
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json)
Hash identifier: 9HRFT5JOePETtwaOwKRfodrT78HNfR0hUJge2tneer8=
Subject key identifier: E2:E2:86:A4:EA:7F:09:23:43:0D:9C:81:1F:05:7F:D1:41:36:11:14
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 01A0D91786ECE713E383094047E57A0001D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
Manifest number: 1ABF
Signing time: Fri 25 Sep 2026 15:03:12 +0000
Manifest this update: Fri 25 Sep 2026 15:03:12 +0000
Manifest next update: Sat 26 Sep 2026 15:03:12 +0000
Files and hashes: 1: 1-Wl5nNIYq_W3pgo34yEVZQdbxyU.roa (hash: G+7+XKaWZcYGhV9Z4DnGNMnW/7HpmVdpN8SBoPugm7A=)
2: 6R28sM8NerO2u18G_AMWCWlWH18.roa (hash: NDy+Juig3WdCXI1JH5AcQ2fEURwLEtaXUjO+rQmeRKY=)
3: NFl71PMJau8OoVT-JEiyhHLSIZE.roa (hash: 3lKUsUjSDTNYTFbKVTbGnC0rr8zeipPM6TGCp1smax4=)
4: PFVc5BAK70p3Vmf86UTReTfUHsA.roa (hash: tXQaExvpiAm59XavOkqrv4KBgL817eSwAqiUyiq6cLE=)
5: Qcb6MBj1jVMY5YJV__nFQrA67wU.roa (hash: eNJ8rbIWqEmXeV+vpidHVif1VOtq0n7KG9qEAuZBikM=)
6: TYbMVOnA1vB-wjFD6xsvHrGkVuw.roa (hash: gch7cDWOheOnpIwvXzaiQbw92kRVsDtErv7998avG0Y=)
7: XU-lnejjTfdYfkel9cu2qcj3jOg.asa (hash: 162FwGPbBSAqHbgij5iWFOSWYdvU5C2K98+sNPEBfXc=)
8: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: u6R/tDwhT7psQ/x+BKyzsDm28g0s8LnUsC2kQinPIuY=)
9: cpt1ugrQd2rHwxe5DoZShXs9qzA.roa (hash: mY1xZ8RVFs4GaD6HtiYmaN9LhtKWxyqpPX89QA8Zdpk=)
10: eQvbuB-WIfPaU-Lzc20AVEFS6m8.roa (hash: kWCTa5bd0F2DthD4hV3kmVTOiwhDV1nanw9wkMyWs8c=)
11: lOg--qFlBmx76-ubYUaKmA6pugY.roa (hash: aef1dmSLDMXhGIpZWewz/Jm1+VbIUIAUbF9tc8qTQqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:86:ec:e7:13:e3:83:09:40:47:e5:7a:00:01:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Sep 25 15:03:12 2026 GMT
Not After : Sep 26 15:03:12 2026 GMT
Subject: CN=e2e286a4ea7f0923430d9c811f057fd141361114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b1:bb:3b:80:16:8d:ca:78:c3:3b:14:94:a2:
ca:d4:aa:65:42:9e:57:95:13:28:48:91:4c:ef:ec:
61:81:da:ce:17:83:7d:74:35:47:ca:c3:ad:09:ba:
6a:ed:9f:ed:37:21:de:5a:a0:09:5c:38:c2:2f:d8:
93:4e:d4:42:f5:3b:39:58:5b:6e:96:24:5a:24:e4:
d1:2a:c6:5f:04:2f:d8:07:53:e9:54:7b:9d:e9:d4:
b6:90:03:25:ea:d9:37:48:e1:92:23:ef:a7:8a:1e:
51:59:ef:ce:bd:fd:b0:65:01:ce:9c:c0:14:59:53:
90:7c:06:79:26:93:2e:82:77:04:47:91:1d:8a:dd:
37:19:e0:5b:97:3d:fa:c0:aa:bd:18:be:b9:ed:7c:
f9:1d:e3:63:a6:30:59:9b:d0:c5:22:69:71:84:2c:
0f:71:cb:29:8e:1f:ea:bb:da:6d:6b:ba:d9:cf:6d:
7c:0f:f9:02:a3:9b:a2:73:3f:d7:15:7d:fc:e0:4f:
a3:fc:49:f7:a1:18:f9:f2:60:ef:f5:5b:20:ac:7a:
9c:61:10:cb:33:a8:78:c3:b8:33:ad:dd:94:8f:cb:
36:91:78:a0:18:c0:37:7e:b9:3e:8e:e0:e8:d3:2a:
4e:b4:f2:83:38:3e:04:07:1a:71:5c:5d:3a:0b:75:
e9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E2:86:A4:EA:7F:09:23:43:0D:9C:81:1F:05:7F:D1:41:36:11:14
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d8:11:18:2c:d5:87:b4:99:bd:d9:24:ff:f3:82:6f:5f:a4:
a4:2e:88:f5:59:19:e2:37:d6:d7:ea:07:9a:58:6a:1d:ce:f1:
e5:f8:ac:8e:d8:9e:2d:e2:40:9b:5b:6f:06:b4:7f:02:5f:38:
ae:28:c3:f1:18:b2:97:f9:31:5e:c7:39:78:76:90:43:bc:ad:
96:be:62:a9:5c:2c:ad:48:24:03:43:5b:b9:51:11:9f:2d:37:
8c:85:61:50:73:83:cc:7e:36:bc:bd:b7:b6:de:1b:7b:b6:a8:
52:1e:d6:5c:0d:f0:f5:97:ac:25:bc:95:bb:71:81:e6:92:f5:
ed:ff:6b:17:9b:6c:ac:1f:4d:eb:a7:61:df:c1:ba:66:7a:04:
29:c3:12:d5:4e:15:92:68:08:9f:e9:6c:bc:d8:90:33:2c:9f:
81:70:b5:3e:3d:1f:5f:c7:6d:2d:80:e8:7f:58:23:c1:0a:17:
a9:97:ff:3f:7b:95:5e:67:d0:18:14:2a:94:1c:86:48:ce:67:
15:56:bd:06:7f:65:65:18:e6:70:eb:0f:6a:d2:4b:fb:bf:1c:
58:99:de:bb:c2:d5:6a:23:cf:75:7f:97:7f:fe:1b:bd:4c:22:
40:46:dc:85:bb:bf:58:5e:d0:f5:85:da:8e:54:18:49:bc:d3:
37:d1:e9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:01:45 2026 by rpki-client