
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: 2A+4PAC058PyrSnJ21jhJw5CRnBCGO42k8dS/CIz4d4=
Subject key identifier: FB:1B:81:E8:CF:9F:AC:89:25:C9:0C:25:8A:1D:E1:AF:59:40:A1:5D
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 01A0B4636F7469D51535B6EF7ED7C302F962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 1456
Signing time: Fri 18 Sep 2026 12:00:10 +0000
Manifest this update: Fri 18 Sep 2026 12:00:10 +0000
Manifest next update: Sat 19 Sep 2026 12:00:10 +0000
Files and hashes: 1: 1GxQmUTb97UmZv7pfW11O7jdoKQ.roa (hash: FmC4+AN9e0K9c8X4YT0jW6rSPs+y4UOdKxP9qZCnFuc=)
2: 2_M3hjSd7CTsmWcIflPRCb5WQkA.roa (hash: lb+AroYfcHpsLjtLQUflH3VlWHXn0bD5oDoLv70oXjU=)
3: BxKZgBdEOXm741z70o-b-8aaZ1U.roa (hash: 9rDM/H8P5h5tG13SRwkUwohyZWN/9GQOe+B0Xl1+fUU=)
4: GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa (hash: 2tMBvhTBaG9FOblLPHKcO+h2HyVM2AobojKlvW5vzV0=)
5: S_cMNHwGmO53SbTaPSTvEUZSyO4.roa (hash: VJ2mNoR51FwtQFNmuZTNPyshVFI+sQ6fyBXwc1Q4lR4=)
6: ZpqqEj-OtTqHMeec7OuBtT0rl_E.roa (hash: 4anR5lz+iPBfqZgtXZg/nhMp2EG3l7fsaSGpS3G04V8=)
7: aMzR14uquK9xRLMlgVieiQnpsL8.roa (hash: LnMZCy9Vc3AkrK23NCsUcwd16nNnZncQK2bQfZFfX7Y=)
8: dYbDdMuBsyQvL7kdUhtnVt9Qq4Q.roa (hash: Uc1pM7+13084KA3rRz3NbQmC1rtfcHSF9LSKdQS99oU=)
9: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: LO8Og5Ee3icvC5/K4WuqltWr7NHJzCF1U/Q4uF+8chM=)
10: dwc98g5fGUgPAWxFG8AQgkdTGUE.roa (hash: r33CVUyGl3+7P6ErqgK1Pc1v2YLarpkrErbsExQx0So=)
11: gbf_kkJkJHVfWvhpOZp44zXkSi4.roa (hash: L7TAKQTj5DgzgInyo2Z2o+5W5kIP6WxJWd/ULoNrui4=)
12: izn0gTPOQgQruf6Plz077lbyDvQ.roa (hash: SL5lQV0cHnhG5e9HsORKQLS+k85jrcJmLKm8DFk0UWk=)
13: ltuqnV7zy2DnQsucRbj8arC5CQM.roa (hash: LNO3fd1HW9TV8pQ7/uQgUjVDHYwtyIfoP4cwyPVsgsw=)
14: mBXHe8xwrq_f8wh9M3ZXaWdq8f8.roa (hash: dI8S3nju8gYg5btIsxEkeYY9kQycBzwf9pyizszOFek=)
15: ocHcLPqIiXs39TMNmLocr_HH0to.roa (hash: 2m7W1dsOxKOHHVh+M6gzZPsYBZCOmqgU0+hBomALNJM=)
16: q--OuP_rfB_qdy_7f_RIgPMsU7I.roa (hash: J5d2AOEi0HNsiyJ+nB39gHaVUpXKMLDnfhR+GSmUgHE=)
17: r2wp15RalYZ-BpL4xsNnngK0594.roa (hash: NNjjTsbzbTB3BJf0ScAIqlbHnQQtN/B+x9X2kssrtLQ=)
18: tiWoclLyoubi_eH2eBTEmg_nRPQ.roa (hash: v7vNaiqbe+aP8/SaLVbx8mliFyA9s414yzNmBa2a+SI=)
19: uuy6ECeKU5zPxhagn8FIr283yKQ.roa (hash: OOKXwwUyMmEuY99QE9mTnSKY0ij2Tkkt4XqvRj4K6hc=)
20: vLafL0GwWDvLzC-WXo-ujU2mMjU.roa (hash: WZJnUmwzRASxvhXsgI51USxfQop8j6bDAzzdqadBvsM=)
