
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
File: v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json)
Hash identifier: 8OmLmgKZFJlqnVlR+2JS+lq2v7ZE5PJl8JhSfyjmZqs=
Subject key identifier: 83:60:12:DC:66:25:59:FF:7E:02:97:24:C9:2B:30:55:55:C8:FA:2E
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 01A08A5532D8AA25F0CA38D4D2D2DCF6BF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
Manifest number: 1A61
Signing time: Thu 10 Sep 2026 08:00:34 +0000
Manifest this update: Thu 10 Sep 2026 08:00:34 +0000
Manifest next update: Fri 11 Sep 2026 08:00:34 +0000
Files and hashes: 1: 2JAGeWqOz-z8FVKdPCxyLtHJNFA.roa (hash: +TySuOsOtYESlmt3r8OIGn1Nao4rCD0nAMni4cCzhG0=)
2: 37plEvr9_SAxpS24SOyNrKA9Ebo.roa (hash: T+3X8+kwm0mxKJkDFOwSTGKX5y/yChg7gIfBo7o4fzc=)
3: 4v2abVtxmKK1EfY1UKsh5vBwTBQ.roa (hash: Fs7Ab7yQf/ulu1DAd1ofgpYjehocmFGlxjUMdJ2h/+Y=)
4: 6FvTo5bRSodTC6FDiz2fehPBQHE.roa (hash: apDjsNYn3O+BU+7M5QZsfrZaIB7/OL7UKbfG6C5NerE=)
5: 9KcHIAUvzuR2GWge4D-VK2067f8.roa (hash: 9sijw09CpBSxcD1XyR49IxKSXJ+lbUtfOT6XCsfhPs4=)
6: B8mKcjnkQ06bQ0cYOYl4NuSVaMg.roa (hash: BHHwvopeV4L0Tgx1rARSKD5k/JLb/fI5L/vuVF66caI=)
7: BmKkxsvsllYGRv2VQUx8x8IPybM.roa (hash: iJVvCwQgSkbFGgNZWYbEzkgvbnxvQYXvysN7fV/Jo/I=)
8: CTkFnxq5k5gkKBOyHIjTnJxEA10.roa (hash: wNOA1anlJOJNxwL/khfQbYI7GWefAhmxsi5L1GTuKvA=)
9: CybUaoE-1zIBrxVRyCGND427ieM.roa (hash: 8GMC+ouN1TxZrZlKa6hwbH6dJmnjXnGYbHSveCF/7PM=)
10: ELqztzBTOVJ9TbgArZg2cCQeUqs.roa (hash: RpN+biF12RBn9jYvgP/g7LA1mBZiYaf6GKLjllO7nRY=)
11: JO5erv-vSOU_O-xUynzRSVbHmIc.roa (hash: zMiR3ptMJOgOIdKG+IIwNcZj+cGNLnGMV7wyCQljD4s=)
12: JXnrULMb6DsHyM2cbpC7FtDo9UY.roa (hash: iamRHWkLnsJiPb+n+IZVDqFiRKag4o4LNxuZZzmL0jQ=)
13: Jb979-aOtFrxIQewqtQtN3rvkPY.roa (hash: h5kBwpidUiteAllQX66DeU4MAx24NppeXa8u24NM7iI=)
14: SybLZ24hhMiBkVFRqMhgG4Tt_So.roa (hash: jdIOIL7oBwjwXGbHbND2Uo+qRIMM4Rdpr2383Sxr5BI=)
15: TEEJpugeYt1F43E2tJGuUV3FeZA.roa (hash: DLdME2cAIv/rSNCUPiFiPYf01huYXXEj3+nEaRucgYU=)
16: Tg7LpYV7I-GpxinThcktcQRnm_4.roa (hash: BbXoN3AQWQv407qJGvIy6QX/6IL8zec6zQB0QjsD6HA=)
17: ZPlBlPD-W-maIRDabAoyZWrxupE.roa (hash: MQ/ql1GxKXsn5YKKa+q3cWZtrV1Ms5Llr3f8Hh6BGNE=)
