
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json)
Hash identifier: sUQoFm+hKZWD5b5ymXFwhHD5S7JbMq+uJ+TLO1UPWFc=
Subject key identifier: DC:35:4C:C1:51:F5:A0:50:38:10:04:34:E9:1B:89:E9:4B:9C:EB:EE
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01A0E0CF2EC56D7673ECD32256D43D1865B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
Manifest number: 1A92
Signing time: Sun 27 Sep 2026 03:01:09 +0000
Manifest this update: Sun 27 Sep 2026 03:01:09 +0000
Manifest next update: Mon 28 Sep 2026 03:01:09 +0000
Files and hashes: 1: 2SgtXArHa91zHSP62V3VxCstPjQ.roa (hash: V4cGQtg2SBaCI8DVoJaqr+ulcrK5fl4LGupKdqP0XPQ=)
2: 2pWoRlgTXbKVX-Pjg4QmOZkMdQc.roa (hash: JZbkKUO0JB2SSX19jfhYYhBc4c8q+WYE6k6SKK4z740=)
3: Ae57O12AoGSXg6OjRfpvqk40IWY.roa (hash: jqB4zbEQVsVqha6FZMRqBv2gE+Oo/oekXl882sDWeVU=)
4: B-5LpHxABUdZLyscoHErjkqyIKk.roa (hash: O/ISaaNiYJWY/Osy259CyKWIm66WcENOZJ8/yUUM18U=)
5: E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa (hash: AM4W95wMVxmufbKvADXIfhnh/oxXBRJzCA12EQepcN0=)
6: G6LlelllmoaLjy6pGMovpp7eiKE.roa (hash: i0/dkXUXtTkS5bDtqW3KTO/a6C0FHwJWrOLBcdXePK8=)
7: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: /yRH76UR/8hx21EHI6pKNWuYUcgtWvliB7NqLRD4PGs=)
8: Ooo27uikwPKyN38Vc6E5PiPp16o.roa (hash: ysIkELBvjUmxilhHd/e1/CduTTEPJwJqPubCz95v0Yk=)
9: Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa (hash: PTOGD+XV9y0QkR0kx84XCCF1nWNGNBQ/AqHfSIRK6JI=)
10: R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa (hash: 926NNVMN0dOUlotEee8GGLB2yhZRvKk278w8BXpKBWc=)
11: SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa (hash: R2Ulh0OWrTfBVFa/oSxJhAwaFvEKQ4zUakZOAQnMxc8=)
12: SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa (hash: IKCVvcTAPNdNWxaMhV5j9dp59UVvAETJogxmpd5B1IE=)
13: UgQXPpoAPzzEY23clmnNXDMzKII.roa (hash: wVgI0/jKoNmP2W8lcpq9i62znX0LDf4x7s4+L/CLD44=)
14: VYgE8-UEudg3YNUfBmaafWIWqbY.roa (hash: JxhGY6dK9SUdetgzpCLPv5EvQwiRqHi3C+Rjc1w+Nx4=)
15: VulRC4nGRSWh634vxQHiExAKf1w.roa (hash: pU+A0lUoH6DQvksFwyWjaM1SkQ2OEMmZ30T/nm+6dqA=)
16: WyhDt_oaTKQN4eZu64NsYbZl4yg.roa (hash: 6ciQpQA0xk5YF/RtEahhFIWkqj1pqFVjXnDAnpgxo9s=)
17: YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa (hash: yFLoxqOVICN4QBajonvWQfdIkbyqD9W6GTNUrK2yjZo=)
18: ap_KBBwMetCUgf_yqig9NPG5GpY.roa (hash: 9v8lmt7h/soP3D+lntkITlcRnDn6phDZu9Zze6nhdUM=)
19: ayw9hP-juqBVUYhL4659BWRbagM.roa (hash: GLutlgyBzkV4tGAVG5CwDMmdYLkbefgbgEpP3APu1Jo=)
20: crm5NGlj9UBvhtdc7rwx7uYgEK4.roa (hash: /WaelaooGSkLECOrVgVomhzyK4ipvEXkWosApEiQHPA=)
21: fCPsVmQYESXsIrFzghBdJCH1miI.roa (hash: w0YUnPbD+SIAOv8xIs4vR52GvWAb785T1PJzGOLTe/A=)
22: ge_qG75CaLMKt1s8rP1tYixjlSM.roa (hash: KgSOhN8VDoDw2ctu7y0Z8Aqh13VkWXvib2gbxMkFp90=)
23: if7HhXNRoDw1TnbTu8jR1pBkTZc.roa (hash: 8a3JrsC30tF9jpJNG+DBi1BkDJl3zSelO4aQKYLFjnI=)
24: kB1VAe7IiWttP305SpTIQdMVrgs.roa (hash: 317W73vQ+ktqI7vunTSNBr39CAMFJ4AGWozNVMt/2j4=)
25: lT10uf8B-zB2W7pPHONV8j5w1EU.roa (hash: YP+nZP9+eePypNGYgLu6JQ6qv1UZQzTSxNte2fmvVXA=)
