
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json)
Hash identifier: 3vKD9vlGGq/w2IEOWLiX9Ba1NJVZWJJicM4zOzz6m8w=
Subject key identifier: 47:EA:F9:D9:50:C6:5A:05:00:A6:72:69:6A:C9:12:A7:6F:A9:21:06
Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731
Certificate serial: 01A0D9F132D853F9E8F539FE8A8871DA04BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
Manifest number: 0E26
Signing time: Fri 25 Sep 2026 19:00:58 +0000
Manifest this update: Fri 25 Sep 2026 19:00:58 +0000
Manifest next update: Sat 26 Sep 2026 19:00:58 +0000
Files and hashes: 1: 2Y_-mHGnzxUPlZ_jGKRDY2NiGkQ.roa (hash: l4MC4MCnTo9aK0gBX0Y1Dtyc7m8oK3j/OFRHObo5fQ8=)
2: 9RXKGNoQqaoli9DhcQsdjNmIZDM.roa (hash: DQcr0sYa1q2Gt2MZ2I3+zmJMFEosHP1WHkCLefzFplA=)
3: EAdzQIoOkWIxeAX2egmYbOGa2TY.roa (hash: FmYvFp8b6P7aKS1iSZ+Aa3ljJdjXeyIZV5bYVlFv2Os=)
4: EtqpvJ3wwieaUcuII15zgYzT3Po.roa (hash: tLmfVIM+XcsVwC8W6onwkX2PrlAqRhgWxMYsh665F2M=)
5: GuPly7j8d_8hrdV6973zg9KyNI8.roa (hash: CvukChB3JkEWj42WDk+cLkdDd2Cw7kdqbd82L0Do7xM=)
6: HjsUoqoPK-jxSAesZLIKCYVg8Ao.roa (hash: HZ81msEvNMRqk5s5wQeDrE3aVOYI9QLZN/fVxCO3LFE=)
7: KlPxQyo9WM4UNkFXk-JKNQhxWCQ.roa (hash: HuxVfxllN8xXG7na3DWRijnzCXhsSpD5nVqys00gQzs=)
8: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: hmuCLC4XgqemsBfLZWMAkSYJIMiXCQR6hno2emMcCJ8=)
9: UjcpoND4jTWKKcWkX2exhWEuEY8.roa (hash: XLZikrKhG93A0xMENVh7LOQQT8lhvwT0f4TqN/G3rY0=)
10: aV15c49lSGl3dteQSHc3IvNZ2Yw.roa (hash: idSDFzUORIOI2C3DdmyZjUWIVKrr2rvoia+URiMKZUk=)
11: asuyLktKYq4NNc_2uebIjQGmRG4.roa (hash: NZW9P6QltbKs99Px6iLY6nMHem8ps5RIUgsWAHR4fr8=)
12: foWBRrwQ_J-5QZyjYh0-06D2Jgg.roa (hash: F50Zb/hD5QHDYX5caLDSp9PIYVBJP0rELAuJY0qPe6U=)
13: jZ1bJSEs7oIxqTsj0Xr5CRUuyVM.roa (hash: S2iYYZF96vNr3811Fr7SoSQvJlJ441QVtJq5Mo3TL4I=)
14: jdhRRSqw1KV-OBkZuUAJ-tCWDik.roa (hash: PZnlHT69L4VcU/X0HEwE+Wn3yCWoZ+g03Z4fHifOKPg=)
15: ta9QPHmvElN9LQbU3Ml0S8yt9cs.roa (hash: pWwk3bYPZv/2DLVIuX6tB76kOFRVtUjaqBNqlUqnu+g=)
16: wea1j7CCiOwKhbp9xRs9xEsak8o.roa (hash: hckz/qMoMAZzO9HmBfzADkSbkz16uEss9Ro4N3hyVDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:32:d8:53:f9:e8:f5:39:fe:8a:88:71:da:04:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731
Validity
Not Before: Sep 25 19:00:58 2026 GMT
Not After : Sep 26 19:00:58 2026 GMT
Subject: CN=47eaf9d950c65a0500a672696ac912a76fa92106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:83:97:76:52:4c:bf:39:98:53:61:cc:2e:
d2:2f:f3:76:53:ca:43:1e:63:8e:32:44:a8:c4:20:
e2:30:fe:06:9a:9e:6d:55:38:0a:01:d6:f7:8a:49:
31:1b:6d:b5:a7:f0:2d:72:5a:05:fd:7a:11:ee:9e:
22:cd:67:89:e4:09:99:41:79:3c:86:c3:20:4f:33:
28:93:d5:43:6d:21:f7:35:b3:ff:ba:a5:c8:f8:d7:
92:b9:28:7c:6a:e2:c9:66:57:0d:54:df:0f:aa:7b:
20:1e:63:eb:c7:4e:a6:18:cd:7e:30:60:a5:4e:2a:
95:69:dd:80:04:7c:b2:be:b4:19:c5:59:36:60:7f:
cc:3a:23:ed:db:5e:15:6e:4a:f3:15:5d:af:f3:60:
42:2e:48:2e:4d:6f:59:6f:3c:58:7f:82:4d:c8:f4:
cd:7d:ba:29:07:27:0e:77:ad:f0:d9:6f:93:97:ac:
9a:61:3c:2e:8a:18:d1:2b:a0:ee:c5:69:2d:06:4d:
46:48:42:79:38:69:85:72:15:45:22:5e:7f:6a:7e:
fc:9a:a8:cc:c7:e8:4d:ec:86:70:6d:5b:c8:5e:92:
c0:0a:ff:85:1f:9b:3a:47:a9:b6:29:e6:32:6c:31:
81:8f:76:35:7b:62:66:36:c2:2f:54:4e:a3:dc:c2:
e4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EA:F9:D9:50:C6:5A:05:00:A6:72:69:6A:C9:12:A7:6F:A9:21:06
X509v3 Authority Key Identifier:
keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:04:ac:dd:bb:7f:c3:a6:de:d4:85:4e:1b:d3:3e:dd:87:45:
77:e6:a8:f8:52:35:fb:8a:1d:ed:70:01:bb:0e:76:f1:5c:d6:
f4:93:dd:17:f1:b2:bb:a9:a3:86:df:a9:29:09:c6:2e:01:15:
be:98:f7:8d:3e:72:7c:17:96:79:47:0c:96:68:45:e7:ee:d3:
04:2c:fd:8f:71:5e:ba:9d:dd:b9:46:4e:45:1c:61:a1:67:71:
42:d8:a6:c9:12:81:21:14:14:73:c2:67:9c:8c:c4:01:74:18:
82:c7:39:76:9a:ed:9d:60:19:35:2e:98:61:6a:dd:5b:86:46:
14:3e:63:13:9f:c4:91:21:55:16:53:c8:1c:d8:ed:be:bc:f0:
cd:11:a9:51:b0:21:87:c8:0a:90:74:84:e8:65:75:3f:39:3a:
5d:c3:1e:41:f4:c3:2a:e3:f2:8b:29:e9:08:8e:85:34:4d:db:
c8:d1:15:fa:fc:8d:0b:2f:05:e9:f3:6d:1d:82:4e:77:b1:cf:
68:82:b9:ac:61:1b:df:d6:aa:92:3b:b1:20:f0:d2:a3:83:94:
2e:53:e5:b5:17:7e:c3:d2:01:bf:b8:a9:10:7a:ad:0d:a6:13:
1d:df:a5:67:f8:39:b8:4c:03:d8:c9:83:60:54:79:a5:7e:77:
8b:f6:4f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:01:49 2026 by rpki-client