
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json)
Hash identifier: A62qVRN00/TgmsDzpTklkIwS/AyhP9JH++5l6gP1Cig=
Subject key identifier: B8:B0:0D:9D:2D:0E:61:5A:5F:E9:DC:BB:44:6D:91:02:66:7F:C2:3A
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 01A0EAE580BE53E6F3CA11D17EA922E0652A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
Manifest number: 093C
Signing time: Tue 29 Sep 2026 02:01:44 +0000
Manifest this update: Tue 29 Sep 2026 02:01:44 +0000
Manifest next update: Wed 30 Sep 2026 02:01:44 +0000
Files and hashes: 1: 1D9k8_zt5tU5xEXxx_nTvNFR14E.roa (hash: 5AizICGyxHpJw4Npr0yCLhoJ8ZzNbMev6myVVdUeGOM=)
2: 1zvdcEwkgDgymDIvdRNXraLRNH8.roa (hash: 91ImAvK9cIsr386Uw3vdRaUWjAcGr1Za2u1qM4Wcpbw=)
3: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: JHE8fvNZp3TzhHZNA+QnYsvzMwVmdlJIkxuHxhldFKQ=)
4: B_2DlHPjFMc2OFdioV78P7kSKnk.roa (hash: l6A6lmViWSMPIZA6Jqw5d17N6Vzy1rMqG76RVXMx2Xs=)
5: NEyhwNNluRFiY1QGbFu3eQXwHPk.roa (hash: AA+74Vvem1npNtDBL+Wwimm4qpTBdkXoFA2tK525GCQ=)
6: QAQqyGViM6nC5i8XAnkTLj2Fjlw.roa (hash: C9pNA0dXzzng1peuC0V7+/A3P+D1i1wR3XipGNDFMzY=)
7: V3NHoCO2C0OIcoB4H53PpBNrUdU.roa (hash: LdoGmRo3CKC/nx9jgbFbF8C1cm/1gnONTUC2D8S2Gx0=)
8: YhAgOfBxB36OmlW5J6iwNI4pf-A.roa (hash: YgJ931EB8K2m5BcoLz5t++aQe+CzOPxkeIACGG7/szQ=)
9: YhRc3Mf3n7-3iGrExyD5C7CZBFw.roa (hash: ksdLqMhtmV2T8m4tl86Qc23Jw/2ULQtET80utRAIjT4=)
10: YqA5Nc1KA5rAJ78_5MFp3uqVEyo.roa (hash: /mX+AdWxuRgbJEYcF/jnfYMmQcOrnv5KIh/j9UyP9FA=)
11: _m7nbQwhxW5w0wbnoPwEGZq5xj4.roa (hash: 6vjyJskNxAqxaPWKjJV/dxJmRNdkP5LCRI9f1lfJEJQ=)
12: iacNAwFg_4HGoGsTJn6LHRPtlFA.roa (hash: O2cDspTxotRdN6yj3yrsJmq7e6o/A/FbDoi7W5a9R4s=)
13: lrFBEKIZbBXIc9_I4zbSz4RjDmE.roa (hash: v/eVSdswkj07gsnQAoZ8DkBTrsjZAtAanAE3ZZjEf8U=)
14: rB-GRWPvn3oAjav-7hoWPrGNxdU.roa (hash: rPdzZUH5HWNL3o+DGYQhE29ut122q+EzGXhwG7kfgHE=)
15: rFlRkZEZd5Z1JSMbC-8xSLjTjKU.roa (hash: 5Ca02/lo6NUiWyGcT/F75FOvazcZn0O1kd7Dj1J0NJY=)
16: xeGzSDm-blUsbUt2WamIi2l7bV0.roa (hash: y6IJ/JOLtWfU6f/TY9wb28HI1chMC4cI/lZ982XG47E=)
