
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json)
Hash identifier: NISX3cHrOVZ5xwQfWyE/jlpaOLCDaI6ThBUwoCZ+WOk=
Subject key identifier: 8B:B8:E3:96:49:D6:2B:88:89:37:5D:12:63:D6:FA:79:D9:0B:81:30
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 01A0D1926793874DA7EDCCF433DC077235D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
Manifest number: 1A7E
Signing time: Thu 24 Sep 2026 04:00:27 +0000
Manifest this update: Thu 24 Sep 2026 04:00:27 +0000
Manifest next update: Fri 25 Sep 2026 04:00:27 +0000
Files and hashes: 1: 0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa (hash: VbJf/zpJU+nEIQciqPz/B0PK4md21WWEaGREZ1xeby8=)
2: 1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa (hash: EoOuCir1JdYOzVmD9C+0aCRnn0E0kdYzw6esRGPxmMQ=)
3: 53-Empt8fqhopJ7cOY61y1UNXLc.roa (hash: YjL+5qe2020D+DOQyVjhX1FTLXsdUT9QvCPVPeb6WkY=)
4: 6fl2PyZRjLFdwSBx3r61hkXya8k.roa (hash: D61QyHJ6S5T1IxCuN2yRBjSfJTg/+aLEQXnYgmdlUDs=)
5: ANtitpMQT-uK7LHD0X0IbBsKjWM.roa (hash: 5c2CNK7pBthzGV4Sg561qpwP1GJzRFFkA4PDWmW+aSg=)
6: Df8h7qloFeTHYGavNQ4pJHpP5CU.roa (hash: 3kk9LrOCm1NH+leIgX8QEU4SIoLjtl1E1AbkJm7CLGc=)
7: IDuIILf-M7RgIDs4AJSYtPxrGic.roa (hash: Nv2s82WUeiBOVGtaFJF3rHfW4CDw9k2CQ7WS0TmM93s=)
8: ITKErq6hul380zQefCl7nGu5iiw.roa (hash: ThIKSMsSMV9/7c4Wu+9DRro9qpNPtMCBXl8IA6+T3z0=)
9: MR0r-YpSmpXMsH4aFzpiE02h6bo.roa (hash: f4/OYvolIQCytH134KDQmcd51o3N0KRG0eWhuISvPcg=)
10: N3LKuwLRuVKYuFWiGYpHH9iTJDU.roa (hash: +3GE+YLKYRUGq2ir////J+cfvpEdtk9nror7A4YJdrQ=)
11: R-8E5zauBsFTDGfod6Tef2eLm4M.roa (hash: ClvLXgh4oJn2dvcbOHZrF6o7ap5IhqsfDX14XxeUfO0=)
12: a149HuY71oYMfosTA9HCL8g-pdI.roa (hash: FHyu/0R9GDUP3gmfU9JfTLPTviTJTT8eGmQ8uq/ZlfA=)
13: bTookxgPSxSd_gnM8XNiIJ3mpr8.roa (hash: qaTVa3H72kXabxQBE9N2TN7e2tyXH6RWDJSNci8VjEs=)
14: blYq_pKFV_IJYUCGIJ3ZWpeEWIs.roa (hash: aV35UJJhFzqPJKc16YBKA5F2EyafDubx6D6p0nLFPAk=)
15: ehRbssTu-uCbiOQmcMxAxNH82GI.roa (hash: aYjSWmwkop/Ic11eCu/RIPvn387xQFE72I0LsyWzzf0=)
16: fD0zMeFpTdbjlyII0WXNlsdWjwg.roa (hash: 1nJ8LKFZY40ZGZ9fyCE9tTFmLCEjP6khJLvEfhwNXts=)
17: hYygt2D_2n1pYi_NTrG2nkmeaiI.roa (hash: dQrBwFPxwSf58rNos8WFJkrSXg3GQyoC4p0wWkx0CkU=)
18: khIatClzzDAzsXKofHk3CzFjNwQ.roa (hash: VqTvtGjsJjhyzOsm3Z+fa0f8w1YFBA58VD7S9gC+DFg=)
19: ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa (hash: O3k8tfSgOWL0eFoLFOr80zr8e1hwzB6oN6psmB5jVbw=)
20: l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa (hash: 0ZLcxVq4SbMJb/Tzs+R0ez5dGHPb27PKXrdMSol7/iI=)
21: lh0U2VbssLYHQuI_GeDtu-78fs8.roa (hash: argvv+35DPV6sAk39FUkOQj04x5r0LiO2lKQbHUbgZU=)
22: o2CtVQw5GkFX89PhUjlW0skEA5w.roa (hash: m4/K5u0ohrJNEPA+u5iCk/BUETlDCODb4D0JMGKGkg4=)
