
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
File: IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json)
Hash identifier: 9S0pDNK3XYQY3Nv1HFtpkf5BDFKHHVfBdS7Awtlh82A=
Subject key identifier: 5E:AF:22:F8:16:2D:C8:83:04:6B:68:90:A6:08:46:76:62:A5:70:A3
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 01A0DCBC01C45B464CF582F2C9E41B7CDC9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
Manifest number: 1A81
Signing time: Sat 26 Sep 2026 08:01:43 +0000
Manifest this update: Sat 26 Sep 2026 08:01:43 +0000
Manifest next update: Sun 27 Sep 2026 08:01:43 +0000
Files and hashes: 1: 5OuAtNn0l8oe2em-i-_BkRqZL7g.roa (hash: vANhq4PdID8vPwTjDrBS+mXwABE8TzXjEn+JW1v5ExU=)
2: 7t8wgjK41lzapDs5jikBb5vTFhI.roa (hash: pNcEvtuu1o2hH2eMF61QKg8HYUfp8zz08CbYNkIzxoY=)
3: 9Ftjq_Eq-fyNHlW3WtWYGabPEOo.roa (hash: RROt5jRdMmps8oCVGgLhKd+7IXUEEDExlgWjv5fKF/c=)
4: CLa3JNQ78J4sBQQxh8GAqDQBO2U.roa (hash: Ptpr2OeA+6xL/czPzBtIc73Iw+siDZQ42cRR8gFjgKk=)
5: Ep3XVJ-_t23pza2fzpUEP6EDP9w.roa (hash: hoiisfSpISgCVFz1VXlgIuAWQt8MugVbvtDs45VkzlE=)
6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: rk/zk836SaveGCdWxjK0lKCt5z33zqmSwLQ5g24PFIA=)
7: LCWtZ049FoEMI5HAwHzYkDXlzb0.roa (hash: fito6QodYmgMrVei2hs3ovjCGv+4YYqwwa8c3/bKpq8=)
8: LRyKKJzTBliMx34ASYig8HFEXqY.roa (hash: HoiPjv5M2f1QZDzcqH+pau0FYK61g+kOdOsd3jsE6KY=)
9: N8_jgVETZSZgMZuy7Nmx901ELco.roa (hash: +zMjL/+nyqUTVAJWqSLmseSeJa4kcd3Eto/YmX3LSA0=)
10: QZOA4Cw_wJbFqn0TYzvO7eAmllA.roa (hash: urP1bJFXb+aibHUz3y+1eQjAxhXGlX3kRZlCoVkKq8U=)
11: VPsOpQzvuZLSVdRpUbPccqsH0HI.roa (hash: LNvdod+2moYgqIRIXig9MujeQAei+hV7OeUdz/G9T2c=)
12: VcaphQh4vHAVmPQId2jsNB2aQv4.roa (hash: 8e+QqZ403DJ8rCqJdp/PBd4JgkUk23mp8hqKweh0FDA=)
13: VrIgLz2PFQgd63beVRzJrL2SQBc.roa (hash: sXPs4ggxGfscBiESz3blqF00BOn9YaRW1W7ATtbBk3s=)
14: YEIy-4popFF63uiUMaqEq6MP2-k.roa (hash: gVX7vNZdK/HpIGkA/+EuEhyy05rdK5xmjj38Yi11muE=)
15: ZwVEwgiwITzzAorGck8VXul9oFU.roa (hash: qDVShcnTFlPrk8WY/vVUFbSS/IUCjtruta++I3zUCp4=)
16: _KdTD9Hfu5k6hVTondfZQJ_OxLo.roa (hash: 4TQXprbZCs5Jf+ifvEFuTZxSKFFhMf/XaJeUj1L8wlE=)
17: b5_puVoiaaK1luof_u2L7B-PTEE.roa (hash: Uuu9Wl4sZx9v7YzIOuwEsj+WuePom5BSk93dnj/mc9Q=)
18: fLzeZ00IYj-IxnoGIbn7t2eWUGI.roa (hash: YW5jkNHqF6tBgAJfKMQglVG8Rn1wn5A7xiLfsMA393U=)
