
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
File: evUSKXc6-RV-MXFg-dyADzgeCys.mft (raw, json)
Hash identifier: O7zhwF3oySpKxmzKX7HAdq9fN1sZvvpQyIWFXeBJX0g=
Subject key identifier: 04:02:9F:28:B0:E1:F5:20:4F:E7:EE:17:B0:8F:9C:F6:C3:23:14:F1
Authority key identifier: 7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B
Certificate issuer: /CN=7af51229773af9157e317160f9dc800f381e0b2b
Certificate serial: 01A0CD47A906B3AA8462DA66E9685BDAD4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
Manifest number: 0318
Signing time: Wed 23 Sep 2026 08:00:20 +0000
Manifest this update: Wed 23 Sep 2026 08:00:20 +0000
Manifest next update: Thu 24 Sep 2026 08:00:20 +0000
Files and hashes: 1: 0JXzPsfQiwnhkAPuwUcoZ4TksqU.roa (hash: PLw1g8tEdu8DohzHWXzHrIGYzVNggXd55nUqO0fw1fA=)
2: HLXrwT45MTMa_mhCV00Hv0aHA2k.roa (hash: rkZE6mPZWfH9GMHGmnUqFvkyHWkjWIxlqyhyBnTw+1k=)
3: Kv2Ob7_hFEbgI_ftySsGnX4M3XQ.roa (hash: s+/q4sVi5Ud8SeTEnpw7PXXetnDgzT/C+VQ7Whvxsmw=)
4: LvZoa6Dyn3b8TsOgucX2IIHA2DU.roa (hash: txHAgVDu8eC+tRA2fpR62W+UF+dAIZZl7YAt2C2To5c=)
5: QcxSXFyqidHUk327u_nSMoqZheg.roa (hash: 4xwfEjK2GS0Bj8Odb8CMpXnbw4DAt7dP8ep7zLWLlyw=)
6: TGFfC8MsVtioSptjBohz0xvP3A0.roa (hash: Mv1j9mh4sO8DAuKoAT6/I6dcEMRxG28gweD0Pzi0ZKQ=)
7: VBa7pmCn8ime4P1CWdu0-bHF6pU.roa (hash: Zu7orNKKN0lHI4UfSn3mVOtovclqiBwC91Fgfm2M6m8=)
8: bGG4QXxgUzwoqqwAgB5WAK-Uxto.roa (hash: TEYIeaNaWOf9ouUEps9+2mmWqssPfLKwLjfKOLn+W1s=)
9: evUSKXc6-RV-MXFg-dyADzgeCys.crl (hash: VufWv+oncbYoVghoL2l1TRlqvOeNzkKOP4XZS3FmsR0=)
10: r-_3l2QQDk49Rp0j80drAiEu4kU.roa (hash: 0nT9J9nUi2CAiLfvcK69CvCos9Ne+xvHeMLkDsNE+kg=)
11: vcGQBCURbj2L-uTMuaODdad6bpM.roa (hash: 8edgli6gjAqsAbbauaZPwf+GB5AGSQnsq/FwGpi7vQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:a9:06:b3:aa:84:62:da:66:e9:68:5b:da:d4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af51229773af9157e317160f9dc800f381e0b2b
Validity
Not Before: Sep 23 08:00:20 2026 GMT
Not After : Sep 24 08:00:20 2026 GMT
Subject: CN=04029f28b0e1f5204fe7ee17b08f9cf6c32314f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1f:c1:0b:77:dd:7a:b6:e3:db:6f:e1:38:8b:
e2:9c:7d:a1:bc:db:a8:9d:c3:a7:78:ca:7f:57:b2:
17:de:a6:cd:e0:54:19:5d:0f:20:ba:ae:ce:18:5f:
48:1d:4c:5d:5d:d5:76:1a:6b:a9:f5:a7:1e:c4:5c:
ef:5b:23:19:52:0c:50:64:38:b1:1d:44:45:05:82:
67:b9:fb:b3:24:f8:93:8c:ec:b6:b3:f4:30:4d:de:
93:0e:b4:62:bd:80:73:7e:8a:a9:d9:b0:3d:70:93:
53:6d:a0:fe:dd:0f:3f:fc:8f:83:dd:f3:6f:67:10:
1f:7f:13:41:2d:85:97:26:27:54:c9:53:98:82:9b:
a6:19:f9:40:d6:9d:2b:15:22:1a:04:21:46:2a:87:
f3:be:cc:c7:7a:df:16:64:3b:51:8b:58:a0:45:68:
a1:ac:84:d8:10:2b:2a:af:e8:3c:2e:7d:16:9d:91:
74:88:df:12:ef:2e:58:6e:76:f0:4f:0b:92:ee:91:
