
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json)
Hash identifier: nkjwcHTzjI5wuwSHkQArXSV3hBWpL9ZcU7eig80Jf6Q=
Subject key identifier: 83:81:5B:6A:E2:3B:03:9A:F9:F9:01:02:06:C0:7F:77:ED:A3:4D:39
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01A0D07FAB25A4A8E49DF2D6F38CA8438FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
Manifest number: 1B9D
Signing time: Wed 23 Sep 2026 23:00:22 +0000
Manifest this update: Wed 23 Sep 2026 23:00:22 +0000
Manifest next update: Thu 24 Sep 2026 23:00:22 +0000
Files and hashes: 1: 0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa (hash: ZS7xsxHoPgLo7pXTeMFQba/WrlLyuKrD/OKsytQQliA=)
2: 3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa (hash: iqDDjW5cOG97r4sM2JSgMTij8ljbDdlavJlc1sdy2is=)
3: 4anZiDch9d6oi83TQFLyB4qT99g.roa (hash: gEOKEHS2zoAD8h95bY8JWc94frKYylDhR359To9K6dI=)
4: 6vLBlvAYnt5lDDOZcjpwfzHCOik.roa (hash: KihGwXVua6pirrjPV5VriwFVirqc9ZJjTQEykToX1o4=)
5: 79P1nblmX5Sl5oZdwI0Dj3MUbys.roa (hash: La6+lZpjnP/18h6j5GqiME+A/vxO0IF8qjUuVJayEN4=)
6: AuE2rwLS8SAwP0zsffvoZ2RJKhw.roa (hash: TM4O7+3WS0xFrNfC6juWwcHyA2+UIAU1iXbpY1CJY+s=)
7: Axyirs6pJ3W80QJ3YDoIci5zTRg.roa (hash: 43m1rEQkLo40I+R1w7uE4v2Z71kSfJJ3j7fM0HCzcL4=)
8: BYI4akM6lhIw21VZknTh_NCIqSU.roa (hash: YdN03lqeu5vvLCQrhnxcW6iOxgWPrgZFciSU6zX3FMs=)
9: BaNXpsDq6-N9oos8dJUS_8wrDB0.roa (hash: R59taLcL8XgECkHUD04YKkgGCAVhyLMLkoR8FN3GBXU=)
10: CsOg-GOeny_9vkusUYp1sR9tYxQ.roa (hash: B5Fqa/tyTUjbKfD/q6XVxdgxBuLp0JqWs12q7fuh4Dg=)
11: CuwON2MJZtvZI4g-9no7hDi-jTM.roa (hash: t4dkHT6G4U30/rLqAkRNH5wHWvEqi8n3uM1IPVPedwg=)
12: HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa (hash: jPcgyS0A0CPg28Gnyk8yUak3J7zu53iE6b9g60+fx4M=)
13: QL7_ykelTLhFLJAjvfuxzqWP2vk.roa (hash: 4QL9CwOY1xIzLU+QxTfnx6oHiWUSUqf0UtoKPhqw5LE=)
14: T0aT3QkWaPX97qryFtMvnLWmpJ0.roa (hash: hVVcWwS0KmrThtmWJzxkk3nULKlXJIyRvJXdRXp5mwI=)
15: V2KSUUK3NKjzpMrOniGAS6f0lYc.roa (hash: HcEBW9Swj6mWiXzSBMZMgQ58umIWR03BqrfbmgIYn1s=)
16: XJXC8rN2wu4yrnBhr9DvP03wKlg.roa (hash: pCQBoLdKmxtmBQ2vu5ZofXpEqg/wmN1dQJ6QlNip1Wc=)
17: a-kJ5knumGsOVePmAFmyw3gQk6M.roa (hash: n8W4R2uTKKGh4Y7lziZkfCB7vbLNy8V5BszYGmNeHKQ=)
18: cpXnQ54ogNeEFY_Pmix7pjKtsVY.roa (hash: kjAIzOeWynNpPehvnohJeIDqQVE5YFpuq0XNwmJJBro=)
19: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: G5Mzhg2hDWHFyMg1TdXQUhVPTf4VoEkeRFZeebWv858=)