17: z9ARo-p4RTVhYnYCwUeLQoHNI0c.roa (hash: h3CtyvykuY57x41IgLYTP2ID/rzbFX3Z2i6KoIYgMWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:e5:80:be:53:e6:f3:ca:11:d1:7e:a9:22:e0:65:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: Sep 29 02:01:44 2026 GMT
Not After : Sep 30 02:01:44 2026 GMT
Subject: CN=b8b00d9d2d0e615a5fe9dcbb446d9102667fc23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:6c:78:90:1c:29:9c:65:0f:70:55:e5:e2:
cd:9c:b3:9c:3d:99:10:b7:b9:a8:d7:8d:2b:a7:6a:
11:30:0f:c8:32:2e:fa:6f:66:57:59:fe:c4:f3:e2:
1b:57:fd:08:9a:bc:9a:84:95:ed:98:76:c8:78:15:
e7:87:4a:29:5e:a1:3b:b2:74:7e:2a:8f:1b:58:8e:
1b:c8:28:8b:f8:2e:09:5d:ec:0e:14:9b:fc:41:cd:
77:25:6f:ff:85:c0:af:6f:bf:12:9e:77:10:a9:fd:
c4:ee:7d:53:c7:e8:23:8c:5c:a7:1b:f8:57:e6:2f:
9a:73:70:05:aa:45:75:6f:f7:e4:eb:e6:e3:4d:4c:
9e:08:b2:c9:06:37:9b:2a:66:c8:ad:65:ab:5f:5d:
6e:cc:a9:ad:2f:0e:89:f4:24:03:c4:b6:e8:14:ce:
fc:e8:8a:fe:e2:a9:6c:e5:ab:a2:8b:47:7a:65:2f:
77:c5:3d:29:b4:1c:fc:d1:33:b4:cd:f4:b5:96:e7:
8a:54:11:25:03:5c:6b:37:22:2f:55:8f:bc:19:1a:
d9:ca:68:5e:73:79:19:af:99:b6:71:74:d9:fa:22:
9e:07:b1:4b:e4:89:9b:b6:9d:b5:56:68:9f:01:4d:
ec:af:be:cf:f8:3b:c6:1d:ab:de:4f:ba:a7:86:c3:
41:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B0:0D:9D:2D:0E:61:5A:5F:E9:DC:BB:44:6D:91:02:66:7F:C2:3A
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c5:12:60:db:0e:d0:dd:9b:b3:19:e3:7c:03:a8:71:5b:45:
d7:29:c2:fa:32:ce:f1:3c:b2:5c:fa:35:b3:11:69:41:72:cb:
0f:70:ac:09:3e:f3:23:2c:8c:09:79:32:59:fa:e6:6c:5a:f1:
9d:fe:8c:a4:4c:7c:db:ae:97:db:ab:6e:86:3c:15:d9:41:96:
53:d2:22:bc:5a:6d:27:a7:46:58:45:9d:d4:47:2e:45:50:09:
9d:a1:48:79:d4:a4:c4:37:25:59:d3:cb:f8:66:f6:82:c3:08:
11:b1:4b:4e:b9:89:52:95:6b:98:d8:5a:6d:7f:c9:49:b2:44:
d5:99:37:6f:a5:f8:3a:ce:6b:0c:e2:42:07:6a:a4:f5:85:15:
b8:87:97:f1:5e:89:f7:f0:88:b3:f5:13:59:30:d3:08:6d:c0:
03:71:79:b5:21:3d:61:09:1c:7c:f5:d8:0e:88:51:7b:79:58:
51:83:d4:24:de:26:4a:eb:36:7e:c7:a8:e1:01:4d:93:47:01:
7c:ee:f7:49:d8:24:48:27:13:0f:f7:a2:60:69:bb:aa:39:54:
3d:3d:e2:d7:cb:ad:2e:a6:eb:8b:cf:c7:34:38:aa:11:92:dd:
7c:45:b1:c6:3c:74:91:54:5c:ca:bf:d2:ab:6d:14:e9:6a:2e:
31:37:fa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:54:01 2026 by rpki-client