
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
File: 7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft (raw, json)
Hash identifier: HvuJiBkV7vhla7/xegxASMa5qUoTPq/Hftw35NrIkFU=
Subject key identifier: BE:AD:F1:D9:0B:5B:5A:3D:7F:06:DA:BB:6F:0F:88:47:D3:7F:A8:D1
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0D20087DEFFF20ACFAD6ADAB184634CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
Manifest number: 1D
Signing time: Thu 24 Sep 2026 06:00:45 +0000
Manifest this update: Thu 24 Sep 2026 06:00:45 +0000
Manifest next update: Fri 25 Sep 2026 06:00:45 +0000
Files and hashes: 1: 0GU6HRl6uDQzZNkILtqUb2kfu2U.roa (hash: KLCli2poPJQ3DchFf5DZZV757vL0eXcKSaecpDhu9j8=)
2: 18FiEiCxgYRp7mh77aYt3dnx5vE.roa (hash: wyB2pZLF8WVSc86WSg9prhicP902AAZNpbfyBaGfM2Y=)
3: 1Kv4t2SeuFSHDefUe02iFtN8W-w.roa (hash: XjBqqCw5lh7DMXgcvd/Pa/ci6uRm+gAQWUMeU6H+QBw=)
4: 7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl (hash: lG8QNEqBEIxBdqQAj/b05ilaZs6REHSIxLGe6IwA94Y=)
5: Jdvr0pOlTbqtvdte8z_DkDkyczY.roa (hash: amg0+pr/DB8XzXgrSXF6K+o2fm6qdJrZPiGxNalnS4g=)
6: LI9_2TlZ4QuxRkL22QvP8SOKKEk.roa (hash: yZPGI5ixH94elKMLKB+a0mwkSyNRngSslFaHqUJEz/g=)
7: MdpjDIm-2qJ2wc2ewfuULmFo-2A.roa (hash: ecX66/p8Q/4h+j2cwF0f4uOvGUmWXMDsNm+pWjXjrqo=)
8: NxsJzkhsWz_RyXSPZyBpukFfitM.roa (hash: Rfv8fCcF2Us5IBM1aVUuN//vRZSaCBPlao/y/Bt5KrI=)
9: SVumR0eZs32hPqbBjUR4HDm8fAo.roa (hash: DeiP7EKKHH59wJlo6Dh3tVePScpcWUXWWtOb3hiHuns=)
10: SwpHza0Ol_xSWiGeYQX5SjZ_FWE.roa (hash: zBDTlApIS/5sWZC8htu4RySvMXIynumZqy8NDxp8PkI=)
11: WhA6F6wBu3d8eKSWxWRHv9cuHJA.roa (hash: k6+/vKAPaJ0sFipUMk81Re8Qm/yMiMqYphPb+MhZOZY=)
12: ZX6lsgmqWqfBbvdIZVAv-LkHXjw.roa (hash: paG7reljn12FATwxcI7xrDVRAlmHueXZGfRZ/kgqoKU=)
13: hbykg__8f6GXjFLIzKyMaJMyn7c.roa (hash: 1KqYWBw9/FhnOFQv5caFDqVWOd1aKgqEH62TWf3ifEc=)
14: jb8Tvu-x7ca2UcmH3_LPMilszLc.roa (hash: OlkXDSnelXREdmtqy5ujR0YEOkVjksdthFMCcz2iNqk=)
15: jfQb6zfIsTuVcK24GSMN5KDVNso.roa (hash: fIPebUO2/Yv2uUljqvW7HoPvahk+P47Az+PpFrqv34E=)
16: jtNMbctmoeTy6sd9LST64n6P_dk.roa (hash: YY03jOdZendFXpCgqi0pAEkPVn3PnU+/LyoTLk3wiFA=)
17: kqoLM3jR_K8o0bze2VbTPUJCwvo.roa (hash: Zvd7nehvUQlRTFTu/+DmYYdD6k/Y7Dtvol//OQ+w+fU=)
18: rKGPDDgAmm0jy0GhkccjKLiXojs.roa (hash: /ngy0l+rqctd6Mbdou0y+Yjl9wuMb3tI7k2GAfzkDvE=)
19: t4hla4KBZW_u3S9aDX40D5FoIpE.roa (hash: cdVBPBpDY5vSc5dSCcL32dwfLqjDbvXZ/0HnEK04MV0=)