20: eEhMeiaypyt_S7BVopD2YgmSnOw.roa (hash: uB9NgFQsx1uvRWrD7GiIwr7cOwywAd7AGSIePb5dgOc=)
21: h_6Her04c1VJUqOWTEw-vF2QdJM.roa (hash: yF/TMLj4VWrNBEx6DvDlSkH38v+bAFKzWGIqdaI3ArE=)
22: hdqbXqEEo0WcDbUPmcA4zHyMx9g.roa (hash: wTfh43Z2dxSuhlyGF6sDvzrntnhstLzn2fKCtG4m1og=)
23: hok6Qp96mKVdQQjarDAvvs1bUeM.roa (hash: 5zV7NiDuzjvbffwRhWRdC6edDv2RAzy2F0ZnadV/k8Y=)
24: jiLj3J5Bo3BCH5suARVlgU11bTo.roa (hash: LLpF3BIcUDVwpwXHzsowIz6eBq6bJYstoP6xzZ9ogdE=)
25: k2hVczUytlMTlC7CthfEzA0_AVM.roa (hash: RZTmxWFEle9vhsLQ7A7rVZuwhzSq7fez8fzezedwpMk=)
26: nFYNbXy0JhIyEmPla3EPZiB915M.roa (hash: 4Q1qQA0cyqLu7/tHU6Hpa7PqUUZygk8E+2ueMWgOYPc=)
27: r-spS_s4o3tHQBEBuSgZxxRzODk.roa (hash: r+m8p33XcobkJHbwUm4VvDqKa1R52exPo6p81YpRS1w=)
28: sQrvyzK7N0wULm1wo0uM6xtxoDE.roa (hash: RQiHy4v+nKjO+WuHpQyymNIHaVpKrkrIV4MD67pQ4Kg=)
29: u2zHl19ZbKXvPmvwNMcLmzmNdVQ.roa (hash: WRAI6nEvaTJojleXKNb/BhG/0hyUOSj983OO/f7RP2A=)
30: wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa (hash: nD3Q9hGrHrUTsDLGxXCpl182FjBypKufxutT4cbNcEU=)
31: x3F23iRQbtjJBNjfKFqgqyoJJL8.roa (hash: EUZDFPNG/vNavhD9eHX3iVCctpxXMUJXztOTBmE2pTU=)
32: x3aRmrUhs5_8xZ5L3wpeDYYh_b8.roa (hash: wuIq1b4apguXeKgoc0CUTn2f/ioGzCh0PWVLUinBaDw=)
33: ywexjdSx58c_dnH_pe3prB5KbBc.roa (hash: CEx8v6bvzNC8gDYFXGH5Ep5ijCVlKNxtjBQGlyVSklQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:ab:25:a4:a8:e4:9d:f2:d6:f3:8c:a8:43:8f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Sep 23 23:00:22 2026 GMT
Not After : Sep 24 23:00:22 2026 GMT
Subject: CN=83815b6ae23b039af9f9010206c07f77eda34d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0e:28:86:c7:b6:00:e7:03:0b:a0:e1:16:52:
2b:a7:f8:ea:76:32:1e:f0:1d:28:b6:d5:d4:5d:4c:
32:65:bc:df:1e:c3:f6:17:60:7e:4b:d3:27:ba:99:
d2:50:a2:a8:ac:a3:8a:2b:d3:e8:17:0f:db:a0:c1:
59:82:4f:f4:95:b1:cc:e6:7a:7e:4d:89:3c:40:8d:
52:05:7c:1c:73:79:e9:d6:59:3c:24:31:d0:91:a6:
22:cb:e4:c1:97:50:7a:ba:f3:0d:28:18:93:13:dd:
80:3e:f9:a2:94:ab:9b:72:8d:85:0d:8f:69:02:0e:
aa:b7:c9:f1:b4:36:8e:a0:c6:49:d2:0f:35:0a:dd:
e8:3c:19:2f:70:37:12:cb:5a:cb:4b:1c:64:b1:3a:
59:8a:5b:4a:8d:9a:82:cc:a3:a1:0d:09:a9:2c:30:
e7:8c:04:0f:d6:fe:4b:3e:62:81:fb:1c:f5:4d:8e:
4e:6e:52:1b:c1:d6:d1:a8:d7:08:cf:39:2c:e6:33:
2f:e6:77:54:92:15:1f:a4:08:0a:6f:ea:50:c7:69:
