
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
File: C6yCgEcArTZTi_hvNMBz6XFDDaU.mft (raw, json)
Hash identifier: ZZuXMaEqtKRJHVwdMOok3B9OWt3Rd622B8AecB0gs9E=
Subject key identifier: E6:7F:99:23:FE:77:67:6A:E1:CD:06:33:4D:61:92:3F:97:E0:F6:B1
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial: 01A0D7CC73E73A08CC886133A256D5412445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
Manifest number: 1A7F
Signing time: Fri 25 Sep 2026 09:01:35 +0000
Manifest this update: Fri 25 Sep 2026 09:01:35 +0000
Manifest next update: Sat 26 Sep 2026 09:01:35 +0000
Files and hashes: 1: 3zbGyukfQlvWlz1rIu3MF0i9ZQA.roa (hash: C8VCXrjogu4GEXHN+4VlV1RhYCbxfqeG8eCfQQqvC/8=)
2: 4zWqGYcx90MSsSObTI71OMevGLI.roa (hash: 2KPRh6/VRnqwHzM72EcE6I/hpiMNrQvfbcobdTHvrp8=)
3: 7qF8DvtzC3jirhL3pV2eCHws_Sw.roa (hash: PlA0iR4i8nMPJDQi1dSKU0Vsn1Phg8l6qs5AKvbNobk=)
4: C6yCgEcArTZTi_hvNMBz6XFDDaU.crl (hash: +KQTBY33Ol1HEMIYzCTosicZlPIs1yDV409stBPj8Co=)
5: TYL3fd3U3hdntx9HEZmBNJvIfy8.roa (hash: e+FavOHdj6PxW9K+YpaIIbMqrQ5M/B4rSbRg/GiLGdY=)
6: X36wvkpUD5ZEtmHolX5djkBU7G8.roa (hash: 1peSiVa6+f8j5mPTp+kwnGd3XE3ejw1Eh+Z8/AWETA0=)
7: f5RT_hHMbwUMnFt-JoJl9jk0aq8.roa (hash: R7CzcVcdr1m+4aUYrv9u7aRaRpqSiQ4h6Ml1XYdGdCM=)
8: jIq1ZwfYXAAqF6SypiZfEAegC9E.roa (hash: v2vJlBOD+C5w7yw+8XzyFUOoQGvh/5fPqoNiFmi6fEA=)
9: molvQvJ_lXsmLhzkv5IAyHx3jBE.roa (hash: ix0VFib2vtnH3hKp8PnHjw409S+kU6b3YPQlaCcVI/k=)
10: sE6ob5p7cvBS3YZqxyoPQMbjYxc.roa (hash: dhUKIHoGV1Pe+2e5vIvUmP73NR0v7KSZ4nk35w2qwfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:73:e7:3a:08:cc:88:61:33:a2:56:d5:41:24:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
Validity
Not Before: Sep 25 09:01:35 2026 GMT
Not After : Sep 26 09:01:35 2026 GMT
Subject: CN=e67f9923fe77676ae1cd06334d61923f97e0f6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ae:52:b1:26:eb:42:f3:49:d4:d0:ac:ab:13:
81:51:e5:ec:b0:25:3f:2c:78:c8:d3:c1:aa:a5:60:
27:cd:53:bd:fa:99:5b:d4:40:7b:a1:9b:46:6f:e4:
6c:25:a9:63:55:da:f2:70:4e:6a:d2:4c:ac:d5:e5:
4a:2d:29:7f:af:f9:1a:7f:37:56:9d:d3:d1:60:a6:
00:ed:f7:87:ec:04:f2:b5:ed:17:d7:bb:af:30:8a:
65:c2:ce:70:0e:8c:34:f8:87:25:94:1c:81:19:af:
e4:a5:05:ff:0c:d7:66:74:61:2c:45:e7:88:14:22:
97:78:6b:21:c1:44:bf:cd:90:8f:fb:50:dd:4f:bb:
a6:8b:a3:3e:a7:25:71:94:00:b4:fd:4a:41:86:a8:
04:df:de:8c:15:22:ff:b6:67:46:99:4f:13:2b:b0:
25:4a:ab:49:c9:27:9e:9f:30:ef:72:0a:24:85:0d:
10:f6:ce:59:b5:75:d9:8e:20:0d:0d:52:ee:b2:4e:
fe:3e:2f:79:48:86:20:d5:cf:86:9c:89:f8:9a:7b:
63:d5:86:08:94:50:33:2b:91:84:84:e4:4d:33:ac:
7d:72:a0:80:da:bc:72:51:ea:ea:47:5d:39:f8:e1:
2d:73:76:2d:db:c7:0b:70:62:fe:b1:95:5a:87:bf:
43:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7F:99:23:FE:77:67:6A:E1:CD:06:33:4D:61:92:3F:97:E0:F6:B1
X509v3 Authority Key Identifier:
keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:3b:4e:c8:da:22:43:1a:00:31:8e:4b:f0:a4:49:e3:bd:17:
e7:12:71:77:b3:eb:e9:29:84:bb:30:fa:61:6f:c6:34:20:4f:
8c:67:a4:f0:cb:f9:61:ac:e5:dd:13:ef:86:76:5b:7d:2e:4a:
dd:5a:d4:65:38:d2:50:28:a9:96:9f:00:98:d3:13:c2:a6:aa:
db:61:79:f7:9e:39:b4:2a:79:52:a4:4b:39:c5:a2:4a:75:e1:
ea:4d:a9:39:97:af:52:e5:b6:1f:e8:29:53:37:1e:0d:ec:9c:
c9:23:8b:20:3e:3b:f0:fa:c6:cf:70:20:3d:55:64:40:68:9c:
57:dc:24:f6:e8:e0:35:a2:0a:cc:ff:00:56:04:ec:76:2b:4e:
c0:81:82:61:35:59:80:50:82:79:61:7c:75:bf:c8:b3:6e:26:
50:8a:cc:64:fc:a1:91:de:ab:32:42:f6:f4:5e:51:e6:e1:90:
07:af:59:76:e8:9a:21:24:7d:d8:1b:25:62:51:78:9a:41:93:
12:93:19:06:f0:0c:49:c8:30:f8:7d:a5:72:5b:e2:c4:00:b5:
dd:de:51:7a:42:35:42:6c:e6:e6:ee:19:25:eb:73:b1:54:4e:
b1:5c:1f:61:2c:23:b1:14:f7:10:76:0a:76:a2:08:7a:be:c2:
93:d4:79:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:23:03 2026 by rpki-client