
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json)
Hash identifier: z6/T20yGHwx4aU8N0FuvmQ+ki/qD+jo/Jgs9ivH1K00=
Subject key identifier: 75:CE:76:E1:A3:C7:F5:13:E5:FA:20:F1:21:B1:24:0B:32:CC:E5:96
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 01A0CE23AE03626BE96AB692898EE01A08E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
Manifest number: 1505
Signing time: Wed 23 Sep 2026 12:00:39 +0000
Manifest this update: Wed 23 Sep 2026 12:00:39 +0000
Manifest next update: Thu 24 Sep 2026 12:00:39 +0000
Files and hashes: 1: 1-RxvuJO_jTchUynlUq2UfaQo14s.roa (hash: RiJrCfh6jrOWp/Kdbsy9E1iiVv4aVjYDrT7ENiEz4TE=)
2: 1-a4Jfvl73sg74p_0XL8QwTt9GSg.roa (hash: FUZwlR5+IowctwR2O6qPAipX2v6y8pLQV+4UDQvBld4=)
3: 1BivsgHv80evKrJUr40JTZlUflQ.roa (hash: V8wFTbk/nUscM1lOnu4fmHl0eVlRMSa47L0o0dXKIUQ=)
4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: S4M9MfqvN9N9RTHWLEppT79rHU7GcqUXo5QlIyP5pJM=)
5: BYf7RoVtzwx1yTG9FshawkhjTK4.roa (hash: sDDf+aqw1FGJKYG+5FCvmvbUR9TO2CTrbICWskjL/F0=)
6: Iw5mcpwalTXPnZnnTmYTdsqiUzs.roa (hash: sk1P8Pv/vu7n71J9ytQoTHDjd9XCgIlEXHvpDdpVHFw=)
7: UReyeEdRYk-K5jTcIl8Ooq7M3tc.roa (hash: RUl0rxhnXo8q1lbp04pAM7Ge7Yr5f6OK0CqmmmjACe4=)
8: V-aCqzfb1a5nr18Dpdo59TdOJ2o.roa (hash: cKOWN1Y85BplWaYgItYhxxODhX9O9HAW97DEPTPY4i8=)
9: fl0ZAFdlfHmaO-tRgRiDI18HGbI.roa (hash: MwB5gNGA9bGWfwt6Pb+LVkIHTpzaIDIKiSps/GwLDPs=)
10: ha79IahEugt55pyXch2rl5eqNpY.roa (hash: /2Q4OxJwb2IrGYC5cRQW4yWcjEMQEg/M8fPIE1oKn0c=)
11: ySnZHtp6cJwxMtQWa0uJPnGnXXU.roa (hash: 3nfAqDZ+jchkof/hQMbxPVQAHcDXX0FbrKywJk2nvzA=)
12: z9xaJu4-grqg2GhotcVjg60Bphs.roa (hash: X87I15rWlYwJRZh2iXyNZTDnLknqtSiwvXkNxh+oeds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:ae:03:62:6b:e9:6a:b6:92:89:8e:e0:1a:08:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Sep 23 12:00:39 2026 GMT
Not After : Sep 24 12:00:39 2026 GMT
Subject: CN=75ce76e1a3c7f513e5fa20f121b1240b32cce596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:98:fb:80:0b:8c:22:35:6a:3e:7b:6b:ae:
08:2d:00:a6:89:0f:31:74:12:78:b5:04:88:83:2b:
c1:53:50:f5:8a:fb:7f:63:84:f3:f0:e0:25:6a:f4:
e0:95:56:72:a7:a6:c7:b5:86:58:c6:c0:14:0a:bd:
d6:6e:22:0a:9a:7f:74:08:02:a1:d7:a2:6c:db:03:
c6:06:c5:c0:60:b6:73:69:d5:83:18:9c:27:d7:2d:
a6:97:eb:97:23:80:ac:85:a6:d8:15:1d:67:37:40:
92:e8:d6:4e:a8:23:d6:fe:6b:52:0a:cb:e2:d5:e1:
e2:d6:f8:30:49:f2:be:da:9a:07:e1:7b:ec:57:59:
cf:78:b1:87:27:57:26:4e:96:2c:d9:1d:e5:d4:f3:
07:c1:87:c3:b8:89:0c:09:16:1c:8a:c9:8c:51:a6:
ce:05:97:fe:e6:c3:8b:40:c4:71:44:53:7d:34:e4:
