
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json)
Hash identifier: rFvmH5FGdYLCFjiOcbV+dP9I4B2neWmtkIicGaTu9Bw=
Subject key identifier: DF:24:63:5C:A5:64:85:AC:3A:34:D2:2F:8A:10:E6:C2:09:B5:66:7F
Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Certificate serial: 01A0DE058BA5CDA1490A3F1D7FAE2841A743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
Manifest number: 1A7F
Signing time: Sat 26 Sep 2026 14:01:40 +0000
Manifest this update: Sat 26 Sep 2026 14:01:40 +0000
Manifest next update: Sun 27 Sep 2026 14:01:40 +0000
Files and hashes: 1: 1-5YvMXH0hxTnFsj1sAzG_06N-p8.roa (hash: qtH86zFamX3mvPAvdw+q4UCXn4ioDZi9V1NWUgQSNY4=)
2: FVTkjzWbmN1CXQ1gquYHPct9ixg.roa (hash: O+F6tjESCYzZkWop7KXE+D6dIUDkHaDfPEsn4FO2i5Y=)
3: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: 94vaekR9GN1ie6clr5rDeuO1nzmcYmZV8cmdplGSlys=)
4: U_NZYpjmvtYZaAL9QOJbt18Da90.roa (hash: ImEoqLKkocpZGN3jliyG2JmnXa2NgKRx1aFT2s7Ccsg=)
5: XjDc2QA9m4quHMdfD5XNqmD-sRU.roa (hash: hUIq0ryrPFUtWnGVn0EVGNy126+7rvo1zZWi0URfcgg=)
6: b-jvFTusq2yMHvQus-EOGvQIcIU.roa (hash: UEESHc2CoqAdsZBnwreDavJ8dh67qE0F5/NXF/uJif0=)
7: eVf9uWw4an4J37lWXFXCY7TXLRA.roa (hash: TLeYBm2fbdmHg6RfdNeCWlTy8uamiAq/QUF9qcFVMZU=)
8: ossK8NVWIjYFpVS_EefAqYZy2IE.roa (hash: /y0pnw5X9uBmKvZNWFvXcQIM9KTs6u2DfBY5eqhbuoU=)
9: tsRs_smMGnXJS6Ngg5EdidV6amo.roa (hash: s9qZIcL7Vpb5CW9P2b/OUKeQv+DX4uJC5U3wk2Lpo2c=)
10: txvH1TOH6wMQ5yQgLlacwoKKBQ4.roa (hash: edU/OVpHTHKV2scSWmXngs1gD9tCdP7QXrGFexnNs6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 14:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:8b:a5:cd:a1:49:0a:3f:1d:7f:ae:28:41:a7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Validity
Not Before: Sep 26 14:01:40 2026 GMT
Not After : Sep 27 14:01:40 2026 GMT
Subject: CN=df24635ca56485ac3a34d22f8a10e6c209b5667f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2d:b1:59:15:45:cc:e6:ac:18:fc:71:e0:7d:
35:d7:ae:34:15:8a:3e:ba:4a:3a:e2:f2:65:8e:15:
dc:7f:3d:e9:b6:34:8e:9b:94:d3:40:1e:8a:6a:f9:
99:3a:df:d8:c7:31:14:08:f0:56:e1:92:7f:8b:ca:
b4:fc:f4:54:2d:7b:39:71:69:74:92:45:6e:1d:8b:
93:dc:32:1d:64:7d:18:2b:ac:10:ec:74:d7:69:15:
75:ff:c5:1a:6c:75:26:4d:42:22:70:d3:46:ae:88:
08:6b:ae:77:4b:80:ea:bb:6f:97:3e:0e:ff:48:85:
86:1e:08:0b:b9:36:c9:29:00:15:78:aa:64:14:d4:
de:dc:8e:25:d8:6a:30:c2:d0:e5:5b:33:72:48:28:
dc:29:1c:5a:f4:e1:fd:0a:50:47:92:03:cb:76:6b:
15:9e:cc:55:52:ae:33:ef:0f:b9:1b:dd:d2:99:8d:
25:91:6b:d3:89:84:ff:06:90:c2:cb:0d:92:fd:5d:
c7:19:3c:00:60:34:dc:e4:68:e2:a6:b4:28:52:b7:
b2:4b:cf:5f:3a:d6:1d:dd:5c:a0:f6:a9:8f:20:6d:
4e:a9:b2:87:e8:63:50:1e:ec:2d:0d:7f:f3:d0:5a:
04:18:91:6e:94:84:5d:3f:24:7f:94:0d:c6:ac:8a:
5a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:24:63:5C:A5:64:85:AC:3A:34:D2:2F:8A:10:E6:C2:09:B5:66:7F
X509v3 Authority Key Identifier:
keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d2:ef:93:30:84:ee:e9:95:b3:b3:b5:a0:03:a9:bc:a7:45:
56:f1:03:6c:22:83:27:a4:8e:53:7a:16:1e:75:55:b5:bb:f3:
df:66:13:02:d2:91:b5:72:41:b8:0e:dd:92:c4:31:ed:30:35:
ae:06:cb:08:54:ee:b4:f6:ff:eb:8b:99:92:2a:75:82:cd:23:
c8:84:45:2f:cb:27:99:53:52:48:5e:33:53:a5:38:66:86:19:
20:1c:91:16:65:64:b1:ee:37:ff:cd:38:04:65:0a:1a:4c:31:
1f:c1:0c:f6:d6:39:1f:6c:b5:b9:5f:4e:37:c4:c1:46:9f:58:
2e:ed:3d:5b:ea:00:77:7a:4a:2a:88:da:c0:ba:74:40:0d:3d:
cf:2d:5a:1b:86:98:61:a3:78:31:c0:e2:1c:cf:f4:f5:97:af:
9b:ef:12:7f:00:cb:06:68:a9:15:e8:f8:1b:a0:f9:57:59:86:
a9:a4:be:38:15:76:d4:0e:79:df:f5:45:bb:51:41:33:07:ee:
bf:0e:5c:53:3d:6e:20:0b:44:b6:0d:e8:e3:90:5f:df:74:e0:
0b:df:ab:42:de:62:71:1b:56:7f:09:8d:37:6f:7f:0c:a2:e1:
6b:b7:6d:4b:fc:0d:84:8d:80:21:4a:d0:11:f8:e6:2b:2e:59:
78:0c:d0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:33:41 2026 by rpki-client