
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft
File: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft (raw, json)
Hash identifier: dE8xRGpApudKlpwEtQpby0aa2SQ0BFVbl2pSjLfYA60=
Subject key identifier: 11:4C:E8:EE:7B:60:EC:47:0C:6D:62:8F:EE:D6:D2:ED:12:27:C1:51
Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Certificate serial: 01A0CE91CF6034E3FD2C6156544F81BB416B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft
Manifest number: 1510
Signing time: Wed 23 Sep 2026 14:00:57 +0000
Manifest this update: Wed 23 Sep 2026 14:00:57 +0000
Manifest next update: Thu 24 Sep 2026 14:00:57 +0000
Files and hashes: 1: 8YEPdClPNr_3zDrhmRGiX4nWwZA.asa (hash: 2bvyL1QtbFD5dzAQ0Bl2sb4g9BiR/U4X0BGmGEMfbKU=)
2: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl (hash: 8eHeHMcurNZYGMz5ntGtjGxqbRrdzcsV9Tm+6pKcRpE=)
3: B5j3YeJoZkR-M842kAei_UWMVnY.roa (hash: 9dBcdzBINoDXdmkJLkcJhvttYwcsyEIX2FhzFQvtp+s=)
4: axIqDyAlK0bUNbzn8X3np8rLZdg.asa (hash: qyAh01KjzZwobQ5AxwlXgm7EdBIeIjU3cgZPryzz3yA=)
5: g3MXjNcsWoLD0PetYkh3H8FGFEw.asa (hash: na+ynpKUQZPFDrKy+EXa5B4rQ+xPN8v4RPHAqcwEPhI=)
6: hfYAMmC7nzj6eP_4KjmX0ydK61k.roa (hash: ENco3xJLaaDmCT3M7xz4xfUTyINJdjSu/7+AW54JdKY=)
7: lwxiv3kekrPmCweGpFX4WJfrhX0.roa (hash: 2lW/SbMqaftEHsN9ssTuGMfD/ZAuKFXzBYGrp9TrmHI=)
8: nBKubqHJCPmxZed95Pwvup7veOk.roa (hash: SF8k+2B3p2IDWArFu3EKiVWXhjgf4ze2L6pnr/0Lp4o=)
9: qMkdURgl5v8iVuM-fHHXRCMHBok.asa (hash: KT0x4APoSA9EBXsj4uU5Mno2FoqnMrb2Le5rpuVOb0U=)
10: wehxXgpfgzalQRxlqvRAJwCWbMQ.roa (hash: kDdYxSItK7GlFWzV8XEeVDHmfQM6o/WzrJGoU9qv79A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:cf:60:34:e3:fd:2c:61:56:54:4f:81:bb:41:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Validity
Not Before: Sep 23 14:00:57 2026 GMT
Not After : Sep 24 14:00:57 2026 GMT
Subject: CN=114ce8ee7b60ec470c6d628feed6d2ed1227c151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:dc:59:da:95:19:1d:b1:bc:55:a9:1d:28:
19:b0:ca:d8:b0:71:10:66:da:36:47:c9:16:cf:19:
e4:48:ce:92:1f:ef:08:1a:07:88:29:f9:a3:aa:e9:
78:80:0c:1e:c0:b1:13:c1:f7:f5:39:a7:93:c2:f1:
68:da:7c:19:06:34:d9:15:96:34:c8:05:e8:56:e5:
e4:0e:3b:47:93:8e:53:26:16:72:d6:c1:75:5e:b8:
27:5c:1e:c0:6d:05:d5:fd:6c:b7:13:12:00:f5:d7:
9c:4e:f0:86:99:41:30:ec:5f:e5:8d:e1:3d:71:e1:
5b:d1:89:98:1b:9f:d1:cf:99:47:5d:5a:12:d6:53:
14:c3:54:cf:63:e8:27:8d:9d:90:47:a4:16:fb:54:
d0:86:76:37:d0:d2:85:4e:80:ff:68:7b:85:6f:0c:
a0:7c:c2:a1:9e:ac:4b:e4:aa:8e:92:21:96:73:8c:
23:c6:54:2c:0d:05:ba:bf:be:34:d1:e2:64:27:06:
4b:e4:b1:e5:d5:02:e9:8f:b7:b1:3a:72:da:dc:1e:
bf:a4:40:40:eb:7f:18:f6:d3:5a:e7:02:07:b1:ff:
25:2c:17:5e:e7:6b:cc:c2:b3:77:38:4a:7d:06:d4:
14:29:bb:5b:e6:11:37:1a:f6:91:a6:57:e1:7d:9a:
12:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4C:E8:EE:7B:60:EC:47:0C:6D:62:8F:EE:D6:D2:ED:12:27:C1:51
X509v3 Authority Key Identifier:
keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e3:c2:ca:27:4f:7f:51:dd:6c:23:41:95:52:d2:bc:be:2a:
9b:23:95:9f:07:05:71:99:1e:81:a0:0f:d7:a7:3f:1d:df:87:
a9:d6:8e:81:b6:01:a0:f7:3e:4c:01:d6:a3:13:44:d6:0b:49:
f8:a2:cf:3f:7a:17:8a:7e:34:5d:d4:07:b7:64:c7:b6:06:34:
06:ad:64:6e:73:a4:23:eb:0d:9f:42:c9:c2:38:33:88:e1:c6:
14:a1:a5:cb:76:0d:14:a2:2f:7d:e0:e8:c0:1e:66:ff:69:7e:
bd:95:5a:ee:32:7d:57:e8:87:24:5a:7d:30:8d:03:bb:31:5b:
58:43:4c:13:92:52:80:fa:27:1e:fb:8a:23:8e:62:0a:dd:fe:
ac:14:24:c6:80:95:56:35:ca:fe:5b:dc:9b:8b:4c:22:88:f7:
1b:df:41:86:d9:e0:98:f0:a8:21:62:36:5b:85:9f:9f:ac:6c:
62:d2:a4:6e:6e:f4:e9:20:61:f3:2e:b9:90:4e:f1:72:15:25:
9f:0f:16:04:85:5f:92:09:81:2e:42:b2:bc:36:77:5d:5f:76:
25:90:bf:e8:3f:2a:05:b2:fe:57:5d:02:fa:8e:8c:7a:4b:28:
dc:e4:d6:70:35:ab:c4:0a:5b:5a:60:af:4c:23:6c:b5:1d:c1:
2c:59:32:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:14:47 2026 by rpki-client