75:a1:8a:80:c1:e6:2d:5c:83:e6:72:ca:11:0c:70:
d7:82:ff:78:98:21:d5:4c:74:07:97:be:d7:50:0f:
a5:83:23:a4:29:39:c7:4d:a6:51:d5:b4:86:b4:69:
d7:15:93:a7:6a:76:df:88:3f:0b:da:62:1c:09:aa:
fc:5d:5a:d7:91:c0:5a:4f:9e:29:1e:09:0d:8d:7c:
85:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CE:76:E1:A3:C7:F5:13:E5:FA:20:F1:21:B1:24:0B:32:CC:E5:96
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:91:f3:06:cf:5d:65:b5:07:f9:64:9d:7e:30:9b:e0:d5:0e:
0d:88:57:ac:6f:dc:d8:3d:7f:41:3a:b7:d6:4e:bb:25:31:c4:
8a:63:75:7f:37:fe:09:f1:8c:1a:c2:d0:49:17:ea:09:b2:fb:
a3:35:cf:f4:71:19:5b:74:6b:a6:41:41:ba:53:9c:b2:1e:f2:
bd:cd:1b:45:94:1b:af:5b:0b:39:cb:cb:82:2d:70:11:9e:a6:
95:97:28:3a:9c:63:59:a6:3d:d7:92:f6:f5:e4:ec:6e:67:7a:
eb:7a:d6:1e:0f:84:66:c8:48:16:d3:a0:f7:95:cf:44:3e:58:
a9:89:97:2b:f6:48:37:29:ae:d7:79:97:f3:9c:7a:0d:75:be:
da:04:27:04:0d:90:88:30:f2:4f:17:15:26:6f:c5:16:c1:f6:
1c:10:87:26:fa:88:7c:1b:bf:ce:b3:94:4b:3c:c0:f9:b2:02:
3f:5f:ab:ac:4b:a6:c7:6f:6b:24:b2:bf:1e:fb:87:cb:3c:e6:
2b:7d:5f:62:9d:c1:50:7a:0b:5d:42:99:04:43:aa:99:8b:46:
b1:a5:98:b4:2c:ed:23:55:38:c3:53:83:87:6f:88:8a:96:e0:
70:d8:3d:16:12:cf:53:5b:4e:6f:9c:94:c0:b8:8d:cc:f9:3a:
80:0b:4c:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOI64DYmvparaSiY7gGgjpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx
ZGRhMTYwHhcNMjYwOTIzMTIwMDM5WhcNMjYwOTI0MTIwMDM5WjAzMTEwLwYDVQQD
Eyg3NWNlNzZlMWEzYzdmNTEzZTVmYTIwZjEyMWIxMjQwYjMyY2NlNTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIWY+4ALjCI1aj57a64ILQCmiQ8x
dBJ4tQSIgyvBU1D1ivt/Y4Tz8OAlavTglVZyp6bHtYZYxsAUCr3WbiIKmn90CAKh
16Js2wPGBsXAYLZzadWDGJwn1y2ml+uXI4CshabYFR1nN0CS6NZOqCPW/mtSCsvi
1eHi1vgwSfK+2poH4XvsV1nPeLGHJ1cmTpYs2R3l1PMHwYfDuIkMCRYcismMUabO
BZf+5sOLQMRxRFN9NOR1oYqAweYtXIPmcsoRDHDXgv94mCHVTHQHl77XUA+lgyOk
KTnHTaZR1bSGtGnXFZOnanbfiD8L2mIcCar8XVrXkcBaT54pHgkNjXyF9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXOduGjx/UT5fog8SGxJAsyzOWWMB8GA1UdIwQY
MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt
ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3
LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5HzBs9d
ZbUH+WSdfjCb4NUODYhXrG/c2D1/QTq31k67JTHEimN1fzf+CfGMGsLQSRfqCbL7
ozXP9HEZW3RrpkFBulOcsh7yvc0bRZQbr1sLOcvLgi1wEZ6mlZcoOpxjWaY915L2
9eTsbmd663rWHg+EZshIFtOg95XPRD5YqYmXK/ZINymu13mX85x6DXW+2gQnBA2Q
iDDyTxcVJm/FFsH2HBCHJvqIfBu/zrOUSzzA+bICP1+rrEumx29rJLK/HvuHyzzm
K31fYp3BUHoLXUKZBEOqmYtGsaWYtCztI1U4w1ODh2+IipbgcNg9FhLPU1tOb5yU
wLiNzPk6gAtMYQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 17:26:39 2026 by rpki-client