
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
File: 00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft (raw, json)
Hash identifier: cxVU2Cf9bjyun5x4rUqfKZuXyJDw9kRksSCQLUTTHPM=
Subject key identifier: 01:B0:7E:B5:6E:0C:48:83:B9:7F:A3:DD:EE:F0:62:83:AA:80:62:BD
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 01A02A6AECB0116B357EBA39F424B64FA7CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
Manifest number: 94
Signing time: Sat 22 Aug 2026 17:00:45 +0000
Manifest this update: Sat 22 Aug 2026 17:00:45 +0000
Manifest next update: Sun 23 Aug 2026 17:00:45 +0000
Files and hashes: 1: 00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl (hash: 6KBMsfRESTmMTHI/gXr/cFnVTPrkV79vDJH1WeH/IWQ=)
2: 8SSXBbJAmh2M2VamgGPNaaqs-GY.roa (hash: SNkG8Uti9KHLJ03Y/sW0/JYA5jvGANqmsDmL+13iGPs=)
3: 8bHzMmkjwt_yLAGYCvMNqkW2FzA.roa (hash: 8QaTUHJyXu6B1zsCrAVs6lorOrcroP37WqlcGmictGo=)
4: DPpak8RgDkxLfzni-EWhrE5FCNE.roa (hash: jo10qFPskJDWOQaAr+nqpNhpAqLODkfkRNWEJwo+MnE=)
5: KjzF_07LNXsxnLlTwbx1qy0Nf70.roa (hash: ZSx0htaVrCbITx9CYSvyBpcrxLFJ5FXPjTi+sdFipU8=)
6: OjUriyX22SftvbuImRgRsgq800I.roa (hash: FZUR12pl5mPO1tU55PwRpuebEaECFWzXN6MydVjjchA=)
7: UOXA4oU0cYn3rZAwOMaEWtcF4QY.roa (hash: DU4w5RjcNeNPeF61/164VHqPXEXFyBssEnx5YQVlwVs=)
8: UUDuiwdwXBJkRQyOZXL8jNnUvh4.roa (hash: 2E9XBsXGcCTsZ+IIciA4F+MOAPni9HkOnxgq1kncY7k=)
9: Yt82kfMh4tTFldct4S8Y42V4ySQ.roa (hash: jjNY9yqyt1O9yRK9Zvv5unUVKQa7w6A3b2RNVpEK9H8=)
10: klZdZ8xiyHGKEf_gfoS4Gl7S3V0.roa (hash: PnFskfREpmwodvBbY9tSgM475PNufEhEVsxknIOHmG8=)
11: qsvSYt_EBTj0D4qt2QoEMH74YEw.roa (hash: xOazcLY9pAeAKwSCYmBAkPRN6rzWqpKY798GdNgA6FA=)
12: sUn-f-qK9eXwNyOmR3mfe7EM8No.roa (hash: MGpupH/5gZWb0QJDQlscqVzzSmxpIo72s/B8/Jhn89g=)
13: x_QvBoOIA6vBeIKgjoFBOXwgqa0.roa (hash: YumGg/rjGkeZiLzIodCSXvp8gqP2A52SQH7tSRPZWGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2a:6a:ec:b0:11:6b:35:7e:ba:39:f4:24:b6:4f:a7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Aug 22 17:00:45 2026 GMT
Not After : Aug 23 17:00:45 2026 GMT
Subject: CN=01b07eb56e0c4883b97fa3ddeef06283aa8062bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fd:73:f4:c5:74:6d:17:85:bc:36:03:6f:2e:
46:31:1d:e8:da:83:a5:33:45:aa:fd:75:93:71:5b:
88:8f:dc:d8:ec:73:07:2d:5b:f1:7b:78:8c:d5:0f:
70:4b:23:39:cc:fa:99:2c:02:02:e7:b9:3d:6e:eb:
56:c4:27:13:1a:ec:5a:88:fb:fd:9a:4d:9c:00:6f:
11:96:e4:a5:d4:ea:25:57:b0:87:a8:f7:44:9a:b2:
df:80:61:60:b3:9c:69:f2:64:b1:af:1d:0a:c8:0d:
2e:99:8a:2a:49:f2:2a:52:83:5a:52:70:8c:2a:16:
24:76:4c:65:09:53:3c:0b:db:3c:aa:82:33:b2:00:
16:08:ca:9e:58:38:59:a8:49:4e:f7:3d:be:76:0a:
f1:30:7f:06:02:96:84:1b:f1:ef:7c:43:97:34:ca:
d3:f2:2f:96:8d:d1:d7:f7:31:86:bc:ee:ec:9a:47:
a6:f7:5d:1c:aa:bd:ed:63:ef:68:5e:31:2c:14:a3:
