
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
File: 9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft (raw, json)
Hash identifier: JldSMMUpI06rzHSWN1MMIzVi8bXysNj09oRYu4Jvjtg=
Subject key identifier: DC:3C:C5:37:6E:DD:F0:3C:86:92:9B:7B:A7:D3:3D:57:12:9A:4D:91
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Certificate issuer: /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial: 01A1DEDEF979B3AF1A35581911CD9A8F37D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
Manifest number: 1B05
Signing time: Sun 15 Nov 2026 11:01:57 +0000
Manifest this update: Sun 15 Nov 2026 11:01:57 +0000
Manifest next update: Mon 16 Nov 2026 11:01:57 +0000
Files and hashes: 1: 0QPtv0tHOhX4VrjF4QxuvNuT2jM.roa (hash: FrNTwxFKJDUxxkHL8muoEJtvm9gsprK0uRriivYNGpw=)
2: 1JViNUEn6ga0QROJtxU4AEvMLww.roa (hash: jcckW1pekqq2a3ZEiyHcZr/yXCAySkb6WGxv2ggL9FI=)
3: 5c-tVeqgckJuAp6JbI43ZWb85Ik.roa (hash: cjN5erR2DEEsrEuY7GbmW+pLwmDRQL+9OgSiLHhDtIc=)
4: 9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl (hash: cMI9R2RTdqKOSqymKhL8fHuoyTCluBeeKpwPewTw0zk=)
5: QEppDjVyRBerk3ujRwEpvlXiEWQ.roa (hash: SKIJd9REPViiCXVOQp27KMeIGa3T2cyw64X7SgOS//o=)
6: SCqPIEkOrt01ONxjT0XgajknB8k.roa (hash: W9QDPMAsjC59u8HP2lYvDC47+WKe629lFseH1cWFZZo=)
7: SiBbiHVr7AC0u90Fwok04bc86Is.roa (hash: IBa2+mQ/TjNwKvca48jtPUnqiSXDlYjx7SDm3vYP5Ys=)
8: YbDK1kvvrk8Ho1IdJerxyMGANJQ.roa (hash: m/hv4iobL1Tq4Hnl7IKJyfEevy78U6kNT70maANZhgM=)
9: i_WQhoivfiPNt_r8E0ASaD2knr0.roa (hash: ZsmBZD3QOznmcRlV4BtsmhxZ3ocoJk7WQB1P/qL5Ad0=)
10: zRYCcQ03Zo7Mtjwf5o0jfcWViDY.roa (hash: hObMfSwMh57HZlCx8OTlbluNMpET5Cy14GAtqwnhGDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:f9:79:b3:af:1a:35:58:19:11:cd:9a:8f:37:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Validity
Not Before: Nov 15 11:01:57 2026 GMT
Not After : Nov 16 11:01:57 2026 GMT
Subject: CN=dc3cc5376eddf03c86929b7ba7d33d57129a4d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:35:6a:d1:ce:49:64:1a:98:4e:3b:cc:2b:fb:
64:d4:ed:5d:6a:0f:fb:a1:8d:4f:2e:c5:1d:a7:8e:
a7:67:f5:9b:ae:23:5c:84:eb:47:a4:bd:97:e5:4d:
f6:27:92:b8:3e:6f:ef:11:f3:36:28:63:b1:3b:22:
8d:12:4f:17:af:2d:c3:f4:42:9d:53:36:b6:a7:38:
b9:3e:da:9b:45:35:2f:f6:4c:8b:c6:68:09:82:c6:
1c:b3:aa:de:41:16:a0:8a:f2:f1:56:3f:24:28:e6:
47:c3:9e:0e:a3:fa:7b:78:43:81:a7:1d:26:5e:d9:
f5:78:e7:c3:e6:72:c8:8d:c3:e3:ab:43:70:db:cf:
d8:b3:99:ba:6d:0d:5d:ce:e9:55:94:62:63:28:6a:
b3:56:d8:2d:5c:74:27:55:2e:fe:74:cc:17:06:9f:
fb:35:29:51:0a:0c:74:99:a9:af:55:d6:76:49:14:
4b:d7:8e:fb:91:a3:94:e0:40:a5:15:b7:33:0d:64:
19:a8:9b:97:a1:2e:92:c5:f5:5d:b8:5b:bf:c1:27:
f8:15:61:9a:dc:14:a9:3e:27:e6:51:09:ef:c4:82:
56:e3:cf:1c:cb:8a:cc:4f:69:38:17:7d:ba:c6:dc:
a6:94:42:4b:59:51:86:b4:61:dc:f6:b8:18:0d:2e:
7c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3C:C5:37:6E:DD:F0:3C:86:92:9B:7B:A7:D3:3D:57:12:9A:4D:91
X509v3 Authority Key Identifier:
keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:27:5c:cc:7a:66:80:73:8c:a4:e7:75:7b:8b:de:a9:65:bc:
ff:d8:4d:06:44:16:e8:c8:e0:fd:4e:a1:e4:29:7c:57:15:e8:
2c:a1:96:5c:b4:fc:30:39:fd:15:20:06:b1:c3:35:13:a5:d3:
27:b5:76:8e:90:1c:36:3c:66:f8:92:58:97:4f:1a:f4:fd:0d:
5e:8d:4b:2d:8e:3e:95:ad:fb:9d:9e:fc:91:db:17:ac:37:5b:
3d:6d:84:3d:0f:44:7b:46:7b:92:fa:61:69:c8:d5:ab:21:f4:
24:88:50:80:da:b2:6c:d8:31:df:72:36:25:32:00:f2:12:fe:
96:08:98:c6:5a:50:c5:0a:f9:28:bf:c7:8b:5e:3f:40:c1:37:
c9:0a:74:0e:7e:ff:5a:0e:39:4d:1d:63:83:42:d7:18:0e:cb:
9a:7c:6f:17:69:b4:21:b1:59:d8:f2:15:61:3b:7f:83:72:9e:
11:c0:7e:dd:c0:32:9a:ad:8d:47:5d:88:c0:85:4a:a1:1b:3c:
1f:53:a3:ba:2f:d0:41:e2:52:87:9b:c3:60:81:43:81:e0:65:
7a:62:c0:cc:44:23:8c:f7:1c:e8:3c:dd:28:fa:e6:6f:9c:ce:
05:bd:e2:ae:2d:12:a6:32:f3:78:d5:72:26:28:e4:41:a8:0a:
3e:7b:6f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:54:35 2026 by rpki-client