
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json)
Hash identifier: mZEPAhYzow1rAc3sVR+aAgbo03VrOGi/dBUG1+6Ip4E=
Subject key identifier: 38:2E:0E:81:B7:2E:81:A9:5A:1F:7C:1D:4B:95:6F:8B:B1:64:47:0F
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 01A088D58444286CD0EBFCA4D864B1BEC743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
Manifest number: 1A5E
Signing time: Thu 10 Sep 2026 01:01:29 +0000
Manifest this update: Thu 10 Sep 2026 01:01:29 +0000
Manifest next update: Fri 11 Sep 2026 01:01:29 +0000
Files and hashes: 1: 3_hTG1VNNECdXWtHf_y7Mh1I0-I.roa (hash: WyvWKO62KaRIQphftD3eJM5VgxI16MZECLiFVVDTedM=)
2: 69GOpdzwlIydOctwPF6_V449w8Q.roa (hash: oepL/u5Uo8sKbDIefmYypO+csLtLFrgJjxhbnTvWVCs=)
3: AuHoEVrnl-1LwAXvi9txhNUCs-o.roa (hash: LebcNjlhptCuSycNyI8Gq5rf+emsaNgyhh5yVvxRTjk=)
4: FAEbHhLRRaDRbR_4ejpb1QHrGsk.roa (hash: EK6RNwivTo0ew9QPDVu62GQI3mFybABhS1y9MjMOYEw=)
5: Haj6URZpFS-mdAGIc4wmMOS4lM0.roa (hash: EtXPHXKoqXDb9Vz60AGE1NwlxpAVrwFBgi6KRxclp1c=)
6: Pot9sGjQ09uE0QJkmshSlnxcDEs.roa (hash: fPrzEPKp0VS5KGwAOadvcVPYu9gvZcvC3Al0vJwF1C8=)
7: R1ACp4N7msvtcVocj7URglX5xNE.roa (hash: s7Zox0ImjXt1GDu6UZLCgSH6/GocPu93iShhVHA6YQw=)
8: bniESOAwEJ3WL8_KzHYZ3-fFUKE.roa (hash: t+surPIg+2rXPUx8NHZjclxfI1SSYNmZtqZYBFqewLY=)
9: n2c2A4aLrP9Nmm7zFRLn0TmvRwE.roa (hash: qKmltpUjZcaLW2FolvCbNT5Sz4SxQTiZwUNd7tmk66A=)
10: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: /VVgZAtAUrh6X4FbRZQM7LYEl7YUAC5IxiJGbFe1OPw=)
11: tzVYq6Bsso_YdRE_X-B1xHv2bJc.roa (hash: LMTBBvAqP/wFQU0BQSC3lLd1n7Ijck49vWZwgtvAiGs=)
12: yg9CvK7YsVgoTv4cPVX2srKo0uU.roa (hash: k87y5f3qtoVggaVvKGB+/23YD6IKa8AY5DqudY2fvWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 01:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:d5:84:44:28:6c:d0:eb:fc:a4:d8:64:b1:be:c7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: Sep 10 01:01:29 2026 GMT
Not After : Sep 11 01:01:29 2026 GMT
Subject: CN=382e0e81b72e81a95a1f7c1d4b956f8bb164470f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0b:b5:7a:87:e0:02:2f:02:16:54:51:08:45:
3c:09:19:8b:fd:68:0f:80:48:de:e2:00:fb:bb:62:
c5:e9:62:1a:ed:63:ab:1c:d5:a9:3e:f3:88:08:19:
67:30:56:38:08:99:1b:e4:14:6c:57:41:46:7a:e7:
88:39:c5:cd:68:e6:f3:d7:34:3e:5c:da:8b:a2:89:
12:de:33:2b:6f:56:a2:95:28:cc:8b:83:84:33:2d:
3a:21:bd:8c:eb:85:8b:2d:59:83:dc:97:43:a6:5f:
35:9d:53:d1:e4:2d:e3:46:8a:6a:2e:ad:87:07:10:
04:97:53:0d:04:06:98:5a:24:89:1c:29:6a:a1:e3:
70:ad:00:10:b5:92:65:82:32:92:a5:6e:bf:2c:db:
ef:99:43:b0:ad:fd:7b:35:a2:97:8e:55:34:be:70:
04:b5:34:f5:36:18:c4:0b:cd:cb:04:a7:d3:70:59:
