
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
File: 5dbG6LztQL0DLRdxjBseOa6EGug.mft (raw, json)
Hash identifier: QutLYc+4eFo2If9TecY3oyucbbK4dIMYfzIfH6Rcvz8=
Subject key identifier: 24:9D:46:7E:7B:78:81:2D:E4:71:7C:52:6B:FE:CE:F6:95:F7:00:A0
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 01A0CB23049403C59CD527F7A30B2BF87393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
Manifest number: 1A86
Signing time: Tue 22 Sep 2026 22:01:04 +0000
Manifest this update: Tue 22 Sep 2026 22:01:04 +0000
Manifest next update: Wed 23 Sep 2026 22:01:04 +0000
Files and hashes: 1: 5-klHAcjuib2_FofmnEGi_QZtBo.roa (hash: MgJJh9H/jXeBJcDEupeJ7ZVHU2fjFH9Kd5p1q+gOEoI=)
2: 5dbG6LztQL0DLRdxjBseOa6EGug.crl (hash: opl2jbdgwTK22TzR3fNmaSYprTq24jNyxO+8hwdk/sM=)
3: 97PhypZv2zu5_OJfA9RRiy48R8g.roa (hash: nIzEQ3BbMqorKqduXDknSy/VPwO4KFszJMOCHH7kKrc=)
4: BPQtimnpXi0to5PJq-7OXT1p6Kg.roa (hash: PekLxUPS5x993K7hJZTV/uCUzvBB2o6IwRQlq0KNRsM=)
5: CEZhxXddcJSu8GtDeoUO1Fq3l8g.roa (hash: moNzp9N4VIrR1YCZjmlUZKwlRY+vy/jtfRsH+cwJ3Is=)
6: CNXwsSf4_4ESwE7Z2tHMnF1t0fI.roa (hash: 6TNmvaRAq+/xsichI9upjJiUhRz6TxFS4gf++ifnQHM=)
7: IvxIJlsusGINjyd7ChcDCT4l6As.roa (hash: zyUdft6I0UPWxcrLYXWhMDg+rjyI8hIE2YfsToF0boc=)
8: L6vphMwfNSBNvr8n1Lq9ZQF5mHU.roa (hash: oMpak7/xlmg2k0Kw2nNqPLD2SFclHDjV9oFak9G23Tk=)
9: Q-M_plqHvIQQ4Omd0fzKbn8MMIE.roa (hash: 9RcrwO2pLiY7IHYvOtx1yuwN7Rb/p8KIBf/Lu5xB6g4=)
10: QdwEGDEr6Ax0sFIqcVK01z0gwFc.roa (hash: KB/jxrFMK5gxklmy0S1tcQXJ7NAaIcgucGRfgVGUTL0=)
11: R0firsytRcLjGnGFeTReX_mJsTo.roa (hash: ZELUdwpvqbd6r7PVB+5YZQ5dM2v9c5GEjwWTQyZ4GD8=)
12: RxxmdBVq18xBTu5txmqjYwtEcpU.roa (hash: 0qKhOj0Lxs9GMhc9/OQQ5tOrCNAxGZ18Ve40BFZyMVU=)
13: SLxM4-QYW5vdBWKJN_1LSVWNQI8.roa (hash: 8/pZhmkiqWxucVdJO5fLGO+U3cowY5Hypcm03HRtJoA=)
14: TxxrVfz2u2F0xUEANYlHvUuyeVI.roa (hash: 0f/+WR0UOyysTWAKgWWvmTz3+3MFbGsdfLPYHRKrVL8=)
15: V7bxJ7fZWKrgYC13aNpYpf4-Q9M.roa (hash: jzw1vz6ZEXyxdGOPFQhYOp4v00XuXiS4bMqLV6Nev1o=)
16: WoXz8LEgluCQDtouES2_1t3quKQ.roa (hash: NFO0YmWMko3tEX8tTvzsRFbcyphfVpUnLsRfBg6EMBw=)
17: X3CxDxdArCain-hHzMiYZG7wqTY.roa (hash: VGIBYhWyA0ZSidIn3eUOjZGeUibcoLiE0Nr0g0fgtac=)
18: aTXtQ3Z2K6TSE6KNWgBdEr8tXhg.roa (hash: ayQ15/oxxjtoAl0GHDbaT1Ld3ENYq1g1s6ZPtUrE0LE=)
19: gfS_vnH3Vnvh7i3z3bgWBoj_Cfs.roa (hash: zzxnJ8kipLM4KRusndIlOFpip8UeHfcdpJcHOaAuZ5c=)
20: gkqFAdULp-MSlNo8ljKdmzxNnW8.roa (hash: MUtCuN0kNobHKk0C/st+dCMUhmlNlDPz4Sloa+o6ysc=)
