
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
File: bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json)
Hash identifier: N6jO3hrAVW4jI09JaJlhQM5Pf991+z+zSQL7xIfDFFU=
Subject key identifier: 9A:69:C3:ED:62:43:4A:5E:6D:8B:6B:18:1A:C5:71:95:7B:D3:5E:5F
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 01A174A6A181A700957C81E191C5E38218FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
Manifest number: 0E1B
Signing time: Sun 25 Oct 2026 20:00:39 +0000
Manifest this update: Sun 25 Oct 2026 20:00:39 +0000
Manifest next update: Mon 26 Oct 2026 20:00:39 +0000
Files and hashes: 1: 5FHJTMovIyafBSIoWEyalm3rI5M.roa (hash: 7pR5dvgxZrfBVlojZ8DgehqyTZVyIf8AxZ2O6MrCJ8c=)
2: 6E9LTAyzQt1FEPfr7FhyMtAFg2M.roa (hash: TGRGd7XnfyAu8YWaQ6cS2sAir5AhkX//ozfCRednwtk=)
3: 7hJafOPCpVSEdxOE76y6niPbYbg.roa (hash: W1rV0T1F6RwXszjsED1ynOIbEQcRvX19VVt3Nz1sIkc=)
4: BErn-fY5VBXxD2VyEYJN-JdQUW4.roa (hash: suKr1RNc8jf4yYkym4zmqDLZzivo3iXfr9FhGIfjNng=)
5: BUT1NMkorMdojGeQxT5hIJgs8Nc.roa (hash: yZ0THgxl4+lAG7xhsfPweM9P6nUbmimKZfn0DgScC+E=)
6: BfGhYoXLz-5I0FN0nL8DXjOx6EU.roa (hash: Ss4hP6Q3/Oalsvet7/zlDLfrMD1Bv1uUMHsdssewtYI=)
7: DA1lpibgFq5-y_Y3ZxUgcX7RgTo.roa (hash: jnR91XQH0HnolepDmgrXE13NqGBnutXBwTg3aasEMIc=)
8: GVUEDUnF5jUjS5nadTHF8d_a8jM.roa (hash: CNVQH1UrdXTDRK5lM23G9sOU0bUyYlN7wDHyKz8bSA4=)
9: HIFyOEF6o7Rsq5goVjW52OhadgI.roa (hash: k9ek9boUBYYEmOjPJ57YH83oUBsMeWYZC5hDknA/Hs4=)
10: IdbA3ga81eRnRIoyM9ZFsnJoq-0.roa (hash: X6pEz6Y9VtUR71wHETOjVXSfvkgFN13w55bg4lUbPVI=)
11: KlqwNeDSNI-6gcYLBNO5DzJcKIE.roa (hash: Qw0dDm30Ph7VrT6EudqSthxSPTm302Z+oCp8QJLF0jo=)
12: RbdrFxMpPdVSzRp_C-Rku8BRui4.roa (hash: i6eqmLVwiqXYOO52UX4iIvTthJpungIdi65hhhhuuR0=)
13: RuFU5d7ARVr5r4PY4vOdxriie6Y.roa (hash: yyiFBcac7vrMWH3pU/fo+ECKDfP8bGIkfxHEMC+At54=)
14: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: dKrfu3UiA75pF8Vvan6rXX7y2lJlJshAadwmb5fFS/M=)
15: bVPAHIj80WWce7a3M1XCyh6YdoE.roa (hash: sdPf2Cf+3VFGeiSN/Ap92x67gRehKgw0gxPfYcFUmLA=)
16: lSC4RzevQeRkikifsAt3gR84fxY.roa (hash: CDC2+wQFTPEwC0Sq9Rnp++UpyacRzQctOXOPJvW93xc=)
17: qEbYFQoXre_OuLtdayPj8liTJCA.roa (hash: jvondzJ1t0alplZUpmymkMm3ArgabFjZkTrg9UVcZXU=)
18: rMHgLwq1dgxl2KpsUSthXs0MWBk.roa (hash: Yk8LFVOWtBI6Eap7t4JN9HPbcuGjrW1IcCeKsknRw5I=)
