
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json)
Hash identifier: wKx8ENQdAvsvQ9KpELDLm0BkIiLkwDVzRfR8WQGu1to=
Subject key identifier: 97:28:D5:23:F0:18:3E:0B:53:C8:EB:F6:C8:B9:50:4A:F2:AA:BC:E3
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 01A1DACB16AEF9229B0EF9777C18B30CB193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
Manifest number: 1B61
Signing time: Sat 14 Nov 2026 16:01:45 +0000
Manifest this update: Sat 14 Nov 2026 16:01:45 +0000
Manifest next update: Sun 15 Nov 2026 16:01:45 +0000
Files and hashes: 1: 1onWddNgt-hbXxg-7fMMVDkSMv8.roa (hash: 6xbzz0JrjMO/4fz5zHo8PgQ0CyGaKVVD/UoDkWFGr1M=)
2: 4k3-HpRCXFW3j7_8C4stbYfFUYA.roa (hash: C8f2KuD10zOuLUQcMwm5C74B3yZTjBcW9yOV/aVWErg=)
3: 8MDk26A6HB8ESAemQVS635P3dlM.roa (hash: rxyUnW+DZGiT5coh/pmWc5vX6tfUq/igWAH5aJLS19c=)
4: OujepPxEWJf76CUpCTyqTjOXKpU.asa (hash: ThWY+hR9gmQ1aouAGBEnVouEZokSrfcbByNw6RJAbVQ=)
5: P376G4ux9pN80ycinW61fwUFrYM.roa (hash: TzJLYkPRxQAGhP7KlleLpxkjOvqUqS3AYvAObGZIOew=)
6: QKaa5M_Ls464BGXTJZlXMkecYvk.roa (hash: VYfsIkTwFvkSA3FB9Pu7FhpTVM9hzat73ShbqylONR8=)
7: Uhz_TUI3Hsi81u75mxMWZpekOT4.roa (hash: q9Go9HD9nYKVh+b76qK8j4mJsOQptkJ61FqLETJCZTU=)
8: Un_qTs_qUw6Cr9rSAjxMcB_qwIQ.roa (hash: /NZAsUlQyUhQsDytYI9yrui4/CAPCfbgRtz4l6TLnkU=)
9: Y1K-rQ-VX44rWAjvqhl_hw7Dweo.roa (hash: cEsowcsrRQw+N5wEyAbdQXCFdceUeFzwtiYgytJDtj8=)
10: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: XinzYA8nO2ayGk8sjXmuFg8XHyDBCCnCwnOdfManFi8=)
11: aKvQ03F1bR1q6-Woc8m1q6jONu8.roa (hash: LcJqfZb4sulh5jvt0J4ioSYZjOzoPCpUud+7/IHHoW8=)
12: c7CZJUUIHxUz_3r4IC7p3Sp7E9Y.roa (hash: 2ZK0zfQlWM/lIL1ZfJQAjuVuknTQ0MREvpJfMk1t+WQ=)
13: l0uiGfn0_Ao0KJi5bVUaMaNKV8Y.asa (hash: 5p613mEjLDKXtkZwHBWoFC0KynCvj30DBewuSTWYGQ0=)
14: okKZDqcNWXmus3VAHiD_yVoQKoM.roa (hash: mHCBNlFONOJbBkNBIWpg6F1jxsPLaCKILFXdqJv3jfE=)
15: osuU6cABAT-z_og2fdV709jwbR4.asa (hash: ItbTyIqWcJVCMwjVvKdgJl+ZPlR3yuOKXNSj6k02k90=)
16: rjxf5Ppv88saIf4NMrBg7Lnjt88.asa (hash: 8f9M0wG41PE6ZfVDs5zv6PTV0f6czRl9ExFIm9zaW0o=)
