
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
File: pgzudYLpdZvgFskxqzTZKF0vyLQ.mft (raw, json)
Hash identifier: gSRpa/+h5gjX5J+hjUVKChf6CpV0FNFMd6265RF/5E4=
Subject key identifier: 15:DF:C6:46:62:E1:C4:95:A1:49:57:F0:A4:2B:D1:B1:9B:6A:EF:7B
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 01A1DCF04206D707D997A00480F19BF9C4A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
Manifest number: 0554
Signing time: Sun 15 Nov 2026 02:01:35 +0000
Manifest this update: Sun 15 Nov 2026 02:01:35 +0000
Manifest next update: Mon 16 Nov 2026 02:01:35 +0000
Files and hashes: 1: 0MThwc4dXYxn4L8jsKgRgHG69GU.roa (hash: MKgBpJ/UU/ZtKigtHysf59U625q1r0cBUzNiuUSy1qM=)
2: 1-QpEsL_AtML3ScLvBXvkFT8qJ80.roa (hash: +pcA6aIuMEkhsfThQ01/KfIXIckOnFaz60ouEEzocyo=)
3: 5N096s-nFOH4_ZBqCouMJS-TbiU.roa (hash: Hh9HPS5FHpAUp4ixlEmsdD6a/vJqjzSz9yCpNR0cnOs=)
4: Eja0CE3ZxbDf7o-_WJU2Gi-eewc.roa (hash: fP4z0QfDdb5/q/K705XT9QrkxFFgOo2XV/DFWmhk+oA=)
5: S5Oy7oscdtTcE5PBdD76sxyxh8g.roa (hash: wjsYCyEbFrcGXZDDLcR3Z02bldg/o6w1jakXsiZwWwo=)
6: WMJW8PYFLwejvXuXLZdPSAFJeBs.roa (hash: K12FYnuwBEd2xhuCex9yO/lOKeYGEYVxhKuR491paWw=)
7: aPo9aKd2phX6IWiBvTkLJP8xZtM.roa (hash: ncpZr6Zu5WNnsN4SU+6F0b3Jkur0FLP5e1Yt6yA8ajA=)
8: cngSEETmst842JVqCMuJdzGT1YQ.roa (hash: +hcoS9Ai/ANXECo9DMi3KQohP9rUHNrlLQnH58O1SI0=)
9: demNlliFBXRCd4_BO7uGvr9OBWs.roa (hash: 3e0uS6Ngag4AQ8UkZJyAtJ3ajUAIc6mhDPE4a8UAS9c=)
10: dxfQ4qYTG2U6wwiaZk4czBQKkIE.roa (hash: 0qs+JrYh4tAHSz20lQDxwgLCx/YaN+pF7mjoEAUeO1Q=)
11: hRhmaOU4gZ_tvD1FIXmr8g0vgP4.roa (hash: zCLqNFR/17rQqa13pT3OcgSGKUtKcJcNjAIXmiREIUM=)
12: jPK12EYF_F8N9qChJCYpeTggBjM.roa (hash: cyHVL2RzfZB+h/aqJsGsHiAbfgN+RdRCYZxKbcrn16k=)
13: mEFHR3ZO54gTaeeTWU5lmspVd_s.roa (hash: 0w2qL/ViAbe9xLVH17D2YZ/NouaV1VQroh9IMJno9TE=)
14: ot2MZTCpP9nZaT3V6EzfFvrzrkw.roa (hash: TYtFpB5ZnIdcgyHQu349+PWyQhvze7WRX2PQON2Vge0=)
15: pgzudYLpdZvgFskxqzTZKF0vyLQ.crl (hash: a6j2uSZOryVjMLG17W0OqoNOitOmwMA7SinnxY0pFKY=)
16: t2IZILmIlkrYmXptt2wUGw2uQwM.roa (hash: qFiwLdqK/Y7OvzgsKoQ4QT/arrjkDtpZ8/DZq9XFtzw=)
17: wnofk64UVBKP93Op1kPJw8OAZVA.roa (hash: tsj9FpIfOqGKJfVIRwRR/8c5mdUoax0lYr1/5kPg6Rc=)
18: x8XmJx41-rS3oQopw9axsmo7U5o.roa (hash: wJ4AKER/vvm4LzEhdW9wwiO9rdRJ4Gqly2DS/+StjsU=)
