
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
File: H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft (raw, json)
Hash identifier: c2dyWzKmXyzxiD5y+T/tzgAsuvqcPRFDePmt3BSqjJ4=
Subject key identifier: 8E:FF:86:E3:06:44:87:8C:40:E6:A1:50:E0:46:0F:94:55:B7:A9:34
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Certificate issuer: /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial: 01A17BBB1F56B62DBA9355034C6F76B2ECBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
Manifest number: 1ADC
Signing time: Tue 27 Oct 2026 05:00:23 +0000
Manifest this update: Tue 27 Oct 2026 05:00:23 +0000
Manifest next update: Wed 28 Oct 2026 05:00:23 +0000
Files and hashes: 1: 1LwTV0768J6dRk8qC5hDLpAsU28.roa (hash: Tt7Jvp1n+IhGVJo847shEW7XeQAdzKOGRJPvl8SARHA=)
2: Bw0gbrbCVB-HoVgeJ9I8CiP3YmM.asa (hash: s5JA+uKeZsK2+gHJiM4h36vliqAxJYuG7Au1gknPnH0=)
3: GzoYbPuA6zt92uMBOAiHk0i8fMs.roa (hash: BhU8n2AYRLl+UcY3HBoFElDvFC16XHDPo9Q/sW3CcM0=)
4: H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl (hash: KnMXNiWj64SbhmIwcYJPso5W7dJUSKA8zS6JJAm2RJY=)
5: PPH0urtDpS_MEda472ZwCkPCXio.asa (hash: SxpZ02tCEqwvi7zZj6qIuvomh6wN/+YCs9ddviXBtmc=)
6: WlWWJjt9Bx1oCkJxTpZbHaU11Q8.roa (hash: 7iCn7aA9/98SqHuf3K5vlRI49Df9JrqkSps0IfUPR0c=)
7: XZjEEVTSvf1uFBOdMMSBuxOceJQ.asa (hash: V9xhtdGjembvaLEHZRxR9b/kPtaNNliazSgOsSJ//6k=)
8: mGCci6Pw4ws1s2CSrvlwPoNX68w.roa (hash: oF16LqvH0BJX/k1mLJ1/7VpPewRXGKd0nGQ5TY/auD0=)
9: nrMCeYu3mMuo_fDA-GvTCBFPlWA.roa (hash: eBvmstTRO+Qzu9U4Nj16cxuQx8JdP3s1HFl/0VPOS5I=)
10: obRejES73sQ5wKFJZqdpH-4y-rc.asa (hash: bS84HPNJTey4N7MFx/LFScYHC6eK2K0n9randn1r5fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:1f:56:b6:2d:ba:93:55:03:4c:6f:76:b2:ec:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Validity
Not Before: Oct 27 05:00:23 2026 GMT
Not After : Oct 28 05:00:23 2026 GMT
Subject: CN=8eff86e30644878c40e6a150e0460f9455b7a934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:52:6b:87:a2:b3:4b:36:11:ca:88:7d:6d:
c8:4a:69:33:cc:af:11:42:0d:05:51:38:e1:ad:4f:
7b:16:d6:fb:fd:a2:a0:60:b0:51:83:11:1b:1b:b0:
d5:78:f1:ce:1a:f7:1e:f7:3e:c9:6b:ba:1b:a8:f9:
62:d0:3e:3d:23:48:e7:6c:00:ef:af:64:29:00:35:
3e:73:f8:fa:ca:be:5f:07:37:3b:29:3c:1b:2e:95:
91:aa:69:4b:36:40:f4:cc:ab:05:1d:ea:c3:e5:69:
00:63:ee:d9:b3:59:e1:4f:1b:42:27:fc:3d:28:84:
f1:2f:06:f2:b4:97:e2:8f:c2:22:b0:2e:3b:39:a2:
9b:99:1c:90:61:8b:96:ca:eb:62:97:90:09:86:ac:
63:71:4a:69:71:66:08:0c:d9:96:83:10:28:9b:05:
dd:04:74:89:d6:90:1d:7c:99:4a:41:e3:d0:67:0d:
b7:4d:96:8f:1f:63:98:7e:42:eb:b0:8d:11:ac:8c:
39:b2:e0:bf:03:a1:3d:ea:ed:8e:83:11:0f:1c:52:
95:80:f0:61:2d:5e:e1:5c:4a:03:30:c7:33:71:33:
25:94:a9:1b:44:a1:f4:d8:af:26:bd:c5:df:52:c6:
ac:4c:02:95:1d:2e:59:20:bf:71:f0:d3:26:ba:c1:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FF:86:E3:06:44:87:8C:40:E6:A1:50:E0:46:0F:94:55:B7:A9:34
X509v3 Authority Key Identifier:
keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:fd:84:55:d9:0a:7d:24:37:5c:39:7a:ad:55:2f:be:3b:bb:
9e:12:b1:c6:8d:b0:14:59:24:43:49:b8:3c:b9:6e:4d:77:ad:
14:d7:48:ac:63:05:ed:10:96:96:8a:73:ab:ea:e0:24:d7:5c:
c3:5c:2e:4a:7e:28:7f:52:df:c3:b4:75:98:71:c1:6c:03:36:
27:3e:31:3f:48:0a:16:93:34:8a:99:d3:5f:0d:37:77:7e:15:
db:0e:e6:c3:e0:b8:3b:c6:fe:58:8d:31:5c:27:df:a9:76:60:
66:ba:ea:bc:39:59:a8:cb:f7:96:93:91:95:de:3d:69:2f:ee:
7d:b1:ae:1e:61:83:b2:0d:e8:5f:1f:68:d1:34:12:a2:37:cf:
b6:21:51:ee:c2:53:71:ed:2d:bb:fe:9f:d0:75:d7:45:cb:64:
fa:c2:c0:09:41:3a:ca:91:d5:7c:6b:a2:23:bc:2a:77:49:b1:
b7:0b:2e:b9:33:36:17:e0:79:33:83:14:4d:b7:e4:f8:7b:6c:
ce:01:cb:8e:b6:a0:76:a8:5c:6c:2f:23:ab:90:93:48:16:e9:
f3:c6:44:24:34:4b:9b:74:d2:ec:c4:af:1e:9e:f3:9c:24:3f:
74:86:49:2d:22:ba:e4:d7:e0:35:0c:29:b1:d7:9d:b2:89:2f:
7d:fc:cd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:23:10 2026 by rpki-client