
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
File: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft (raw, json)
Hash identifier: RzTrD5fZVbbRUj5o4iXvlISoQzU+0yr3vz5AtSN5wxI=
Subject key identifier: A8:17:60:BF:3C:D7:AE:AD:75:65:C3:3C:63:FD:99:DE:A4:06:99:DB
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 01A1DEDE47A0E98EF370270564BAF58BD58A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
Manifest number: 1B16
Signing time: Sun 15 Nov 2026 11:01:11 +0000
Manifest this update: Sun 15 Nov 2026 11:01:11 +0000
Manifest next update: Mon 16 Nov 2026 11:01:11 +0000
Files and hashes: 1: 67pKVcBP4g1ka7BHnXY8o1GjatI.roa (hash: NHI8d7vH5tjpxPomV3eBVCOa5aQTAvgW0GwAOx6HDCM=)
2: 6oyqxH6fbfCjScGv2qC0XiD5gCU.roa (hash: X2pwG2wmLfB4M+6njFbtbY0lJjAJiNG8E4ePk2t5PZ8=)
3: BG7hZwdKTnkeh7F43mqTspITrC4.roa (hash: 9w3fRT22xu3zZICYpxgXI0CEKv6s/N6rtv0UUVT3l1A=)
4: E3UcI6HbofZm_snwFtZqoqwg5-4.roa (hash: d4QiFFj+amh2JyYpNEFn0n/k8uKNUlkfpX81m7S5ZMs=)
5: Ig2ees5HLfOePoZmV44oy1ypzFU.roa (hash: Xt9yas6tqq8RhgQUndyXvcQyGrhriLDFS4gSQyBaGSk=)
6: KsuuqZuzWciosvKgFRPXzNp2Gcs.roa (hash: fH9tuqcfvS+JzHyWBgJi96fMfx/uXZQsaH9PlzbW4JY=)
7: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl (hash: hLvEaekjKP0+G0hj4rdgWwZKJuLLKUVgBUMIVeiOGt8=)
8: gAqwEcTCZcYoTWX4c9WWfhoNMgI.roa (hash: vAiaSmq1X3G0blOObiQg/SKw+90F8oGpc/icVWBJSss=)
9: nzPG4vwX1IeVP2cSHRY5OFKnn24.roa (hash: OLyA9Gv/rl69xwJleWIyqhvz9X35ZOv/7WlzFp3vKrM=)
10: qIC2hDUgsRLxoLSu-pdPUaCjm8w.roa (hash: s9w51hKzlwShQeC1tH4j8ETEmE1Kuvfu2hq6WfrvxBY=)
11: qMM2yBBqAUZtpJ-UlQnkHWnMjy0.roa (hash: TpFOiG67I1bJklLN/pt/Lsphs7nPRwEpTIL7MabwCy0=)
12: qOQMcO_XSSMHONHJzrh7779P3jo.roa (hash: ade5av8pqt7Ksv1kVj/c8U/iRecFohg4Rxixd7NnxeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:47:a0:e9:8e:f3:70:27:05:64:ba:f5:8b:d5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Nov 15 11:01:11 2026 GMT
Not After : Nov 16 11:01:11 2026 GMT
Subject: CN=a81760bf3cd7aead7565c33c63fd99dea40699db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:96:90:da:af:34:eb:02:0c:48:03:3d:ed:f0:
b7:72:88:79:b0:57:4d:7b:ae:12:42:8c:a2:2f:19:
8c:a9:85:e4:81:c6:11:d0:da:c5:b7:26:c5:77:66:
16:55:8f:b2:10:73:70:95:91:3b:2c:d8:49:9d:25:
0e:34:ed:97:83:c6:25:e6:01:a4:29:38:3e:14:b4:
f8:9e:b1:24:62:2e:25:9b:db:11:99:45:ae:b9:ae:
5a:61:10:19:95:81:50:5e:55:d7:bd:69:38:14:90:
7c:54:12:32:7c:a6:10:21:44:76:12:bd:ce:66:d1:
cd:4e:78:3c:dc:71:e7:7b:11:18:71:92:ea:cf:e2:
a1:0a:70:6c:90:d6:8e:ca:04:36:7b:24:3a:01:1a:
c3:18:66:38:e7:c8:74:91:14:45:36:09:f1:ed:a8:
2a:cf:f6:45:eb:e0:2e:66:88:06:5c:8c:7a:3c:b0:
32:b7:35:30:62:43:f7:50:90:2c:07:92:0d:bd:03:
8e:9d:7a:db:9d:ff:9c:96:e1:ca:44:ae:ee:bc:f6:
6e:41:f8:0e:13:a0:d7:d0:59:2d:52:9e:03:ab:a0:
05:dc:4f:cd:69:91:6b:c5:1f:be:8e:9c:a0:9f:5b:
e0:a7:2e:09:b3:99:5f:86:77:ab:77:b9:14:17:7d:
a7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:17:60:BF:3C:D7:AE:AD:75:65:C3:3C:63:FD:99:DE:A4:06:99:DB
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:98:35:fd:ee:82:dd:cb:76:02:43:34:8f:75:4c:ba:94:e5:
d1:5f:b7:00:cd:98:73:bf:9f:48:3d:92:0b:9d:27:c4:23:b2:
17:cb:eb:01:88:92:09:f8:5f:de:96:22:03:1e:8c:33:9a:4a:
ba:bb:4c:af:82:25:f6:10:28:37:98:4c:42:b7:40:3c:c2:9d:
44:c3:15:95:e6:77:3a:f6:ec:fc:ef:23:40:af:46:69:00:9e:
41:fc:a4:f2:47:50:4e:5a:15:97:a1:1b:1f:71:60:fb:ec:d4:
bf:df:a9:99:bd:e6:5c:b2:32:8f:80:c0:1e:ee:0b:3a:b6:29:
5a:9e:74:71:74:04:9a:e8:44:99:47:de:4b:e5:d2:03:54:af:
e8:a5:d4:19:33:8e:47:b3:f4:f0:25:2a:25:ad:d7:1a:c8:b7:
5a:13:c6:55:4f:58:99:46:79:d5:a1:84:66:23:ba:59:cd:24:
c9:77:92:1f:a5:59:89:f2:ed:69:34:e3:2a:f9:63:2a:39:4a:
41:e7:71:aa:44:02:6e:69:c6:8e:20:bb:93:bc:b8:a2:e5:65:
d2:14:28:ad:de:de:e1:d4:8c:0f:58:e6:01:39:2e:c6:63:18:
76:04:1c:7d:bd:fa:47:14:ab:79:55:c3:e8:1f:1b:de:4b:b1:
95:e0:78:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:31:59 2026 by rpki-client