
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
File: 7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft (raw, json)
Hash identifier: spwKG5rf1yJx5/IkM1n/Im4pafb50zAXIuYMrSiuaaA=
Subject key identifier: 24:88:A7:8B:91:30:EC:F8:B0:B3:BE:36:72:AF:38:B3:DB:A0:E1:6E
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A1DF8356A1E34B339FD76B95FBC23F5448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
Manifest number: AA
Signing time: Sun 15 Nov 2026 14:01:28 +0000
Manifest this update: Sun 15 Nov 2026 14:01:28 +0000
Manifest next update: Mon 16 Nov 2026 14:01:28 +0000
Files and hashes: 1: 0GU6HRl6uDQzZNkILtqUb2kfu2U.roa (hash: KLCli2poPJQ3DchFf5DZZV757vL0eXcKSaecpDhu9j8=)
2: 18FiEiCxgYRp7mh77aYt3dnx5vE.roa (hash: wyB2pZLF8WVSc86WSg9prhicP902AAZNpbfyBaGfM2Y=)
3: 7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl (hash: +X3aJLCmS+Gqw+Ea/mdtnS8Y0Wta19NqU+c7QnADCvw=)
4: Jdvr0pOlTbqtvdte8z_DkDkyczY.roa (hash: amg0+pr/DB8XzXgrSXF6K+o2fm6qdJrZPiGxNalnS4g=)
5: LI9_2TlZ4QuxRkL22QvP8SOKKEk.roa (hash: yZPGI5ixH94elKMLKB+a0mwkSyNRngSslFaHqUJEz/g=)
6: MdpjDIm-2qJ2wc2ewfuULmFo-2A.roa (hash: ecX66/p8Q/4h+j2cwF0f4uOvGUmWXMDsNm+pWjXjrqo=)
7: NxsJzkhsWz_RyXSPZyBpukFfitM.roa (hash: Rfv8fCcF2Us5IBM1aVUuN//vRZSaCBPlao/y/Bt5KrI=)
8: SVumR0eZs32hPqbBjUR4HDm8fAo.roa (hash: DeiP7EKKHH59wJlo6Dh3tVePScpcWUXWWtOb3hiHuns=)
9: WhA6F6wBu3d8eKSWxWRHv9cuHJA.roa (hash: k6+/vKAPaJ0sFipUMk81Re8Qm/yMiMqYphPb+MhZOZY=)
10: ZX6lsgmqWqfBbvdIZVAv-LkHXjw.roa (hash: paG7reljn12FATwxcI7xrDVRAlmHueXZGfRZ/kgqoKU=)
11: hbykg__8f6GXjFLIzKyMaJMyn7c.roa (hash: 1KqYWBw9/FhnOFQv5caFDqVWOd1aKgqEH62TWf3ifEc=)
12: jb8Tvu-x7ca2UcmH3_LPMilszLc.roa (hash: OlkXDSnelXREdmtqy5ujR0YEOkVjksdthFMCcz2iNqk=)
13: jfQb6zfIsTuVcK24GSMN5KDVNso.roa (hash: fIPebUO2/Yv2uUljqvW7HoPvahk+P47Az+PpFrqv34E=)
14: jtNMbctmoeTy6sd9LST64n6P_dk.roa (hash: YY03jOdZendFXpCgqi0pAEkPVn3PnU+/LyoTLk3wiFA=)
15: kqoLM3jR_K8o0bze2VbTPUJCwvo.roa (hash: Zvd7nehvUQlRTFTu/+DmYYdD6k/Y7Dtvol//OQ+w+fU=)
16: rKGPDDgAmm0jy0GhkccjKLiXojs.roa (hash: /ngy0l+rqctd6Mbdou0y+Yjl9wuMb3tI7k2GAfzkDvE=)
17: t-UGZFzwAaCjLNyuz1bGpvLd_6Y.roa (hash: e8yJ8vA9csLBL9fXV0svbNdPk2NABIuW0KFnXDTtmZw=)
18: t4hla4KBZW_u3S9aDX40D5FoIpE.roa (hash: cdVBPBpDY5vSc5dSCcL32dwfLqjDbvXZ/0HnEK04MV0=)
19: uDY65mPa3CA0ATuNW_UofUlOVHo.roa (hash: MOx97DXQM1veFBD3X3uPh9KTsc2aCNs+DfWLpHvfvyc=)
