
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
File: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft (raw, json)
Hash identifier: mNBm9QEvH+jLM2v7skrBUXrASE1uVzCqElWktJsm2Os=
Subject key identifier: DF:C0:07:8B:B1:E8:D5:30:98:A7:DD:A6:2C:C6:56:97:72:C3:19:46
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 01A0CB59F2D8ED1D6076A5B534BF7044FFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
Manifest number: 1A8E
Signing time: Tue 22 Sep 2026 23:01:04 +0000
Manifest this update: Tue 22 Sep 2026 23:01:04 +0000
Manifest next update: Wed 23 Sep 2026 23:01:04 +0000
Files and hashes: 1: 1Xv1ZT3Ka3Pl-sig-kxHu9QPm4A.roa (hash: yCVw68UmAC47CHqpmFupYHC9ZxaKhStlflix7eTg3Ug=)
2: 1utoEShH5AmTt79y1zx-Gta_IU4.roa (hash: ORpna8ZAvXV8ys2iYurxCqgk2LCtS/yxIeHlBJ5A+tA=)
3: 1y7xTrL6Zi63EaoYq9pgRa2ZmlQ.roa (hash: x6v+XwxnZ+9V385BiBIu0MPWBYFFND0ofcUwqGHURxo=)
4: 3ASjA1q8ARIV2ZYv3dMNfit6u3I.roa (hash: 7NA9a/ZKJFAsJurJjGE4qQlN7WKcef8AvmYKofmxtdA=)
5: 3wThh6CKhn_ncQErP2xOaMw46vM.roa (hash: U/vQzD8zfdM0QCfGbqv0YkKIdI6EBacCC74VpNhb6LI=)
6: 4krczbw6OIfHLsE4rx_N8Co4yOw.roa (hash: zxKlKv1GZqpmDDrZvXoufwn7GqO5TPnVqQ8ZVbSEX/k=)
7: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl (hash: j1k5awo680nbwDwpH2yoJ2Xq9z2T2ZgvwXyRmW21WWk=)
8: ADSCFOnjMJLAi_8BKddA7FSJKFo.roa (hash: YTUiHXsQfmeuHGdgWhbD4DOLIxz6/HL1IPSKvOV9r04=)
9: CI_IbIiOr7bX2nxFp9oik4WuQKw.roa (hash: LoeO3X2rVxLRDsyO+eMBMVv3AZSWcHWTpYLzyG6GgFI=)
10: EZHW40mMXzLh-R95XQXWSQ1xGew.roa (hash: jXC+C5PX+oNmQCB4dM1aptKPPNjJmtw5ieXSimbQjw4=)
11: F1wz9gMaUrDGSj5_Bql1AKzFVxU.roa (hash: q6zbBfs586JaMimNp5Bcw/8qOnIIxp8Jrco5OLAUgAE=)
12: GnjgrlX5ldq-8V0xMtEgsEXb8K0.roa (hash: 7TO2wIfe9IgC+RH76SDWjU1AztJO8iq77EyqtjbsQmw=)
13: GzMKu8jXjKBUVxDX-5sQgFMQgJs.roa (hash: 0LE/1Wb9HCROg7521ihQ2bGsxl+ElnIJTcDjDH1Uxqs=)
14: H_ZbE32xD4Jhfd7d_Lm5fnPovzM.roa (hash: aZ9uNmSOhcQkLqZFW9owTasfsuaMVCH5Cmg+PDELd3k=)
15: Ho6mNf_9Z2hzoXQrFFuu_J0WfRM.roa (hash: Oprieq0BOhCbckP7sqbHtzOf/Mysy62W8N4pVZm/UiU=)
16: K6IhTrUZclyMeBVpYLNDvb8TUbg.roa (hash: 72NmOOFBeGJuzIR1SE1cUuWu7D88rU3xoreFGRYXduw=)
17: KS0FVLSMGfWzQdYtQuL8y-oJdD0.roa (hash: bFjxw1lHEJZaqaMp+L6ugQRb5WaLfdFW4jxueW8cRcA=)
18: Qfk4KZDN_NVec0Fh5jidYk7fEsM.roa (hash: WIiLwWhQcJYVRWRpVwBUqqxiCRvroZi4xvJ2AYsOSJo=)
19: QqOV1t_rvWgp7d8XnXyjaPwjar8.roa (hash: tOqX3TdeefdEULHlf/6xKuTSxXbTQGcNvDfPoledb9E=)
20: UESPvkGn40lC_qnNZUih916lSYA.roa (hash: wn/Z//Pr0RHYOOOY6bI6NqL/aVXg8hzJxv1NUOW+0pY=)
21: WQgnD-JktijZnRhzkWWmxreQGms.roa (hash: bt7fHkMyPJ2bu7raN/9QpGM2Pefyuc7nqym8N0GRFqM=)
22: XnhnoeUHsuoR4mhcctsEjt9lvMg.roa (hash: /V0gM4qnoLR414oEzXK8LbL+H5gHt5BmuPHE3nwesY8=)
23: a6YPy8t2smPnddF-vAybhOouYkI.roa (hash: 2VTnHbp49NXPzMqgsIFYWCQ+9Ms6/ReLgmJTyeo9QTM=)
24: bBMC-Jl9ZMdEMbHiKoX6e8xbdGQ.roa (hash: FZlvu/V5G6Rj6/p4659ddbcuZLsyU/qT6XCVQg1Pc8U=)
25: bv5xG98RESJXrwU1xeck7PUBsio.roa (hash: 8309DITknQ+X1sMxvcKqt7keYSOvkVj+qcP2H19wns8=)