97:e2:cb:d8:9f:a1:d7:0d:da:73:77:d0:c2:7f:84:
51:89:07:65:bf:75:dc:60:b8:4a:6d:d7:04:bf:ef:
6d:f2:00:61:83:cd:8e:5a:9f:d3:e3:22:2c:8a:7e:
b8:95:89:f5:7b:eb:5f:69:56:b4:d6:63:d3:5b:78:
5c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:02:9F:28:B0:E1:F5:20:4F:E7:EE:17:B0:8F:9C:F6:C3:23:14:F1
X509v3 Authority Key Identifier:
keyid:7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:fa:c9:ce:50:ea:5b:e6:6b:b6:cb:56:81:02:ed:f1:cf:70:
e0:42:82:c2:56:26:51:18:b5:fd:a0:ad:6a:bb:81:d4:85:fb:
b1:60:e8:7c:f4:95:5b:3b:b5:9c:5f:eb:a8:00:b1:35:23:92:
49:76:07:1d:52:54:2d:25:e1:00:3e:0e:ad:57:75:f9:e9:19:
9a:cb:0a:6f:ae:be:e7:48:c6:38:09:1a:bd:86:3e:8d:59:ca:
9c:5c:9c:57:ae:81:a8:03:3b:d1:99:b7:08:41:31:ba:39:c3:
72:c9:67:2b:52:83:7b:82:7a:8b:61:4f:cc:4a:82:6c:a0:e9:
cf:11:27:ca:13:6a:ea:01:82:c8:41:ea:e6:b8:d7:dc:75:5f:
5c:d4:aa:b1:9a:07:e4:56:96:0c:a5:7f:c5:1f:d3:3d:fd:d3:
c1:01:fe:11:6c:9e:8c:10:b1:60:13:89:58:5c:7e:31:51:76:
23:0b:c6:7e:49:e1:9c:39:80:9e:36:6a:7e:ed:f1:63:ca:1a:
99:e8:8e:19:d9:31:9f:80:40:06:69:91:35:31:73:f9:d0:71:
41:75:ae:a3:36:2e:f4:65:e1:98:c3:8a:af:3d:5e:57:65:a9:
38:f1:7e:f8:33:f6:68:64:94:8a:c2:8a:b6:a7:93:dd:c4:5f:
e2:6c:31:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNR6kGs6qEYtpm6Whb2tTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZjUxMjI5NzczYWY5MTU3ZTMxNzE2MGY5ZGM4MDBmMzgx
ZTBiMmIwHhcNMjYwOTIzMDgwMDIwWhcNMjYwOTI0MDgwMDIwWjAzMTEwLwYDVQQD
EygwNDAyOWYyOGIwZTFmNTIwNGZlN2VlMTdiMDhmOWNmNmMzMjMxNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh/BC3fderbj22/hOIvinH2hvNuo
ncOneMp/V7IX3qbN4FQZXQ8guq7OGF9IHUxdXdV2Gmup9acexFzvWyMZUgxQZDix
HURFBYJnufuzJPiTjOy2s/QwTd6TDrRivYBzfoqp2bA9cJNTbaD+3Q8//I+D3fNv
ZxAffxNBLYWXJidUyVOYgpumGflA1p0rFSIaBCFGKofzvszHet8WZDtRi1igRWih
rITYECsqr+g8Ln0WnZF0iN8S7y5YbnbwTwuS7pGX4svYn6HXDdpzd9DCf4RRiQdl
v3XcYLhKbdcEv+9t8gBhg82OWp/T4yIsin64lYn1e+tfaVa01mPTW3hckwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQCnyiw4fUgT+fuF7CPnPbDIxTxMB8GA1UdIwQY
MBaAFHr1Eil3OvkVfjFxYPncgA84HgsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lMDY5MTYtOTAwMy00MTk1LWIwZjIt
ZWUxZWE2MzZlZDRmLzEvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lMDY5MTYtOTAwMy00MTk1LWIwZjItZWUxZWE2MzZlZDRm
LzEvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwfrJzlDq
W+ZrtstWgQLt8c9w4EKCwlYmURi1/aCtaruB1IX7sWDofPSVWzu1nF/rqACxNSOS
SXYHHVJULSXhAD4OrVd1+ekZmssKb66+50jGOAkavYY+jVnKnFycV66BqAM70Zm3
CEExujnDcslnK1KDe4J6i2FPzEqCbKDpzxEnyhNq6gGCyEHq5rjX3HVfXNSqsZoH
5FaWDKV/xR/TPf3TwQH+EWyejBCxYBOJWFx+MVF2IwvGfknhnDmAnjZqfu3xY8oa
meiOGdkxn4BABmmRNTFz+dBxQXWuozYu9GXhmMOKrz1eV2WpOPF++DP2aGSUisKK
tqeT3cRf4mwxpQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:13:11 2026 by rpki-client