
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
File: iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft (raw, json)
Hash identifier: Cm89V3cji4Zmi8Cy7jdwrLMtVT++jM0dSKLJEJHE6gM=
Subject key identifier: BD:A4:63:6F:E5:C5:84:BE:29:1D:CC:4E:FB:BE:F6:B8:63:9A:60:D0
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial: 01A0EC2ED5600F3B270D2FC8E7FB304F3776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
Manifest number: 03C0
Signing time: Tue 29 Sep 2026 08:01:27 +0000
Manifest this update: Tue 29 Sep 2026 08:01:27 +0000
Manifest next update: Wed 30 Sep 2026 08:01:27 +0000
Files and hashes: 1: 9CW7PS1O-yaGQw798fnARuiUrJY.roa (hash: pJA5oJPC8LVm68jDybSlz7FMMO+yc+xxykw7/S2Fs08=)
2: F7I5rnkHLQ8PitpUJJXzJQnZJaU.roa (hash: mzXoIYY5/cdBAcGj+HsD/eRCWuIVU1w+4VfWf00hQ20=)
3: INCU2iAXvTzNbBMSAxlrItQxyhA.roa (hash: QjZs1QBxW0pY83BtGBXtgMXwn/IF6AETwK3PZKsE2JQ=)
4: Jf0IiUw2yxEGHU21X5UBjTTFsPw.roa (hash: iznEwndgoL7LQZ3si+t9hPfxRdTHhoHEK3Tm2NJNWr8=)
5: Q3Znim6qxleuhiANfuzqn0XQe7Y.roa (hash: xqiLzxwXQFjHq+9P4kBJ5oqn9VLWT6Mr5rM7CUckdIc=)
6: UsGhEaTVOTKiKiirGjznuF2Gaak.roa (hash: F1w1woKo1BbT5Id/y5MMOZaDCzO3XoS91p9xrahgbXo=)
7: gjdIx7JpQJjhJVIboXcukmsgReA.roa (hash: 6IvSw94J4Pwlc26GeUiHVjeQmmn49KLLbVomZAh3xKI=)
8: iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl (hash: gkqyHmLu/VTQC3eA5PrWsh8F4nQsDC8MlHkzaZWl3b0=)
9: jJlQZpZevpI7sI0qTXUB9jMuUv0.roa (hash: sIoAPPkOgjZo6KC8AV3+ukTiCzKXpwR8qem4+cLmkos=)
10: q-RWodK7a-3CkL-IcmgLBAtseBw.roa (hash: IdzRoZdWnPk+8n2VcM7Jqg89nCMd+QL98y/Yo8OkRK4=)
11: wYwUaKIKd-bY8Wo70jEekOpz-dA.roa (hash: r5OOBgo8FfNpqi69a1yE5xLz64FR5eB/1u8J9jN8CoI=)
12: zCh_Z-NL-lt9latA7DFFhUPPEEE.roa (hash: H5XNQm6vSeKYsENIaBhTZdYpRcyi8dMupOSZNrKXWpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:d5:60:0f:3b:27:0d:2f:c8:e7:fb:30:4f:37:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Validity
Not Before: Sep 29 08:01:27 2026 GMT
Not After : Sep 30 08:01:27 2026 GMT
Subject: CN=bda4636fe5c584be291dcc4efbbef6b8639a60d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:2c:d0:be:eb:26:ed:fa:7b:f0:0a:81:c2:
c4:30:e8:3d:e2:ca:9b:20:ce:34:54:ae:45:a1:7d:
62:77:80:84:06:ac:11:e3:3f:14:8d:a7:3d:e2:3b:
73:f6:80:e8:7c:17:65:2f:09:9b:f3:a2:da:c7:00:
00:f3:47:11:66:01:41:85:cc:02:e7:6c:95:a2:f3:
4c:28:e3:7c:97:31:d7:84:ad:21:bb:21:de:0c:aa:
c1:51:88:63:d7:e6:41:77:29:2e:d4:0b:0a:6e:9f:
80:9d:a6:99:49:ef:14:3a:a2:e2:bd:92:1b:dc:91:
b8:9a:ba:ef:d3:00:9c:de:7b:6b:3c:25:28:a9:ef:
2b:2e:68:13:90:26:31:c1:fc:e8:5d:f0:e4:46:bb:
fb:ed:a2:19:23:2a:cd:00:98:72:3a:1a:04:31:2f:
07:d0:3a:1d:8e:e0:9c:7e:a2:be:74:b6:ec:f1:d7:
16:f8:5b:c9:45:b5:0a:6f:17:01:5d:00:eb:98:6d:
6f:58:e8:36:f3:d1:21:ba:69:3e:c7:7d:39:a1:e6:
f9:d2:7c:16:16:42:a5:f0:be:3c:c8:76:64:f7:13:
90:2e:a4:35:d0:c1:3f:4c:55:bb:e7:c8:86:b9:90:
f3:bc:2b:8b:7c:b4:11:ee:70:6e:8a:2f:09:4f:aa:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A4:63:6F:E5:C5:84:BE:29:1D:CC:4E:FB:BE:F6:B8:63:9A:60:D0
X509v3 Authority Key Identifier:
keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:f1:a8:74:98:8d:40:72:47:78:14:28:39:43:24:b8:e5:86:
82:20:d8:75:a2:09:f8:56:26:77:3b:e9:8d:96:cb:1b:55:92:
09:02:9c:5d:b5:0e:f6:f1:07:9a:5e:10:e5:c7:fb:6b:b1:f8:
17:3a:48:06:3e:c9:44:21:70:53:6f:f2:12:9d:47:04:6d:af:
ff:35:93:30:46:8f:fe:04:02:40:03:2f:fa:97:cb:b5:88:7c:
cd:23:31:06:88:f7:b4:4d:7a:60:15:4d:44:3c:04:f1:f3:bf:
9c:ab:12:f4:a6:3c:ac:c9:63:8f:21:61:f7:9d:3e:df:32:60:
0a:c0:3c:70:33:41:5f:ff:29:d0:25:d1:fc:32:da:6b:b5:ae:
7f:03:5f:92:c6:a9:09:ae:c7:cb:a8:b5:e1:91:16:c2:27:ca:
a3:e6:45:b8:c0:18:57:e2:0b:40:77:7e:3c:1a:f3:63:a8:8c:
4b:f1:7e:40:43:3d:c3:2d:05:a6:1e:91:92:fe:d3:8e:f4:92:
50:2e:ca:5a:13:0c:a7:81:f9:c7:f7:55:50:cc:a5:5e:bd:3f:
22:b4:0d:c6:c2:f9:bb:bc:98:eb:0d:9d:f1:dc:32:ca:0f:d7:
00:74:10:83:47:4b:0d:df:9a:33:a8:ba:c9:d3:8a:c1:48:4d:
55:be:42:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:54:36 2026 by rpki-client