
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
File: 1nPYSbfVBHN21X5veW8AGLcLRQY.mft (raw, json)
Hash identifier: +vlEuI/NIo0NVPToeawwsFVcGHJCX0FtKtqH+8JkolE=
Subject key identifier: 29:63:8D:26:E6:AF:85:8E:1A:BD:F9:4B:5A:7C:96:A4:56:79:2D:49
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 01A0C9D9AEA7860FB274C8BEAC3B8CF210C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
Manifest number: 1A84
Signing time: Tue 22 Sep 2026 16:01:21 +0000
Manifest this update: Tue 22 Sep 2026 16:01:21 +0000
Manifest next update: Wed 23 Sep 2026 16:01:21 +0000
Files and hashes: 1: 1-_yOHxDowuUEcsMT-tBSHJNawJY.roa (hash: OkEE2PY+HxH7AS4Wef2NDEm88il1r3tB4z1trxdzMcY=)
2: 1EJ_XfQMx6Y9yqlKxeYGCdoslO0.roa (hash: YK8CRl6X799i7UjLTxVvL97sv8/qoADyGmSlEddAXF4=)
3: 1nPYSbfVBHN21X5veW8AGLcLRQY.crl (hash: Tx8R3oJveExntcPGKCqm+X9AiV13d6+kSfl1b0pcA7A=)
4: 1vy2Zod5icTuhsQoU0EnDjOvBUw.roa (hash: lJYkGyyhIavQAOFGfkLnoEQo2R64Z5o6AfYNpKGslCE=)
5: 3v81jWmwGIghf6l1abg6waAEeoo.roa (hash: 2xCQdXuSHLV6YT0QssUgSQv/xmh0FjaCpT+b6qTdhnk=)
6: 4kaVbFQvrJOAhPQSlSaYPi3hGKc.roa (hash: 0Knyq2lSkHBl5OxmwpQgrMQirBzFuxXt+/bCQAQTrMg=)
7: 5HitUAfp7De6p9xafpMt3ATjBQk.roa (hash: 5d3h3a5UI6rNss12Jcnnn3jOrPpOcrY8ye2eLfKL2mg=)
8: 6sT_2wW3QFQmWTC2CM0vH6Hbq7E.roa (hash: TDLoh7DszsOvKZFOmyvLjh7bfnLG215xsT9A8ZTykgo=)
9: 7aWPPwJsKlW4Fi6xN_XXtLIfJXA.roa (hash: 7BMUVhvyY50Slydl26/j9TUmeiQb1ahox00oD5OJl90=)
10: 8gJt_vKgY7RalSb-2BGe533Itg8.roa (hash: SlU8QzhG9LmIVc3LENP/NU0v6qpC64nU8O2T4x7X/MA=)
11: 98pyVUSP-3YD0M9jomfshbJFQVE.roa (hash: HDKg8j9nXrhmetLV5gGWpJVaamFSbchAi6J311nU4CE=)
12: BDDyMncaJebobPWoAjI_C7AgFnU.roa (hash: 6NAVrH1PJ/MJGFzOgYGVfE7zNiR7cYr1T+PoNc+JTKo=)
13: BEdOsJ0uWzAykBj59D8-m5m6Qs4.roa (hash: HDNZu2O3gU5q7Ilkr86atZzAlLz8h2wJffq5uz6Nd+k=)
14: Cg5FaKG67uP3SPgq_VSkJRLg6D0.roa (hash: j3qDHySSQdId0uGBx2KNwYnD9BeODhiYFkQVPncbDdc=)
15: DFbe-grnv214-1UWkNCvNfxBROA.roa (hash: MXboD8VwpBFHaKDAOrbSzIk3lEvSK+PtFTR39zMGr4I=)
16: ElXvSvuLFTsYAmvz_TBH6ZJm0iQ.roa (hash: 3gwzPqGe9jISnECuIn7U7ob+0WRbHpl5+HRdhbPVSuc=)
17: Fq1NPfsyOmVZECU2FJjJ5_NLWA0.roa (hash: zP4xgXcFTiI3pGf02z+g6mojyh0+IkrvjR4QKlDg2SU=)
18: JBhxjPEeoajBhy7cTpg7oEWhavM.roa (hash: gWp4UHWiDKCPjbcZjxktO81He434yg99QNMFol+Sp+o=)
19: JNkRMvPPESUnCgbdrEYiBVlkTl8.roa (hash: aQmkjT1suDgq8ev3sMJGRKct+cd3Qs3CINDoMn3EIxA=)
20: LXOlrFf8_l83rpmn17vhLFJbiZM.roa (hash: sNb9fSP4DWs/c7lN80M3XZoZwHMjGq02DY0II5j0Qyw=)
