
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
File: tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json)
Hash identifier: iLUL98CUESwoD1XCezJrpD8nFDbfQiDC3kE5pIdSKbo=
Subject key identifier: 58:D8:3A:0F:B8:33:18:AC:A1:6D:B9:0C:F0:9D:63:F5:0A:90:AC:89
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 01A0EF9D86CF879EF5FF4D8BEDCA5F606714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
Manifest number: 127C
Signing time: Wed 30 Sep 2026 00:01:13 +0000
Manifest this update: Wed 30 Sep 2026 00:01:13 +0000
Manifest next update: Thu 01 Oct 2026 00:01:13 +0000
Files and hashes: 1: 1-qgyilt4mW5S7R3DpKdq7Oz7i3g.roa (hash: p4IRMRrJZgnKi2WdlcOaJkOpKGoVzi49HMW6WN0NrJ8=)
2: 7YLSJcQGBA653iyy1fHxIGb92P0.roa (hash: h4RVKl8L8VOgh9a6P3PTZvMiWUsau7R0BpqtJhT+8/Y=)
3: 8lzOqg36QfNkeg8Q6Az_2mhb-pY.roa (hash: W0oPaRSAv7Mlqt/bxzWLXb0GBYOFj3ar/XeEXfhCbx8=)
4: LgR3McOgyTpzCVXi0apdiSU4UhY.roa (hash: O6hm7PXUeVsbsroLDw55f/gk3SNtDWgRnBz2fnXsCuw=)
5: QViCpxHL7TeWgNCiZk4rKUO-8KU.roa (hash: lHQxRnJhPCjs1WHfqXj6jxi3Fa+6Jf53oEHyU2j2aik=)
6: iy1Tvz9vWB_OyKw6kX0SPKuwaMg.roa (hash: f91SOkfNEhx8xn/tAVUdyzoJrhGRQTUbnnTsdxKuQ64=)
7: qI_-6h3iudeXwj_KCEW7jVNBeSs.roa (hash: VCf8NA7/YCd9pNMoP3NeZ5lHDYrKSJzJ143pwqaxHAQ=)
8: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: ZoIXIqGJzisGnbRN0VhMawRrGrHa1RUJ0UZFs4fKVYo=)
9: ws_lvviOWiUn6-n1_mvWXNHp31I.roa (hash: 3Nbd+pvEno+PaE0bZIzANyUWQU5DEYEW5i11jMtE2XI=)
10: x8JpwXfRjntSd4pmuLKwDDhw_i4.roa (hash: OFNInH/Vi9/sinG5vzHXVvidAVrgK9tFLxn9nt+UYfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:9d:86:cf:87:9e:f5:ff:4d:8b:ed:ca:5f:60:67:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: Sep 30 00:01:13 2026 GMT
Not After : Oct 1 00:01:13 2026 GMT
Subject: CN=58d83a0fb83318aca16db90cf09d63f50a90ac89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e4:74:65:cf:6d:84:23:b6:26:62:ab:6f:67:
3c:ab:e1:f0:fd:6f:38:22:61:b3:14:f0:aa:6d:1d:
c3:fc:20:e6:ec:f3:a8:f4:92:e2:93:02:d1:dd:34:
b2:5d:42:92:27:ca:ce:23:1b:d9:ec:5d:fb:e1:c8:
b9:0f:d2:ae:70:54:60:30:8a:6e:f6:e3:a5:73:01:
fa:39:a4:57:0f:09:30:14:ce:b8:ce:07:b8:cb:4b:
da:71:bb:f2:ca:60:8d:c7:4b:d0:49:78:1d:ef:f3:
ac:9d:ec:71:c6:88:09:25:30:ae:7e:f1:0a:82:d5:
d7:f0:a8:9a:c7:eb:b3:d3:3b:f2:99:32:a4:2e:b7:
5f:b0:4d:cd:a9:38:a0:d9:98:08:e0:e2:1b:c9:a9:
d2:58:d2:1d:b1:ea:87:6f:cc:ad:4d:77:ec:63:ed:
87:e3:60:97:ea:38:cc:5d:57:ff:9a:a1:91:e5:8a:
f6:25:b1:a8:a6:0f:94:b1:fc:7c:97:30:17:86:3d:
df:56:28:67:1a:ab:fe:89:9e:10:d6:dc:a3:9d:0f:
50:d1:47:7e:75:13:33:27:87:ad:0b:cb:4b:ee:eb:
98:a3:83:ea:a5:58:72:5b:0b:5e:64:67:97:d7:e1:
3c:b4:87:7d:b9:28:2d:62:29:1b:be:e5:eb:bf:cc:
34:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D8:3A:0F:B8:33:18:AC:A1:6D:B9:0C:F0:9D:63:F5:0A:90:AC:89
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4c:bc:c5:bf:df:71:dc:54:49:c9:24:77:3d:74:d5:7e:71:
e5:47:05:89:dc:e8:09:4d:98:d6:04:73:11:05:52:07:f5:fc:
e3:e2:38:81:0b:32:01:cd:a7:a4:17:94:d1:a2:ba:f1:46:cc:
1c:12:b7:fa:ae:1e:1a:c6:78:e8:a0:e3:0b:0f:e9:36:da:27:
15:4d:90:82:18:b1:46:7f:34:38:16:78:9f:ad:60:f5:2c:74:
6c:61:88:bb:8e:9e:d8:25:eb:d6:7f:e6:98:18:51:44:73:0c:
98:31:06:f2:66:f2:5a:8d:db:70:2e:dd:9a:e9:d8:e9:01:6c:
37:4b:8c:9b:f7:ce:0f:15:4f:9f:c8:57:7c:17:4f:81:77:bf:
f7:1c:72:fa:fe:aa:4a:da:10:c1:f7:9e:99:2f:3a:c2:a0:d6:
6d:9f:f4:57:34:69:f4:fc:57:b2:ef:4d:ac:c9:a5:36:52:b3:
65:1b:3d:d5:d8:2f:57:22:5f:db:e6:79:3a:56:a5:28:8c:24:
d2:2f:d9:01:3a:cc:d2:5a:c4:98:e3:00:5d:dd:21:4f:01:ab:
3f:fc:cc:a4:bb:a9:d1:f7:31:df:eb:e8:54:1d:66:27:07:b7:
e2:b1:71:8c:34:21:69:d8:74:a2:bc:8c:66:de:b7:65:72:5a:
47:27:59:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:56:42 2026 by rpki-client