69:4b:46:71:ab:00:93:7a:33:ab:cc:43:b8:7e:b2:
0f:00:ad:e2:56:66:d0:1e:f9:65:b9:1a:ee:3d:ba:
48:f5:fe:83:fa:f5:28:7e:c3:6c:ef:6f:49:30:81:
2d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:81:5B:6A:E2:3B:03:9A:F9:F9:01:02:06:C0:7F:77:ED:A3:4D:39
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:6d:14:2d:49:31:67:1f:07:3c:cf:aa:e9:ec:7d:99:a5:1a:
66:3a:6b:aa:ed:2e:50:99:e5:08:95:3d:e0:29:4d:22:61:0d:
1f:16:d0:55:7b:ce:68:96:3f:d4:51:34:fa:1f:a3:7d:10:da:
ba:1f:83:a5:4c:e9:03:83:20:fe:3b:2b:6a:3d:00:7a:0e:b1:
3c:85:e0:20:44:9b:ba:d7:33:2e:f0:c9:8b:67:8b:f2:5c:a1:
9f:65:b8:8a:03:2a:d1:e4:5c:97:08:04:09:88:a1:2a:a2:27:
6e:2f:ae:48:3b:89:5c:8d:ba:0f:07:68:26:21:8c:1a:9d:4b:
84:32:0c:6a:03:eb:15:fc:f9:0a:23:eb:ae:4d:13:22:68:49:
21:26:23:59:0f:08:c5:34:40:97:6c:98:ed:3e:de:d9:37:6d:
bb:92:bf:f4:d5:88:d1:f7:7a:d0:ef:ea:52:e5:68:6d:03:dc:
71:d6:08:6d:0d:08:de:c3:a9:b1:0d:de:60:80:c1:10:8d:11:
af:ed:63:14:25:4d:63:3e:4a:7d:ce:69:2e:11:73:04:21:0c:
0e:c2:53:07:35:65:54:24:e9:d7:e1:2d:de:44:79:da:7f:32:
1a:ca:3d:8e:43:b6:ce:84:a9:f2:c2:98:ba:de:8b:eb:21:8b:
57:a6:63:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQf6slpKjknfLW84yoQ4/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjYwOTIzMjMwMDIyWhcNMjYwOTI0MjMwMDIyWjAzMTEwLwYDVQQD
Eyg4MzgxNWI2YWUyM2IwMzlhZjlmOTAxMDIwNmMwN2Y3N2VkYTM0ZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w4ohse2AOcDC6DhFlIrp/jqdjIe
8B0ottXUXUwyZbzfHsP2F2B+S9MnupnSUKKorKOKK9PoFw/boMFZgk/0lbHM5np+
TYk8QI1SBXwcc3np1lk8JDHQkaYiy+TBl1B6uvMNKBiTE92APvmilKubco2FDY9p
Ag6qt8nxtDaOoMZJ0g81Ct3oPBkvcDcSy1rLSxxksTpZiltKjZqCzKOhDQmpLDDn
jAQP1v5LPmKB+xz1TY5OblIbwdbRqNcIzzks5jMv5ndUkhUfpAgKb+pQx2lpS0Zx
qwCTejOrzEO4frIPAK3iVmbQHvlluRruPbpI9f6D+vUofsNs729JMIEtOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOBW2riOwOa+fkBAgbAf3fto005MB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANm0ULUkx
Zx8HPM+q6ex9maUaZjprqu0uUJnlCJU94ClNImENHxbQVXvOaJY/1FE0+h+jfRDa
uh+DpUzpA4Mg/jsraj0Aeg6xPIXgIESbutczLvDJi2eL8lyhn2W4igMq0eRclwgE
CYihKqInbi+uSDuJXI26DwdoJiGMGp1LhDIMagPrFfz5CiPrrk0TImhJISYjWQ8I
xTRAl2yY7T7e2Tdtu5K/9NWI0fd60O/qUuVobQPccdYIbQ0I3sOpsQ3eYIDBEI0R
r+1jFCVNYz5Kfc5pLhFzBCEMDsJTBzVlVCTp1+Et3kR52n8yGso9jkO2zoSp8sKY
ut6L6yGLV6ZjTQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:40:27 2026 by rpki-client