
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json)
Hash identifier: SiNr+gHVCsJ5T+59v5Mi1KGUXc3rA4NMAMcj4o1ByJc=
Subject key identifier: D1:31:B3:44:A1:73:E3:DE:DD:84:C0:C2:E7:B1:19:35:A2:8E:29:D0
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 01A0EA76F72B03F5F7F66F9DA38CDC5FF9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
Manifest number: 184B
Signing time: Tue 29 Sep 2026 00:01:00 +0000
Manifest this update: Tue 29 Sep 2026 00:01:00 +0000
Manifest next update: Wed 30 Sep 2026 00:01:00 +0000
Files and hashes: 1: 1meLaYKO2Tl3bhYSsOjqpf-iDLo.roa (hash: aO+cgckrFpHbMOnuICmuB1xPZYgfmGDfrFdfNUo8hwg=)
2: 5GG9Ao4ScwCTaqCwAi8GnKy-uIk.roa (hash: BbSg6kfepD5G3rCNp1AAX9gRiwipTBnqXkjrl5sWhEU=)
3: BN0rBq-tNCIxQPqmFjFDV44qYpk.roa (hash: jKAg3bTdZuNi/EJCwdlUsNQtwlFvyoL5tw2t5y9MU1I=)
4: HO2U7d5NcmWKb9JFFOS4xst6Ap0.roa (hash: jIkU93mIxfPKkS6ZV5Em7YZjODmsWtP1r4eJlBEyOBI=)
5: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: YNlk5UX4fhnnJP5lWlj2ff83pyp7tFNWRSTnIBSDIqo=)
6: MPhp410gGVKP5mkd7p544bUnjxA.roa (hash: QAd6nrSjBEFE5oh4hmKUtP3RiDgmKVq2ERPv15zMcC4=)
7: MVqGstRqvT-YowTHw8TITZTgPGM.roa (hash: ThTvEwZga99xtCX2NPVf5h3chD/MozOOE+zxnQX4tvI=)
8: PWFCC016ViMQwsbajGFaPsVXWpU.roa (hash: XU7EaVjH4kPpzpd1I6Ws6W/k6BLYUdpZHPYkfznROSU=)
9: R5nQRJbnGIfuNPFQmSy5KyUN1Ng.roa (hash: S8J2YibhrFYHi+05w7dwd4Hy2ZPqL9ZfsTP/e0tcqoA=)
10: SR_Oqw4W1f3U3vok1BVIM_3prOQ.roa (hash: xZRfZAtOOEJIXE0XPSwwSTYi/tKeXWXICqEFbpdqCLE=)
11: gu8Xb0EdAj5QQiEbcZUHWSiqy4o.roa (hash: Qu77EoHxyeTpqNbgaiHUpPIuYcauYq9nmWOzOey7QMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:76:f7:2b:03:f5:f7:f6:6f:9d:a3:8c:dc:5f:f9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Sep 29 00:01:00 2026 GMT
Not After : Sep 30 00:01:00 2026 GMT
Subject: CN=d131b344a173e3dedd84c0c2e7b11935a28e29d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c5:0d:7a:6d:1a:e1:3b:93:39:02:ec:56:0c:
66:dd:2d:cc:59:64:ae:74:4d:9e:7a:d5:da:dc:53:
9d:08:d5:b9:1a:d4:05:7d:e3:32:af:85:98:40:14:
13:b7:d9:ec:e6:cf:9f:94:c3:80:ad:c1:25:5b:9a:
05:4d:17:a9:73:91:09:a3:f0:69:38:dc:af:52:5f:
2c:f6:42:31:c7:02:5f:f4:b9:79:b2:73:ef:04:b2:
f8:bf:4a:bc:a9:cb:ec:4a:6f:73:7c:14:c9:68:e0:
93:1a:39:74:16:84:58:41:a1:ff:59:74:4e:8d:bf:
09:fc:a3:5d:d3:7b:63:88:fb:07:c6:a6:00:57:37:
66:f9:91:94:22:83:38:de:4c:09:64:a9:a6:11:92:
a1:19:de:f6:de:12:ed:2e:91:66:d2:59:2f:3f:3a:
34:64:b7:60:95:14:00:53:be:4c:cb:cd:da:80:aa:
31:39:96:04:75:24:40:62:a8:87:22:bc:93:f0:e8:
13:5c:11:ba:15:e4:88:47:de:4f:27:27:3f:e5:96:
10:48:0f:3a:44:31:e8:b6:78:fc:f6:96:38:98:98:
8b:72:63:ae:fc:64:31:25:fd:8c:46:c7:30:ab:1c:
14:d1:00:50:33:35:75:59:05:38:18:b5:99:13:b2:
e4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:31:B3:44:A1:73:E3:DE:DD:84:C0:C2:E7:B1:19:35:A2:8E:29:D0
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e3:1d:9c:8d:7f:d8:dc:6a:c2:9a:30:a6:b3:d8:00:0c:f1:
ab:57:ae:17:04:91:03:ed:85:24:df:30:bb:7d:67:52:13:28:
83:24:6c:72:df:9b:a7:80:6c:f5:c0:ec:7f:0f:4c:96:9b:a1:
a6:64:57:10:84:bc:6d:b9:f2:56:20:82:73:f4:c8:70:37:e8:
9c:aa:7e:05:84:7e:97:8f:94:8a:92:ef:fe:c5:d7:97:0f:3a:
f2:ad:db:09:36:d7:03:12:7f:28:01:4d:98:73:e6:a5:5c:ed:
2d:5c:e2:0a:4a:75:be:0d:a4:8b:7a:a2:ec:28:53:c7:e9:b0:
e6:3e:8c:1f:3e:49:60:83:a0:80:4e:81:ab:b5:e0:eb:29:5b:
99:51:b3:18:14:76:f8:3c:e7:2a:50:2f:86:bd:78:98:92:89:
3d:04:18:f5:08:9d:13:1c:9b:0b:2e:ee:e2:c4:b1:6a:86:18:
57:78:9f:c4:41:d1:cd:cd:6c:33:2f:c8:00:81:61:53:3a:4c:
08:4a:91:39:71:4f:25:c2:4e:9f:7d:9f:f1:d1:2d:e8:3a:c2:
53:a2:c0:14:e3:dd:74:06:05:f8:c3:84:46:c5:a7:de:aa:d4:
2b:82:2d:84:22:31:fe:d4:03:4c:75:0f:f0:f6:f8:6c:7b:61:
ed:9a:14:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:57:11 2026 by rpki-client