
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft
File: byNYUxg5hEeanWn0ChlPC4tn4WU.mft (raw, json)
Hash identifier: JTAPv/5qL48xITJdcRD9EXeTWKTLomyK2pqgenUp7TE=
Subject key identifier: C7:E3:BB:67:D2:65:9E:24:3E:C9:22:E3:9A:51:31:E9:E3:A7:0C:B9
Authority key identifier: 6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
Certificate issuer: /CN=6f235853183984479a9d69f40a194f0b8b67e165
Certificate serial: 01A0DA5F6713FE5ED8762E3424CBF9F06D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft
Manifest number: EB
Signing time: Fri 25 Sep 2026 21:01:20 +0000
Manifest this update: Fri 25 Sep 2026 21:01:20 +0000
Manifest next update: Sat 26 Sep 2026 21:01:20 +0000
Files and hashes: 1: 2EqLOXKNvsGmoj7xpuTEKcOtCrM.roa (hash: RaceEYp+9x/nmRjbttzsLu4fwsF5EmfcJqvuxa0ObDg=)
2: 3MxkJ8oImusR-x6YZIDHo7H63Vw.roa (hash: OGE63mhnkHU2lgMLydoR0MdyRE14meeXr8jQF5XZkts=)
3: 7rKDOU_X7G1OyAk3fqu3KL_eLNo.roa (hash: MQjxwKpRG2tiJ2eQhlWW1RBEP51Pbiw0toODvQ604Ak=)
4: HE9cym3JGcxgW4NHjoPa5RcMp5Y.roa (hash: el4hRvXmm03w/ouApdicwVDgwdfDa1Ax7skb82xPN74=)
5: T_XID6vuukHAvdlVbOkSvdJrmpQ.roa (hash: 3iwmUlZdkQ/+grvrDB6VspRZaoYjMWi/tzaIbi1/oWU=)
6: XCLmZ42Y2x9YN1-Jb94X567tAPE.roa (hash: ltIWBiaNO3Twv3Jxf5yLk7wkuyVnobkAoGRbCxAIl/Q=)
7: XMiRH-9ajAGA_XqcjhtvZrE8-gw.roa (hash: MyDRiichukTa9/2yAU6IIGMytc1TPM1wlbX1da+yjW4=)
8: Z3Otb6ZgfaO0HwVkH7nhUKwZyEA.roa (hash: Upfc+pXKegcvhRzDlXEiNd2VXaPZzzD0Dy/XWAb+Rt8=)
9: ajCoue65wSBqsLOepcqnGK-maoY.roa (hash: YnWPiPKcNfNunm8Lp8arYjMf1qLz2VlLI9iMozyniiE=)
10: bLnM1uG-nQ6viHr57B8AwUnkTnA.roa (hash: OCKgZQ+96wyQvbUTGRhC4Cpss7jjoDQl/7EjdMtGagw=)
11: byNYUxg5hEeanWn0ChlPC4tn4WU.crl (hash: pGq9qWoF7CkeTBWmhNDGqc5mIcHbpinvD6pd0jzRrOE=)
12: dGMIw7XyljKZ4VAipgRb_Gv3574.roa (hash: 5XpQyNwCpMd1s8manxuLHo6eOOCEr2maqfz0CCW1PAA=)
13: dgzEX6Rn-OqO4kyR10BfdiXHxCM.roa (hash: q0vAO8NsoCVHvKqTdmqncsS0Cbhf2cyWq21pDNvi164=)
14: huXlbPqAA1b9i7ZmKbP4NUymuTI.roa (hash: 2yKN6PVua0m6pjdKSS6mAuCNTQE3dH0rSHmJAsGUQ2c=)
15: q0uzP5X6Ji6kOnnb73lf383ry6c.roa (hash: R98bJwA31Gqo5zxzql0ssyMqNBVqGhIJ3Znpr6EHE0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:67:13:fe:5e:d8:76:2e:34:24:cb:f9:f0:6d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f235853183984479a9d69f40a194f0b8b67e165