23: oy53UV29ZxGHyA7mlLseXZBnge8.roa (hash: zmREFQtkqLZ8wJLGEuvGnLyo+ZygeKXKKyJIbyBcMM4=)
24: qSnbVpCUTBo3CbEFeEaAeBg12KU.roa (hash: lUFBwmvXAt5o1tXZm7PlCC3E71TOjkaQgtMQg6Erswc=)
25: uhWP65iIcvZTsGSiBTIcefinHZQ.roa (hash: RDsU+on83wZCchaROnKt/rVWQYfzxwy4j90xxJ6pfyg=)
26: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: zmNx/cG0nMSS0P3yKRMGQuotmu7ASoatbLXfHpiv7Ls=)
27: vuod5WTfo-bMzWgcehLtUNsV8iQ.roa (hash: S3lLxKRzTk1ObgBCNRSt9Y3FAylgCuMuERfb8CAqXtY=)
28: xSEYJ36rS-kznLQUl3DFtM3R1jM.roa (hash: 3mFKbERmZQc21I9KRtXeu1S3oH9xaIQQ0cmDzkgXhUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:67:93:87:4d:a7:ed:cc:f4:33:dc:07:72:35:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Sep 24 04:00:27 2026 GMT
Not After : Sep 25 04:00:27 2026 GMT
Subject: CN=8bb8e39649d62b8889375d1263d6fa79d90b8130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:53:db:34:01:cd:40:e3:d0:95:7e:85:32:92:
50:1f:bc:e4:8f:c7:98:6b:66:a7:30:72:dd:b3:ac:
cb:58:d5:7d:68:68:22:3b:4b:7c:4d:77:d7:c1:d4:
66:79:18:b7:7e:e5:4e:bf:0d:e9:5f:34:5d:3e:46:
a7:3e:c0:50:9f:6e:84:3b:34:10:a3:ef:c5:23:dc:
24:00:bc:38:00:24:77:f0:d4:70:ef:78:6d:89:ad:
b3:5b:0b:d2:40:35:2e:ec:bb:90:49:8e:8a:2c:ce:
18:37:fe:c0:f7:f0:4f:a7:33:14:22:ce:f0:cb:23:
aa:07:cb:75:f7:ac:da:9d:5a:d4:43:f0:44:70:b2:
cf:4a:9a:8a:b8:80:50:fa:95:7c:f0:5c:79:a5:69:
60:3e:d8:bb:a1:c0:2b:30:a8:b5:16:0c:fc:3b:fe:
b0:c1:11:d5:15:53:7b:2d:d9:38:d9:89:d9:e2:c5:
b5:1f:e9:90:b2:c9:2f:6d:e2:6e:3e:d2:59:fd:23:
1c:21:36:8b:00:30:e5:01:0f:08:f7:8e:2b:d2:99:
62:20:5c:d9:2e:63:e0:81:df:5a:29:22:5e:77:e3:
a6:07:08:b7:54:24:ba:51:d6:3a:4c:b3:8a:ed:f3:
f6:39:f3:64:11:dc:c4:9b:6d:68:25:7d:88:77:80:
3f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B8:E3:96:49:D6:2B:88:89:37:5D:12:63:D6:FA:79:D9:0B:81:30
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e8:de:0c:de:bf:c0:61:66:47:e3:6e:f5:34:6c:d6:58:40:
1a:d2:ad:79:58:70:c6:30:b2:02:0a:8d:0b:93:94:c5:6c:d5:
d5:03:20:2c:69:31:f6:4b:89:20:99:3d:9a:18:fe:46:d2:78:
59:c2:3a:64:f9:9f:c7:a1:4d:11:e5:12:ca:66:71:71:98:ad:
12:23:ee:ee:d0:aa:97:cb:9e:d5:68:13:6c:c9:4f:ac:b8:b3:
64:d3:4b:06:bd:21:d4:b5:8c:31:ee:b9:02:1b:05:cd:ca:76:
22:71:e7:dd:35:19:db:55:e5:97:88:eb:f2:f2:83:04:a9:6f:
a5:2e:51:30:a5:32:de:56:26:5b:5f:13:9c:af:b8:44:1d:28:
31:6f:c5:dc:74:81:61:b1:88:b3:2c:18:6b:ab:76:2d:bd:cd:
72:bc:2f:bb:84:db:77:1f:8a:72:49:1b:cf:4a:92:88:84:4e:
dd:46:e9:74:ea:ac:9c:dc:07:0b:f7:4a:9d:da:07:19:89:eb:
51:64:62:83:4a:19:95:27:2e:b1:33:f0:52:9e:c8:f0:4d:2a:
71:01:13:e1:ca:b1:08:71:5b:60:93:85:38:33:5a:23:19:48:
be:f1:54:ba:7d:2e:9e:00:65:a8:85:9f:6b:d2:1a:b7:3a:6f:
76:e5:d0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:01:24 2026 by rpki-client