
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json)
Hash identifier: PZg5W/LO7RbGIdG/rvajhW/RKqHAFN0lZgue69CpdBI=
Subject key identifier: 46:D1:20:D2:B5:E3:54:B2:26:DC:57:8E:D2:B7:5D:C5:48:DD:46:09
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 01A0DCBBEDA09B3180D60BA5DCFA45F84940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
Manifest number: 1668
Signing time: Sat 26 Sep 2026 08:01:38 +0000
Manifest this update: Sat 26 Sep 2026 08:01:38 +0000
Manifest next update: Sun 27 Sep 2026 08:01:38 +0000
Files and hashes: 1: 1_FG2YBqdRhKKIdbfUoaXRIcZtY.roa (hash: DZwW0dAX0l87sLjk9z+qjZR2gAmIuChfWqvnjdJSHpE=)
2: ExLhkVGO_IcP9FKIq81f0oI-oCg.roa (hash: 5HCccmMIa3ZS3Rm7UZ7dWL9/99iZ3k4KgXviDu7U84Y=)
3: H6mXElUtGqkaAjyOWeq60UIxFTg.roa (hash: w/TMQtz3h82vi+GWHVA7q+rO8Depf0bjlxba/vl6eeg=)
4: OwOin32AoXhBJ_iuSSZtdUpdHEA.roa (hash: r6AonYcdKDjFrDRqsif54MlJGphnOtEytVNCx0qvCio=)
5: SCLX0yMUDK_0tO4v6NxcoovzWj8.roa (hash: 9dBLmpKDLrwgh9sSkk5HAo/xRWDF0x1027A7nhDZK08=)
6: U2zR2wxNZR-C_elTQ_PCnfByBwY.roa (hash: OLi955MoAoQc7KvGiHIZSl5vpca4xWCeVTWNOe8m2YI=)
7: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: SOI02AejT4M508LHo5VBvGbeOm+MW6pOjo+ifbkjz6I=)
8: c-5WHUGe7Cokv7tp6uqgS70r8Ic.roa (hash: DoQj2C6sdy5dVILWLV9HA8ZssSHksnBbLRNoxs++EvU=)
9: eHu3rtcXjdq31CwIQ4nx7nvhB2A.roa (hash: eqAtKP8l84cvF2pEaSF30rGhGOuNYfoTW/MjLLS2XHU=)
10: jI-hqwxak8Tg6ancnuy3V90l4fQ.roa (hash: SFQVGGwwzufvH2Q6e3Xanl+xEEo+gFMHtCdjrjGcZV4=)
11: k5tcy3X-bfkTgY-KuojhW38Hb84.roa (hash: /njehwBJ3hy+S6rVtCdBk1btpc3S6jZQpXCGPHURc0Y=)
12: nqJ6Q3D61md2LC4-yJPH7bUWU4A.roa (hash: sLTLPurFLTwE8YAq+DTkGVZv2q4SAYzP5ZK8/ib+u2M=)
13: omuRSlN3uxDC5Q-fxRiwTPk66HM.roa (hash: GxwNrXChKZTEhS9UT+A6aKihcuWe4QoSUJOCbKFbnmw=)
14: ova4DZPGmvsGGPiVCauJt7d6bFk.roa (hash: FJLqImsR5CthuAk7jPWHhT6Jl73gBfGj24WDFfNiWgI=)
15: woLmD7M3XCh8hzd96HJkdchNmr0.roa (hash: IO6F5iDxJpzGWBZGaFRUP1UT9NVbjAY85NrP45yAAgA=)
16: zEU1dCR-4rlXlEW4u-atk395zhk.roa (hash: Kfvh6mjf8zMx7Jx8eSoWtHWYqopwifCIKWlHo0qGGIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:ed:a0:9b:31:80:d6:0b:a5:dc:fa:45:f8:49:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Sep 26 08:01:38 2026 GMT
Not After : Sep 27 08:01:38 2026 GMT
Subject: CN=46d120d2b5e354b226dc578ed2b75dc548dd4609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:c8:9e:4a:ea:25:95:f2:0a:57:ba:81:16:
29:ac:84:32:62:56:6f:2a:28:b2:48:de:4e:5b:a1:
21:7b:95:f5:f5:3f:09:ea:a6:b1:b9:48:02:f7:49:
11:50:6d:ed:b7:9a:9b:8c:2f:e2:d7:d6:4d:66:90:
ba:2a:13:36:2e:6a:af:b6:e2:86:67:4f:aa:ca:01:
40:09:8a:85:6d:99:4c:2d:6f:0f:75:da:e9:39:15:
ce:1c:4f:48:a5:e6:78:82:dc:fa:bd:e9:33:6a:f4:
6b:37:e1:3c:0e:66:fa:ab:ec:3f:c7:a1:04:fd:97:
d0:24:29:1d:70:bf:a7:89:e5:bd:85:37:c1:f3:c9:
05:df:f0:26:a8:b7:49:ed:6d:95:41:8f:ef:4f:b3:
5f:27:80:07:42:1f:15:39:1c:56:3d:4d:d2:70:21:
a6:68:4e:fa:b8:ac:37:0c:0b:79:48:de:f4:9b:69:
d5:22:e9:9a:05:a6:88:8c:69:ac:f2:7e:72:25:f1:
24:7f:a5:d0:20:75:94:d9:d6:40:12:a5:52:3f:d1:
3f:b6:9d:6b:28:0c:d9:63:3b:df:74:15:26:0b:7b:
55:d6:a3:69:ba:05:65:dd:46:0c:cb:8a:a5:39:82:
84:fa:03:75:46:73:89:8e:62:f2:35:9b:ba:29:a9:
42:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D1:20:D2:B5:E3:54:B2:26:DC:57:8E:D2:B7:5D:C5:48:DD:46:09
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:03:1a:88:70:f7:df:ec:cf:c0:0f:fe:63:e4:c2:02:d3:62:
82:87:08:41:49:f2:51:78:ea:83:f3:8c:67:df:6f:17:36:d8:
79:ab:33:19:37:c3:fc:ed:f6:e0:14:cf:8f:01:a2:62:1e:93:
cf:ae:66:a8:7d:46:08:4b:82:7e:65:f1:b9:cf:79:5e:af:2e:
9a:92:7c:57:5e:70:46:59:85:d8:c4:52:ee:7e:5b:90:14:11:
3e:73:d6:13:10:52:31:4f:ec:3d:12:42:17:8c:fe:4b:6e:a7:
1e:8d:e1:d6:97:46:18:d5:a5:03:f3:c6:28:7c:87:6f:9d:fa:
7e:2a:49:c1:87:ba:9d:10:70:72:75:0e:4f:7f:9d:09:e0:a0:
1b:b7:93:1f:06:38:4d:b1:48:8a:e8:6c:17:80:38:cf:fb:9b:
68:74:14:9c:01:c4:16:a3:ee:3f:29:c0:af:0c:b8:e4:e6:d5:
8b:82:89:77:9a:90:70:fb:09:01:a6:2c:6f:bc:26:53:fb:7f:
4f:ec:92:43:ef:8e:f6:c3:a6:a6:3c:e3:5e:12:22:c4:05:29:
fc:b3:11:39:6b:2b:6f:2d:3b:21:1c:41:9f:52:29:d1:c1:bc:
d1:2f:1b:1c:19:79:2c:10:89:3c:4d:e2:7c:9a:0f:f8:e9:51:
ad:c3:64:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:39:53 2026 by rpki-client