
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json)
Hash identifier: 6AfIpCHa8HETtOotGLrYHcrovaGYHnA0xHZZgYeuIPA=
Subject key identifier: 15:EF:1F:C4:FC:32:64:25:00:E2:D0:3B:1A:F2:02:E1:C5:17:47:B4
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 01A0D4940DA41607D27AB34E06E04580D174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
Manifest number: 1AA2
Signing time: Thu 24 Sep 2026 18:01:07 +0000
Manifest this update: Thu 24 Sep 2026 18:01:07 +0000
Manifest next update: Fri 25 Sep 2026 18:01:07 +0000
Files and hashes: 1: 0_Pb5F5fJXaFeCjYZWdP0Hbzw0U.roa (hash: q7lijpZcsnauEAX8HT2zNssS2eyKaRgPKnXCYMxmnow=)
2: 1-Wgz1wJ6Ji1IcKk_P2cW9QZv8uc.roa (hash: a2WWRTi85qtiWX9jSpPt6KLXf/eSt441S1fdhlmq/do=)
3: 5tH7LLAkdhTinMcBwA5ZehHy3T8.roa (hash: FSVoKMxOOpnoQfuC/EJwrwRY/Zx+oB/dMyYOIOIr+Us=)
4: 7OwsFlnHxpebmwPMUCt2me-zyWI.roa (hash: 0Ig1S0d5NpWXySpctyJbfop5unyTsBugYNuECPwIRTg=)
5: 7xF1eBazbFn49vs2BNwnpcCQbU8.roa (hash: tqiV+OVtmDFe9Ok2QIOHbnLYBuKbyGIp9NdmnWlMMuw=)
6: Cbas0g2gR07ffn-dISh755Oa8jI.roa (hash: JrumCEaLcChVR162sO+6/nHAKdNjmGrmpSa1y3KAZ/A=)
7: EIOYZpIbkL6BC-x4564aTLDYD5I.roa (hash: z0WBT/Sycw1oUBchenD/iEcWbUKjtiNpM4WnCTpU/AQ=)
8: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: 2j0/vQADddJM2dRYcKBW7/EWhUKXKd/tHR6fIpAwHAA=)
9: NfpbtdoH2GzbqDfenHlYbv5zt_c.roa (hash: 89a648b6W+muQqrxylg+B9lJhIqBGoKMRio9Dz7PXhw=)
10: YpU7gaQKuIKkN-T0VtBGTRqYtvM.roa (hash: /+pWCkv4pOpaQQ3pOwrh5OujER/vlTj+p3hHLSIAK64=)
11: Ytj0U6XkrheA-ulyRiwoygUy2PE.roa (hash: kTvsXh5scJZT1sBb1vEyZPTtitPkJZHzzOBVXCq/ERw=)
12: cXInX8MThhr-Q2P_0TCbxEVEnFM.roa (hash: 58A2aZSuymaJoOD/zxSFuC/w3QnUk8DmmWAzRDbCkH8=)
13: nRDN1vEHzaEZnMI3qR3L_MkZzjo.roa (hash: mgnK6g1VitEYDRZxuk2/lwLjkbGOufzmOfyHhd2Awg0=)
14: zib85lalNfDUXLnbOxY6qMczZjs.roa (hash: jphImNCP2svx9og7fDdI/KwoYuS28d452U+DOyXWGsw=)
15: zm_zTtidrEiuyGIJ9xC0dYOYVsw.roa (hash: J1GJgdFWQEf7k64nQl0mr5yPcHotjObvTQFYDrnoDYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:0d:a4:16:07:d2:7a:b3:4e:06:e0:45:80:d1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Sep 24 18:01:07 2026 GMT
Not After : Sep 25 18:01:07 2026 GMT
Subject: CN=15ef1fc4fc32642500e2d03b1af202e1c51747b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7f:fa:5b:dd:ec:6b:fe:1f:46:b3:48:f1:4b:
09:11:bd:68:8e:32:29:35:bf:af:23:9a:75:b0:eb:
eb:81:4d:60:5b:d3:60:ec:77:5a:10:8e:e2:d3:2c:
19:5d:5d:bf:de:f8:a3:8c:f0:a4:c0:e4:25:8e:a2:
68:49:2e:93:94:64:0b:33:8c:28:74:26:fb:d1:60:
97:ca:29:20:86:dc:0d:1d:3e:38:5f:cc:79:ee:ae:
fc:3f:c3:15:2d:5b:17:dc:66:18:50:7e:36:73:dd:
81:52:21:6c:2b:4c:b9:10:72:50:1a:92:a6:ba:f7:
b3:c6:e3:cb:ad:0c:83:29:87:67:82:47:0b:6f:cd:
1d:83:60:88:41:a1:63:38:41:1b:94:0e:91:c4:aa:
7d:bb:1c:5a:ba:14:2a:e3:7a:e5:ea:00:66:0d:d4:
39:a9:fe:2f:71:56:fb:b9:bb:6e:2c:03:c5:a3:5d:
3b:73:b7:9c:be:64:02:6a:33:ac:1b:0e:05:b4:1d:
55:ca:c5:38:f7:20:01:e7:97:ff:aa:94:2a:b1:ac:
c6:5d:f7:db:f6:6f:aa:a1:45:2b:17:c4:d6:bd:c4:
ec:91:8d:85:55:de:78:78:75:da:d8:44:fb:09:b5:
b1:9f:d1:62:b5:43:8c:2f:2b:bb:af:f7:2b:9a:95:
4a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EF:1F:C4:FC:32:64:25:00:E2:D0:3B:1A:F2:02:E1:C5:17:47:B4
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:57:e8:e5:0f:16:f6:76:01:48:fe:65:e5:de:44:0a:39:a3:
f2:f7:29:28:94:50:52:36:ef:9b:a0:b6:7d:42:7c:5a:d0:d8:
df:55:18:8a:ce:24:68:19:bf:52:c1:5f:bf:8a:5b:23:2e:9f:
4e:e5:00:65:2e:d6:24:49:2b:7e:07:6c:a9:15:36:ac:e8:b2:
b8:1d:cc:3a:67:d6:c9:18:06:c0:70:dd:48:e7:0b:97:78:8a:
0c:03:36:09:65:65:f3:f3:b4:0c:de:ff:68:2f:bb:a5:c1:f3:
88:2a:2e:ba:08:3a:00:0d:73:04:73:05:c3:3b:fe:e6:c9:ea:
4d:36:ea:e1:7f:04:55:65:12:03:12:41:05:4d:dc:0e:03:38:
fa:c3:dc:7a:4f:ac:a3:9d:58:7e:36:cd:43:f0:72:46:72:0e:
a1:3e:ce:80:df:ed:e7:6b:16:1d:76:30:e2:0d:42:4b:6a:2f:
fc:a4:0e:24:cc:13:51:97:a5:c0:c6:67:de:e7:0e:22:00:b0:
b1:4d:e9:d9:5a:39:5a:e2:fc:02:7b:69:8b:d7:3a:8c:ad:62:
1f:70:7c:ae:0c:36:0e:9e:55:38:6e:08:e3:32:56:f9:b0:2c:
57:f1:01:26:64:2a:05:92:3c:e1:e8:4a:ae:07:4a:ff:c9:55:
72:75:27:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:39:51 2026 by rpki-client