
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
File: UFkuaIlccGi0ZVUIkXrVu929Cl8.mft (raw, json)
Hash identifier: pTlqpTOXyMvEwcUWnmT+DEn7iKY7yzdxeMq9tD+ITBA=
Subject key identifier: FC:32:00:B7:77:34:67:A2:36:B4:EF:3E:32:57:13:92:3F:61:71:AD
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 01A1DCEFE945FDCE866BBEA28508163E981A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
Manifest number: 1B37
Signing time: Sun 15 Nov 2026 02:01:12 +0000
Manifest this update: Sun 15 Nov 2026 02:01:12 +0000
Manifest next update: Mon 16 Nov 2026 02:01:12 +0000
Files and hashes: 1: 6cPzePL8SbPhYxlEre30SLCYl-Y.roa (hash: bpE4jQ6I0nBPjXRqOCXt82xgQ0N1iRPYG2gk58BlGfE=)
2: 7qKC_f93I4x5vZAkFd7YPrFcC7k.roa (hash: Fej8whp10bdKNIubAsMMxHxf8nDoH0W086yoYql/4Y0=)
3: AglMX7mwwb3rspJEIopyVPwTx-E.roa (hash: S+AWhAQbQR4GQpkHiPCQOCsaczJj/pHTNHnGM4CmrlA=)
4: ItLnYEbliO9uy4pN2f9Nx-cbnMU.roa (hash: SC8dz/gz97zrc/Tqdl9uM99+iCk/s/X41bIC+YpTYTI=)
5: MNvipI6k91242S53W3jqVcArQhc.roa (hash: 7sDpPYB99HElo2KA5xuF+lvuTcscLhsFKunpulQrN5o=)
6: MiUKM4-anjUIiLLo25o4aW1endE.roa (hash: 8GJk2lpNvqF8G6oHGKOgI8d2pjeWdDUhOm/xZPhFJK8=)
7: U2EVUUWlWvbUAILqaxAgK8pY0KE.roa (hash: P61yHP4ZBPMnRJW1hcXnzx/7WhRn7HOpJpj+yy4Yx4A=)
8: UFkuaIlccGi0ZVUIkXrVu929Cl8.crl (hash: GOS9+7288X4n65jEU5Ft51hrWN2YbQz92wlkgHARdoU=)
9: WFdUi3XXatfTABnfBpngGAHzARo.roa (hash: kKjPRwwZCBaY9u1h1EFLYB9g9DPTFuUTOwPzWAxE6M4=)
10: bHuZc9mUYBcqpEDyA_8H3U2OWFM.roa (hash: LIqVQ9mxztvdOqUbAJcArQV2MAsX+TwnaJ0MIMH4BK4=)
11: dvCXrpuIgKHCZtQqB3diL4N4JNk.roa (hash: fvscbXWy0N/msqi2rtIwXgUHt2kq1AX6g+9LTX7Mfrk=)
12: wiv8BGLIxUUMQwOeROx0j4rSHpg.roa (hash: 0dTxqq6Mcxp0f/baeK9P3ozslv5RRG7NpV1hP4JK7gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:ef:e9:45:fd:ce:86:6b:be:a2:85:08:16:3e:98:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Nov 15 02:01:12 2026 GMT
Not After : Nov 16 02:01:12 2026 GMT
Subject: CN=fc3200b7773467a236b4ef3e325713923f6171ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:db:29:f9:5b:d6:6f:b2:cc:4b:dd:31:68:63:
16:92:70:13:f8:77:2a:2e:41:9f:33:79:d8:03:da:
df:2d:6d:ec:0c:38:45:f0:c1:51:1c:d5:6d:87:2d:
ae:b2:20:e3:28:71:fa:bf:f3:e9:d9:43:00:82:a8:
06:b8:a3:88:1a:ab:7f:6b:86:4c:f7:f1:19:7a:0d:
a8:f8:3e:80:ca:12:f8:14:e5:1a:c6:a2:01:59:f5:
fd:8c:8f:f2:27:7b:c4:68:44:27:f6:50:d3:4d:6d:
76:ee:c3:69:10:65:42:e4:96:e8:5a:ac:61:86:d5:
ae:c2:10:6d:8e:08:fa:37:28:59:02:5a:bb:20:22:
5d:f5:fb:bf:0b:16:41:5f:9c:3a:c4:7a:c5:e8:3c:
50:5b:32:cb:15:ec:e3:65:8e:ab:78:7f:56:4f:7f:
08:65:3b:82:ec:be:62:7c:0c:8d:95:df:26:e4:4d:
34:46:9d:a8:69:28:fa:35:a1:6f:a8:a1:6d:33:c7:
9b:db:0b:57:4c:08:be:12:16:ff:91:a9:58:87:96:
28:4f:6e:a3:75:d3:31:07:4e:8f:3b:61:ec:b6:54:
7f:03:3d:3d:1e:c5:59:57:ee:a4:11:d3:0a:58:f2:
fd:13:57:b2:c7:eb:bc:bf:61:a6:53:1b:d3:14:0f:
9c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:32:00:B7:77:34:67:A2:36:B4:EF:3E:32:57:13:92:3F:61:71:AD
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:c3:eb:31:63:87:e3:49:5b:3d:72:ff:30:5e:67:ef:af:7f:
1b:7c:4c:6b:10:24:2f:2a:4a:30:24:0e:cb:b6:cc:10:d8:32:
37:d1:97:20:50:23:71:14:4d:2c:62:b0:34:cc:43:08:26:5b:
70:d6:0f:a6:3e:e8:a0:b4:65:b8:1c:b4:07:17:34:20:44:19:
27:d0:2e:c4:29:38:d9:0c:64:b9:a7:5e:fa:c4:7f:b7:1b:af:
70:6f:8c:ea:47:95:f0:aa:27:67:62:28:b0:2f:b8:4d:f5:b3:
80:d9:f4:c7:14:a5:60:1d:bf:8c:ad:ef:f8:5b:31:2c:a2:f5:
e9:43:0b:0a:7e:73:73:ab:ff:28:c8:4c:e7:99:77:61:fd:4d:
76:e9:eb:2b:22:90:22:91:a6:9f:2c:14:75:38:89:e6:e3:17:
18:36:9f:2f:2d:10:72:04:76:d3:26:11:4e:bc:c5:34:ca:e4:
16:31:d9:d8:4f:a3:ab:3a:a3:93:9a:8e:6f:cd:db:5c:28:40:
f0:53:c0:79:4c:27:6e:92:55:97:67:68:48:5c:34:7d:79:5c:
18:61:b7:79:c9:b2:33:82:ae:32:e4:06:81:9b:ff:b4:ee:9f:
30:99:6e:e1:b1:24:3e:25:e8:a7:ee:d2:34:f3:c1:23:e7:59:
75:0a:27:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHc7+lF/c6Ga76ihQgWPpgaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi
ZDBhNWYwHhcNMjYxMTE1MDIwMTEyWhcNMjYxMTE2MDIwMTEyWjAzMTEwLwYDVQQD
EyhmYzMyMDBiNzc3MzQ2N2EyMzZiNGVmM2UzMjU3MTM5MjNmNjE3MWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9sp+VvWb7LMS90xaGMWknAT+Hcq
LkGfM3nYA9rfLW3sDDhF8MFRHNVthy2usiDjKHH6v/Pp2UMAgqgGuKOIGqt/a4ZM
9/EZeg2o+D6AyhL4FOUaxqIBWfX9jI/yJ3vEaEQn9lDTTW127sNpEGVC5JboWqxh
htWuwhBtjgj6NyhZAlq7ICJd9fu/CxZBX5w6xHrF6DxQWzLLFezjZY6reH9WT38I
ZTuC7L5ifAyNld8m5E00Rp2oaSj6NaFvqKFtM8eb2wtXTAi+Ehb/kalYh5YoT26j
ddMxB06PO2HstlR/Az09HsVZV+6kEdMKWPL9E1eyx+u8v2GmUxvTFA+c4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwyALd3NGeiNrTvPjJXE5I/YXGtMB8GA1UdIwQY
MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt
N2JiZDI4Y2U0YTc1LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1
LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv8PrMWOH
40lbPXL/MF5n769/G3xMaxAkLypKMCQOy7bMENgyN9GXIFAjcRRNLGKwNMxDCCZb
cNYPpj7ooLRluBy0Bxc0IEQZJ9AuxCk42Qxkuade+sR/txuvcG+M6keV8KonZ2Io
sC+4TfWzgNn0xxSlYB2/jK3v+FsxLKL16UMLCn5zc6v/KMhM55l3Yf1NdunrKyKQ
IpGmnywUdTiJ5uMXGDafLy0QcgR20yYRTrzFNMrkFjHZ2E+jqzqjk5qOb83bXChA
8FPAeUwnbpJVl2doSFw0fXlcGGG3ecmyM4KuMuQGgZv/tO6fMJlu4bEkPiXop+7S
NPPBI+dZdQonAg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:05:40 2026 by rpki-client