26: m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa (hash: QoWaAUlMFh1lhiMZuHSFJG4B7Vf6yI8ZyqsNOBMC67Q=)
27: n8NL6vGQtAkm4gMaIcDuJBP2IEE.roa (hash: jjvwqzXmoxW8cyo92Sd5PIndz67V2dJl+O50LnTVHRU=)
28: nzTl8UF3p7e9FvS0wb6zPjc4FHQ.roa (hash: gedwjVpwIHP4TjyyTazQknsPogKpR2m/8Qa6aAsv0F4=)
29: oMXKRKWkDw3BU5VHnmmfZczo3WU.roa (hash: 0w07L0habLvL3NwvX3KWEEL46dhGeHcv8F5gRgN4UD8=)
30: pqPIqfuErD5mbtSplqtkA0QY6aE.roa (hash: 6vvDbqxKmpWsHd5Wn/2ZoKbmAa7IUMY34ZPHLrIESc8=)
31: r__WaOcKmtAx8gXbwxmkYZg93vo.roa (hash: dQVWPRytzEKBIkeOfxLsINoVWiI0jdX6igSClXXnN6o=)
32: sfOxzLZiwEG7r5SeUCMuTrf1tvI.roa (hash: ZUuD5UEFtBeOCS9rptJ0iK7dObQgDw9xm9i0pDpXHUA=)
33: uixetmUNITGIE12MemXK43h0QKQ.roa (hash: LX2K4eqH4TnMxGBuhGigtPQYwuhHnTXNUjj69t8yapQ=)
34: v-ikOphb6e29hpwrNQIcQpcHAak.roa (hash: Pq9zDPP4BdGhk0vZiCEnuLu/9tRKgBub5R+cAWgzevE=)
35: w_A8FIo2-eV1ikzinAoy11bKCzM.roa (hash: LSQro8lyduG8gw0AhNa9mNG1JTNi93nM2iVzU2UVVdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:2e:c5:6d:76:73:ec:d3:22:56:d4:3d:18:65:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Sep 27 03:01:09 2026 GMT
Not After : Sep 28 03:01:09 2026 GMT
Subject: CN=dc354cc151f5a05038100434e91b89e94b9cebee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8f:b3:94:f0:88:3f:a4:fa:59:2b:de:fd:a7:
ed:8f:0c:f4:51:fc:7e:a8:78:96:e7:49:e2:79:f8:
c3:9f:ff:dc:a9:50:25:28:1a:20:07:c9:7e:f8:0d:
c7:35:45:dd:7b:09:79:14:cb:f5:fb:ae:35:05:29:
fa:9b:02:08:91:b8:1e:14:40:c2:66:c5:b2:b9:20:
51:d7:77:82:02:90:34:5b:b5:34:d7:ec:da:76:a0:
1d:bc:ac:e5:6f:59:24:d8:70:b6:97:45:54:dd:8d:
33:30:f2:74:be:fc:ac:25:7c:62:55:43:56:3b:3f:
a9:dd:47:12:03:d4:2c:2d:88:95:0a:1f:da:3d:f6:
8d:38:5f:d0:f7:2f:29:17:23:84:04:c6:95:69:cf:
b1:b1:66:93:19:fe:27:97:a4:f5:07:f4:80:02:32:
fb:74:ac:e9:0a:3c:cd:0a:2e:d0:97:a2:0a:aa:e1:
97:07:0b:77:3f:dc:b8:98:32:2d:52:51:1f:04:56:
f9:2d:ae:6c:a1:05:d4:8d:60:12:21:7b:5f:02:58:
97:e1:41:37:89:1e:9c:94:70:93:e8:ac:c9:e5:50:
42:27:b8:4a:51:a0:04:39:b2:ec:28:90:13:8e:d2:
8b:4c:1d:80:ab:be:a6:7d:f2:4c:e4:06:22:1e:be:
87:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:35:4C:C1:51:F5:A0:50:38:10:04:34:E9:1B:89:E9:4B:9C:EB:EE
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:da:37:82:5c:b1:ae:5a:7b:6f:4a:46:41:ac:f8:e0:f8:f0:
b3:e5:25:cf:5f:f4:ba:58:ae:3f:60:46:95:b8:70:56:81:64:
fa:9f:01:41:1e:3c:86:06:a4:94:6c:9a:e7:73:44:17:4f:14:
83:89:10:80:9c:ab:2b:9b:75:da:bf:bb:63:8c:f4:bb:83:d5:
b9:fc:92:88:5b:30:e3:f1:9d:37:ca:4b:db:fd:31:4c:56:66:
e5:81:57:86:78:cd:d4:c8:f4:84:3d:1b:10:d4:8d:66:ab:1d:
b3:e1:94:b4:7e:ca:5b:d4:10:92:4c:78:e0:2d:f2:d2:29:a4:
1e:8f:95:1a:df:b3:f5:49:b0:99:56:0b:20:71:92:af:93:0e:
c6:21:ea:eb:6f:85:bf:df:40:a0:e6:db:03:82:51:0c:ac:b2:
67:88:07:e1:7e:4e:07:43:bc:ca:8d:c8:1b:06:94:f5:91:f7:
ae:73:cb:df:37:3b:b5:3a:4d:f6:9b:09:35:fb:d0:d5:c2:97:
04:2a:70:6d:f3:d8:b1:30:27:37:db:81:13:be:32:e2:d6:d1:
af:42:00:1f:0f:b2:f1:4e:5d:ba:ab:c9:16:50:a9:19:ed:12:
46:53:fc:c9:83:0d:d0:4a:88:d2:05:16:94:49:81:f7:c1:a1:
bb:5c:26:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:49:20 2026 by rpki-client