
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
File: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft (raw, json)
Hash identifier: 9C524yb7Hogs9o3lqY097+aX+RjfoxM2WLlZJDrsGVQ=
Subject key identifier: A8:4E:AF:2E:BF:A3:E6:39:B3:15:D9:CC:A3:3D:D8:66:52:A4:67:80
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 01A0D23747B73C62532E0D37C73CB79EF69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
Manifest number: 1A81
Signing time: Thu 24 Sep 2026 07:00:33 +0000
Manifest this update: Thu 24 Sep 2026 07:00:33 +0000
Manifest next update: Fri 25 Sep 2026 07:00:33 +0000
Files and hashes: 1: 1KzAL4WrD5dhhGZJOCxuUIPFwOk.roa (hash: aO9dX9fJ0rrae7yQKAQfFledrNyIupTZnT+cq07JYUA=)
2: 2fnNi2RG50nUnV2NcaaKxkNfurs.roa (hash: YjCnMRPFuN3k5TRvL6rGrwmbFWVhQVPPpGvWD61uUkg=)
3: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl (hash: 7m6CPWB0rrZZcEwrkpVd6DpSUgZ8WOt+WLWr2m9VreU=)
4: 88YNLmciNd0j13-H2-rZxVQMdGQ.roa (hash: PZ0hEGC0oEs598gQ8xeAY2EzI4szP3Vs9gNvciW2BKM=)
5: AnqEtz5hZkYAy4yO8qlLikZWRJw.roa (hash: j2OhR3ENDnTZP9Lf8x78QsTXcfAZEG3FS513keiFcpI=)
6: HQdRd7-uxpWaApI_yUxbm_9_dzg.roa (hash: i48eXcWynnm44Ui4IjxVTSgQ+VI6di3z/zykGcaGJUk=)
7: OCuIuLoTyx6UI4cRdqXTZdZqrRE.roa (hash: NtYeBn7vObBSrZet17ESmCNvYRE2bEdCvdV04YI1os0=)
8: RBopAdVF60vgkqykUfTCW-bkIG8.roa (hash: QhamcW1yECyAqJIZtVxwyJIdNVMOgAFF2TzQ8FAjUVo=)
9: RahkU4tOoQngjkSl9mhdDwc4pFU.roa (hash: JWZJdzvFdiQ85WtuycaeUgc1cy9Tzhri/PcDTONVm3Q=)
10: Rsj6R_5dXiHi1eUSKzpDKZzkTiE.roa (hash: nMPA233TUV9gqlw8aP+/RPCmhirOQucfaoSyNAu6fXc=)
11: YUsCKqNl16pDs_8KVE5VLmDFj5M.roa (hash: enLSqBELUYJ70Ss/6MuXxuUTa0RNR44fL5GLxYESEBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:47:b7:3c:62:53:2e:0d:37:c7:3c:b7:9e:f6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Sep 24 07:00:33 2026 GMT
Not After : Sep 25 07:00:33 2026 GMT
Subject: CN=a84eaf2ebfa3e639b315d9cca33dd86652a46780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:e4:9c:f5:b4:0f:fb:db:d0:52:13:8f:34:
86:09:d8:e7:ae:cd:24:41:42:86:32:38:43:05:fb:
80:9b:1e:28:94:67:21:26:d6:75:eb:31:f1:84:b1:
c6:c7:99:b8:2c:ef:d0:db:91:db:63:f1:57:da:40:
2f:8d:66:2a:6f:e8:ae:10:1a:f5:6d:3f:1e:67:0c:
87:8f:d2:85:f5:3e:1d:fa:2c:b2:36:86:28:ab:c6:
d3:11:78:c4:de:87:ca:4f:27:99:78:f2:c3:40:62:
3b:d9:0a:d2:e6:ea:74:13:92:4e:cc:0f:41:f3:b9:
bf:0d:22:0d:56:0b:9b:f4:f6:f3:1a:51:17:99:bf:
a7:e5:ec:ab:7f:8b:2e:76:9d:fc:05:86:bd:25:70:
4d:2e:5b:3d:54:f8:9c:be:fc:f5:a4:a9:e2:57:08:
dd:9d:73:04:20:7a:45:0a:88:24:3d:2a:e4:49:fc:
65:1e:54:b1:90:74:d6:e1:12:83:71:af:b2:11:10:
ca:71:57:2b:e2:70:8c:af:e6:70:a4:a9:b7:b4:1c:
8a:5e:08:04:d5:71:24:b8:60:b1:4b:a1:6a:45:cd:
85:ad:d3:6b:61:c3:82:6b:34:20:c3:fb:ed:23:5c:
56:a7:ff:0e:7b:58:2b:8b:72:71:73:3c:d5:1e:b1:
60:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4E:AF:2E:BF:A3:E6:39:B3:15:D9:CC:A3:3D:D8:66:52:A4:67:80
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:dc:9b:ec:e7:46:ba:57:74:ab:74:6f:6e:6a:d1:25:41:b9:
60:54:fe:60:29:b8:52:51:e0:8d:82:bb:ea:6d:0a:16:05:c6:
d5:3d:2a:b5:00:06:14:ea:98:52:7c:a6:1e:dc:93:26:ce:77:
e4:f3:b3:1e:5e:3e:60:1d:37:ba:d7:42:6d:f7:a9:9d:ea:89:
2a:01:3c:6f:02:92:ab:e6:7f:ae:8e:8b:15:84:a1:5a:ad:4e:
2a:ff:43:1d:31:82:05:36:61:a3:c4:c2:41:49:bd:52:40:17:
0d:10:89:75:e1:f2:2e:fb:19:bc:ee:4a:5f:09:3a:c5:e1:2e:
da:80:96:6c:7b:ff:a0:2b:18:bf:54:c2:bc:3b:7e:2c:77:10:
7d:d3:f1:3c:b4:0a:de:e6:50:1a:2b:23:a4:2b:7d:13:b2:39:
bb:05:98:dc:d3:22:c7:69:42:58:1e:fb:ea:a2:e9:ba:94:e8:
2d:32:f4:b4:1b:81:75:1c:f9:3a:c1:05:ac:4b:2f:58:b9:d8:
84:7f:0e:25:30:7c:03:71:cc:08:20:16:84:57:5e:0c:8f:80:
94:db:cd:39:62:25:6a:bf:22:4c:18:af:3f:37:10:68:8a:9a:
75:25:30:c9:8e:71:89:7d:8d:be:16:ea:54:bd:22:ed:c8:43:
54:c2:49:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:02:24 2026 by rpki-client