
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
File: ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft (raw, json)
Hash identifier: HDprGoNjN/2VlQjbmMFsB5ELSx13kTSus80k/ZlOV6Y=
Subject key identifier: E7:5B:5B:83:0C:6D:EB:5E:6E:AE:22:A4:2B:02:75:6B:84:49:F4:EA
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 01A16B6D04EAC6F044D34716D46D7F36038A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
Manifest number: 1AFA
Signing time: Sat 24 Oct 2026 01:01:09 +0000
Manifest this update: Sat 24 Oct 2026 01:01:09 +0000
Manifest next update: Sun 25 Oct 2026 01:01:09 +0000
Files and hashes: 1: 5dAVtaJIi1EXqqYU5USv7fZXPs4.roa (hash: F+ZaLmkSoDDXKvEZfC55Pqn2Kegitmab6UvzlFAoMLA=)
2: EYW0DPWxBVq8OkJlufsQTH29-zg.roa (hash: LYmKFSnt04HxJKJsThK8gfh7k7FUGUtbXQNPAEzqIUM=)
3: ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl (hash: +f41NayvSQmTRk65KSYSUZ0kk6VI6a1B7KCeSI5WKgQ=)
4: WyfVVVbupjvPxLzRmrpKaA7AkYw.roa (hash: 02QZajpOlAkNu8PwY46zt4fm5XsA4QV5bfhzU3rgZmo=)
5: Y_29QVsVJvHnxddFaQdcq2kyCOc.roa (hash: ycsC5DW4Lfa6OQ8J1BIx0zDPciZcjwI4JTfmbrMI8V0=)
6: _MW7W40W598GgASR5Eoa_4tP1ko.roa (hash: aru9WUwoYSO6XyN5TKKL7ZyhgIa+93XhWqRZBdE8/Ss=)
7: kyJQs5we30dtkYez5Z5lc7nb1uk.roa (hash: QYkWAPu1QeZJ7qVGGJyIAFdYbqAhnaEmDRslgqPIGEg=)
8: vkSBou13YVLJcpm4RzlvkM2VmEA.roa (hash: Yt5SBPreKEhsGRzUNTyivVfBSSg7gYCaurShg3S49zg=)
9: w66ZldWus98F7FLtFE_HfwzAVOw.roa (hash: dMhZ2iCHZg0KsJ/1R4eui0OO1+pgGYsJE5mhqZ9ftyc=)
10: yGko-YtBNaNvOP4tDs7GDUXg2eA.roa (hash: wSaHrBildo4ZcOo9cc+dzQPk/7VlKqTO3FnCX6x1CG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:6d:04:ea:c6:f0:44:d3:47:16:d4:6d:7f:36:03:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Oct 24 01:01:09 2026 GMT
Not After : Oct 25 01:01:09 2026 GMT
Subject: CN=e75b5b830c6deb5e6eae22a42b02756b8449f4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:f3:45:46:ca:32:7f:26:0d:88:36:d7:ab:
37:ee:92:05:61:4d:c3:14:47:b0:1a:76:e1:54:f7:
4a:9d:9f:9c:22:9a:fd:1a:e6:76:f1:f2:96:21:08:
ef:77:03:21:95:59:c4:c5:53:38:f9:ff:41:28:2c:
d9:f4:ce:4b:8f:af:d6:ae:6b:cb:52:62:8d:7a:0a:
58:5a:9d:9e:4d:49:e2:e8:e6:60:24:fc:26:52:10:
a3:38:5a:29:cd:69:9b:76:a1:df:3c:1b:ec:c7:d7:
45:bc:96:45:93:7d:31:bd:bf:c7:0c:e7:0a:3a:40:
ad:e6:64:1a:9c:b9:bb:c9:5c:be:f1:6f:d1:d5:ce:
b8:69:7a:62:23:64:ab:48:93:d2:3e:13:38:82:76:
bf:45:6b:ee:c0:f3:f5:6c:51:ab:b9:b0:16:26:9f:
9e:18:3a:18:e7:4d:7a:f5:38:94:d9:27:38:1d:34:
1c:09:7b:0d:e3:4e:4c:2e:95:ec:1e:e7:6c:3d:76:
10:01:76:fe:12:f8:5a:3a:1a:4f:25:49:63:2e:6e:
49:ac:80:de:26:37:ec:4d:31:e2:1c:ef:c9:b8:6c:
ab:b5:da:9e:09:2f:a4:b6:0f:9b:71:40:5f:2c:9c:
07:a7:e5:64:5c:5f:6d:87:72:9e:57:4b:47:35:dd:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5B:5B:83:0C:6D:EB:5E:6E:AE:22:A4:2B:02:75:6B:84:49:F4:EA
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:71:24:ac:f3:54:2f:76:c5:b9:ae:c1:e8:c8:54:67:00:4f:
53:02:1b:dd:27:b7:13:8a:34:d0:5e:3c:90:0b:9e:2d:2c:7e:
73:6a:37:20:d3:bf:44:35:29:2e:02:c3:e6:fa:5c:b2:52:34:
f4:0e:7a:b4:e3:72:5d:5c:8d:d5:14:9e:22:eb:7d:9a:de:79:
2e:79:bc:3d:3e:6c:66:65:65:64:2f:bc:2a:6f:47:ae:12:09:
48:0d:27:74:b1:b3:86:95:8a:4e:98:71:3f:3a:4c:46:3c:2a:
87:ac:8f:11:2e:f9:65:8b:9a:cb:b0:3d:19:72:8a:2c:73:a3:
cf:b0:f6:fc:db:56:9e:35:61:25:42:31:2d:31:d9:27:2c:45:
13:57:da:88:b8:c9:d1:d6:4d:7f:ef:4a:c9:e2:6c:58:20:37:
18:2a:b8:3e:38:88:63:58:f6:2b:d5:4a:39:70:3b:fc:40:63:
a3:0a:39:c9:be:7a:d2:16:72:e7:6e:35:0f:6b:fb:9b:32:6f:
59:96:79:5b:e7:c8:9f:1e:0e:e2:e3:37:cb:2c:33:b0:e8:e1:
df:da:6d:b4:65:c5:fa:53:7f:79:27:22:e6:d2:5e:fa:4d:3f:
74:81:e5:97:86:61:52:c0:98:91:b6:c5:2c:6b:13:8c:80:fe:
45:0c:af:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 07:40:42 2026 by rpki-client