21: p0LQmmHi2QvQtDWz-XJ05OkVyok.roa (hash: jYOqdXjJ1djt3waBPEAnIDBEUk//W+EO/dGl6v18IuQ=)
22: rrzmrim7bHJDiCrYhA8mru04a40.roa (hash: ofVbPhI7aV97rdzoC5yVpmL3qOizHqUQvemgYAVNMho=)
23: wPrOTLIMFBa9xSPd967CbqnruOM.roa (hash: V3ywu5M8hUS56cV276Qc7nvD0rqUdNAgudSMZjJuzUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:23:04:94:03:c5:9c:d5:27:f7:a3:0b:2b:f8:73:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Sep 22 22:01:04 2026 GMT
Not After : Sep 23 22:01:04 2026 GMT
Subject: CN=249d467e7b78812de4717c526bfecef695f700a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:59:34:90:6d:29:7c:4a:ff:37:57:e8:04:f4:
52:c4:dd:e2:76:9e:16:42:2e:16:51:6e:ad:c3:88:
96:45:fa:72:d1:fd:46:b6:5e:88:95:19:25:fc:7c:
db:af:35:67:da:58:37:a5:06:9c:4a:62:61:14:90:
23:8f:1c:54:1d:f6:45:40:f6:12:05:81:4c:df:aa:
ae:77:d4:44:63:3b:ac:78:91:b0:23:57:9f:99:24:
e5:52:2c:28:91:15:85:11:6b:71:0c:44:84:03:9f:
cd:20:6d:e1:6b:20:db:e4:0e:c9:ec:7c:98:1e:ec:
41:4c:d6:51:78:f6:8f:03:83:67:b2:7f:ef:bd:2a:
b0:a3:2c:56:6b:4f:ac:29:44:b8:76:24:80:e5:d6:
51:51:2b:7e:7b:71:31:eb:2e:7c:9f:17:60:af:d0:
9d:e0:22:53:a4:59:b9:4e:6f:1e:af:e3:12:0f:3a:
d4:8c:e1:93:d5:26:12:6f:61:cb:25:8f:b4:2a:d2:
22:9c:5d:ee:79:73:44:1d:e9:37:80:2d:66:be:47:
5d:ee:db:b5:be:dc:85:39:f0:43:65:97:c4:86:c0:
33:dd:32:0a:42:4b:66:b1:43:b9:e7:62:07:66:53:
d1:d7:f9:39:d1:10:c8:08:df:ae:21:66:4c:9e:39:
8c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9D:46:7E:7B:78:81:2D:E4:71:7C:52:6B:FE:CE:F6:95:F7:00:A0
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4c:06:f8:55:3b:08:6d:f1:a9:fc:13:6e:62:82:89:4c:17:
e1:e8:c4:fd:42:4d:63:23:7a:ac:69:d1:55:93:55:fa:f4:da:
c6:3a:4a:b2:76:f8:61:c2:fb:4f:85:93:20:50:ec:de:e3:c6:
0a:1c:dd:39:69:d6:fe:36:9f:20:78:dc:39:0d:c7:f2:cb:ab:
c9:06:73:ab:13:30:9d:55:43:da:3b:46:09:6a:d3:99:14:76:
61:d7:a7:79:aa:f4:0b:09:0a:b4:1b:69:be:38:d9:59:3a:69:
4e:c7:fa:b5:7c:e2:e2:12:a0:04:f7:ee:3e:fd:c2:db:9a:17:
75:f0:c7:06:15:94:41:e4:f7:ea:fd:29:ba:3f:ed:c9:c3:c7:
4c:7e:0b:94:5b:5f:1b:8d:5d:9c:00:37:2b:63:68:00:0f:1f:
31:e8:fd:c5:42:34:6d:32:a1:90:f8:74:91:af:63:d3:52:a9:
3e:6f:3a:f1:24:0e:ae:cf:3a:3a:2e:c5:b0:f8:06:d9:e5:49:
fd:55:ad:04:10:67:fc:63:3c:5e:19:27:e3:b0:78:43:2e:8c:
fa:4c:dd:06:69:94:ff:6b:f1:e7:cd:3b:c0:8d:22:67:df:c9:
83:1f:71:69:af:40:f2:64:5f:94:ab:5d:85:72:1d:8c:54:02:
0e:8b:5d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:57:50 2026 by rpki-client