
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
File: RbvSGTZCUwoBf08cvlYuIXCz370.mft (raw, json)
Hash identifier: 7vJAilJwQyp3ceYM2jdnnxCWTVYh/mdG9tlWkjURRUw=
Subject key identifier: 11:51:B4:99:8E:D5:AE:A3:E6:B9:E0:37:7E:92:1C:9F:D9:4A:C9:28
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial: 01A1532D9F372D104CC9546FEA6B85122994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
Manifest number: 12AD
Signing time: Mon 19 Oct 2026 08:01:00 +0000
Manifest this update: Mon 19 Oct 2026 08:01:00 +0000
Manifest next update: Tue 20 Oct 2026 08:01:00 +0000
Files and hashes: 1: 1--457KV1-R-2AyDnu5gwQjLQg_o.roa (hash: 8N9wCT8kfIgyzoJcGZvHmJgv1bgcFxw3DbUmqgeqDIc=)
2: 4aqwAHha90l1eelclAQUVQR1I44.roa (hash: tcKMrTjhcN6vhODlC9CVcmb++R8Mkr/fDJOT6nlWeQ0=)
3: 9hzuEkfOLx6dbtvls8L-DK7YVvk.roa (hash: hKZSYd06joPWfMKvJuesIx8vrhQYzK0wkVb/y/gid8E=)
4: RBeFCjxIM7miAZu7QTFUMKs99XY.roa (hash: 632Ss4tpXpsH0DMtGlQw8IheEnppDKOHlGmiaPoTHgE=)
5: RbvSGTZCUwoBf08cvlYuIXCz370.crl (hash: s4JIxbEM/errwSDXl2y9G81BGRqALArO3R9nPOnAR2w=)
6: e2mICNZ-ktWR8rRC8DNSqAlzYS0.roa (hash: Felav9tNWd/FcQPP7GRNQiXa/u4OHWKkmJPe4XvqDUM=)
7: eSTze8MlBFRraV4dsl31h2iw1VI.roa (hash: lDAECqzqHU746njNX6dpVZo+oFs2oTdwqB1k/OKzU9E=)
8: gxpF5Ywmi9CVdy65UZl-VezFpFY.roa (hash: u4fV+dkW37+bQyCJf6mzLseCn34MI5XSnX8fv1o7KNw=)
9: hLiW33dYFtk93njm1Q1HKa7zbas.roa (hash: tK/30Ejl4gGabl5/3tryRax+Y14BBBbKwIaeKOFx3Oo=)
10: l6wS_VO91DxNt91DRsp0DvYwmuo.roa (hash: 22h/qy7HYLT12nuxMyq//AhQ3qbzsI+VO3MFY5icjPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:2d:9f:37:2d:10:4c:c9:54:6f:ea:6b:85:12:29:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Validity
Not Before: Oct 19 08:01:00 2026 GMT
Not After : Oct 20 08:01:00 2026 GMT
Subject: CN=1151b4998ed5aea3e6b9e0377e921c9fd94ac928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1c:06:34:47:90:6f:24:d4:68:f6:33:e1:15:
e0:21:b5:b2:28:e3:ca:36:0e:78:ea:6a:03:70:ec:
86:3c:e9:26:c5:89:64:16:f2:2f:24:77:82:02:d0:
5d:74:19:c0:a3:7c:06:42:9d:3f:70:ed:cf:ce:b3:
6e:83:44:a1:7d:1f:e5:1f:99:9b:4e:b9:cd:4f:48:
73:7a:58:6b:1d:28:bf:87:3b:23:c7:27:f6:08:53:
02:e2:ff:74:d5:ef:4f:95:ad:f5:55:ce:8d:26:3b:
07:bb:6f:0b:e4:45:20:35:a4:d2:42:d1:8f:2e:61:
41:e2:65:49:0d:6d:b3:78:88:f1:a2:e5:5e:48:8e:
bb:6a:fd:bd:a3:c0:8a:20:c5:1a:53:5a:c6:9e:c8:
bf:c1:f3:1f:a7:71:4d:1c:11:bd:fa:9b:52:29:4f:
73:4c:a6:9b:16:e4:9c:5e:19:c8:ad:4a:ca:c2:f3:
d0:ed:ac:ad:e7:82:8a:b5:9d:20:56:94:10:13:08:
ad:60:e6:b7:bc:8c:8d:d8:6c:26:ae:fd:ae:b3:cf:
10:a8:0e:5c:03:53:e7:3d:9a:ee:8c:d7:7f:2e:94:
32:b7:d9:be:61:8e:3c:75:eb:72:fd:f0:66:9c:10:
4e:3a:6f:92:26:ec:dd:27:27:fb:1a:30:53:30:15:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:51:B4:99:8E:D5:AE:A3:E6:B9:E0:37:7E:92:1C:9F:D9:4A:C9:28
X509v3 Authority Key Identifier:
keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a4:1e:57:4d:5c:77:50:82:cd:20:ed:bc:04:9c:58:ca:a0:
9a:ff:1c:fe:7b:7c:cb:05:d1:ae:2c:31:67:73:2b:fc:f6:b3:
40:c5:bc:db:21:cc:a6:a6:a5:3b:eb:5b:37:78:bd:70:a5:14:
85:06:92:d9:07:e8:08:d9:9a:3f:89:cf:83:0b:4a:73:74:2d:
22:89:07:54:25:3b:96:a0:e1:77:4c:a8:c5:0d:a7:e9:60:b7:
b9:76:2e:d0:74:8a:93:bd:dd:7f:42:63:be:1b:d0:43:50:c2:
da:17:87:93:84:a5:4e:b7:75:24:39:49:3b:9b:e0:d5:27:68:
b3:2a:be:38:1f:9c:26:4d:4a:1b:84:43:f4:82:b5:70:1c:84:
cb:3d:10:95:b8:75:b4:b3:90:5c:45:8e:24:0d:a0:05:be:b3:
be:03:23:25:f2:71:7a:b1:ec:ca:66:59:8e:bf:47:5c:2b:df:
b1:b7:03:cf:b9:43:f1:bc:4e:6b:e9:4c:d4:85:71:eb:b9:d0:
ff:c1:21:86:03:c5:fe:89:93:33:86:14:c1:8f:0c:91:3e:4c:
6b:a3:4e:c9:9c:76:1d:69:a4:e2:84:a4:ff:d9:02:1e:dd:6f:
10:a8:f4:7e:e6:db:f9:b3:28:4e:b6:70:45:ae:a0:1a:89:01:
1b:0c:3f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:21:18 2026 by rpki-client