20: yK1xGhHjYq20srsKk-V1Fp0UCfM.roa (hash: e/mHS+VHuogPTbpQsUdbxbwiDJ0d02zHVkGZtZUlfh4=)
21: zA4FobWZmNIMqiu8CPh_wr1WP94.roa (hash: +95GZYZ2/hK0vl8jQ38dHcm0uFB9GBRLOhYYtIWjRiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:56:a1:e3:4b:33:9f:d7:6b:95:fb:c2:3f:54:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Nov 15 14:01:28 2026 GMT
Not After : Nov 16 14:01:28 2026 GMT
Subject: CN=2488a78b9130ecf8b0b3be3672af38b3dba0e16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:0e:8d:81:c0:5c:28:76:6f:65:d5:4c:08:
de:6b:e1:65:1c:86:f1:23:61:8a:76:5f:23:52:d8:
a7:e2:cf:48:1a:39:14:63:cf:45:bb:80:d8:ef:0f:
6f:60:1b:4e:2c:ba:2d:13:11:0e:98:97:75:36:6f:
f1:fd:ba:7d:ee:03:00:70:c1:99:98:f0:a2:e5:10:
df:8e:7e:1b:30:34:cc:4b:97:a6:64:52:f6:48:f3:
0f:4b:42:65:fb:da:53:e1:17:e0:0f:06:b5:d4:63:
c4:6f:a3:da:e0:d7:3a:1a:01:73:5c:b2:00:c4:78:
41:71:6e:83:68:43:34:63:58:e5:2e:32:be:1d:6b:
5e:99:26:b5:f1:2e:40:8d:82:42:d1:4e:84:fd:54:
bc:97:d5:71:85:f0:4c:b5:c5:b3:f8:64:4c:7a:a0:
e1:11:a2:c1:33:55:7a:84:2b:cd:7b:b7:f5:7e:0f:
89:b7:62:ac:0a:19:30:a4:44:9a:b9:1d:e1:a0:5e:
27:2e:13:a7:39:39:b6:e8:69:81:18:7b:d1:da:8e:
d9:8c:31:3e:79:fa:d9:45:d8:e0:07:29:63:b6:41:
c5:66:fb:c0:fa:e8:ea:3f:30:28:4a:85:07:d9:23:
85:60:7a:df:ab:22:ef:7e:cd:b8:60:7c:f9:d2:ee:
bd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:88:A7:8B:91:30:EC:F8:B0:B3:BE:36:72:AF:38:B3:DB:A0:E1:6E
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:80:50:5d:5b:ce:2e:c4:15:57:5a:fd:57:24:b6:b3:3a:7c:
9a:3b:3b:96:79:34:98:d2:e7:19:e6:e0:70:c8:ca:5c:bb:f5:
2b:3d:3f:40:26:82:d4:c9:12:06:35:2e:61:d3:d8:fc:3d:cc:
72:8f:12:7a:cf:24:3e:ff:3e:e8:63:2c:42:91:7d:29:68:e3:
76:a9:d6:40:71:0b:8b:17:89:36:b6:70:e6:52:32:12:52:59:
ed:4b:19:b9:35:46:14:2a:14:f2:95:df:fc:ff:24:ab:bb:42:
74:87:81:9b:4c:59:28:05:3d:2d:4a:16:ce:0d:ad:95:f0:33:
c6:74:cd:52:b0:5b:bd:38:a3:61:44:98:43:98:a4:1b:f4:0c:
41:43:00:a8:b0:c5:31:ff:bf:af:59:a2:1d:c7:d9:95:0d:fe:
01:4c:95:00:6e:69:17:bd:a2:38:06:e9:d6:bd:ad:0d:c0:13:
f4:ba:ba:9e:57:cd:7c:25:ac:d3:de:8a:fa:8a:cd:71:f2:c0:
45:03:36:03:71:2d:39:f4:cb:ee:0b:a7:4a:92:93:1e:21:ea:
b6:a1:eb:87:ce:6b:ec:04:20:7f:9e:f6:70:5a:cb:56:48:4d:
87:bd:d9:54:58:1a:74:3f:9e:40:ff:fb:e6:85:33:a3:b7:29:
de:87:73:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:26:33 2026 by rpki-client