
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
File: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft (raw, json)
Hash identifier: HRf8gqP6m99vhFw0W32dW77tsrhKJHMlCpIjJ6Wev3o=
Subject key identifier: A1:70:08:A2:A1:24:77:AF:91:89:07:07:AA:C1:BE:B2:5F:EA:18:A8
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 01A1DE39D67B459A30484B9CCDC5AE252B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
Manifest number: 1B0C
Signing time: Sun 15 Nov 2026 08:01:34 +0000
Manifest this update: Sun 15 Nov 2026 08:01:34 +0000
Manifest next update: Mon 16 Nov 2026 08:01:34 +0000
Files and hashes: 1: 1--f8TOFOHJxy913_bnxbbB_I8Ps.roa (hash: wDKAE8eJy4a/Xju9oL+J32sQIgyfZxer9kQNnDKALh8=)
2: 1-jH0g_JDLp_7206NgV5uijHSTJE.roa (hash: LRjP11l8Yg7jbG4bbfhfNEvQDZIpDubQ+TvWhkwjrcQ=)
3: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl (hash: zW8GhHXa1B8xLQL5tRfB7m83H39wXrLbRVq/MY0Rxkc=)
4: 1-zOd1kumaIlRrXPMfMdhndo9duk.asa (hash: J313kMfLz/jeTLF4rt+b3BkZqWQAyhsRwo4qFMMY3+c=)
5: 3GG8eWEP0AsTR5hlJBndfjSVqXE.roa (hash: OqQ6t5k1StJuUPb2wymY353zmLAJ5m9iQ1cfSGHhatc=)
6: Ew6t29Ei1xqX6fCJJvzPjV0QQx8.roa (hash: JiMbHLWrOkAjKxV/HgN8hcqfDizA3AaG0pNVT8kgBVI=)
7: OS72UUjy1jIbO6SLm4_mGk1QjoA.roa (hash: JCjobLuVUg3x2yIR7Yj0jA3s02kdH2wYADkCYAZAm6M=)
8: hlYcdx1ybU4O_N_wWLe8kEQOPAA.roa (hash: g8sRkVv7AmG02gcDiKwncGvtRS2uuD1b8FmdkJIrmVQ=)
9: iY5E0iZ2YmwSRo1oZbuozkzcREs.roa (hash: XAB0LIhnvafntszSPTz4cfq/KAQxwohiu0F5a96UkOU=)
10: icspBYCC63q1vNy_EsXnZosS_IU.roa (hash: 3NUI/DqhsJ55TwYWG35Se4xjLYr3z+ZTAvaw34Ss74M=)
11: qWmrXkuHj_sWsoWUwUEWOmRpZO0.roa (hash: MHfvuh3eLEasmU8bZ+QtTWQpVIX8pvTM+Puzp/lNHV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:d6:7b:45:9a:30:48:4b:9c:cd:c5:ae:25:2b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: Nov 15 08:01:34 2026 GMT
Not After : Nov 16 08:01:34 2026 GMT
Subject: CN=a17008a2a12477af91890707aac1beb25fea18a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:4e:53:ac:66:bc:84:d0:e3:21:ae:90:95:
6e:d9:43:87:b9:50:24:2e:c5:ae:08:8a:a5:fb:b8:
8b:3c:08:4c:04:88:08:b6:94:38:dc:ec:0e:44:3e:
dd:bf:78:c1:c8:82:69:4e:d9:78:a7:f8:38:81:11:
66:b9:f9:6b:f1:47:8f:29:8f:cb:eb:bd:25:b1:7c:
d8:fa:fd:09:f6:9d:6f:31:37:1d:9a:01:a6:9f:6f:
24:b5:6c:d3:60:49:ac:ff:b5:75:90:74:54:c8:19:
8e:bf:0e:fb:15:ed:60:77:d8:e9:4a:09:f5:f4:66:
8b:f5:9c:62:e6:ec:fa:d3:db:82:8c:a5:41:58:2b:
04:31:59:1b:1c:83:ee:e9:04:b3:20:16:dd:25:86:
ba:54:0c:b8:2b:d6:4e:7d:03:a1:46:bb:9e:33:8b:
51:c6:d5:e6:17:04:cb:12:98:39:f0:46:f9:92:79:
07:63:8a:52:cf:63:b7:7a:60:92:d2:07:58:c0:09:
4b:87:dc:08:af:04:7f:2e:56:eb:11:27:0e:5e:2e:
ae:45:3f:bd:f9:82:4c:9b:9c:07:dd:e7:fa:ea:e0:
ae:33:71:7c:18:7d:31:f2:2e:b4:a0:c4:1c:97:5a:
73:8a:35:be:09:bd:ea:a9:ab:20:8f:36:65:75:ed:
e2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:70:08:A2:A1:24:77:AF:91:89:07:07:AA:C1:BE:B2:5F:EA:18:A8
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c7:56:19:9f:b5:ea:e0:b0:c0:dd:fa:bb:59:f1:47:59:1e:
11:5f:72:8c:be:35:8f:e9:79:24:1f:37:30:0e:8d:93:a7:ec:
4c:89:b6:a4:30:a1:5c:b8:48:db:45:24:8b:e7:d1:99:11:4c:
6d:e5:f0:53:61:4b:55:d7:cf:b6:64:63:2e:69:fc:d4:2e:54:
8f:a5:cc:d2:97:16:db:78:1f:55:6f:48:f2:a7:58:0b:d6:e9:
91:2e:fd:c7:30:66:c2:ca:c3:5f:12:88:7c:71:32:30:3e:3f:
ff:2b:4e:09:7f:cd:10:8d:3f:79:d2:9e:a9:52:86:37:81:e7:
48:84:40:06:34:05:f9:78:28:73:49:50:ee:8e:21:ea:3a:f9:
06:62:4f:66:46:5c:1b:08:48:d0:a4:f8:43:3d:87:58:66:51:
2d:04:6a:fa:ae:a3:b8:19:b9:71:ee:b1:6a:82:fe:db:88:43:
7e:d7:42:df:77:25:1b:aa:b0:e6:ba:ee:6a:d8:9b:fd:2f:ff:
7a:14:28:7b:40:ee:11:55:cb:95:30:bf:15:ee:0b:23:12:ce:
ef:6f:33:a7:df:4e:92:44:b3:e2:52:c6:4b:cb:25:0e:6a:bb:
d8:31:73:c8:32:40:3a:f9:80:33:bd:1e:98:33:ac:0d:87:59:
1e:41:d9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:08:48 2026 by rpki-client