18: c9_fZRRZyW0XDy9Nuj5gaWSKFjw.roa (hash: 1Hs4IJDmnuMEMdz/1IBBL0atJ2FMVY2hg6chmbt42Mo=)
19: lUbooQJTqUPsGNWs9whSoRmQ9io.roa (hash: kluWa3I7Ato5aw2LG6KL/4iV6N2sUDy3GUsBbZKsEa8=)
20: mhK9zCgXdFlII0XrtCsgCaL9xjI.roa (hash: hSBJb7L+mvFAKQjClhKXrHgKgsxf+0/Ah1GNpCqTJNQ=)
21: sMNPbaJ2swpQDptjsmEdLRBAjsE.roa (hash: wMrNQ1Dt9RdtalTcVqalUbl+Cb5VgC4Yw+MpJfT4roY=)
22: sWFQ2639y5fQaDmU5ThRk6YSWFs.roa (hash: YXKPoBXjKE1eqIFJiy/DtB2fJyWSkDcytdS8/Lx36Lc=)
23: ul8RfOvZQFi7b7h3CYZZMyB1Thc.roa (hash: ftj7d2qkg7awZuZD1JzEyU8qjVc4i/LwIGNmp8+f9gY=)
24: v1XAMryHcbVYBLXiFz1wOW3tUKk.roa (hash: JN1atA5xt1OyKxkpHh4rNxtPiXKSK2GbqwVySmKSgl0=)
25: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: N1UtP5h7q+mn4KyFriBADzNUDybSHD88LkcVswUd1oA=)
26: x0heqVIS4ldbm4VvDuHpvjwdG18.roa (hash: Q0/M1s9b+ez//kkSZOV821TfmbgQGcZ8JApzRiFz1/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:32:d8:aa:25:f0:ca:38:d4:d2:d2:dc:f6:bf:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Sep 10 08:00:34 2026 GMT
Not After : Sep 11 08:00:34 2026 GMT
Subject: CN=836012dc662559ff7e029724c92b305555c8fa2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:0a:b1:c3:b3:4c:d7:df:b4:50:41:9f:8f:
a7:d6:c4:32:7a:f4:d5:88:c7:11:8f:b0:ba:13:64:
fd:59:e2:f9:8f:85:58:57:3a:30:eb:12:67:79:fb:
7a:f5:aa:c9:fb:0c:6a:67:bb:90:41:6a:cd:b7:c3:
07:46:1a:97:da:3a:d1:e0:a7:79:76:a2:ef:06:11:
4e:47:15:9d:65:09:0b:55:97:11:e5:dd:62:00:86:
fc:c2:ac:07:26:04:60:56:f1:a9:7d:b6:9d:61:8e:
2f:18:54:36:86:60:24:95:ec:b8:e5:a5:3f:33:c0:
04:8c:0c:77:7d:9a:82:72:19:33:fe:3b:bc:19:1e:
80:78:54:6e:9d:58:71:d9:55:17:77:c0:30:ed:d3:
3e:7c:ee:ca:bd:22:af:10:49:1d:43:c2:41:68:a0:
62:78:3f:23:0a:73:b0:08:6c:e7:0b:53:eb:2c:20:
7a:12:12:f8:f5:d5:18:a0:fd:2c:41:5f:e6:3d:27:
20:5b:a3:bd:ef:d8:d5:4b:3c:75:d2:83:aa:c5:9c:
92:14:a1:cc:19:9c:c4:9c:e2:33:05:16:b2:65:98:
e1:a7:a3:15:e8:a9:82:4a:1c:3f:e6:3c:26:61:7a:
1a:77:39:5f:f7:45:ef:71:9f:43:13:c4:17:73:4a:
83:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:60:12:DC:66:25:59:FF:7E:02:97:24:C9:2B:30:55:55:C8:FA:2E
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:81:e4:f3:2f:a7:5c:b8:33:95:f1:05:6f:fd:2c:35:0b:50:
