
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
File: fDw50YmeaZv1F3QY7jgUie3_Q4A.mft (raw, json)
Hash identifier: s0LInNVAOKrWYAU0/FYCXLHRrk3n8kMk0gI3MUgRNAM=
Subject key identifier: D3:ED:75:22:2B:5C:1B:F5:CA:15:4F:30:AD:F6:AB:56:02:35:49:04
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 01A0DD6092B0643F73E1CBA685B897540CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
Manifest number: 1A99
Signing time: Sat 26 Sep 2026 11:01:28 +0000
Manifest this update: Sat 26 Sep 2026 11:01:28 +0000
Manifest next update: Sun 27 Sep 2026 11:01:28 +0000
Files and hashes: 1: 5SEARh8FCEo871iB7G34fI2Kpe4.roa (hash: m8tzPmTHhc1WTCJBLsi032NvSAtwSGzKJid4Omy7Mh4=)
2: BBgeRSvbUJdniHYX4zOgCcL8ACY.roa (hash: PLe5zqvpsl1axyHkG+6mNC+e0kIU1k+pLvAFxSmrAmU=)
3: GINhKUhmBtKk0TkbBRxpcNSu6zI.roa (hash: AfFS2Kk3dLWfENSQf5EMy1ayLLvaFvbW7wW4mzMrY2c=)
4: GcjqtR6eaVf9zI7HkXKSnJA3w6w.roa (hash: A4MXiuxUupC9OPHA/5SoE0YyMSrNretsQcoN/Jow0+w=)
5: UxGBNLJORbA-dUtSWizJlzSR79A.roa (hash: iSbtbOdc4793QhhKCfmSFXrRr7lnZaOwHAQy1vMKWow=)
6: VI1RqKQ9FUKeH02MRHEork21o40.roa (hash: wdOOodFBuGweEJw4KzRpikC1wFqxQBn+ps1AczyBeZ8=)
7: Yu1zmysTEBKjL5YYLMMg4Z_eWEA.roa (hash: KRT9o5BiHue3+B57E9epeCM9JN4yPOhoqN4HYF+hLEU=)
8: fDw50YmeaZv1F3QY7jgUie3_Q4A.crl (hash: kQ4umw+4QTzcxZx9Gj9ybARuyBez7C1EURyfWWJBpig=)
9: gxHDLsArjTiXKEpHJWMyRpUv3cY.roa (hash: dCObsibTUgKigew1g86RJZOg/QuYkH7A+/+pCpHO7nk=)
10: nuyOFFadfRrO-PHC8XAHyHRujfs.roa (hash: /f8gp/JEgFhNhBZOt0Zfqqd/+VO8Z7hxkEAexMPxwQE=)
11: u1nf-Thyw228svKtPSH3GG9Q0kM.roa (hash: zfCV7njN88258Q8HEPbW3g+KPAWnYoYtUU7LB/pH0+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:92:b0:64:3f:73:e1:cb:a6:85:b8:97:54:0c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Sep 26 11:01:28 2026 GMT
Not After : Sep 27 11:01:28 2026 GMT
Subject: CN=d3ed75222b5c1bf5ca154f30adf6ab5602354904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:53:ce:91:9e:90:07:2c:2d:7c:95:c5:e5:
54:6f:1a:7e:d9:f2:6b:30:8b:43:ba:b3:12:b3:9b:
a3:40:e4:d3:3e:cb:07:8a:f2:5d:24:2d:1a:31:78:
f7:27:ff:86:46:53:8a:09:be:3f:0b:39:a0:c0:97:
77:c3:0b:e2:bd:26:04:f1:cf:e2:78:be:b1:57:93:
14:f7:02:83:8c:ce:e8:94:a4:4a:a1:08:48:a1:eb:
15:ff:05:3d:62:78:ce:92:69:22:a4:be:bc:80:0d:
28:53:0a:45:6d:d3:ae:af:fd:ec:43:2d:e0:56:91:
76:79:7e:d0:40:68:61:b9:db:0e:3e:97:87:72:df:
74:44:6d:28:65:79:5f:54:ca:c4:84:31:6a:a5:99:
f5:f0:40:f4:ec:c6:ca:62:b6:1c:8b:ff:89:1f:55:
27:c2:f7:72:3e:dc:73:5b:6f:fa:99:23:a9:7a:9e:
f3:7a:84:aa:a8:e8:83:07:ce:fd:1c:3e:d8:fa:48:
c4:c8:45:cf:04:13:27:ab:71:56:c8:bc:ba:a3:ad:
d8:a2:62:5f:00:f0:ae:9b:11:05:72:71:33:a8:54:
52:8c:6d:5e:a9:6d:6e:39:4a:46:5e:39:f6:ed:1a:
a3:43:60:82:5f:db:b8:46:8e:eb:43:23:85:43:d1:
ce:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:ED:75:22:2B:5C:1B:F5:CA:15:4F:30:AD:F6:AB:56:02:35:49:04
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ca:03:f1:e4:4e:c9:22:e8:24:a7:24:2d:22:59:e5:e8:e6:
12:f5:01:e4:7a:8d:09:0f:b2:60:67:50:a5:53:c3:78:0d:a0:
47:c2:35:60:d8:bf:92:c8:92:64:2b:d3:c6:62:84:0b:d0:b4:
14:67:09:4f:a5:07:c1:67:1a:08:d8:cb:03:32:0d:97:fd:36:
c4:b2:ce:8b:2e:30:43:45:61:df:c9:00:45:5e:17:66:92:88:
e4:a9:f3:3d:aa:dc:89:70:83:ab:27:7c:79:bf:d0:de:e1:f0:
0b:ff:a7:4b:b3:01:62:e5:a4:46:90:27:3e:96:dd:b2:10:42:
b2:41:79:81:89:34:f2:a7:33:64:a3:15:f0:27:2f:1a:05:17:
f8:ab:c4:8d:4e:d7:34:cd:15:99:0c:85:84:fb:32:97:be:ce:
e7:9c:1d:90:ef:5a:c3:0e:ae:c4:73:cc:97:39:5f:e2:d8:cb:
01:da:5f:fa:f2:f1:4a:75:5e:da:a1:73:c7:41:6a:c4:70:07:
6b:b3:1c:87:04:2e:5d:c6:36:39:7f:be:02:62:09:62:4c:35:
67:52:80:53:e3:a0:68:ec:38:9d:a6:37:05:76:c5:43:cc:a6:
ce:8f:a6:9e:4b:cb:b5:a6:7c:c2:2c:68:d5:e9:0d:d1:5d:08:
b6:dc:d0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:13:55 2026 by rpki-client