21: xfzSJZkuJaEFMZbSPNrdm-vtVgk.roa (hash: 03aH6k3XO2w/avcqYf5rOTHSew6NN0Bs9faZ8hBNn0U=)
22: yrbB1vsBIjdbUaylEPRfMMB-k3g.roa (hash: uUmid3sXY3uL8GFqpHsIlPFVeU82iqmCl12sBdQU42s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:63:6f:74:69:d5:15:35:b6:ef:7e:d7:c3:02:f9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Sep 18 12:00:10 2026 GMT
Not After : Sep 19 12:00:10 2026 GMT
Subject: CN=fb1b81e8cf9fac8925c90c258a1de1af5940a15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:30:b7:1f:9c:90:44:b0:36:ad:c2:a8:84:
0f:54:5f:6f:67:9e:bb:aa:9b:9c:3e:55:fd:71:4e:
21:97:83:d4:f5:3c:89:1a:bc:a0:20:3c:00:42:9d:
98:a0:3c:54:06:bf:d4:22:ea:29:0f:cd:21:81:5d:
bb:52:92:d6:45:6a:12:1c:8e:d3:59:18:7a:b7:b5:
c8:8a:57:d8:2d:f9:f1:7d:ef:d1:9e:73:4a:fe:8b:
e8:65:7f:90:43:be:52:cc:08:55:e0:1f:21:21:7b:
09:2e:c7:0f:71:7e:33:2f:dc:ee:10:20:4c:a1:da:
c3:bd:76:b9:24:a6:1d:8f:39:9c:b4:01:76:cb:69:
8e:7e:58:85:f8:7c:70:be:22:31:81:50:df:74:ca:
36:c5:85:20:5d:0f:b9:33:07:c0:69:11:66:bf:a8:
2f:bc:67:97:f9:b3:d6:7d:7e:8d:b3:f5:91:55:06:
30:34:d1:9c:94:4d:f2:33:d6:8f:c7:2c:7b:7e:d2:
7e:71:cb:e3:98:f4:b0:13:b8:3e:a8:77:bc:be:95:
cc:ab:59:80:e2:25:c7:b1:04:e2:da:ba:c9:4d:54:
00:36:38:a0:b2:59:08:27:41:65:ad:de:9c:6e:a1:
5e:21:7a:5f:bc:02:33:d8:d5:86:12:ba:f5:c2:d7:
9e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1B:81:E8:CF:9F:AC:89:25:C9:0C:25:8A:1D:E1:AF:59:40:A1:5D
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fd:06:64:cd:71:4d:22:82:3b:cf:38:9d:0c:29:75:54:ce:
81:26:5b:94:a3:eb:e8:53:fe:57:8a:11:70:8b:0b:de:f6:9e:
18:28:d1:c0:be:92:68:20:ba:c0:d2:e8:38:19:c5:b4:14:70:
0e:ac:90:82:ea:51:54:36:96:9d:5d:1a:24:c0:97:00:7a:71:
e6:52:42:44:de:34:8d:6b:30:02:0a:2e:77:c7:7a:ec:8e:7c:
1e:52:2f:4d:fb:a8:b6:c6:39:58:70:ff:f8:0a:a3:ec:ee:8e:
56:fd:50:47:98:7d:d9:ca:7f:1e:15:be:d4:71:32:df:e1:88:
04:85:ab:13:0a:6e:80:36:10:20:04:91:32:9b:68:ec:89:66:
eb:02:e2:ee:d9:88:9e:a8:0e:b5:b3:8a:77:25:46:b1:ba:65:
d4:62:96:03:f3:6e:2a:aa:93:27:e8:b9:94:bd:bb:3f:14:54:
c4:b8:46:b6:04:b3:6d:09:b1:7a:ce:73:d3:4a:29:79:35:38:
11:86:dc:f8:3e:09:2f:6e:30:86:5d:3a:a0:b1:b7:de:9b:9b:
4d:04:3d:e2:cc:19:b5:fc:18:c8:e4:3b:bc:0f:d1:85:57:f0:
46:a0:08:9d:17:fd:8c:4b:c9:61:bc:a4:40:48:c9:0f:26:86:
a6:08:57:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 15:37:44 2026 by rpki-client