19: xrze8vo27kvzGHLArTlKKxLK6X8.roa (hash: 472z94Y4BGd5ZtO+s4jKvuHuf1XPqa3fnP1IMEj/HWY=)
20: zvxcn_GD8_hUJXGGJ7rjFFwAQB4.roa (hash: AG7WeXLfc9bch8+moQNIG4Gui1kugzTC1jXXmZYVyJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:a6:a1:81:a7:00:95:7c:81:e1:91:c5:e3:82:18:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Oct 25 20:00:39 2026 GMT
Not After : Oct 26 20:00:39 2026 GMT
Subject: CN=9a69c3ed62434a5e6d8b6b181ac571957bd35e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:4d:60:d6:81:3b:d8:c4:a5:3f:79:f2:9c:
6b:46:bf:a4:97:80:06:de:c7:d9:07:d0:45:50:91:
7e:4e:bd:02:59:d1:8d:36:91:ef:23:67:ca:fe:48:
d4:ed:89:7a:36:4e:45:1e:79:3b:65:ea:b9:90:f1:
31:5e:d4:77:57:38:a4:a6:7f:f9:fe:72:59:e9:0a:
89:2e:64:ff:29:63:0e:6b:d6:fc:dc:bb:6d:b6:1d:
b0:2b:3d:7f:aa:71:ee:14:a3:4a:ea:f7:b8:7d:17:
e0:4e:ca:f3:fc:6d:ba:80:76:f5:3c:be:cd:a6:8c:
3d:4b:96:3a:7a:88:c8:21:48:35:c2:4b:d8:86:4c:
19:4a:33:c8:5d:fc:9c:2b:43:4d:9f:cb:60:43:15:
46:3e:3e:3e:d0:c6:6f:da:51:20:ae:dd:fe:8f:39:
a2:44:91:08:a7:d3:bc:ea:d4:9c:4d:67:00:f2:69:
d3:14:5f:82:13:15:a4:3c:7e:b5:2b:28:ca:02:06:
35:06:33:d2:67:e4:45:d8:2e:03:c9:07:c4:b8:45:
b0:19:7e:bc:cd:61:1b:4c:4d:cc:87:ce:25:a2:9d:
34:8c:7f:ab:a3:31:72:c5:b2:34:5d:5f:4f:cd:ac:
80:3b:f8:77:97:fe:27:00:e8:4f:a5:8a:78:c5:1f:
17:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:69:C3:ED:62:43:4A:5E:6D:8B:6B:18:1A:C5:71:95:7B:D3:5E:5F
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e4:cb:ee:b3:57:33:60:46:97:29:21:a9:79:a1:a5:ae:5a:
ed:f9:67:6f:fb:19:08:c4:1c:11:de:bc:c9:18:69:7c:f6:d5:
d3:05:49:7c:fe:be:d5:09:e7:be:83:6c:b5:07:ef:b3:8f:e1:
f9:2a:30:33:27:cf:d9:12:84:41:68:80:87:b1:ee:ee:2b:b5:
55:a9:bf:07:84:85:6d:68:fc:95:4a:55:de:e5:6f:ea:1d:df:
dc:3e:7e:5e:b0:16:af:36:b9:2b:40:41:92:28:75:82:36:13:
c7:ce:66:73:93:b4:fa:c8:06:a9:74:ea:e0:e1:30:c5:07:87:
4a:a8:c6:a8:ca:d5:da:87:96:45:61:6e:80:fe:0e:42:0b:03:
68:0c:6b:a3:53:d6:31:9c:fb:49:06:ce:6a:2b:fc:0c:dc:71:
71:44:a5:84:3f:f5:62:85:81:53:18:89:de:18:b5:e7:99:7d:
37:72:47:69:b3:0c:a9:80:c3:87:94:87:59:24:72:91:0c:7d:
5b:41:04:88:58:2c:70:43:f2:71:60:6e:96:52:4c:65:a1:54:
58:2d:3a:76:b8:d9:4b:eb:f1:2a:e9:3d:6a:d8:c6:13:e3:50:
a7:34:b8:ab:46:ae:cb:93:c8:86:2d:1b:b6:ef:5c:f5:30:cf:
81:0b:00:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:44:44 2026 by rpki-client