17: t0cVkqPZjARFv36ftR5F1LXB_P8.roa (hash: aH1VNEGWBhfBG6pKNECJ5Njp4Dom+Xvfv76b48XldZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:cb:16:ae:f9:22:9b:0e:f9:77:7c:18:b3:0c:b1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Nov 14 16:01:45 2026 GMT
Not After : Nov 15 16:01:45 2026 GMT
Subject: CN=9728d523f0183e0b53c8ebf6c8b9504af2aabce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:70:b5:c8:86:ef:2e:08:dc:9c:6a:ab:4f:
c8:8c:08:ad:c2:67:e1:a3:4f:6b:e0:9c:ac:b5:5c:
1c:d2:43:f7:a7:0b:1d:1a:ba:77:6a:d4:18:ce:ad:
ca:85:2a:18:7d:fa:a2:d2:93:37:2f:1c:c5:97:92:
8f:b2:e5:02:15:82:b5:54:a4:15:c7:2e:8f:62:60:
f5:c4:ed:cc:83:22:16:90:70:21:42:ba:ec:9c:21:
40:36:fc:3c:f5:a4:d8:bc:25:00:7f:54:99:1d:1d:
85:e4:a3:4d:67:cb:cf:8e:2e:f0:21:75:aa:28:d6:
07:18:ff:0f:d9:96:aa:4b:82:b2:46:86:86:b1:f1:
eb:77:24:fc:cd:cb:e3:b1:eb:b3:de:ca:93:15:c1:
e7:00:5e:9d:b6:ed:45:d2:4d:7c:53:ab:5b:62:b3:
35:0c:50:d7:74:37:d6:d5:0e:a3:99:41:7c:2d:72:
d3:1a:27:d0:a5:4a:3c:91:fe:4d:a5:20:2d:31:83:
63:52:8a:e2:88:bc:6d:98:5e:15:32:31:94:47:5c:
e9:3f:5f:76:39:f9:4b:ce:94:d1:b2:a3:93:f9:d3:
42:04:1f:0c:44:53:d0:69:35:c7:7c:93:90:f4:70:
27:7a:19:f9:e2:22:1e:30:bd:be:03:f1:fd:63:2b:
df:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:28:D5:23:F0:18:3E:0B:53:C8:EB:F6:C8:B9:50:4A:F2:AA:BC:E3
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e4:bf:08:4c:49:b5:7a:50:23:69:8e:62:64:29:a5:9c:15:
af:45:10:ee:c0:42:c3:b5:50:1f:76:0a:ff:d0:10:e3:ae:f1:
d4:4f:89:cb:e8:b6:13:30:e9:31:f8:b2:f0:9a:4b:9c:0d:36:
64:a9:40:01:e5:7a:8d:2f:f9:1e:86:1d:15:6d:9d:03:02:ff:
7a:84:7f:ed:16:27:7a:0e:97:78:28:6b:80:3b:df:e8:43:03:
ec:79:f5:bd:82:a6:ea:c5:9c:66:dd:28:7b:e3:34:c3:26:8c:
4b:d6:4b:dd:68:3b:36:90:fc:80:97:0e:88:f3:5d:6e:9b:14:
4a:42:ec:a1:eb:2a:3f:5f:de:c1:98:f3:83:20:5a:3f:ad:e8:
d9:7c:f5:7d:1a:6f:c7:c3:3a:cd:a7:84:cc:6f:5e:e8:e9:31:
e9:f8:93:4a:13:a0:a2:29:2a:fe:92:84:ed:b3:cd:ff:d6:2d:
38:7c:2d:7e:d7:a8:89:1d:27:e7:bd:46:b5:7d:65:70:3b:12:
ab:ef:0e:07:18:61:c1:32:19:4e:27:c4:d7:ff:38:6a:17:7e:
77:05:16:95:58:0c:cc:a8:d0:15:bf:10:ad:c2:55:ad:59:00:
c9:c9:58:af:69:f2:64:d3:a3:6a:09:97:11:eb:0c:9d:0c:db:
6a:5b:8b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:09:05 2026 by rpki-client