20: uDY65mPa3CA0ATuNW_UofUlOVHo.roa (hash: MOx97DXQM1veFBD3X3uPh9KTsc2aCNs+DfWLpHvfvyc=)
21: yK1xGhHjYq20srsKk-V1Fp0UCfM.roa (hash: e/mHS+VHuogPTbpQsUdbxbwiDJ0d02zHVkGZtZUlfh4=)
22: zA4FobWZmNIMqiu8CPh_wr1WP94.roa (hash: +95GZYZ2/hK0vl8jQ38dHcm0uFB9GBRLOhYYtIWjRiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:87:de:ff:f2:0a:cf:ad:6a:da:b1:84:63:4c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 24 06:00:45 2026 GMT
Not After : Sep 25 06:00:45 2026 GMT
Subject: CN=beadf1d90b5b5a3d7f06dabb6f0f8847d37fa8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:50:e5:6a:16:78:c2:3c:78:b1:33:f2:80:
d1:b9:0f:3c:88:bb:9d:da:1b:b2:06:be:ef:3c:31:
09:3b:8b:76:f0:64:11:83:50:b9:bb:83:89:77:7e:
0e:8c:8d:93:46:c3:d7:3c:58:6b:36:53:59:fb:bb:
34:df:bf:10:bf:8c:4b:09:68:2d:d9:5a:c9:15:f2:
ed:3f:cb:21:95:19:cc:0e:a8:15:bb:d6:3c:b5:c6:
af:67:e0:15:d2:3d:49:24:af:ef:ac:01:08:a5:5f:
d2:4e:54:6e:19:7a:a1:27:f4:c4:4d:ab:09:96:90:
17:8b:a0:1c:65:66:6e:32:1e:db:13:71:af:46:0b:
22:42:b8:d3:52:6a:5c:59:5e:ce:cc:1e:16:51:34:
bc:02:14:ae:df:be:96:54:aa:80:d6:ff:15:e0:2e:
fe:00:2a:83:73:f6:56:ac:63:ea:d8:d5:4c:d4:63:
1f:cd:a8:5d:be:2b:6d:9e:2b:e9:bb:ac:13:d2:57:
fe:0e:44:92:1a:ac:90:81:e4:b4:15:09:49:d7:12:
b9:2b:e3:18:1a:d1:a8:b3:16:29:08:27:d2:1a:47:
2e:94:5b:28:2e:78:77:02:a2:66:f4:a9:a8:7c:5e:
dd:0d:c2:c8:62:55:7f:fb:65:f9:2f:b7:31:a5:02:
16:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AD:F1:D9:0B:5B:5A:3D:7F:06:DA:BB:6F:0F:88:47:D3:7F:A8:D1
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:b6:89:da:68:b5:96:74:22:c0:cb:f6:d4:ae:90:af:74:26:
3d:59:c5:a1:02:ce:6b:3a:cf:86:f7:91:43:a7:7c:f8:cd:7a:
e5:65:0a:c9:45:9e:d1:76:d4:86:e1:c9:c1:59:ff:49:20:50:
e8:a8:28:2e:3c:fc:2c:27:a4:a9:88:38:09:bc:02:54:b3:ed:
70:6d:e6:94:94:df:69:95:42:b5:35:06:42:7c:0a:17:38:42:
84:b0:90:76:96:4a:17:b1:42:0c:21:18:3b:5d:04:a1:c3:34:
e9:ea:b8:9e:b2:43:46:52:bc:88:df:fe:c0:0b:ac:d0:4d:eb:
f4:bf:1d:5b:fd:c0:4e:f4:1c:d4:9c:03:0b:8b:e0:f0:0a:d1:
38:64:c1:7b:72:cd:b0:8c:40:91:a5:6d:f8:9e:77:66:00:9e:
aa:54:6e:e2:7a:0c:ec:b5:69:fa:19:2f:28:c3:34:78:36:a3:
ff:0d:a6:19:02:78:29:ce:35:0b:c8:77:3c:5a:eb:46:ca:a7:
7b:6b:5e:31:2e:99:a0:7d:9b:4b:3e:8a:69:c3:d6:cf:6d:aa:
1d:c0:f2:84:91:d9:ea:1c:23:06:bf:51:ca:5f:eb:b1:0f:da:
84:a8:e4:33:90:2b:cb:c2:c1:8e:2f:07:d7:d7:f6:2a:36:26:
c3:9a:56:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:07:43 2026 by rpki-client