
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json)
Hash identifier: KSjmTB5OHzXQzrI4r52pWzY/sWhCWIfkOWXDpRiWHnI=
Subject key identifier: 57:DF:E6:CA:FE:40:B1:D7:05:E6:E5:AE:EF:46:EF:15:74:E8:A4:64
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 01A0DA96F7E779B41356A5069DD1E799FDBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
Manifest number: 1AB5
Signing time: Fri 25 Sep 2026 22:02:01 +0000
Manifest this update: Fri 25 Sep 2026 22:02:01 +0000
Manifest next update: Sat 26 Sep 2026 22:02:01 +0000
Files and hashes: 1: 1nFCKi1R1uWAqKJnbMUD9y_3pno.roa (hash: 5C4IbhqcH3E0EkSlqxD//f0/kRfbI7bdALbkI7++DS0=)
2: 45jcpGMeN1MEq1EOG0Y9qcXt_7E.roa (hash: T4PlRQPL8k2IXPh/6bf0yHYACLBVnc7hXe7KA88boSU=)
3: 54lQx9jq3eHeFIcJKMTm3kHCZTA.roa (hash: 27oRvIuzZnhWTtAi86vMeQgbiUWJ+XcD4ONYqT3e54I=)
4: BtE_Prg_QTilEMkESiUbs4oIDmA.roa (hash: SFNeqY+UDzZLqbIx3LsR2g+sDJ1BvW0wdb9XdlLKZ0k=)
5: C-Qps28bGJ9viEITk81kKk0b0dA.roa (hash: YvQZ6I3rsCF/RjF8TlblPG71ruEskxswS8/cnuK9jtA=)
6: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: so4iAzKcEkY3CNJiOAwdbmWcbaICyS4C/lyh87rEyB0=)
7: GpPbNoyLVyrmQ4b8e1AhKTzfuOg.roa (hash: ghZh7XoU09TtPH2tIcN1D5InXaZeImBLFNLb0RMUPhs=)
8: McMAEXhLQiJ8zGNeGMw3UTPr0gA.roa (hash: Axa3TJcrAyunbvQsH7ha/cb/OA+FPV5fxnNPJ+XHc9Y=)
9: SH8o9XaYeY75kSYDFek1xvvvpes.roa (hash: snF/ko8o9cC13jo1dYD32crG+aO3GlqBSVVV17i0l7Q=)
10: c-QDkOwRsaqWaCLR67UW_lU7-L0.roa (hash: AE6Uaz5NJLGOrk5M1q3pxLLZKI8/2jUOSqya5+asWc0=)
11: fNaq8m6O9BbhsyXfpIVgO1FBWfQ.roa (hash: YWEpMcVfS6S4vwVF7Bdrpn4pCsO6G0a695Az/e9ZD/E=)
12: gOXA4eSdbH4c5IeG-4m3cjBuSN4.roa (hash: /bHGxxVaR5KsscDI8PWYa4sB3JKBtwAVf/gqeJepnlg=)
13: ke2TciPSbDOn6zXxGdQLJTfLAsw.roa (hash: 9ny0lYpK79F/d0zmuY5DS1VwZbJpVvPVS9XC0rY+Evc=)
14: qbYP0UksLbSQsOn0c0j6zXw0rP8.roa (hash: esZKDBKEw5qRbj9kqcJN1+giUZn6tIL+9+p2SrfRvrA=)
15: wCYaXW9yQXdX5eY6SwGBDpsbJ2M.roa (hash: +1+KMrFBvRETqP/PeuYGipr75ZikVYJF14sV08bslAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:f7:e7:79:b4:13:56:a5:06:9d:d1:e7:99:fd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Sep 25 22:02:01 2026 GMT
Not After : Sep 26 22:02:01 2026 GMT
Subject: CN=57dfe6cafe40b1d705e6e5aeef46ef1574e8a464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:87:8a:be:80:66:df:e1:6d:9c:11:5e:3a:b6:
f1:29:ee:a7:51:3d:7a:f4:fc:59:45:63:d8:6a:b6:
84:18:b6:0d:e0:d7:9d:2e:68:e2:cb:97:d8:17:95:
c6:d5:af:98:e8:14:aa:1d:b2:d7:b5:3d:ba:65:3b:
cc:e5:15:41:69:be:30:8c:68:61:14:3e:7e:92:39:
51:55:f1:c5:29:d8:fb:7e:c9:1d:64:ae:ed:23:ea:
34:ef:d8:b7:41:d9:48:a2:60:f4:a2:09:61:f7:eb:
43:a9:b7:47:a1:0d:34:c0:a6:ba:74:6f:a4:9d:6a:
a0:bb:3c:59:e1:91:07:f8:9f:66:49:b3:ed:a3:18:
e2:66:4b:10:b0:72:69:0a:38:cb:1b:81:7e:1b:e4:
