
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json)
Hash identifier: X6EShwNpftjRxL+A97y2emzD+IND0c3b9ChhrK5LgXU=
Subject key identifier: 0E:EE:C3:F4:3A:EF:29:F8:BD:8F:F1:67:C4:C6:25:13:55:1A:B3:48
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 01A0CFA4747825E4D9A70D6B6F49D8BE4EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
Manifest number: 1AD5
Signing time: Wed 23 Sep 2026 19:00:56 +0000
Manifest this update: Wed 23 Sep 2026 19:00:56 +0000
Manifest next update: Thu 24 Sep 2026 19:00:56 +0000
Files and hashes: 1: 1onWddNgt-hbXxg-7fMMVDkSMv8.roa (hash: 6xbzz0JrjMO/4fz5zHo8PgQ0CyGaKVVD/UoDkWFGr1M=)
2: 4k3-HpRCXFW3j7_8C4stbYfFUYA.roa (hash: C8f2KuD10zOuLUQcMwm5C74B3yZTjBcW9yOV/aVWErg=)
3: 8MDk26A6HB8ESAemQVS635P3dlM.roa (hash: rxyUnW+DZGiT5coh/pmWc5vX6tfUq/igWAH5aJLS19c=)
4: Nsh_W4gT44WToqQeMBkvLdwLp7U.roa (hash: s1XEdXMI1+3uP5BkHw14NLcZMVjF5mmNtQSI8IR6ni8=)
5: OujepPxEWJf76CUpCTyqTjOXKpU.asa (hash: ThWY+hR9gmQ1aouAGBEnVouEZokSrfcbByNw6RJAbVQ=)
6: QKaa5M_Ls464BGXTJZlXMkecYvk.roa (hash: VYfsIkTwFvkSA3FB9Pu7FhpTVM9hzat73ShbqylONR8=)
7: Uhz_TUI3Hsi81u75mxMWZpekOT4.roa (hash: q9Go9HD9nYKVh+b76qK8j4mJsOQptkJ61FqLETJCZTU=)
8: Un_qTs_qUw6Cr9rSAjxMcB_qwIQ.roa (hash: /NZAsUlQyUhQsDytYI9yrui4/CAPCfbgRtz4l6TLnkU=)
9: Y1K-rQ-VX44rWAjvqhl_hw7Dweo.roa (hash: cEsowcsrRQw+N5wEyAbdQXCFdceUeFzwtiYgytJDtj8=)
10: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: sqjX4GLpiHTvs8+M488TZuAKl5+s+7KggCnqjvjF1EI=)
11: aKvQ03F1bR1q6-Woc8m1q6jONu8.roa (hash: LcJqfZb4sulh5jvt0J4ioSYZjOzoPCpUud+7/IHHoW8=)
12: hzo97s4v3GMC9JemawE_G_69_xQ.roa (hash: be6E5XX2tZu6F19eYf6ITco22ZDHl9eZTJ8uq+1gKPc=)
13: ip7XsN0-IlSnuEP_E--FUjD8qf0.roa (hash: CO94Nw8OySvoAWy5RjY0I0/eplwWsGb3UO5iKzV120U=)
14: l0uiGfn0_Ao0KJi5bVUaMaNKV8Y.asa (hash: 5p613mEjLDKXtkZwHBWoFC0KynCvj30DBewuSTWYGQ0=)
15: osuU6cABAT-z_og2fdV709jwbR4.asa (hash: ItbTyIqWcJVCMwjVvKdgJl+ZPlR3yuOKXNSj6k02k90=)
16: rjxf5Ppv88saIf4NMrBg7Lnjt88.asa (hash: 8f9M0wG41PE6ZfVDs5zv6PTV0f6czRl9ExFIm9zaW0o=)
17: t0cVkqPZjARFv36ftR5F1LXB_P8.roa (hash: aH1VNEGWBhfBG6pKNECJ5Njp4Dom+Xvfv76b48XldZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:74:78:25:e4:d9:a7:0d:6b:6f:49:d8:be:4e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Sep 23 19:00:56 2026 GMT
Not After : Sep 24 19:00:56 2026 GMT
Subject: CN=0eeec3f43aef29f8bd8ff167c4c62513551ab348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a1:da:72:26:cd:52:5a:af:55:47:60:01:ce:
2a:33:66:93:9e:0c:5e:7f:c6:a7:30:2a:10:c4:98:
11:b4:c7:60:60:69:05:a3:92:12:f9:e0:41:b8:d8:
b7:1a:5d:69:f1:bf:0d:be:1c:9f:79:7d:c7:bb:f3:
07:a4:b1:ad:c4:5b:e8:69:30:b3:3e:32:23:48:bd:
a9:ba:95:5a:ca:fb:31:15:03:29:a0:6f:6b:1a:d1:
f9:0f:63:7a:78:7f:a9:64:29:12:fd:fc:39:84:f8:
b3:c2:96:ae:58:19:c1:11:24:00:12:e2:16:28:ff:
78:95:df:52:5c:21:83:30:40:8b:86:fd:c6:1f:91:
21:68:0d:0f:c6:3a:0a:b5:2f:08:43:60:15:ef:03:
cc:31:c0:1d:6f:a6:de:d0:f1:65:8d:1c:9c:f1:7c:
c7:2e:af:3d:69:d6:af:9a:09:05:01:b2:10:3d:27:
15:cf:70:c2:74:01:20:6c:ab:a8:38:be:f9:ef:c6:
aa:67:98:29:03:2a:86:9b:5b:fb:6f:36:00:2b:4d:
6f:2b:9a:eb:3c:65:ec:59:0a:b7:bb:e7:5d:77:79:
16:0d:d9:ad:da:c4:07:9f:e8:84:c6:49:3b:5f:f9:
48:2e:e7:8d:40:5b:05:de:89:62:76:ca:eb:2a:7d:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EE:C3:F4:3A:EF:29:F8:BD:8F:F1:67:C4:C6:25:13:55:1A:B3:48
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:03:81:03:65:64:af:11:4f:d6:e2:6e:24:c6:8e:c3:9a:85:
3a:bd:5b:16:d8:3d:d5:c8:0a:e3:12:7c:1b:36:a0:2b:f5:19:
d2:64:13:b4:82:14:77:e9:a6:95:9b:f7:ba:0b:e2:93:72:dd:
eb:fc:b3:1b:5d:07:78:cc:71:91:59:93:c4:88:f5:d4:b9:bd:
94:f3:cc:00:8d:83:0e:55:05:dd:96:0e:d3:25:3b:70:4d:f1:
0e:cb:e2:07:b1:c6:49:f9:b1:e1:80:6f:1b:bb:9b:df:8f:2b:
28:a5:33:3c:34:6b:df:82:5b:b1:d3:42:80:2e:4f:bb:90:c1:
05:db:70:00:1d:e5:7d:34:c5:4c:86:03:01:23:2e:00:7a:9c:
eb:03:fd:d3:d6:13:a8:33:91:f7:18:0c:d1:1d:52:c6:51:d1:
96:ee:1c:cb:77:4a:94:3f:75:de:72:78:82:83:14:f7:bd:23:
18:b1:79:d1:57:2f:fa:60:a8:a1:b2:bb:dc:aa:1c:f7:68:af:
80:e9:3f:bb:65:c4:d4:00:68:ae:1a:24:b4:f7:32:ef:a2:6d:
cf:6d:6f:30:e9:ff:7e:44:75:69:99:ba:b0:80:11:fb:28:00:
28:78:0b:38:d4:81:df:ba:82:80:67:37:fd:6b:05:41:f3:08:
b3:50:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:11:25 2026 by rpki-client