af:85:a0:a6:d3:1b:45:89:83:66:f7:03:40:b4:b7:
81:54:3f:24:9f:88:98:ab:c9:6a:37:73:b0:93:68:
2f:b5:e7:ee:d7:6f:36:7f:0a:ad:03:41:66:7d:bd:
8c:bb:26:89:d4:c8:9a:80:a0:e1:15:f4:d0:c5:b2:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B0:7E:B5:6E:0C:48:83:B9:7F:A3:DD:EE:F0:62:83:AA:80:62:BD
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f1:54:56:f2:8d:4c:86:da:10:6b:e4:b9:35:5a:dc:c0:f8:
39:23:0b:ba:5a:5b:57:30:a8:6f:73:25:ed:d7:28:06:31:48:
b9:1e:46:18:c3:fe:98:3e:f4:70:96:76:bc:91:39:78:cf:69:
73:d5:fc:f3:38:5b:82:87:4b:40:01:ba:54:ef:17:81:56:a5:
0a:4f:9f:57:e5:f5:aa:4e:c9:fa:4e:51:39:67:d8:4a:5c:bc:
a1:ee:6e:95:d5:89:1c:2c:cc:37:98:49:a3:a5:81:2d:78:eb:
a8:d5:5b:cd:ae:9d:3c:46:24:59:f4:1a:ab:70:4a:03:6b:4e:
a6:2a:62:b5:22:e4:82:83:b8:3c:e2:2a:67:9f:95:07:29:a4:
e7:0c:c1:30:b6:78:26:3c:61:71:6f:01:5b:7d:a7:4a:26:1a:
a8:b8:d4:3c:d2:6d:cc:f1:cd:6f:c0:3b:7e:c1:d0:35:02:98:
aa:17:9d:33:5b:82:db:58:6d:e6:66:0c:e0:1c:d1:e8:5d:12:
38:ef:db:72:98:8d:2b:dd:e0:8c:54:66:7c:6a:cc:fa:40:eb:
c5:4c:78:d4:b6:3f:15:7f:ef:69:bd:45:2a:c6:f7:a6:63:63:
4f:4d:be:d8:b6:fb:9f:2a:19:e6:6d:72:fa:b7:eb:cb:98:f1:
99:3a:78:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAqauywEWs1fro59CS2T6fOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDQ1NmUxMWI3N2JmMmU0ODIwZGZiNjk1NDFkNGJlMGVh
OTRlN2MwHhcNMjYwODIyMTcwMDQ1WhcNMjYwODIzMTcwMDQ1WjAzMTEwLwYDVQQD
EygwMWIwN2ViNTZlMGM0ODgzYjk3ZmEzZGRlZWYwNjI4M2FhODA2MmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf1z9MV0bReFvDYDby5GMR3o2oOl
M0Wq/XWTcVuIj9zY7HMHLVvxe3iM1Q9wSyM5zPqZLAIC57k9butWxCcTGuxaiPv9
mk2cAG8RluSl1OolV7CHqPdEmrLfgGFgs5xp8mSxrx0KyA0umYoqSfIqUoNaUnCM
KhYkdkxlCVM8C9s8qoIzsgAWCMqeWDhZqElO9z2+dgrxMH8GApaEG/HvfEOXNMrT
8i+WjdHX9zGGvO7smkem910cqr3tY+9oXjEsFKOvhaCm0xtFiYNm9wNAtLeBVD8k
n4iYq8lqN3Owk2gvtefu1282fwqtA0Fmfb2MuyaJ1MiagKDhFfTQxbIMawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGwfrVuDEiDuX+j3e7wYoOqgGK9MB8GA1UdIwQY
MBaAFNNEVuEbd78uSCDftpVB1L4OqU58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBSVzRSdDN2eTVJSU4tMmxVSFV2ZzZwVG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt
YWU1MDI3MzY4MWE3LzEvMDBSVzRSdDN2eTVJSU4tMmxVSFV2ZzZwVG53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3
LzEvMDBSVzRSdDN2eTVJSU4tMmxVSFV2ZzZwVG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPFUVvKN
TIbaEGvkuTVa3MD4OSMLulpbVzCob3Ml7dcoBjFIuR5GGMP+mD70cJZ2vJE5eM9p
c9X88zhbgodLQAG6VO8XgValCk+fV+X1qk7J+k5ROWfYSly8oe5uldWJHCzMN5hJ
o6WBLXjrqNVbza6dPEYkWfQaq3BKA2tOpipitSLkgoO4POIqZ5+VBymk5wzBMLZ4
JjxhcW8BW32nSiYaqLjUPNJtzPHNb8A7fsHQNQKYqhedM1uC21ht5mYM4BzR6F0S
OO/bcpiNK93gjFRmfGrM+kDrxUx41LY/FX/vab1FKsb3pmNjT02+2Lb7nyoZ5m1y
+rfry5jxmTp4Aw==
-----END CERTIFICATE-----
Generated at Sun Aug 23 00:19:41 2026 by rpki-client