26: cWC-89CZxEOg7JihRqIYLNl3BdM.roa (hash: RhOP1Hck0E/C3tHN4Cpm5lDskts0RUG2y3go+ErpaZY=)
27: gC3rqU1DQllcWWxpBdLFhPfJBRY.roa (hash: GquGRvoP/5ANJWdn0l9uPSHphibPvx3UXVQbIIbaOLU=)
28: gnDuj3azpU1wiHZUf0f93N7QjnA.roa (hash: E6mUU2oB8TEHtnH3EsNLe+0P+s9OunlKpVDohgw7f1Q=)
29: gzIiWHGRR93M4EeKSxyFElEnzfQ.roa (hash: P6od455G5jZ5lUgI4sqFMNPmAnYBu1OSIcRyPwUOGuY=)
30: lc0dVVVdgP6dbN1j-pjMe8nv0pM.roa (hash: gEI4FyTD9TDkg7+cDFUctYOLiTWfZ9Ph9u6WJ4ZseHE=)
31: pJSN_0UYP55mnYa8i9az-116_xU.roa (hash: ooW2IQf7TB4yeIzuJ+xNye0+a25s9T8MsooWPksXqB0=)
32: pz0cBU5kNnxFQmG7d_jajJsuZhw.roa (hash: mHIryTn2nZYxJ3jb+100JljOGOyRK2Vo4Tu+sTeZoc0=)
33: sPKozshk0dw84yWnLecAcY4Jsz0.roa (hash: CVBUXh81vA8yv2uJ0Pq3RtuahHuKnl7ugAr2hYXTx7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:f2:d8:ed:1d:60:76:a5:b5:34:bf:70:44:ff:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Sep 22 23:01:04 2026 GMT
Not After : Sep 23 23:01:04 2026 GMT
Subject: CN=dfc0078bb1e8d53098a7dda62cc6569772c31946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:8e:ed:1b:fc:33:9b:47:88:2b:c7:d2:63:
35:69:af:e7:5a:58:19:5a:7c:c2:1c:e6:33:4c:14:
71:b7:00:20:1a:f9:2d:c7:7d:d9:dd:24:a1:e1:eb:
89:3b:65:a0:8e:75:85:90:65:8e:c4:b8:41:b6:09:
7f:48:c3:3c:6c:58:a6:94:c5:34:27:5d:e9:6b:87:
20:13:72:dc:1e:fb:d0:e9:b1:4b:8a:39:a5:04:35:
a0:5e:e2:2c:e1:76:0f:57:57:c0:ba:d6:34:e7:7c:
6b:67:a0:c1:b7:e1:d6:54:ec:ac:32:fa:11:59:ea:
96:27:3c:5c:22:03:30:4a:30:af:fd:6f:da:a3:8d:
c0:55:62:b9:0b:c2:92:bf:5d:39:9d:32:16:d7:db:
4a:22:89:80:ea:17:f6:01:e9:e0:8f:8b:2b:9a:19:
41:4a:ab:16:c3:b7:58:3d:b2:a9:44:e9:7c:b1:9c:
26:3f:07:8b:2a:e8:95:a6:b5:06:fb:31:f9:c0:b1:
17:6d:66:d8:78:95:66:99:94:fe:f6:b8:97:2e:5f:
39:b8:a5:2e:5c:4d:b6:0b:26:e1:70:d4:aa:1a:17:
e0:9d:fb:b2:59:92:5e:c7:b0:d8:36:d6:59:77:ce:
25:1b:52:a9:fb:6c:66:8e:1a:03:73:3a:a3:93:69:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C0:07:8B:B1:E8:D5:30:98:A7:DD:A6:2C:C6:56:97:72:C3:19:46
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:62:9a:61:aa:48:69:6a:56:94:be:81:04:86:d3:26:e3:9a:
6c:2e:dc:0c:02:bb:6c:3f:9b:ac:51:68:83:2f:d2:01:f4:bb:
0b:97:b7:54:05:b6:fd:5f:97:ca:0b:21:dd:0c:6c:e6:4a:e9:
30:43:f6:2b:a3:ec:6e:16:a9:36:ac:df:c0:31:7e:80:46:b0:
a6:31:a2:c0:49:c9:9d:96:79:59:70:1c:37:a5:f4:38:3a:2b:
f2:94:b8:84:f2:7a:42:ba:4f:10:bf:3a:ea:92:9e:ba:56:9b:
a1:07:64:86:ab:49:ce:01:b4:af:bb:ff:85:b8:1e:48:7e:ec:
b2:ee:8c:26:c8:ab:68:58:47:48:13:7f:66:1c:1b:d3:0e:db:
04:b0:54:47:11:fe:f6:e4:57:c1:63:f7:cd:7d:f5:72:eb:64:
43:ba:c3:08:b2:28:54:78:c8:aa:1a:76:49:64:1f:77:2c:91:
d0:5a:a1:1d:9a:9e:b3:d7:ca:6b:01:64:b0:d2:3d:26:8f:54:
41:7c:25:ba:d7:66:ca:42:45:a4:13:25:a4:3b:a0:71:99:3d:
81:27:7e:d0:27:3e:9b:92:74:4c:fd:72:88:87:c6:36:91:53:
62:f2:02:98:5e:57:8f:11:a3:d8:4b:f1:5f:8c:2a:4d:55:7e:
c7:83:af:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:32:06 2026 by rpki-client