19: j0nf_y6uB0VgXHQDlN6OhEbU5jU.roa (hash: SKADJBgkOhviqwy7f7gDKRZV4Zt1/yBSufcp/4OhY7k=)
20: pMzwR3DaYSVoHUR1RGTsgZ23wm0.roa (hash: 6sMrJ/AtbSyiDYLE+mzWMFlpOxx6wBjmiT963p9LhmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bc:01:c4:5b:46:4c:f5:82:f2:c9:e4:1b:7c:dc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Sep 26 08:01:43 2026 GMT
Not After : Sep 27 08:01:43 2026 GMT
Subject: CN=5eaf22f8162dc883046b6890a608467662a570a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:6a:94:d4:18:f7:6a:35:f6:f7:d7:48:71:
83:88:60:67:53:0b:48:0c:86:46:1b:c3:a2:b2:11:
5e:50:1e:1b:57:36:4a:99:19:20:05:ff:bd:7a:fb:
76:a1:d1:eb:9d:d8:58:6e:d2:d5:db:29:86:3e:c1:
43:95:cf:f3:69:09:fd:60:b2:2a:28:d7:9e:99:41:
67:9a:0d:85:95:6a:d9:ae:c8:b1:5b:81:17:30:69:
1d:2c:f9:22:58:af:43:e5:d7:86:bf:95:1e:29:95:
ef:b5:a0:2a:ab:14:70:31:e7:d0:fc:b0:6e:83:0f:
54:d9:82:e8:7c:d6:39:80:d6:61:dc:5e:2c:dd:10:
a0:c2:20:6d:79:28:67:a4:79:24:d6:2e:e6:10:e7:
9b:85:fd:71:55:7d:24:45:c5:5c:5f:76:8f:2e:d4:
56:e3:19:47:6f:e7:f7:1e:e2:5a:ab:50:c7:ed:25:
42:ff:85:c3:34:26:13:9d:b9:52:40:32:39:61:9b:
6b:37:66:fa:a1:ef:c6:88:44:a6:d0:ca:c8:fe:c6:
a0:2b:49:bc:8a:dd:ff:b0:50:50:45:87:1b:75:0f:
53:55:39:55:db:bc:83:e3:7d:7a:64:65:79:36:38:
13:e4:c9:8f:61:55:a0:d3:f2:f3:c3:aa:ca:0e:92:
99:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AF:22:F8:16:2D:C8:83:04:6B:68:90:A6:08:46:76:62:A5:70:A3
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e9:8a:db:52:8d:db:aa:98:97:1f:30:7a:b7:9b:b9:c1:01:
07:e3:b4:06:6f:2a:b8:01:a8:04:7a:88:8a:8f:51:52:27:c7:
00:4e:38:24:7f:70:fe:09:98:8a:69:f2:02:45:e5:73:88:9f:
62:ff:58:df:9c:b5:6b:d1:eb:04:80:90:89:d5:76:25:b1:a7:
6a:18:e4:3d:33:d5:12:9e:cc:1f:d2:fe:25:87:d5:1d:8c:46:
73:03:89:3f:54:c1:39:e0:10:a0:53:e1:79:a0:54:2b:de:e6:
4b:95:22:1b:47:34:b4:32:dc:2d:99:12:99:f6:f8:6d:22:43:
0a:bd:11:84:7e:24:06:31:da:7b:0d:e2:77:28:b8:13:59:93:
0f:0a:40:97:5e:54:55:54:f1:55:78:ee:2f:ba:63:b6:a4:bd:
55:bc:7b:c9:dc:e8:5a:72:59:eb:42:69:eb:34:9f:c8:82:73:
cf:74:13:4d:99:09:c8:68:1f:cb:ec:8d:7d:53:4a:87:66:10:
79:0b:8d:10:18:84:95:a4:3e:4a:4d:3c:54:3e:bf:77:42:df:
39:e2:12:98:f8:1e:68:3d:9e:02:25:c6:c6:76:d3:2f:91:ba:
e3:b7:73:78:94:4b:05:5b:64:6f:fb:f4:c4:c3:34:28:ec:ee:
06:56:ca:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:03:31 2026 by rpki-client