
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
File: bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json)
Hash identifier: v4n9q94gHZ0bSOfzM73rbkHbk90bDK2PoxpcYTHdub0=
Subject key identifier: E4:8D:0C:FB:32:2D:F1:16:82:2A:2E:CC:34:21:AF:68:A4:66:70:E1
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01A0FB3419A8A8F11120E4CC53B4B6E9DAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
Manifest number: 15F0
Signing time: Fri 02 Oct 2026 06:01:30 +0000
Manifest this update: Fri 02 Oct 2026 06:01:30 +0000
Manifest next update: Sat 03 Oct 2026 06:01:30 +0000
Files and hashes: 1: 0H6OsPKc9Cn6xVwU-sMeX-aEEII.roa (hash: xwsVWakw+x28jhWY0Coi0m/7f/xKAGYT9zdsjIu1sdk=)
2: 4ZyYrxdMVPNrHL63nSmSHm7BJig.roa (hash: tkJ2qyLJeQtQKbXkAggvDNTWa3p6+Xzk5AaNc5VgTbY=)
3: 5Tkq8wpHcpeGz-f1egqNaUaEly4.roa (hash: UEQegGsLWicDIfmpSCpj13D1XKHb5j/U85IT8bxJWfc=)
4: CGlwaarm8XPHSfd_sN3ULyqaKUg.roa (hash: WkoSqWTtOvdRK1F0sTVTQcYIqle5HqEUONAxF4fdu+0=)
5: DWJLSkrTBQVA1mKPBHJjQ0UYwUo.roa (hash: YlvXpp8OBX054sUjgr0G/E8Fj1hyn6n9+pikSmik/yw=)
6: GT1TKA4rV1OP_xJGzsCFQYpWhGg.roa (hash: HG/pHQ1DuBKD68MX3r3/b2+tAgjgwKx/kNjIgxZtYug=)
7: K-Snqx_g_sH4OkoyUvNFtlxX6dY.roa (hash: UtI+N3jVMIi1MfArZauCcNJH+3Px9d37UixMPUZOoTo=)
8: a9jE-TX9k6OHwBgKQbFeNgu9t74.roa (hash: HbwU/n/E/rQdZGHVXYtZfsfswxUEspontCNM306GAQg=)
9: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: WpCSsgHWLzK+vB4B5DTWTxkGKEajd+2ncek3AlVGThE=)
10: nr9k1CgFTONdLf6R9QxhHnNqn0s.roa (hash: p4nvZA3enPe2lQ5RM8LvTtTA0KKajVqsnKOLaWopgI8=)
11: tdnQohzHZr8uW9f2J4849lgRnNs.roa (hash: R/F7DsXRI6l5OyjK0XOgTrIjrxtiZQtQIcujVHWYsus=)
12: uLh37d-CZyi_CuBp_4qkf4KKeHY.roa (hash: 4Y8qT4eDZwwuj7P5bcinlRoVnttb6kb3uO1Y02tcU4g=)
13: wFfaatQDGVsMpN2fH-zvzPesV3g.roa (hash: 3ZM6HdXkNcqvPo4Y/liQTynJdayCJYTJLnDaTRRsnVI=)
14: wLx0CVIubWTYoCjwsL2Po__MQUM.roa (hash: F8k0Jt+fxP76purtLa3GdhBDmrpeFIZqPR/m/8/wT2Y=)
15: x5Qwhv7R0VHh2__9bUe3MfdsZS8.roa (hash: DGtjPXc9IfmH8Lv2uA77Pdq/vDMpd2Jc/ZwXsO4TcZ0=)
16: yz9kj_FWQhCmpskN-2MCDdY5uBw.roa (hash: cgLL1yo6vIv8E9t7kQH/ixztHSmNjb1gmVnvmFzrVfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:34:19:a8:a8:f1:11:20:e4:cc:53:b4:b6:e9:da:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Oct 2 06:01:30 2026 GMT
Not After : Oct 3 06:01:30 2026 GMT
Subject: CN=e48d0cfb322df116822a2ecc3421af68a46670e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d5:36:05:b2:e5:0f:ac:21:00:a8:10:b9:b4:
2a:a5:86:8f:c2:f5:01:a6:a0:e0:cb:21:be:ca:53:
27:48:70:ff:6c:93:db:d2:b5:d2:36:af:09:d4:8b:
50:55:ca:5c:0c:1c:0c:36:20:80:9e:16:f8:b9:33:
37:74:cb:3f:bd:13:1f:0d:3f:a1:87:af:da:21:8a:
a5:bb:47:9c:c2:31:a6:23:7a:4e:6d:8a:4e:6b:30:
94:cd:85:33:81:ef:f1:fa:f1:87:26:b2:9d:ba:e4:
95:a2:e1:0c:cc:c7:58:b8:35:a6:0f:3e:cf:36:b4:
67:8f:27:4c:5e:27:49:da:5b:b3:ce:d9:c4:7d:93:
03:c7:74:e3:3b:01:25:e6:7d:cd:44:75:03:8e:8a:
50:91:50:84:1a:33:5a:c6:a8:ef:42:e7:62:7d:21:
11:00:83:6d:df:a2:27:12:00:0f:3d:3e:5d:a7:72:
d4:68:e5:d4:b2:49:25:86:b7:2b:de:f0:74:e2:06:
3a:84:dd:09:3a:3f:bf:bc:a1:05:78:15:80:3e:1a:
07:f8:3d:12:39:6e:92:54:1d:d5:6a:71:fe:39:63:
47:1e:ad:ce:00:ae:24:5c:ee:57:ae:0a:dc:ea:3e:
0c:ae:41:20:6a:7a:e4:97:8a:64:66:bb:57:ee:de:
bb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8D:0C:FB:32:2D:F1:16:82:2A:2E:CC:34:21:AF:68:A4:66:70:E1
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:2c:a6:ab:bc:99:eb:0b:b4:c5:13:f8:ab:f3:e2:ce:72:09:
f8:8d:0b:7c:fa:9c:7e:37:44:18:ec:15:0c:66:dd:bd:4a:45:
c1:1e:b0:ad:89:bd:82:eb:63:2b:52:86:5b:b0:b8:62:38:48:
c0:8e:67:b7:de:f7:10:a8:d5:59:84:3e:4c:95:33:c8:7a:44:
06:f0:c9:d5:45:3b:fb:73:0e:df:05:e8:e5:73:83:79:04:b8:
96:56:a8:42:a9:43:bc:92:f1:d8:e8:33:36:b5:83:76:43:86:
fd:3a:58:96:6f:99:e9:86:33:f9:f0:b8:e0:63:19:9b:db:0e:
21:92:9b:31:cb:a9:ea:fc:f4:bf:63:54:23:42:36:51:4f:99:
c3:85:3a:9e:94:df:13:17:b9:a5:72:b0:1b:d3:fd:68:4b:43:
4f:a6:06:e0:98:b0:80:fc:fb:69:b5:c4:5c:3b:67:52:44:65:
7b:fc:61:b2:30:eb:72:17:35:e9:5c:c7:2f:53:d2:80:08:3a:
21:83:be:4e:3c:11:6e:ad:c2:9a:7c:9c:7c:19:50:a2:dc:fb:
a7:5c:21:1b:a0:37:c8:27:f1:9e:5a:9e:bf:bf:03:62:1e:4b:
1f:d0:84:fb:44:68:49:61:c7:91:e3:a7:88:92:3d:69:d5:99:
14:16:d1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 15:57:06 2026 by rpki-client