00:b0:2c:fb:7f:96:e4:73:b5:bb:28:b6:92:96:9c:
18:38:3e:06:c0:aa:2d:7b:5b:cf:96:43:21:24:b3:
d0:be:cb:af:47:db:f6:37:13:07:8d:57:d7:8a:19:
7d:bd:4c:28:c0:66:94:24:52:27:2a:05:a4:8f:21:
10:b6:8b:63:43:e5:cc:46:e7:08:94:59:a5:3d:67:
cd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2E:0E:81:B7:2E:81:A9:5A:1F:7C:1D:4B:95:6F:8B:B1:64:47:0F
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ba:b8:b4:09:71:83:2f:46:bb:b0:b5:96:1d:23:c8:92:a7:
0d:2c:8f:dc:19:5f:db:69:06:c2:69:cb:19:ec:b7:ee:90:45:
1a:f0:7e:ef:01:b3:d8:d8:e7:69:6e:77:aa:d1:8b:ff:8c:f6:
ba:bb:0e:7f:97:66:f7:f4:fb:14:25:6e:68:dd:50:28:57:39:
f9:f0:b5:06:c0:60:dc:d8:9b:50:0d:ca:fa:2b:a9:94:6e:96:
e7:56:1a:b3:7e:ea:26:c0:ea:d7:c7:09:3f:85:26:7f:1b:79:
45:82:97:21:f5:9e:a4:49:e4:6a:6e:5b:63:38:47:9a:ac:60:
0f:29:89:e9:8b:c6:1f:ab:13:74:70:30:9d:a4:17:0e:0f:0d:
0d:36:9c:8a:6a:d3:d4:de:c8:17:fb:7d:c7:81:d7:27:c1:d4:
2f:bb:34:28:e3:a2:c0:1b:af:f5:d2:df:6c:e9:4c:01:25:71:
ab:b4:dd:24:98:53:ba:56:f9:60:1d:52:73:60:3e:d5:45:aa:
6e:68:4f:20:65:8a:88:7c:02:fe:f0:f9:46:7c:86:12:de:35:
65:86:ae:e9:83:80:68:37:3e:b4:b3:68:b2:3d:15:37:d6:3f:
dd:09:71:51:2d:93:cc:be:27:97:00:c6:90:d2:dc:6a:fe:e9:
f2:35:d2:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCI1YREKGzQ6/yk2GSxvsdDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj
MGRmYWMwHhcNMjYwOTEwMDEwMTI5WhcNMjYwOTExMDEwMTI5WjAzMTEwLwYDVQQD
EygzODJlMGU4MWI3MmU4MWE5NWExZjdjMWQ0Yjk1NmY4YmIxNjQ0NzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQu1eofgAi8CFlRRCEU8CRmL/WgP
gEje4gD7u2LF6WIa7WOrHNWpPvOICBlnMFY4CJkb5BRsV0FGeueIOcXNaObz1zQ+
XNqLookS3jMrb1ailSjMi4OEMy06Ib2M64WLLVmD3JdDpl81nVPR5C3jRopqLq2H
BxAEl1MNBAaYWiSJHClqoeNwrQAQtZJlgjKSpW6/LNvvmUOwrf17NaKXjlU0vnAE
tTT1NhjEC83LBKfTcFkAsCz7f5bkc7W7KLaSlpwYOD4GwKote1vPlkMhJLPQvsuv
R9v2NxMHjVfXihl9vUwowGaUJFInKgWkjyEQtotjQ+XMRucIlFmlPWfNKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDguDoG3LoGpWh98HUuVb4uxZEcPMB8GA1UdIwQY
MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt
N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh
LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLq4tAlx
gy9Gu7C1lh0jyJKnDSyP3Blf22kGwmnLGey37pBFGvB+7wGz2NjnaW53qtGL/4z2
ursOf5dm9/T7FCVuaN1QKFc5+fC1BsBg3NibUA3K+iuplG6W51Yas37qJsDq18cJ
P4Umfxt5RYKXIfWepEnkam5bYzhHmqxgDymJ6YvGH6sTdHAwnaQXDg8NDTacimrT
1N7IF/t9x4HXJ8HUL7s0KOOiwBuv9dLfbOlMASVxq7TdJJhTulb5YB1Sc2A+1UWq
bmhPIGWKiHwC/vD5RnyGEt41ZYau6YOAaDc+tLNosj0VN9Y/3QlxUS2TzL4nlwDG
kNLcav7p8jXSZQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 12:01:44 2026 by rpki-client