19: zn5InVym4Qw5pjaPhyuTeRl9bXQ.roa (hash: 1aIIVljxsESDDdBO8gz+BvW7tts7pQ5Z+DlOMn4Xgvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:42:06:d7:07:d9:97:a0:04:80:f1:9b:f9:c4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Nov 15 02:01:35 2026 GMT
Not After : Nov 16 02:01:35 2026 GMT
Subject: CN=15dfc64662e1c495a14957f0a42bd1b19b6aef7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ed:31:41:24:da:03:ca:6f:60:71:e6:01:f5:
eb:06:8b:2c:9f:68:ff:a4:90:fd:fc:35:e5:a6:7a:
cd:72:35:07:b8:04:86:bb:80:28:25:b5:fb:63:a3:
e2:ca:66:01:dd:3f:d4:10:db:c5:f6:f8:a4:7c:65:
f7:3b:eb:69:6c:55:25:c9:71:60:e2:fb:57:af:af:
7e:e5:88:d3:68:9b:ef:08:42:50:2e:39:a1:5a:8e:
ab:b5:64:18:29:c6:6e:ce:11:00:23:b9:d0:7e:1b:
d2:0a:cc:be:68:18:55:05:5b:e4:7f:7f:1e:b2:90:
f0:8c:16:55:17:e4:f9:d1:02:a4:73:8c:49:f7:d5:
a0:70:d5:05:97:df:d6:98:db:96:7c:a6:38:5e:9a:
b4:2f:29:1a:c2:09:d0:f7:ae:ff:2a:51:40:0c:c4:
62:55:7f:30:ff:9e:e3:ca:04:ca:bc:9e:60:7b:fe:
a6:56:07:e5:27:41:57:07:03:f5:97:4a:64:e3:f4:
1b:d8:ec:23:d6:2d:18:66:ca:5f:38:0b:a3:22:31:
1e:6b:98:8b:1f:b8:96:c2:ad:69:02:a7:2e:b6:f6:
8e:c2:80:df:c5:d5:6e:33:1d:f8:f7:08:ac:10:fd:
75:21:ea:a3:0f:b2:37:27:d5:fd:c8:b6:92:cc:6d:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DF:C6:46:62:E1:C4:95:A1:49:57:F0:A4:2B:D1:B1:9B:6A:EF:7B
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:67:67:65:01:c7:01:db:48:87:d9:00:cd:44:ae:5a:ec:af:
b3:84:9e:9f:b5:44:96:e1:41:5a:08:c4:6d:ac:1f:6c:26:e5:
18:ce:3a:17:92:f9:d6:9e:d2:dd:af:3f:d4:f9:6f:8d:f5:bd:
c4:d1:aa:72:bd:a6:13:c0:3f:a4:9a:1e:e4:71:9d:50:8d:af:
d7:f1:18:59:1c:17:0e:33:3d:27:a0:28:05:cc:37:7a:5f:60:
8c:69:d9:fc:3f:a7:8a:e9:21:4f:b0:59:20:56:fc:fd:75:bf:
92:4d:db:b0:fb:95:71:d6:06:79:1d:01:51:5c:76:06:b5:2d:
49:aa:44:85:b5:a8:4b:62:18:12:fb:a9:b0:34:e4:b8:95:b7:
ac:0f:0a:39:11:b3:75:71:b7:25:9b:7f:68:db:ea:c4:3e:cc:
43:a4:3f:30:d5:3b:b9:3f:96:f8:f5:21:cd:cb:12:8f:f6:3c:
38:52:6d:40:64:10:b3:f4:c5:27:5b:52:7c:5f:25:79:c5:ca:
26:4a:cc:41:ef:61:74:fc:3e:76:b7:40:1d:9f:28:f0:a3:af:
a4:2a:94:b7:16:ad:6c:c2:6b:32:f0:ad:bd:21:5b:b7:5a:3e:
6d:28:45:3f:cb:fb:67:d3:cc:00:cb:a1:72:00:e7:86:be:7b:
6c:18:4a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:56:03 2026 by rpki-client