
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json)
Hash identifier: N53NIeEh5EF2w6mZ6lwLJ+A6zGhJr5vqfPI1zKW/o8s=
Subject key identifier: 2F:62:7D:E8:46:D9:DF:7F:0B:6E:AA:A5:35:EA:65:D3:61:43:FF:D1
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 01A0DB0491DE28A41225D8E916CEF001F2C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
Manifest number: 1AC0
Signing time: Sat 26 Sep 2026 00:01:44 +0000
Manifest this update: Sat 26 Sep 2026 00:01:44 +0000
Manifest next update: Sun 27 Sep 2026 00:01:44 +0000
Files and hashes: 1: 1-Wl5nNIYq_W3pgo34yEVZQdbxyU.roa (hash: G+7+XKaWZcYGhV9Z4DnGNMnW/7HpmVdpN8SBoPugm7A=)
2: 6R28sM8NerO2u18G_AMWCWlWH18.roa (hash: NDy+Juig3WdCXI1JH5AcQ2fEURwLEtaXUjO+rQmeRKY=)
3: NFl71PMJau8OoVT-JEiyhHLSIZE.roa (hash: 3lKUsUjSDTNYTFbKVTbGnC0rr8zeipPM6TGCp1smax4=)
4: PFVc5BAK70p3Vmf86UTReTfUHsA.roa (hash: tXQaExvpiAm59XavOkqrv4KBgL817eSwAqiUyiq6cLE=)
5: Qcb6MBj1jVMY5YJV__nFQrA67wU.roa (hash: eNJ8rbIWqEmXeV+vpidHVif1VOtq0n7KG9qEAuZBikM=)
6: TYbMVOnA1vB-wjFD6xsvHrGkVuw.roa (hash: gch7cDWOheOnpIwvXzaiQbw92kRVsDtErv7998avG0Y=)
7: XU-lnejjTfdYfkel9cu2qcj3jOg.asa (hash: 162FwGPbBSAqHbgij5iWFOSWYdvU5C2K98+sNPEBfXc=)
8: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: kkk/TzXe+JsheSngS3kp2VnBiBk63jq0S98t54uKySo=)
9: cpt1ugrQd2rHwxe5DoZShXs9qzA.roa (hash: mY1xZ8RVFs4GaD6HtiYmaN9LhtKWxyqpPX89QA8Zdpk=)
10: eQvbuB-WIfPaU-Lzc20AVEFS6m8.roa (hash: kWCTa5bd0F2DthD4hV3kmVTOiwhDV1nanw9wkMyWs8c=)
11: lOg--qFlBmx76-ubYUaKmA6pugY.roa (hash: aef1dmSLDMXhGIpZWewz/Jm1+VbIUIAUbF9tc8qTQqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:91:de:28:a4:12:25:d8:e9:16:ce:f0:01:f2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Sep 26 00:01:44 2026 GMT
Not After : Sep 27 00:01:44 2026 GMT
Subject: CN=2f627de846d9df7f0b6eaaa535ea65d36143ffd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:18:ca:51:83:a5:57:79:82:02:fa:d7:f8:
2b:21:c9:6e:62:81:6f:0a:ab:97:42:19:5a:48:79:
54:8a:46:74:14:00:c3:51:a5:9e:b9:11:3b:81:02:
a4:9e:3a:23:93:23:be:e3:37:36:62:05:93:c5:24:
2e:a4:ec:a6:f7:07:9b:ee:5d:31:b6:06:53:43:c5:
d9:06:81:8d:a8:75:b8:95:29:f1:46:2e:ba:21:b7:
58:32:2c:b3:a8:7d:61:e8:0d:74:91:fc:a8:a1:e5:
28:f5:f9:61:39:f9:1b:f6:03:bb:40:f4:da:e5:85:
98:e4:fb:36:88:67:c0:6f:c0:73:66:c0:6c:19:0d:
04:9d:a5:1a:b2:1e:8d:26:7e:7e:a6:7d:81:de:45:
02:73:9a:21:92:e5:41:55:0f:52:55:d1:ac:8f:f7:
17:81:2c:3c:20:85:1c:ec:56:d4:02:3a:f2:ec:4a:
2f:ac:f9:88:34:a9:8c:26:83:15:35:a1:cd:8f:5a:
08:01:63:ad:2f:0d:60:06:c5:79:0b:48:e7:d1:08:
d2:28:10:bf:d5:8d:e5:ef:44:ef:fa:16:ed:d2:20:
08:7e:25:ef:06:a7:3c:6a:a8:1a:e4:12:c1:e6:e6:
12:d0:ed:89:92:9e:64:1e:86:96:03:1c:03:d4:5d:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:62:7D:E8:46:D9:DF:7F:0B:6E:AA:A5:35:EA:65:D3:61:43:FF:D1
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:cc:e6:14:4b:e8:bf:fd:84:71:a0:a3:87:87:da:c1:d0:38:
b8:cf:39:7b:a9:b0:31:d2:5c:0b:d9:52:86:33:12:2c:c6:65:
1a:bb:63:22:d4:13:84:00:a2:4b:d5:cf:29:21:72:58:89:2d:
60:00:5c:69:2b:10:81:90:8a:77:a5:f4:bc:03:7b:c2:c5:7d:
61:1e:10:08:0c:d8:02:24:ca:73:37:c1:d5:99:81:48:98:ec:
19:c7:f3:b6:36:e5:a8:dc:b6:63:99:84:04:79:dd:bf:6c:40:
84:5b:d8:8b:50:f5:59:46:eb:c7:38:41:92:ad:53:bc:9f:44:
9a:27:95:5f:5f:c1:dd:77:39:8e:9b:ab:2f:2f:d3:9c:77:00:
89:bf:b4:2e:51:87:9f:cf:65:38:2e:cf:48:28:24:7d:44:80:
d5:5a:82:71:c5:6a:94:72:2b:12:9f:a8:3f:59:b0:84:64:5b:
4c:2c:93:25:e7:91:dc:00:d0:55:30:85:35:09:02:d0:96:55:
a1:9c:48:1e:59:1e:51:de:57:bd:3a:4f:e5:0e:a3:f8:d4:48:
f2:3b:c8:b9:32:2a:e0:07:4c:b8:c3:5a:df:a8:11:87:c4:64:
d1:72:1a:5c:a8:82:f8:74:93:2c:67:1b:78:59:ea:a5:57:a5:
f1:2c:b5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:54:01 2026 by rpki-client