:51:a8:d8:1d:51:42:c9:30:73:7b:11:f3:42:b8:cc:92:
20:f9:cc:2b:91:8e:e9:06:e0:70:da:89:ed:5e:45:51:41:11:
c7:2d:d5:bb:1e:20:2c:2b:bf:6a:f8:52:b1:7f:63:8b:fe:44:
04:2f:a8:d8:45:0d:06:a9:37:a9:08:55:cf:16:8b:77:52:2b:
44:87:60:67:0f:32:76:ad:25:87:a7:20:fa:b5:3f:f1:4a:27:
ed:4a:ed:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:15:48 2026 by rpki-client