
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json)
Hash identifier: DiPAIgbxb+7Oq6dsZ96DBaGq+b8egfWh21PucyDDCPY=
Subject key identifier: 00:DC:F8:57:08:12:04:F0:3E:41:2F:8F:43:99:CE:27:DE:94:F9:DB
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 019E1E35256E6080BB8856D57964A284A228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
Manifest number: 0E08
Signing time: Tue 12 May 2026 22:00:59 +0000
Manifest this update: Tue 12 May 2026 22:00:59 +0000
Manifest next update: Wed 13 May 2026 22:00:59 +0000
Files and hashes: 1: 0C3-RBDeBEJHq-GMCpkbepyqeas.roa (hash: R8WsGdih9UgzIgy88xBMPJbYD5HZmR7kpCNGX1pKVbQ=)
2: 1BUsNPvxh-nEaW12HiIotyTOmeE.roa (hash: Eb+LrSVeh6nCpX6RDLUkP/OBvISRkTfhNDgbqOiV4vY=)
3: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: Uzd+c28+s25FxQSq02fhbrggDmxAz9K8trhHFHOnjAA=)
4: ARSSC9zHIGL8uPCTzOB-i0uK97g.roa (hash: xCWcyeUZ+Gey9KypecDF2UwLJVOuDsCEWO1xuzT51Jc=)
5: DNw48YVZHSvMBEUuvya7j6ydIIE.roa (hash: GQAHxbg19rDLpPVxP7BsuOIaocVhRmeV7czR8XW3KEM=)
6: Hc1-eWA2FbYrQtAUjfotRVnvebo.roa (hash: +wyBxaU8SXxYP9llfsxrS9RJyhJbGb3UqzpK5s4+GG4=)
7: SkR9OA9_dcUyBRQNQpyR0J3fL7U.roa (hash: ZkaVuswuFGESnBKz9fl3MI+QLEQQbxe2PSzXDPH+HoU=)
8: Yi680tyzJGfIAumOzsiKpDqyZ-g.roa (hash: k3JeaICryRPO3kOoypJyQPVZrn3TdIMe/T4lvOZb9yo=)
9: fJW7EYfD-50gKtZxv7Uhc3IrH24.roa (hash: w436OnY6qjYWmprn/yHiq2hzXNy8k69Hv/EWXbmw8n0=)
10: kRt0tDJSVJ_omHpQrdWtGbX3JFE.roa (hash: CrMe+KpHmjRar77RkffCDnmY1XQPJsNcEG8vS6cPsZI=)
11: mFW4zADWbotzoU0wzEidrSWH-UQ.roa (hash: v8M/uk7P0Ux+9wY32sSP1YJp6v/XbIvApRLKBpQlUaU=)
12: o0J93e2ynPAO_ooBBrsbWpkJmVk.roa (hash: 9+ceM91NO20zNjq2ssN5ZXrUJuK961JXQqmxnpqcpFM=)
13: qIXOSdQAmM-9W59tIvFrjCOacag.roa (hash: t9/LH8Ao84MhMXwBIeg/CGYXSM84XUqQW9CXizDPd2g=)
14: scmHvFPvVyV9IKgskiPXIFZZliA.roa (hash: x+i//mSRz34wAqe4SEf89qg0Z8YDvymsxjLahBkl1LM=)
15: tEK5xeFRZZT0xmnBo_SJCuhaz6M.roa (hash: Ptc+FGC+cpAZyzLKTVYPy89IR+7KjxXcG3j40Vai/9Y=)
16: uNRa4zAzcrZDnOveV1CME0I3J4w.roa (hash: OR0NOoULuJszdvy9CmwD+cwSKbUxjzkFUFY9AzTSQAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:25:6e:60:80:bb:88:56:d5:79:64:a2:84:a2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: May 12 22:00:59 2026 GMT
Not After : May 13 22:00:59 2026 GMT
Subject: CN=00dcf857081204f03e412f8f4399ce27de94f9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:0b:66:ac:ce:5f:e7:7b:fe:2e:66:67:f7:
59:09:05:e4:d1:c7:21:3c:b7:2e:2f:66:db:9d:5c:
65:56:c6:20:69:16:07:24:47:3d:8e:da:96:1a:5e:
aa:50:7d:6b:91:89:73:8a:ba:eb:11:95:03:ea:f9:
06:e0:9f:bd:af:f4:a6:b6:2b:d6:b7:06:38:25:5c:
8b:d5:d6:11:1a:be:eb:7f:5c:42:04:11:fb:8f:66:
d1:d0:ed:64:44:fd:27:f1:2b:1d:d8:09:9a:2b:92:
42:1f:16:8b:e0:d6:e7:bd:fe:0f:ed:27:5d:aa:13:
45:24:ea:8d:d0:dc:00:7e:53:ef:70:a9:fa:4f:14:
2a:a5:07:c0:29:b1:2d:61:75:f6:1a:15:22:9e:59:
d2:c8:23:0c:26:99:73:be:bf:da:2a:2c:73:4e:b7:
e9:5b:9c:8d:d2:fc:9c:74:a0:c7:a8:35:18:10:71:
e7:3a:61:c0:4c:43:c6:a0:54:f6:8f:d9:95:11:cf:
91:97:7f:4f:ea:5d:3f:f7:56:a6:5b:1e:78:3e:fd:
d8:93:81:5b:a5:72:f9:0f:fd:92:70:9e:46:03:9c:
30:82:fc:e1:8b:f4:5f:d1:18:16:2f:d3:3d:10:bf:
d5:db:85:f9:8f:4c:b6:41:3f:d4:b8:e4:c1:8c:88:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DC:F8:57:08:12:04:F0:3E:41:2F:8F:43:99:CE:27:DE:94:F9:DB
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1e:d4:5b:81:78:63:14:ee:82:a3:6e:bb:ef:a1:8f:6c:d7:
21:ce:aa:64:67:6b:65:c7:7c:78:2d:fa:5a:27:25:91:3e:a9:
28:85:bf:0b:2e:27:32:c3:51:09:c6:29:26:65:9d:d6:fd:f8:
c3:8e:da:20:76:64:98:9f:52:69:df:5f:08:d1:29:48:16:5d:
18:30:06:8a:84:e1:39:eb:73:24:c8:2b:11:a5:55:c0:41:60:
ca:c1:44:77:26:ab:ae:76:46:11:95:4a:97:b6:ca:b9:22:03:
2c:c9:c0:bc:ce:8d:26:6a:ce:52:3a:f3:83:4a:29:91:a5:d0:
bd:3e:ce:8a:80:68:e7:70:ca:66:03:db:64:17:60:93:48:83:
43:75:6c:07:40:d1:a9:25:a9:1e:54:c2:36:a5:d6:64:db:0a:
6d:82:65:a1:e2:f4:73:0a:c1:55:43:e6:46:aa:a0:7a:52:82:
9d:01:b5:50:8f:82:d4:3a:4b:35:ca:da:67:3f:f6:75:36:6b:
39:51:91:e0:43:81:fb:61:74:6a:87:68:19:e2:a3:a2:3f:38:
20:9a:de:db:87:9d:81:22:61:d5:73:4c:25:7b:b8:58:2f:85:
3f:94:74:e5:7c:82:9a:da:dc:ac:03:83:6b:5f:36:1d:65:99:
c1:7e:31:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:19:45 2026 by rpki-client