
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
File: q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft (raw, json)
Hash identifier: S+PI/KDCRruCjNx+4WoqcYm/2sYx1Ea/F05aPE2MKuM=
Subject key identifier: 38:EB:4F:64:13:65:D1:AA:CD:4C:6D:BC:F7:88:64:D0:6F:8E:2A:6A
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 01A1DEA7C859546EA4AE16BD335BC1556511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
Manifest number: 1B4D
Signing time: Sun 15 Nov 2026 10:01:40 +0000
Manifest this update: Sun 15 Nov 2026 10:01:40 +0000
Manifest next update: Mon 16 Nov 2026 10:01:40 +0000
Files and hashes: 1: 0fgHNVCctmMI1V-BS5_kF5EsiOU.roa (hash: eNuhCbiq7TJi88XjDE039hLZRz8ipxup9WRLp8sp1DI=)
2: 7_6SFXfZMrzFSdtu3xDOw0gJ8JY.roa (hash: hG4yO49oHj9b8DfZFiphyKQ8y3qDFd1bbzb1jH4CrQU=)
3: DF7ZMArr7YQkP6JCvTXnJ48GG1g.roa (hash: h0YoBkA2Ma+7OTVVfQXFtJdLdFlpvKYuPy7+Y+Jklhw=)
4: Ep-mQB2FAsp8xVwfqHWWTFWTlYM.roa (hash: CcqzWZ6bMIWysh3kKgYdOQMLPUZ4shI2ek8KjLM+54s=)
5: GujJ-FoV2NxCphoiy9ei8Zxbj94.roa (hash: 5qyX0xcJQK2tt6fcmxtTs5x5YBwoFGMWlBym7IBYHmk=)
6: MuQyieCgxPJT0SRv6Xj_GxkiB-I.roa (hash: 0pzaFGjjnJFM3Mi6/Z0qJhoLAoydrAANnuMwOCc5Kso=)
7: P7wv0TBgiECiEBUf1EgkMnv47Po.roa (hash: rqQESPX4LWrWYgKl1zOfXltaaGJ18DHxc3dAwU1KR9k=)
8: Q1yzAo5L9w5IHv0JqXbg9yCMMcU.roa (hash: qLGf0LLtEidrk4nWv5exOU1LPTUa9MuB+3L8YC0+hbc=)
9: QLx_bFpLJ0q7OGCLe6wvYzJoLrw.roa (hash: XQYgd3zzuTttV8zp0GzxyEY68F4NaIMjIG/jCEfOzec=)
10: RjNeSA3OdSgfuKyXCw4On9Hfwig.roa (hash: TGS0IFEq2/Ak8/1sB2LyNa9KTXiGL21lniik5j5gU80=)
11: T5XQh9j95-eHLk4tIkpyKU927L4.roa (hash: YLS+fL7b3BgU8PYEgqxRvmWh3Kk8TcAGqvr6h5p+gtg=)
12: TDSIuL-UCZDNweCSbeoQaq_Kz94.roa (hash: xmfP7+f8gMkStgz64Ovg93ThSGH8dnAhDslP+tZj6oY=)
13: X_eS7uT76Tv6lToj2nDNeg9sgYo.roa (hash: rlOOw1Hh+1Gv0+quXstdSdljOaXwuIQS08R8cOH2H9E=)
14: YRVJ0Gjf3ToFSXg4tQ2csynme1g.roa (hash: +3oRd6tn6dDyNGcRR/+Wdu79deA/W9QRUODpof/4dqI=)
15: YVly3HyFx4cO-VDnGW8-TlLZp8c.roa (hash: zmddt2tM/OfIW2jjFDZBhz9+RtNwb/OeGPoKv5WQBq0=)
16: f_U1wlpu2o8G1EDSBfG2v3CJsrU.roa (hash: mBEZgenCoBMKSBIbKUgW3oXM9LSYHALYDi8zO9xe4lk=)
17: gkBIXWPDqd5iHgTo6Oq_RIYuttI.roa (hash: TAAZ/5Q3PgiVYAsyiVs0eY43VCN4PWzuxjaw3+oWC3U=)
18: l8R7A1sksjUkbsqqgmFV4yhnwoY.roa (hash: tOD+/L6A4hjUPcMiH0jbILCqY006lQVa6EOA+rm4RSY=)
19: q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl (hash: +dE0PQDTib8GzB1TNdh0IoJv5+9bbG5mbHiIXyhvrRQ=)
20: qHqVroTNd8mAZUTP-4LLTihEjRA.roa (hash: LFqfsvqUg1kryv3SdZmfz1fPpVN8XkzwNYvHfBdV5dM=)
