
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
File: ayM9dVCLToXMz0Q0mny3AxmNHSY.mft (raw, json)
Hash identifier: wqXmUnOf5DW43FrbTSMp3PJxmkeagC12JT9Fpuhbrf4=
Subject key identifier: D9:7F:D9:41:85:28:6B:2F:F1:83:53:2B:A4:77:43:D5:4D:AB:04:09
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 01A0CD484A762FD84D7EAE6997F140EFD6F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
Manifest number: 17F5
Signing time: Wed 23 Sep 2026 08:01:01 +0000
Manifest this update: Wed 23 Sep 2026 08:01:01 +0000
Manifest next update: Thu 24 Sep 2026 08:01:01 +0000
Files and hashes: 1: 1bncdI1HvWegkfkOeeoa5nOljr8.roa (hash: NfbtKL/fM/sWFvyUIB3zJxF3TY7oHsHrb3iWZHcFnF8=)
2: 2CbQxQdIR56oI33mXsNPJysh2OI.roa (hash: joXS8xA5s2yEiWLT1AkcUqDIoaCDRVGH7P/aChB2ymU=)
3: 3EanmD6DodOa3OjQ9Kx0qn9ri6Q.roa (hash: 4kaL0cFBeCDq0v8h0ILY1h3bjLeCtgIe5E5jCClpBsI=)
4: 3OVMsE-5ZEupDMfX9MTlCyp2wkM.roa (hash: z6ut5tdJDvXB8Jzf9s56+SPQvAn7Qp00GIZZPe2eAlQ=)
5: 7SIMvj1k5xsN1h3xkS5_DMW5y4Q.roa (hash: S6k/+gtFBCC3b9KfwT6tZ5Xz1q+2dXqGcNdYKCd9ehg=)
6: 7cfTnZvgSfEil-YZBKZdLdCbAbo.roa (hash: AKLB22yDeG7EM9+/4pHVnLAsK2pplpeZJDCWxL6pSIw=)
7: 96nhW7fwQ_laWKSgwpcxi24MuvM.roa (hash: N6W5Ek/wK4Pm3whmGHtixWn1/HYkCfQdvQqhfZHUqC4=)
8: DAsiheAfQV-3n4ItlbPGVG1Md4w.roa (hash: 6+SFOXT2tV1fCHy49Xv2Jfj0h6/qqmiVRYPvHr297JI=)
9: Eilb_UFwv7AQKBHlICmP2pgi_FQ.roa (hash: qQ/zUElPipJtSapfn3wrRR1KfyHaSlWeiqF/oVIx/d0=)
10: FBci10I6aG73ENuNfx7xpq1wj1I.roa (hash: 7Qx3boAf1NH/EWgy4dJq6Se8FRdBuYw6f3pqwBtRiL0=)
11: J8uF2NoryDUxm1SlbC6CQSKPUdc.roa (hash: x3HcBoYWhmqAXNzF37ZMBXp3/y4iai3A8/l7Q1ckTWM=)
12: JgQFyvhK48UsiHLo2GClJOr_UYg.roa (hash: ENI0caY+qR5uep969CyovRK5p657zdmyswAf0HcKQ3I=)
13: M25DxF769Ii8sD3VQLHjxn_a5xs.roa (hash: km4/YnoSASnoYK+VrVOCmmtlMYLN2uh5BGpv+BmeWq0=)
14: UBImtmTpT9AJK4XiVIvbMq--q_s.roa (hash: NijKBNgwerk44M+DxExLCS24gu6T722sFHFMOCujRn0=)
15: UK_V3N1epsugIkAcmcr5ieNfjeU.roa (hash: 4iAgS9C2I2C1YIUY6TIsSDC8YFSx7TeJEyw2cxl8uo0=)
16: YBpN3TQ1JzwNzB0-jsj_CckejPU.roa (hash: 8A8QBdzrHSSwGIlNYxFd7VC285mnazoMY8ZTK0EOh18=)
17: ZsQ9lmRCQ--4PszinpRM3-Zgb2Q.roa (hash: gLbW2t41nzvj/YP55Vnr5cnIfKklQY/CBVxBOEbb3ls=)
18: ayM9dVCLToXMz0Q0mny3AxmNHSY.crl (hash: wNLe+cQ1wNvEoX7oIMR9F1u92zr3wHdUuAXitrPpm9o=)
19: hPPUJEU66HUzBCdsMKPjv4y6kCw.roa (hash: ZcjMLqy1z7bp5wMo9CeMXm4svFAsNX9iyFgfU+2xru4=)
20: icFNxm6-PTi48L2vXKiDHN-axp8.roa (hash: BdFj1k1TZoLMU1HBgixKhNdJTHKY90rp1IYePTyNxUE=)
21: kx1p1slIxkJTxYn4OAj06CJUsf8.roa (hash: HkJZcVcAXKQ3R00x2VbaFry/zdm9SDMa5rLM9eNsbGo=)