dd:b3:7a:8c:b0:cf:f1:f2:a6:be:22:2c:03:74:c4:b4:aa:54:
d5:3a:46:3e:e8:93:ed:5d:8c:3c:d8:69:18:b7:89:ac:16:d0:
40:bd:79:00:9d:23:99:a7:76:f3:8a:14:00:9f:4d:d2:62:40:
e9:b1:99:ee:69:19:a1:b4:65:45:35:83:25:6c:f8:54:b0:3d:
d4:58:d9:a6:d2:6e:04:03:98:ff:8e:de:a9:ad:b0:66:76:f6:
e0:f5:a3:4f:cd:18:c9:a8:d9:b8:39:28:e5:45:c8:ee:c4:b6:
3a:79:30:20:c9:d9:a1:ed:ac:79:78:10:b6:ce:d4:48:88:70:
cb:67:c1:29:a6:c1:24:b7:84:53:11:85:00:9b:1d:24:16:1c:
0b:bb:09:02:82:30:2b:14:cd:0d:53:35:57:b7:a2:41:1f:29:
fa:84:5f:41:46:a7:11:f8:36:3c:85:11:ca:86:00:97:55:32:
0e:dc:22:71:1d:a4:5f:2e:90:38:02:e0:d5:40:58:78:9e:87:
56:ee:bd:df:fb:ee:2a:65:79:db:d9:96:1d:b0:bd:e5:bf:8d:
97:9d:0a:00:68:79:e3:d9:1f:80:89:a8:86:cb:d9:11:ca:d7:
8b:68:e9:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKVTLYqiXwyjjU0tLc9r8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5
ZDQyODgwHhcNMjYwOTEwMDgwMDM0WhcNMjYwOTExMDgwMDM0WjAzMTEwLwYDVQQD
Eyg4MzYwMTJkYzY2MjU1OWZmN2UwMjk3MjRjOTJiMzA1NTU1YzhmYTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFEKscOzTNfftFBBn4+n1sQyevTV
iMcRj7C6E2T9WeL5j4VYVzow6xJneft69arJ+wxqZ7uQQWrNt8MHRhqX2jrR4Kd5
dqLvBhFORxWdZQkLVZcR5d1iAIb8wqwHJgRgVvGpfbadYY4vGFQ2hmAkley45aU/
M8AEjAx3fZqCchkz/ju8GR6AeFRunVhx2VUXd8Aw7dM+fO7KvSKvEEkdQ8JBaKBi
eD8jCnOwCGznC1PrLCB6EhL49dUYoP0sQV/mPScgW6O979jVSzx10oOqxZySFKHM
GZzEnOIzBRayZZjhp6MV6KmCShw/5jwmYXoadzlf90XvcZ9DE8QXc0qDFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINgEtxmJVn/fgKXJMkrMFVVyPouMB8GA1UdIwQY
MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It
ZWNjNDliZGMyYWQ4LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4
LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoHk8y+n
XLgzlfEFb/0sNQtQ3bN6jLDP8fKmviIsA3TEtKpU1TpGPuiT7V2MPNhpGLeJrBbQ
QL15AJ0jmad284oUAJ9N0mJA6bGZ7mkZobRlRTWDJWz4VLA91FjZptJuBAOY/47e
qa2wZnb24PWjT80YyajZuDko5UXI7sS2OnkwIMnZoe2seXgQts7USIhwy2fBKabB
JLeEUxGFAJsdJBYcC7sJAoIwKxTNDVM1V7eiQR8p+oRfQUanEfg2PIURyoYAl1Uy
DtwicR2kXy6QOALg1UBYeJ6HVu693/vuKmV529mWHbC95b+Nl50KAGh549kfgImo
hsvZEcrXi2jp4Q==
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:24:16 2026 by rpki-client