
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json)
Hash identifier: wmCKmYFx4sbhIvNMfZEJbOvXy3ukwSEpIDXM66vsGV8=
Subject key identifier: C5:E0:D9:C9:73:4B:CA:64:10:20:27:8C:01:43:53:70:98:B2:C6:6A
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 019E1FB5667E78A88A88D95349B9BBC07670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
Manifest number: 16D4
Signing time: Wed 13 May 2026 05:00:42 +0000
Manifest this update: Wed 13 May 2026 05:00:42 +0000
Manifest next update: Thu 14 May 2026 05:00:42 +0000
Files and hashes: 1: 1meLaYKO2Tl3bhYSsOjqpf-iDLo.roa (hash: aO+cgckrFpHbMOnuICmuB1xPZYgfmGDfrFdfNUo8hwg=)
2: 5GG9Ao4ScwCTaqCwAi8GnKy-uIk.roa (hash: BbSg6kfepD5G3rCNp1AAX9gRiwipTBnqXkjrl5sWhEU=)
3: BN0rBq-tNCIxQPqmFjFDV44qYpk.roa (hash: jKAg3bTdZuNi/EJCwdlUsNQtwlFvyoL5tw2t5y9MU1I=)
4: HO2U7d5NcmWKb9JFFOS4xst6Ap0.roa (hash: jIkU93mIxfPKkS6ZV5Em7YZjODmsWtP1r4eJlBEyOBI=)
5: KXLTLwTPKBiZN6esiKG0y1Vkb_A.roa (hash: 5MjMmws8ncjSHeVa5J4LmPdEnI2b6Mjqn9vh8n6pFxs=)
6: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: d4wBDOFLpDomd95U+pBH+pIYQYWQwfEz+xQKqPUktMI=)
7: MPhp410gGVKP5mkd7p544bUnjxA.roa (hash: QAd6nrSjBEFE5oh4hmKUtP3RiDgmKVq2ERPv15zMcC4=)
8: PWFCC016ViMQwsbajGFaPsVXWpU.roa (hash: XU7EaVjH4kPpzpd1I6Ws6W/k6BLYUdpZHPYkfznROSU=)
9: R5nQRJbnGIfuNPFQmSy5KyUN1Ng.roa (hash: S8J2YibhrFYHi+05w7dwd4Hy2ZPqL9ZfsTP/e0tcqoA=)
10: SR_Oqw4W1f3U3vok1BVIM_3prOQ.roa (hash: xZRfZAtOOEJIXE0XPSwwSTYi/tKeXWXICqEFbpdqCLE=)
11: gu8Xb0EdAj5QQiEbcZUHWSiqy4o.roa (hash: Qu77EoHxyeTpqNbgaiHUpPIuYcauYq9nmWOzOey7QMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:66:7e:78:a8:8a:88:d9:53:49:b9:bb:c0:76:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: May 13 05:00:42 2026 GMT
Not After : May 14 05:00:42 2026 GMT
Subject: CN=c5e0d9c9734bca641020278c0143537098b2c66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:80:76:3d:b3:5f:fe:a1:8a:b3:a9:ad:c3:
d2:e8:4e:19:f2:be:a6:4d:6b:0f:45:e6:04:97:c6:
2e:ee:6a:e8:72:cd:cf:31:07:fa:62:e4:db:a5:32:
30:e3:88:42:14:c1:ef:45:09:41:b2:a1:19:a3:7e:
1b:82:a4:70:b9:6c:24:06:9d:7c:19:44:42:29:59:
2d:02:e9:b6:cf:14:55:f8:0a:57:36:16:b6:c4:d6:
40:cf:05:06:ca:87:27:fd:6f:02:14:e2:9d:36:3f:
f5:ad:fb:a8:d6:18:89:d0:f7:34:80:b3:ab:1a:c3:
7f:6c:12:5d:0a:63:ab:fa:ed:5a:26:33:80:49:57:
1f:22:33:91:f0:0b:7d:60:f5:09:08:b0:dc:62:b2:
d0:37:a3:73:cd:36:00:21:e9:ae:10:37:e6:da:42:
a8:3f:69:2d:37:92:96:e2:35:49:4a:d3:5c:24:8b:
c1:7f:af:05:44:f0:6d:5d:7f:10:44:4c:90:6d:c9:
d6:84:ad:2b:9b:10:52:7c:b0:c9:a6:68:aa:9b:38:
42:60:91:6a:93:c3:c2:2f:9d:ea:6d:e0:b5:6f:ea:
f6:8f:a7:61:d7:d5:40:09:c3:b1:76:f3:73:b4:3a:
79:7d:b0:a7:cb:54:e5:b9:94:b6:05:e8:9c:8e:e0:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E0:D9:C9:73:4B:CA:64:10:20:27:8C:01:43:53:70:98:B2:C6:6A
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:95:77:69:ed:d5:5a:7c:de:bf:69:38:55:1a:13:77:09:e8:
5b:ea:49:6a:95:66:4a:fb:0e:1b:3d:ea:c3:63:b3:d5:48:39:
91:38:05:d3:45:cd:01:08:e0:5b:0f:4f:76:09:99:f3:f1:94:
e6:c4:73:a6:92:88:15:26:6d:25:53:18:57:72:0d:0e:bb:02:
ea:b3:32:0c:22:8d:ee:ea:89:b5:26:8a:b8:78:ca:b9:fa:30:
45:f0:b6:15:d2:60:75:96:8c:00:e4:e9:2a:94:ac:c6:d2:b6:
9a:da:52:d4:ec:a9:72:cc:cc:79:5a:bd:99:53:29:fd:21:65:
4d:e8:32:9b:5a:71:ff:63:c0:eb:5c:58:6f:c2:f8:5a:5c:ff:
cb:f9:3b:a2:a2:a2:13:27:8f:36:d6:6c:e2:b3:52:f3:e9:06:
5f:d8:0a:0c:c1:79:b2:57:96:f6:43:cd:9c:5e:a2:5e:af:7f:
bc:92:ec:37:c5:ff:3f:d5:ba:91:52:a2:99:03:52:3c:82:43:
b4:7c:38:ff:87:25:b5:c2:e1:84:0c:59:4a:96:75:91:51:21:
42:04:88:9c:b5:23:09:ea:f8:00:0d:3a:8f:39:e6:82:bc:a9:
ac:67:27:86:bc:cd:1b:89:b9:b1:37:ca:54:36:6b:7b:10:09:
f3:0d:b2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:44 2026 by rpki-client