
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json)
Hash identifier: npXV2SpgHZkmPZmKL5URXc9BhOI3cSXWcmJA4UQDH+U=
Subject key identifier: 63:66:33:27:C7:A3:C3:B9:8B:5B:30:14:59:D9:B3:21:92:F3:7A:6A
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial: 01A0CEFF4A7854D3F9DD029CE4358BFE77FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
Manifest number: 1A7F
Signing time: Wed 23 Sep 2026 16:00:32 +0000
Manifest this update: Wed 23 Sep 2026 16:00:32 +0000
Manifest next update: Thu 24 Sep 2026 16:00:32 +0000
Files and hashes: 1: 0uXHR2UhfdGKOw0-7UVbnfQAkig.roa (hash: Q9NPQXWKGQHVWf1Z/Oo69HPn4r2sOJMpx+RqofXuMKw=)
2: 1-jd9OcIMJ3MRmOrCPnxeklbAz-A.roa (hash: 4BT08aUJAH5XA8v2nUCY0ZzKbtYT4OuVlGjXaC8L51w=)
3: 3Hr9NkohHp-0dQh6eby1rDTTvtg.roa (hash: 31UMAD/tu8ErCfftbrPF1UHKdFAEb8fyigVMsh1vdjY=)
4: 50_RqUM3HM1DTyeXhDBU-vljMns.roa (hash: jLfna8CaKrQXjGhh5I5+7KDotyKYCpxYaW8lSXxCxYI=)
5: 8VffJRIzchhCe8rm2mAWoMqOrUw.roa (hash: ZlMVYfC0qcWAgUxCif3zol/JEVTmk18XMebsrNTaMMw=)
6: FXkLPO07K0oGiHX6N80HucLUmQk.roa (hash: pJpxLX/J3IKaGvymzNo/eP+WscosiFBoX/gscobrkA8=)
7: SviK5uP3P_320woFz7MJ74gfE54.roa (hash: cdu27i/9dSf6ELTxYPRMzucVjIzIdkrFCjEQ+8cX0Hc=)
8: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: peQL9Xz/4DLzQTdg7XNgrVbpgItMc+rrX6LtBxkhC9c=)
9: _yMstHwq62YtmKZbMo5Nl7N0BSY.roa (hash: fA5EOJqyYeCeRJjBOFQnKbcHaakgxJGZzArfMKvJW7M=)
10: mNIa-kBl--UJ4M4sTdW_ScZtluQ.roa (hash: APBGVJ5X0w1VXGqUTI7O+M7iTb0F7m1Cbhdbmsncrvg=)
11: vUnigMLcxEHFFYzam4W0EFuYfF0.roa (hash: qgrF46htEQCa+s16GhFv54cTmD+21CsD7rkwyl8dr1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:4a:78:54:d3:f9:dd:02:9c:e4:35:8b:fe:77:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Validity
Not Before: Sep 23 16:00:32 2026 GMT
Not After : Sep 24 16:00:32 2026 GMT
Subject: CN=63663327c7a3c3b98b5b301459d9b32192f37a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:c9:0d:cc:47:d2:23:54:04:1c:08:8b:e6:
6a:92:d2:83:71:12:4b:e6:2a:02:e7:75:fd:c1:01:
f1:5f:06:4e:d9:d2:ba:ad:a3:11:07:06:8b:ad:f8:
b9:b1:70:28:d5:6a:31:9c:ec:38:e0:08:fc:b1:98:
df:d3:a3:e3:88:89:2f:c0:9f:71:67:1e:cd:31:29:
c2:ed:58:5d:46:33:54:4b:75:98:cc:51:79:12:91:
eb:73:46:58:12:dc:c9:1c:49:a2:eb:39:fd:48:b3:
e6:29:7b:7a:ac:d2:63:42:0a:4f:e9:9d:87:74:e8:
61:7a:2a:79:3b:ef:ef:b1:7e:18:9c:db:f6:2b:38:
09:41:44:7b:17:3e:0f:52:e9:ab:4b:40:f8:9e:15:
7d:e8:15:5e:23:5c:29:de:64:8f:d5:1e:52:04:73:
e2:b3:a5:3e:8f:d7:6e:44:23:e8:1c:bb:39:4f:ae:
89:21:c5:46:fa:00:fa:e9:0f:b4:1c:7f:12:ab:57:
df:6d:11:e8:b4:46:48:24:9f:20:27:a1:29:d2:b0:
fd:46:5f:2e:cd:af:b0:d7:36:74:c2:31:2c:7c:75:
9b:2a:9b:5a:4e:57:49:57:eb:bf:de:6e:ea:46:33:
56:20:f6:e5:16:80:4a:2e:3b:eb:df:29:dd:7d:47:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:66:33:27:C7:A3:C3:B9:8B:5B:30:14:59:D9:B3:21:92:F3:7A:6A
X509v3 Authority Key Identifier:
keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:69:2d:4a:a7:5b:42:72:18:1a:6e:cf:c8:aa:4d:80:82:6e:
2b:13:ad:de:4d:81:60:81:76:50:25:1a:8a:b5:cd:8b:5b:f0:
7f:bd:67:69:69:78:b3:65:36:8d:aa:73:af:c6:6e:a3:36:a4:
d9:53:a6:95:a9:4b:40:f1:76:ca:0e:14:15:e5:bf:ac:18:7d:
4f:89:a8:8b:a9:ea:a8:f3:84:34:80:bd:da:e4:77:18:43:9c:
a9:5d:71:ad:5c:9a:30:f3:e1:86:8a:3f:5f:6d:9f:3c:22:20:
8c:a4:3d:d0:92:3d:89:d3:e0:e5:dc:a6:d3:93:2d:e4:fe:7b:
13:d5:49:e7:f4:81:e6:c6:ab:2e:82:3d:d5:4d:cd:4d:ea:13:
71:b6:4b:1a:dc:37:0f:26:f3:a1:98:10:90:cf:c3:21:31:82:
53:21:d7:ed:5d:71:fa:58:21:1b:c2:cf:a7:b4:dd:1a:83:e7:
86:58:83:97:41:9a:47:7a:b6:95:75:01:45:ff:42:97:50:68:
b3:13:c6:bd:94:aa:89:6d:b4:5a:49:a2:19:de:ae:88:dd:55:
2e:6d:fe:ad:f3:eb:80:64:b7:6b:b1:43:a6:86:2e:3a:b8:56:
37:e4:e9:95:16:35:38:b7:de:90:fe:c8:61:89:a1:08:87:3b:
4d:64:97:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:40:27 2026 by rpki-client