21: r97T0zrjjPPADnFxgjfEjKH0-vI.roa (hash: uvIm3GKMAsVoII3IPG7UtxMh0NuDqi6V1N2PDdGwnIM=)
22: sIdlwG_KvJyr9jN9d5KfNvyl-ws.roa (hash: HSdj5IIYXsemUlbbPFPUMMU0DovDtEclq0qz0Z73zr0=)
23: z2b5HqrBbNton83_qG8fiGl3ipE.roa (hash: /MzZQY5wAz0d5qSw7Z9ljmH3Z0SZhJHz2o3BPZIFhmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:c8:59:54:6e:a4:ae:16:bd:33:5b:c1:55:65:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Nov 15 10:01:40 2026 GMT
Not After : Nov 16 10:01:40 2026 GMT
Subject: CN=38eb4f641365d1aacd4c6dbcf78864d06f8e2a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:78:f7:01:43:62:4d:84:7b:f2:8a:30:4d:a1:
85:e8:e8:e9:03:21:f5:32:39:66:2d:3c:b3:fb:4e:
90:74:96:3d:6c:59:f3:a5:cc:23:ff:61:6f:39:94:
48:d1:39:97:0b:d4:71:df:36:2d:88:47:25:9c:2a:
bf:80:98:4b:7b:be:44:5f:fb:da:74:87:6e:f8:fc:
64:d1:a8:f0:a8:1d:09:cf:51:92:eb:41:2c:c8:69:
2d:ea:b4:75:43:0d:9d:95:cb:21:86:3e:fa:0c:5a:
ff:7f:3e:31:0b:57:24:8f:dd:66:75:dc:c2:5b:d8:
2a:9e:0b:0b:76:45:0c:50:9a:be:aa:76:d2:b2:cc:
3c:8a:18:e2:e9:c1:ff:75:4c:41:bd:e6:09:93:67:
f4:c5:06:86:8b:e8:38:90:da:64:df:c2:9d:8d:b0:
ac:9f:c1:66:aa:d3:b6:86:80:75:68:ed:ea:92:60:
c5:b9:11:9d:44:1e:d5:a3:ee:55:4e:69:0e:18:e4:
b5:90:5e:78:f8:b1:a5:fc:dc:77:53:b7:b8:d3:99:
1c:c6:3b:7f:d6:b4:fa:3c:7e:3f:b4:3a:a5:ff:58:
5e:30:cd:3c:68:94:05:6f:8b:c1:21:71:bf:37:88:
83:f1:17:3a:c3:13:c0:2a:06:af:02:91:08:1a:83:
cf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EB:4F:64:13:65:D1:AA:CD:4C:6D:BC:F7:88:64:D0:6F:8E:2A:6A
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9b:89:e9:cc:03:38:cf:36:a9:d9:de:fc:d3:31:99:bb:f4:
89:19:5f:13:5d:86:19:25:03:61:1e:06:fb:3c:45:5b:66:c0:
58:33:fc:26:d4:69:3a:29:96:95:8a:75:d1:cd:66:c5:c8:c4:
c5:a0:e3:62:f2:1b:00:27:34:68:36:23:2f:46:82:ce:ce:c3:
0e:93:2a:01:a2:be:6a:19:2e:da:92:ba:5a:bd:6f:e7:3a:9a:
1a:03:1a:23:80:51:ae:74:66:79:83:d2:de:7c:5d:5f:a2:ac:
25:73:ec:f3:78:6b:84:4e:bd:ac:81:c4:6b:e9:49:79:2e:33:
d7:9a:69:ac:98:47:53:c2:ff:b3:15:ba:ac:44:9e:b7:48:4f:
9b:c2:16:e4:78:67:5f:e8:7c:94:71:3d:c6:f8:d4:74:27:6d:
76:5d:aa:d9:d9:49:4f:25:c5:47:ba:65:7b:54:0f:d8:ba:b0:
39:34:e1:df:a1:02:8b:14:87:58:e5:81:58:b4:02:ee:3a:23:
b6:00:91:cb:f7:f7:41:58:cc:0c:0b:dc:4d:f6:12:73:0e:b3:
6c:f6:79:90:b8:50:d5:c8:e1:ba:ec:81:1d:84:0a:8c:8e:62:
d7:9a:87:e0:6c:0f:98:2f:b1:aa:ae:b8:f8:74:4a:29:e2:11:
61:65:a4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:39:24 2026 by rpki-client