4a:fc:47:b8:1a:b9:c6:77:2d:d4:a1:5e:19:76:c6:
44:0d:5a:e4:cb:78:05:12:37:1e:15:68:a2:b8:06:
73:53:b8:d4:bb:1c:81:27:5a:bb:21:95:8b:6a:92:
c6:06:80:d3:f2:15:b4:24:5d:7c:f9:da:b4:6c:db:
36:04:6b:ed:fe:fd:2a:95:a4:8c:a5:2b:da:a8:9a:
45:0b:98:6a:14:38:7f:96:2b:4d:b5:b4:fd:1f:1e:
09:68:0b:a2:41:22:03:84:37:ac:2c:73:db:f2:cb:
40:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DF:E6:CA:FE:40:B1:D7:05:E6:E5:AE:EF:46:EF:15:74:E8:A4:64
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:21:c5:85:8f:18:e9:8a:b3:be:2e:7a:bc:b5:63:83:ba:c3:
c3:82:03:50:c4:75:dc:cb:dc:04:20:77:37:c3:cd:80:69:9a:
b5:07:d7:f3:dc:1b:9a:5c:14:68:d1:f4:43:fe:58:23:d8:24:
6f:ca:5c:b8:e1:5c:b7:13:04:21:6e:cb:60:9f:1c:85:45:46:
79:6f:aa:eb:14:d8:b3:e6:af:ae:c8:e5:8d:db:70:b2:9b:97:
19:78:71:37:12:e3:08:20:a4:ff:b9:37:34:60:f1:29:08:d0:
c5:6b:61:4b:03:7e:4b:77:40:24:ef:79:c2:ef:51:51:c0:4c:
19:ab:60:d2:68:24:47:93:75:98:82:83:7e:6c:c9:93:9c:bd:
cd:54:1e:bd:dc:dc:6d:27:52:91:51:fa:40:73:99:b4:3a:e1:
95:64:99:48:28:df:6f:bf:42:b2:c2:ae:16:57:8d:08:e0:24:
9e:f4:26:aa:ea:19:21:87:d8:0d:26:a0:1c:53:fa:f4:d9:63:
23:63:15:53:04:0b:ea:a9:a3:dd:c4:68:9e:70:9e:06:54:e9:
33:b3:69:68:43:c5:95:38:70:9f:40:5b:07:56:da:25:25:cc:
be:ba:55:79:a7:b7:9e:f1:30:8a:0d:b5:c6:04:c0:bd:e0:cf:
bb:d8:49:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDalvfnebQTVqUGndHnmf28MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk
OGYwNjUwHhcNMjYwOTI1MjIwMjAxWhcNMjYwOTI2MjIwMjAxWjAzMTEwLwYDVQQD
Eyg1N2RmZTZjYWZlNDBiMWQ3MDVlNmU1YWVlZjQ2ZWYxNTc0ZThhNDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IeKvoBm3+FtnBFeOrbxKe6nUT16
9PxZRWPYaraEGLYN4NedLmjiy5fYF5XG1a+Y6BSqHbLXtT26ZTvM5RVBab4wjGhh
FD5+kjlRVfHFKdj7fskdZK7tI+o079i3QdlIomD0oglh9+tDqbdHoQ00wKa6dG+k
nWqguzxZ4ZEH+J9mSbPtoxjiZksQsHJpCjjLG4F+G+RK/Ee4GrnGdy3UoV4ZdsZE
DVrky3gFEjceFWiiuAZzU7jUuxyBJ1q7IZWLapLGBoDT8hW0JF18+dq0bNs2BGvt
/v0qlaSMpSvaqJpFC5hqFDh/litNtbT9Hx4JaAuiQSIDhDesLHPb8stA2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFff5sr+QLHXBeblru9G7xV06KRkMB8GA1UdIwQY
MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt
MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx
LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHiHFhY8Y
6Yqzvi56vLVjg7rDw4IDUMR13MvcBCB3N8PNgGmatQfX89wbmlwUaNH0Q/5YI9gk
b8pcuOFctxMEIW7LYJ8chUVGeW+q6xTYs+avrsjljdtwspuXGXhxNxLjCCCk/7k3
NGDxKQjQxWthSwN+S3dAJO95wu9RUcBMGatg0mgkR5N1mIKDfmzJk5y9zVQevdzc
bSdSkVH6QHOZtDrhlWSZSCjfb79CssKuFleNCOAknvQmquoZIYfYDSagHFP69Nlj
I2MVUwQL6qmj3cRonnCeBlTpM7NpaEPFlThwn0BbB1baJSXMvrpVeae3nvEwig21
xgTAveDPu9hJ9w==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:14:47 2026 by rpki-client