Validity
Not Before: Sep 25 21:01:20 2026 GMT
Not After : Sep 26 21:01:20 2026 GMT
Subject: CN=c7e3bb67d2659e243ec922e39a5131e9e3a70cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:00:1b:d2:58:1b:13:26:22:b6:6f:67:df:
5d:18:4b:35:f3:00:02:c8:01:fa:16:d6:63:7c:8c:
82:0c:18:b8:dc:33:bd:07:be:46:96:8a:dd:8c:41:
e7:40:1b:5f:c9:7e:25:d3:4f:41:f9:25:93:56:ef:
86:2e:be:1b:ce:84:05:ef:5f:97:93:51:ee:3c:41:
f7:88:b9:f2:90:78:69:3e:b7:4f:fc:e7:e6:cf:29:
25:f1:19:21:7c:fb:de:a4:0a:aa:28:e1:2a:71:84:
7a:8c:70:be:cb:b0:54:71:3e:ec:59:2f:b3:69:f7:
72:16:26:6a:04:ed:a0:90:ee:4b:9d:34:2c:51:f1:
27:b1:cf:26:fc:b1:5a:99:26:28:b2:88:c6:ea:2b:
32:ac:6d:c9:89:8c:b3:b8:a6:27:3c:0b:7a:85:e0:
bb:31:38:5a:70:6d:00:51:3d:6c:37:e6:f1:86:7d:
e1:3a:7e:bd:ac:61:2b:c6:73:5e:38:ca:0f:b7:b6:
7b:62:0c:c1:90:1e:f8:87:dd:2e:14:42:23:72:08:
6a:44:20:dc:97:55:2e:00:6f:cc:7d:7c:7b:3e:5b:
d9:b1:b2:ff:47:8c:82:92:dd:8c:bd:b1:69:2d:a2:
fb:e9:8a:e5:88:51:f2:f9:ca:e1:53:6d:ec:f5:5f:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E3:BB:67:D2:65:9E:24:3E:C9:22:E3:9A:51:31:E9:E3:A7:0C:B9
X509v3 Authority Key Identifier:
keyid:6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:43:2c:a8:d7:97:63:92:66:cb:ad:bc:6c:ee:00:5e:0e:af:
9d:c7:68:bf:d9:22:bd:1d:ff:16:5f:72:cd:8f:14:ee:08:e1:
54:6b:06:6a:49:ba:c2:79:ab:ab:ae:23:06:5e:03:56:f2:d1:
c4:4d:00:55:85:ab:a1:47:64:07:95:8a:f3:35:43:7b:8b:c1:
08:4e:ef:ac:c2:19:b6:90:d9:f6:ad:dc:ee:87:32:37:d1:39:
5b:bf:9a:68:8d:fe:ed:8d:69:ee:41:8f:b0:6e:2e:17:ea:a8:
fa:52:a0:cf:50:81:1c:ce:24:07:03:ad:15:63:8c:15:e8:2b:
88:eb:a5:9c:a5:b8:68:19:e8:8b:f1:66:e8:91:b7:23:2a:0e:
42:7c:1b:55:8e:09:af:9d:f1:16:18:d7:b9:ec:9a:eb:36:b2:
7e:ec:b0:d4:82:6e:6a:5a:e1:54:5e:9a:d2:c2:77:83:93:06:
69:51:77:a4:48:b2:6c:53:a2:52:95:0d:45:6c:e8:38:6f:7e:
c2:d1:45:9d:82:8c:15:ea:4c:f9:9c:9f:37:50:01:62:04:fb:
a2:10:2e:a2:bd:d1:8f:ab:be:3b:77:26:60:90:86:05:df:9a:
5d:3a:47:a4:ff:03:9d:b9:b3:47:06:c2:4d:84:ef:16:19:3b:
e3:2c:6d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:02:08 2026 by rpki-client