
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
File: UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json)
Hash identifier: bP9Ze0xblrdGjKXAxUq3IP0nCViIsZMOp1m/VeREu+Y=
Subject key identifier: 95:FD:9A:06:DD:C4:75:B9:AF:E5:A4:35:96:CC:61:A6:E7:06:80:EE
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 01A10135D9735F5149F0A0CF1EAFFFD1E6CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
Manifest number: 1AA0
Signing time: Sat 03 Oct 2026 10:01:08 +0000
Manifest this update: Sat 03 Oct 2026 10:01:08 +0000
Manifest next update: Sun 04 Oct 2026 10:01:08 +0000
Files and hashes: 1: 0EBeCvxmJyfS91P9dvdoxEsVlJM.roa (hash: Ztm1RYUvm6dAlcHl20eJteXmU6ZIpFtevcVwkSpIGLQ=)
2: 231qsvaOZIqIruO4fkNxN4_GZxo.roa (hash: unnQteTwyKRIT/eUEC+t3+86puUV0nMgnQ966MHZ+gM=)
3: AieLJXAymktRfmukFlACfHWkYRE.roa (hash: /oLmGMPt55iKvBJWcIwKY+SjbZghe8alLWfm6etoAFc=)
4: GQnHTRMHOOfXf-q1lA1GVsIiYEY.roa (hash: 8NrETMC7ms4hMHOoi8XDcOkhkZOGNojhzo06eNcWX7Y=)
5: HOKn3zKmtRSjMP4gY95pRGsQ4t8.roa (hash: gjx4DxQQ6VGBQmKgHHbfJgniL+WNt8A78W7MT9lU+s0=)
6: I-gYLpV-BBY25Tuh_tLWkflSCbE.roa (hash: bNMI/pphMMD6ofbgzIN/kdCqC5aENCj7lwxKpHYdvSs=)
7: KQYzDmlbtLb0TIveiic0hQtg1_8.roa (hash: KwMCQ5pXReeQWpe8C0PWaWWc7IeA3pbKv8Ezi0wF6Rc=)
8: KlidTRE0Ld2vhd7LchTBrjDXtCM.roa (hash: oYu7FrAcgyOmxnR9Y/a2v7qA05r9PwyCGoG1X5C3eMU=)
9: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: fmwnGLjndVQC/BnQmB8w2a36rvQTvnm+zhJVO8T5U34=)
10: oLn3GUiVFVVqpSTWcLHtebawLz4.roa (hash: JQbIV8euT2kTCxgQGDHR/GNa6adXdcVfQkxZZzbOy6o=)
11: qH1VTWt-4KrwL8x5likjxl704mw.roa (hash: 4YYYIkykd4q8NCtsfVXnlE5hDVlIl6oGx0esdZITEMw=)
12: zmr5Arlo83bz2EZMsCebzBonu0g.roa (hash: 3wLrxDIVVtatk269ndPNrri4rStQIN8G6VIxy0jx5CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:35:d9:73:5f:51:49:f0:a0:cf:1e:af:ff:d1:e6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Oct 3 10:01:08 2026 GMT
Not After : Oct 4 10:01:08 2026 GMT
Subject: CN=95fd9a06ddc475b9afe5a43596cc61a6e70680ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:97:04:5a:6c:ee:8a:b1:ef:4e:ac:00:4e:
aa:3e:e7:a9:da:98:c0:f9:33:33:a2:ab:6e:3d:c3:
5a:c4:27:8e:f2:fc:c1:db:ec:19:d6:90:b4:98:a8:
f1:30:87:99:00:fb:88:1c:3a:66:08:98:89:1e:ea:
bf:83:85:92:c9:d6:34:4b:cd:72:8d:ae:6d:bf:9c:
87:ae:f0:ea:b5:d4:39:50:75:d3:1e:76:03:f7:15:
6f:13:ca:df:f6:5e:8e:46:54:07:54:75:0a:a4:5a:
15:96:6b:1d:26:1b:fd:e9:c5:6a:b3:d4:3f:56:72:
7b:65:12:ce:23:66:3f:11:b9:98:f3:40:fc:56:14:
ef:db:3f:91:42:b5:a9:c1:dd:b0:cc:eb:4f:23:d3:
94:5d:62:19:bd:57:d4:02:06:97:fc:5e:90:b2:33:
ed:45:ff:7a:f8:59:01:40:0c:ab:65:1d:ff:cf:9b:
28:54:6f:ab:7b:90:96:c0:c8:aa:93:e6:b8:88:25:
e9:94:58:01:6a:63:4f:66:72:ff:24:b0:8c:8c:46:
f6:09:82:fb:67:59:a8:54:24:f1:94:c3:b7:1d:bb:
20:e0:b4:6e:ba:5e:59:75:2c:d0:36:21:78:38:52:
d0:6b:83:00:08:d6:f4:20:3c:bb:e1:f3:61:b6:f9:
4d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FD:9A:06:DD:C4:75:B9:AF:E5:A4:35:96:CC:61:A6:E7:06:80:EE
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:dc:b0:47:ea:fc:75:f1:48:84:f6:30:0d:be:5a:cd:f5:f1:
49:24:e3:25:a6:e7:15:5b:e8:1f:ea:89:f6:d1:f5:b9:5c:e9:
4f:ae:73:48:c8:be:a2:8a:c7:5d:1a:e5:7f:e9:e3:f2:4b:10:
1f:00:76:d8:70:3c:c2:eb:b6:27:c9:b4:4c:3e:c2:76:1a:36:
6c:a9:a4:6e:ad:c7:14:6e:22:aa:29:80:1d:1c:22:12:a7:e6:
34:d9:f9:c2:97:11:b6:9a:b0:4a:31:49:c1:08:8e:6c:9a:fd:
af:b9:17:7d:d8:7c:f4:03:4a:1c:99:64:e1:fb:9a:ff:4d:d7:
13:0f:c0:80:b1:8c:1c:f1:e0:e4:33:96:10:c5:03:c6:f6:18:
22:fe:6f:8b:ff:5d:d4:de:cc:c1:00:f1:ea:fb:1a:42:9c:60:
b2:59:2c:05:5e:a9:76:6d:8d:29:d2:4c:60:e1:88:47:35:c0:
1d:1c:6e:a7:1f:4c:28:d3:fc:70:a5:d0:a7:12:98:94:04:12:
69:a5:a9:ce:ef:e9:5c:40:b9:2c:4d:3a:ce:f8:44:eb:41:af:
47:d0:4a:c1:ca:f7:64:0d:d4:6b:bd:53:25:46:1f:0a:c9:67:
67:78:e8:24:fd:84:1b:27:35:ad:03:55:d8:4b:65:c1:38:02:
68:2c:58:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:54:46 2026 by rpki-client