21: OfWV2U6d2G66IUWsrNxQqrV7mss.roa (hash: gASQVd+Sh51sow2h+7M1wSuBugvFozeRnIy6awd7pEU=)
22: UhjMuilgxrHuJbG_v5PNxnq08SY.roa (hash: Xd2IZu005wTJgMzbjP6ZPuNUygMnfEV45FJoAZWWctE=)
23: Xt6zWGQgJ7OZ5m019bhnxofUJnU.roa (hash: 4nQ6eOkRIm9+m+ARz/C/jnfX9vVdmTgRULBpQgKiGQk=)
24: _RlUaty7XFL7Cg1Bd_uBGGhGjOQ.roa (hash: qwy34usdJCqXP9Il0XAoY9RGd5uIHfbG7rpjrxu69io=)
25: hHFL6YvmkxeC88wNUSyE--wEbwg.roa (hash: oRWVW/Ew2m5MAblBqbb+qw5rCChK2C1xyIO8/seBpWQ=)
26: jX6P-bHofIqjGsTJnOwPDX7xdQE.roa (hash: a9lEvQ6DaP+YBlQpn96SMBqrqZvPXdiisAwCLDojp1s=)
27: kIwcjzINW8dxv0n9475H5UAlv-o.roa (hash: z7kthu14PX9eFygYlQs12XpkisLRPxXCnKfsTXiY9WE=)
28: nGziJ4JPpx9Cbq4yitFCOBS9t6E.roa (hash: tHfu57V4VKiKHp0XzDwqW8mvWljSgux9wLYlu3RCeEE=)
29: qKKybqkrLx3Ya1--kbP2_lmbPEk.roa (hash: uTZzIjPiBF1BZfJxXa4Io6x8P1a8OROcC2WIKx0Gejk=)
30: r-YJXwiwh7rALoSlt5jqijBslf8.roa (hash: J9wniZHNEr62grnQnCFHnmZd2pysSh/T/q+LFn4tk4w=)
31: sgdwL4FzMun4HY-yk-2aNwsjCIY.roa (hash: 4jfU3ykpRiEb9apfKYx0SLztCFzoJlz6AMhRgZUm4lQ=)
32: svBR3bGWVaZYfi0KyiWyrD9Uw4k.roa (hash: mBYHUbx1m9DpD1cLPkr3K0AOJjiELWaZ7tIIWQo2etY=)
33: xee85XP9L7aWHvTNVB6I9nZcNlU.roa (hash: R3ViaO85fnRciS7RiBQnaPMq6GgojqoWPmvM1MsLncY=)
34: zOH_qOgQOsgw3q138l3rckG6Ago.roa (hash: +Mx8N2tCJhWGBRIEJoPVrZh2rwV5PL/bGJpe+6e4qH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:ae:a7:86:0f:b2:74:c8:be:ac:3b:8c:f2:10:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Sep 22 16:01:21 2026 GMT
Not After : Sep 23 16:01:21 2026 GMT
Subject: CN=29638d26e6af858e1abdf94b5a7c96a456792d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:03:ef:da:32:64:45:97:52:1e:f4:78:f0:
67:41:cd:48:66:c9:8f:9e:ea:a1:42:38:18:f2:e8:
7b:fc:0f:51:16:af:4f:01:c4:dc:a3:6d:b7:0c:27:
91:f5:66:b5:8c:4c:35:1f:6a:2e:1b:09:52:bc:f2:
4b:dc:a6:c7:93:91:ee:9a:e9:09:b8:e3:b2:1f:c6:
f0:40:83:1f:1e:76:50:4f:c2:f0:cd:e9:17:af:fd:
e9:02:c9:5f:7e:07:b4:13:00:b6:ff:85:25:67:48:
4e:20:89:aa:ac:2b:12:00:20:33:ed:38:e7:bf:f8:
4c:b0:7e:80:f6:be:69:19:18:7e:e4:04:57:6d:e6:
ca:8a:bc:19:68:bd:5b:ea:a6:02:f6:15:ba:c7:47:
ea:78:6c:f6:5a:e1:91:6e:8e:bf:9c:1e:d3:7d:93:
17:98:4a:a3:1f:87:2e:6b:b9:2f:00:ef:94:be:93:
00:b7:20:11:32:38:20:8e:0f:3d:e2:24:54:bc:b1:
31:5f:61:5e:a1:85:9c:ec:bd:14:bf:83:87:39:01:
81:58:7d:bc:c3:dc:67:50:c8:63:16:10:65:44:8e:
02:d4:f7:b0:89:5a:8f:c6:3c:22:d0:94:44:ca:49:
8d:42:55:ac:11:8e:7b:70:2b:d7:15:47:7c:cf:0c:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:63:8D:26:E6:AF:85:8E:1A:BD:F9:4B:5A:7C:96:A4:56:79:2D:49
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:58:59:cf:7b:51:70:bf:f5:bb:10:6a:89:0e:f5:87:c3:4c:
82:68:e4:a6:c9:2d:aa:c5:08:73:d7:39:05:22:92:cc:3d:33:
9b:1e:cb:ae:d1:1a:5c:0b:be:46:57:61:9c:b7:32:32:da:77:
36:60:15:83:e3:83:4e:8e:68:a4:46:42:83:2f:7c:5d:29:f2:
c7:af:13:aa:1c:dc:bc:fe:ef:38:ae:f1:83:ee:83:f5:80:bf:
b3:57:86:65:ea:f3:a4:92:3d:ff:20:8d:a5:71:07:b4:07:39:
24:56:24:6a:2e:79:0c:91:73:8f:45:20:1a:c1:1f:7e:a6:d1:
80:b3:09:ca:b6:be:5e:4a:af:b4:6d:38:a5:79:9a:1b:12:a7:
8b:d1:ab:d9:9f:0b:b0:9e:1e:31:08:27:bd:c5:1a:a2:1f:16:
9c:e7:b5:dc:07:c5:fd:f4:f9:04:42:75:40:38:82:40:40:de:
79:70:59:a9:53:bb:f8:68:31:24:30:e6:e0:93:52:07:26:51:
0c:21:99:dc:26:ff:69:18:d3:a4:5f:a5:a6:2f:3b:9a:ad:04:
d5:a8:6b:5f:f8:4f:fb:01:ea:50:e0:ba:66:53:6c:48:46:5d:
b5:e0:52:e8:00:50:2b:2c:41:a9:f4:e1:28:28:cd:2f:fe:85:
0b:53:3a:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJ2a6nhg+ydMi+rDuM8hDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw
YjQ1MDYwHhcNMjYwOTIyMTYwMTIxWhcNMjYwOTIzMTYwMTIxWjAzMTEwLwYDVQQD
EygyOTYzOGQyNmU2YWY4NThlMWFiZGY5NGI1YTdjOTZhNDU2NzkyZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfUD79oyZEWXUh70ePBnQc1IZsmP
nuqhQjgY8uh7/A9RFq9PAcTco223DCeR9Wa1jEw1H2ouGwlSvPJL3KbHk5HumukJ
uOOyH8bwQIMfHnZQT8LwzekXr/3pAslffge0EwC2/4UlZ0hOIImqrCsSACAz7Tjn
v/hMsH6A9r5pGRh+5ARXbebKirwZaL1b6qYC9hW6x0fqeGz2WuGRbo6/nB7TfZMX
mEqjH4cua7kvAO+UvpMAtyARMjggjg894iRUvLExX2FeoYWc7L0Uv4OHOQGBWH28
w9xnUMhjFhBlRI4C1PewiVqPxjwi0JREykmNQlWsEY57cCvXFUd8zwySSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCljjSbmr4WOGr35S1p8lqRWeS1JMB8GA1UdIwQY
MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt
OGVlYjc1N2NmNTQ1LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1
LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlhZz3tR
cL/1uxBqiQ71h8NMgmjkpsktqsUIc9c5BSKSzD0zmx7LrtEaXAu+RldhnLcyMtp3
NmAVg+ODTo5opEZCgy98XSnyx68TqhzcvP7vOK7xg+6D9YC/s1eGZerzpJI9/yCN
pXEHtAc5JFYkai55DJFzj0UgGsEffqbRgLMJyra+XkqvtG04pXmaGxKni9Gr2Z8L
sJ4eMQgnvcUaoh8WnOe13AfF/fT5BEJ1QDiCQEDeeXBZqVO7+GgxJDDm4JNSByZR
DCGZ3Cb/aRjTpF+lpi87mq0E1ahrX/hP+wHqUOC6ZlNsSEZdteBS6ABQKyxBqfTh
KCjNL/6FC1M6jg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:51:10 2026 by rpki-client