
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
File: miSyfZ899uFOvHnhRui-MnVL-AA.mft (raw, json)
Hash identifier: nJmgYKv/x/FGylh5lH0Qj5miBFav1QQmXZlyk/mOHqM=
Subject key identifier: 58:E6:F1:9D:22:5F:EF:6F:65:39:81:0A:E2:67:0F:CD:F9:2B:E3:8B
Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Certificate serial: 01A0CF6D81435DA22A61307D3F41261CCA17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
Manifest number: 0C3C
Signing time: Wed 23 Sep 2026 18:00:55 +0000
Manifest this update: Wed 23 Sep 2026 18:00:55 +0000
Manifest next update: Thu 24 Sep 2026 18:00:55 +0000
Files and hashes: 1: 4BtZ6ImulGiBNPfFEyIkenVvnSE.roa (hash: 6h+jPwLu4nddov8mWqAqvJNAzlSrWOgSVAeEWaQAHMQ=)
2: 9dGHInAQI-j4vyLy3UUNRAYsuCY.roa (hash: Q9ame2KwxdqQfHrlASmNDuZYejwWS5cB+ic/WNNh4SE=)
3: Gc-zxgRLIzAQa_iFPqWdSCs1AfA.roa (hash: knk2ar6caQbw//JlOcHZhkt4Z0WhcJB+DOpi0h0a7F4=)
4: HUdkOXLhBSaGi7zaB3tiAzHsu2w.roa (hash: SMC3snHw7F/Tr45ZUYM0iuFzgEgu3dYKECc195mdzRs=)
5: ZBdtDqtan4ryfsX_DPoSWN_nnIM.roa (hash: mMR9AMjlqz3mZdhz4HhiNub8llzDHhmNDp6KeOjkBNo=)
6: iMagr2JhNrn6UcBo9-V-8mQcTn4.roa (hash: mQklS7JkHJd3eY4Nb4US8i0zJjbD5uDxAwa3Ul/Mehk=)
7: miSyfZ899uFOvHnhRui-MnVL-AA.crl (hash: 5D2w84YemvIBf+Rhk2wb3VnQWwOjNPYOOOlRHV7iWcg=)
8: pTIdOhwN38ILsZQYi8bIDMjeY4U.roa (hash: GtMRQsNo+pmOf3YedJ1j8ncQIy9S7xqsYIsqepUk4Dw=)
9: tkLKI36bEE_d9mFrnpG75Jz1duc.roa (hash: GQR5CqcIcifEV/UVBCebbmLSOnvxcbQORub4i3S8oOk=)
10: ycU_XNZEXN413MBQCsimYNHq3Uc.roa (hash: Nto1BYyts37ycUiG2XmvVx1RqM7RGKIW4OTTPggZvXE=)
11: zt6aVptNzEemFtVcszL1t-xA0vs.roa (hash: pSOP40u7PQPwSGBic+DInKoefhITjHCDk1ttR6rrtpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:81:43:5d:a2:2a:61:30:7d:3f:41:26:1c:ca:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Validity
Not Before: Sep 23 18:00:55 2026 GMT
Not After : Sep 24 18:00:55 2026 GMT
Subject: CN=58e6f19d225fef6f6539810ae2670fcdf92be38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:df:7b:e5:b0:8e:08:47:56:d2:67:87:4d:
d6:dd:af:c1:eb:7e:c4:ae:9e:e2:6e:26:b4:a3:05:
6d:c1:b7:2b:95:23:aa:1f:cf:32:12:41:97:67:c2:
27:10:2e:55:42:c2:2f:08:2e:73:23:02:82:d0:c5:
80:14:b3:50:56:7f:35:c6:e5:0d:74:b2:b1:79:ae:
e1:2e:ef:52:c1:e8:c3:7f:3a:49:f0:46:52:27:b4:
52:5d:f8:05:41:c3:0b:ef:53:b4:3e:aa:2f:3b:34:
a3:b0:41:54:26:ca:8b:75:c6:cf:86:9e:90:55:9b:
cd:6b:5d:49:ab:04:a2:90:b4:d0:f2:12:30:87:5e:
78:94:de:ca:30:dc:7f:81:09:67:ad:82:a5:ab:be:
a6:11:7e:7d:8a:cd:72:19:a5:d2:93:75:46:c7:af:
ed:10:24:7a:61:c0:68:db:ab:b3:d3:e9:8e:80:ab:
fc:e8:2e:54:67:d2:f0:69:03:4e:74:5f:74:21:42:
9c:31:0c:69:37:78:0b:b9:92:87:80:07:22:eb:ad:
3c:f5:98:6a:93:94:a3:0f:6b:17:ae:63:96:84:ea:
f1:2d:25:13:7c:92:83:ec:44:91:42:67:ec:7f:c9:
cc:d5:be:48:da:b4:5c:19:aa:7e:94:8c:59:9c:d3:
c7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E6:F1:9D:22:5F:EF:6F:65:39:81:0A:E2:67:0F:CD:F9:2B:E3:8B
X509v3 Authority Key Identifier:
keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:44:68:b7:48:76:eb:71:14:db:9a:f7:c4:e8:0a:f1:0b:65:
7e:24:35:ce:52:54:89:55:aa:e7:62:c4:a6:20:45:3d:35:9a:
33:3a:18:60:a5:6c:30:2b:dc:15:aa:94:9c:e4:1b:61:5f:ec:
54:f7:a2:02:10:f3:3d:57:58:da:32:b4:65:5a:35:17:91:05:
d4:a4:d2:3d:c0:bb:a5:9e:37:8b:30:4d:6c:20:8b:b3:02:55:
42:81:23:a4:b3:9d:6b:d8:11:cf:f6:a3:d6:cc:0f:ab:d6:ee:
cf:b3:75:0f:54:fc:43:82:df:87:c1:02:2c:77:54:83:ef:a5:
39:53:a7:19:42:c6:fc:35:7e:7a:a0:0d:72:3c:45:fc:b4:1f:
ac:06:d7:e2:80:de:3f:f0:e5:54:44:23:81:d5:e7:48:8d:a0:
78:5c:6d:7b:f9:05:d2:ca:42:62:f0:fe:ed:62:02:23:46:d5:
83:34:c8:e3:77:ea:46:50:69:cc:ba:84:c4:b3:74:81:19:24:
77:c9:02:2d:fc:cd:ef:26:53:76:cf:d5:17:03:56:ea:41:d2:
a3:25:dc:16:50:7b:2a:55:00:29:aa:92:52:57:77:09:62:16:
f8:c2:00:93:6a:20:b5:9a:dd:27:9d:c9:69:f9:f4:1e:d3:8c:
ad:17:e2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:10:51 2026 by rpki-client