22: q4DCvIiS6THJXZg00ACbcwTs9to.roa (hash: BzDZyZi3DK/fRXztW3cj1XBtDtFZup20v6Mda//O7qY=)
23: uSxyC5p1LzFocZL_XSBl8zeh0yg.roa (hash: zYJeQSQ3Bb4u+MNLkMaVaYTlv5YIpnhYpjXWLaWwK80=)
24: yhO6jjNSs_bJoAXmqMYLMOei02c.roa (hash: onlwkoJ5OKhTr40KVglk32d3M7hjIqq4nk6HmNYVvsU=)
25: zL6Va8mz4-mL5dF-T8Ckn3SRIUc.roa (hash: Kfzl6+KPLIjmljlRdomaeCn9w4EH9DthiJPy82CrCpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:48:4a:76:2f:d8:4d:7e:ae:69:97:f1:40:ef:d6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Sep 23 08:01:01 2026 GMT
Not After : Sep 24 08:01:01 2026 GMT
Subject: CN=d97fd94185286b2ff183532ba47743d54dab0409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:60:aa:61:b3:2b:48:0d:95:ef:69:76:c0:14:
66:c3:59:37:17:1f:e3:50:c9:d5:60:33:93:23:90:
09:2a:85:fa:8e:1c:f8:af:8a:f3:68:dd:44:cf:56:
00:27:00:a2:e3:33:ec:48:dc:51:b8:9e:7d:ce:ea:
ec:c5:49:d0:f0:2f:cb:13:68:86:bb:83:84:30:e2:
6a:54:05:99:44:d6:7d:6e:98:f9:fd:97:44:c4:c9:
96:47:ac:c3:e2:42:87:0a:e9:c2:db:a9:48:21:fb:
de:29:06:91:91:7a:50:b8:b7:20:76:c8:18:5a:f7:
55:24:a4:60:4a:e2:20:9a:bd:55:88:3b:75:05:73:
2a:d7:eb:ab:58:6f:05:4f:72:e5:bd:a4:5f:a5:3f:
17:c0:de:cf:9d:cf:25:02:ef:60:65:c4:75:96:4a:
56:ce:3e:dd:2e:79:5b:5f:68:2a:39:9b:f3:19:6e:
66:f2:ba:ec:6b:73:5b:67:bc:db:80:1c:e9:7d:8a:
ff:01:b3:6a:b7:0b:6f:5f:45:64:23:20:ce:e8:31:
0e:a8:f7:31:7e:ea:84:92:52:f8:79:6e:e4:83:28:
1e:26:bd:ea:64:b4:43:48:8f:9d:d3:78:b6:a3:02:
63:24:b2:04:42:5e:1e:9f:18:b9:31:95:82:22:ac:
cf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7F:D9:41:85:28:6B:2F:F1:83:53:2B:A4:77:43:D5:4D:AB:04:09
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:24:f0:db:a8:a8:23:27:5c:88:7f:f2:11:e3:73:5e:de:8b:
5d:a5:ec:87:89:b8:1a:51:33:f9:e3:86:9e:d3:23:58:df:4a:
5d:02:b6:9a:39:be:a3:27:7b:c9:c5:44:19:54:74:3c:3e:e9:
89:53:dd:10:3a:f7:53:6b:11:9a:76:12:03:60:5f:67:4d:06:
fe:76:e7:53:43:08:c6:fe:71:ad:eb:58:0b:0e:54:66:55:2b:
f5:22:c7:12:2b:10:2e:9e:22:79:bc:69:8c:73:16:35:40:8f:
2f:80:56:39:38:dc:7a:a7:9b:b3:08:3f:c8:88:26:30:33:4a:
8e:23:01:52:ec:39:7e:ab:04:3b:72:8e:76:4d:52:a6:17:a7:
ee:6c:6c:0a:75:01:8c:76:21:9a:35:58:cf:f9:96:bc:70:2b:
e8:ed:97:fe:4b:01:a0:ce:fc:4b:bb:d2:ac:e0:11:ad:d4:e4:
07:3d:33:1f:65:5d:fc:28:ef:a7:8f:36:35:a9:fe:0e:1d:18:
7c:41:a0:b4:c6:d2:b8:83:75:fb:c4:a8:41:b8:16:01:85:23:
b4:4b:3b:6f:95:1b:09:2e:a3:03:31:6c:bd:df:a5:3a:02:70:
da:d1:a3:74:f4:b9:6a:2c:7d:ba:17:21:b6:8c:02:25:e2:f6:
2c:61:6f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:05:08 2026 by rpki-client