
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
File: zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json)
Hash identifier: vrn8VYzEZkRKLTp1WEDy/FOCeB15zerM6jaKWxm+TwQ=
Subject key identifier: A3:66:01:CF:63:30:21:DF:85:ED:80:5E:7F:83:5E:EC:A2:56:7A:19
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 01A1D9812F6CEDA579CD40B26C74CFEBAB14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
Manifest number: 146E
Signing time: Sat 14 Nov 2026 10:01:24 +0000
Manifest this update: Sat 14 Nov 2026 10:01:24 +0000
Manifest next update: Sun 15 Nov 2026 10:01:24 +0000
Files and hashes: 1: HLHqvk87Ei7Rb8vncCXmuWA4l5w.roa (hash: qoKJ0OJaCDjYFA4CcCaaIa7Qb7ARu8S3G8wQDaTgwyY=)
2: IuTc0D5cqqVRFXq-RLQjTdtK6t4.roa (hash: N7kuEXPqq2dxL/74FimXDyw5h1aaFIYNRarT9mB1gww=)
3: Urq4lcycVWIKLaNn45V1NeLCyy0.roa (hash: HZbjp+4QSo6sI0SFI/WlujxWaBNVqSA8sXC1QOrQVus=)
4: W_Ul3KlfZZAZTwhKXluxrjuY6M4.roa (hash: snU7qHYKC5pKjBymlSHVqbxFqXGFJcMqdpyod8cQYhI=)
5: _FlJUcg_DAf-rn0fybI98kXRLSM.roa (hash: Na55+I4JuVi9sdUSuFm0DnoQALRTqrpEY/axc5aZZGs=)
6: _w5UYdFDNzYlLB7LTgg14uRWoQ0.roa (hash: FNlNd2XH5rtIbYtOhYBckkDJYb7wBJCjDTN6zqyAzfM=)
7: a_baIkGFreZCkQEDrTUpOc9RljI.roa (hash: oCF0GgcCbPHk3wbbPuSP852CME0/FbCGLSMKdZU6cDI=)
8: cWmuz8rWpsLyYzFuVbnm5r2sozM.roa (hash: j0YU3bB3glv/xEPniuCcBHAL2FOz8BwUw+pnEkDQbqM=)
9: dOwr2B8WnphDIXpwhxX7hEeAXoc.roa (hash: avK0kgve7pfAgs0RWzv3wt9hc94t2lmnhaoGfrVsWwI=)
10: q4kW0iz1-xCx1rCC3Q5buZRP_nQ.roa (hash: /LZ/55ZcvlNKCTvLv/6z/+QEwO6/nIaHAOm8aSJ7fUI=)
11: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: lqc5SUF/+5RHC82ydRO7tYW97dJCWD7PmrEFIl0r5SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:81:2f:6c:ed:a5:79:cd:40:b2:6c:74:cf:eb:ab:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Nov 14 10:01:24 2026 GMT
Not After : Nov 15 10:01:24 2026 GMT
Subject: CN=a36601cf633021df85ed805e7f835eeca2567a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:74:70:26:94:00:74:4f:07:5b:c6:d0:f3:
a5:7d:04:0b:97:58:a9:d7:ac:ec:ba:54:e1:8b:18:
92:6c:13:53:80:f8:97:7b:99:df:8d:81:82:29:51:
3d:87:1d:b4:b8:91:64:57:1f:b1:3d:a4:42:11:8e:
6e:e3:97:4f:5c:25:a1:ad:4f:dd:c7:a8:6d:5d:db:
ff:71:80:41:12:8a:a0:bd:79:6b:db:82:e7:9e:6d:
92:27:2e:8f:11:1b:50:3f:cf:ae:b7:49:b8:5d:0e:
13:61:4b:c9:46:9c:eb:80:09:5c:36:c9:5a:1f:4c:
0e:13:fc:79:4b:f5:6e:11:39:d4:f8:95:80:c2:9a:
f6:ad:eb:d3:78:15:b1:16:76:c9:97:c6:de:ad:2e:
77:98:b2:63:b9:d8:fb:00:fb:85:0c:26:f6:7f:2c:
54:50:07:0e:b8:d3:bf:3b:d8:53:3c:91:b1:95:28:
65:43:fc:64:e0:47:86:15:68:6b:ee:4b:6c:fa:f8:
a1:b2:86:07:53:08:92:4b:94:db:80:51:e3:54:8b:
53:63:ed:cf:b1:9a:54:50:1d:41:0e:a7:b6:59:0d:
d5:92:d9:2c:38:11:a2:0c:54:2f:b1:95:8b:2c:16:
42:2a:23:1f:f4:9c:a8:74:62:2d:07:9c:b7:27:af:
f3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:66:01:CF:63:30:21:DF:85:ED:80:5E:7F:83:5E:EC:A2:56:7A:19
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:64:7a:5b:9f:2f:db:2f:ff:b1:cb:15:7f:9a:9f:0a:54:06:
37:69:4b:51:a9:28:9d:c6:ee:4a:d1:92:fa:57:30:52:23:e7:
99:39:e0:d6:09:c6:16:6d:7e:2f:57:b2:ff:ac:6b:b4:ad:95:
f1:49:41:8a:35:60:d2:24:ad:24:7d:d8:4f:db:a8:f5:79:bb:
ed:ac:af:bf:10:f7:7b:ba:b8:15:3d:23:41:81:69:d4:fc:07:
12:de:62:b6:2b:ac:d0:e0:02:65:18:3a:bc:f3:ee:e4:f7:9b:
7a:b3:16:b3:1b:42:ac:12:31:df:0c:96:e3:89:0e:d5:8f:81:
d6:3f:17:56:c5:cd:7e:91:5e:e0:80:ea:21:dd:38:56:8c:a7:
26:29:79:d8:ba:70:74:25:0a:76:31:04:b8:1e:c4:f8:16:2a:
7d:36:4e:05:f8:44:0c:31:90:c2:7f:a8:08:d3:74:ec:05:7d:
cf:47:04:92:74:81:e7:26:b5:20:b3:42:a1:e1:d8:06:02:8f:
3f:75:75:c1:fc:90:15:e9:9e:01:8a:cb:5b:bf:31:03:c7:77:
9a:1b:09:fd:ab:0b:ba:a3:67:45:ee:00:7d:65:50:a1:79:cc:
5f:36:a6:18:65:6e:1c:78:5f:ff:be:fb:00:fd:40:9f:36:0f:
1f:b4:a7:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHZgS9s7aV5zUCybHTP66sUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi
MTcyNzcwHhcNMjYxMTE0MTAwMTI0WhcNMjYxMTE1MTAwMTI0WjAzMTEwLwYDVQQD
EyhhMzY2MDFjZjYzMzAyMWRmODVlZDgwNWU3ZjgzNWVlY2EyNTY3YTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmJ0cCaUAHRPB1vG0POlfQQLl1ip
16zsulThixiSbBNTgPiXe5nfjYGCKVE9hx20uJFkVx+xPaRCEY5u45dPXCWhrU/d
x6htXdv/cYBBEoqgvXlr24Lnnm2SJy6PERtQP8+ut0m4XQ4TYUvJRpzrgAlcNsla
H0wOE/x5S/VuETnU+JWAwpr2revTeBWxFnbJl8berS53mLJjudj7APuFDCb2fyxU
UAcOuNO/O9hTPJGxlShlQ/xk4EeGFWhr7kts+vihsoYHUwiSS5TbgFHjVItTY+3P
sZpUUB1BDqe2WQ3VktksOBGiDFQvsZWLLBZCKiMf9JyodGItB5y3J6/zOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNmAc9jMCHfhe2AXn+DXuyiVnoZMB8GA1UdIwQY
MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt
MzMyNDdjOGUxYzFmLzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm
LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWR6W58v
2y//scsVf5qfClQGN2lLUakoncbuStGS+lcwUiPnmTng1gnGFm1+L1ey/6xrtK2V
8UlBijVg0iStJH3YT9uo9Xm77ayvvxD3e7q4FT0jQYFp1PwHEt5itius0OACZRg6
vPPu5PeberMWsxtCrBIx3wyW44kO1Y+B1j8XVsXNfpFe4IDqId04VoynJil52Lpw
dCUKdjEEuB7E+BYqfTZOBfhEDDGQwn+oCNN07AV9z0cEknSB5ya1ILNCoeHYBgKP
P3V1wfyQFemeAYrLW78xA8d3mhsJ/asLuqNnRe4AfWVQoXnMXzamGGVuHHhf/777
AP1AnzYPH7Sn6A==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:54:15 2026 by rpki-client