
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
File: bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json)
Hash identifier: CX1rM5jdvHzXeYB8gwFjNQ1r8AFSt9x60ZO0tHAHefs=
Subject key identifier: D9:41:0F:EC:24:D4:70:47:73:82:2A:78:84:F8:78:43:8B:DC:55:80
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01A001DCA8A14238C738F57E3D664E6872D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
Manifest number: 156E
Signing time: Fri 14 Aug 2026 20:00:33 +0000
Manifest this update: Fri 14 Aug 2026 20:00:33 +0000
Manifest next update: Sat 15 Aug 2026 20:00:33 +0000
Files and hashes: 1: 0H6OsPKc9Cn6xVwU-sMeX-aEEII.roa (hash: xwsVWakw+x28jhWY0Coi0m/7f/xKAGYT9zdsjIu1sdk=)
2: 4ZyYrxdMVPNrHL63nSmSHm7BJig.roa (hash: tkJ2qyLJeQtQKbXkAggvDNTWa3p6+Xzk5AaNc5VgTbY=)
3: 5Tkq8wpHcpeGz-f1egqNaUaEly4.roa (hash: UEQegGsLWicDIfmpSCpj13D1XKHb5j/U85IT8bxJWfc=)
4: CGlwaarm8XPHSfd_sN3ULyqaKUg.roa (hash: WkoSqWTtOvdRK1F0sTVTQcYIqle5HqEUONAxF4fdu+0=)
5: DWJLSkrTBQVA1mKPBHJjQ0UYwUo.roa (hash: YlvXpp8OBX054sUjgr0G/E8Fj1hyn6n9+pikSmik/yw=)
6: K-Snqx_g_sH4OkoyUvNFtlxX6dY.roa (hash: UtI+N3jVMIi1MfArZauCcNJH+3Px9d37UixMPUZOoTo=)
7: a9jE-TX9k6OHwBgKQbFeNgu9t74.roa (hash: HbwU/n/E/rQdZGHVXYtZfsfswxUEspontCNM306GAQg=)
8: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: lB8YbuA4FKMrgH5d9t17b/p743r7BFpHADUxNAv8mF4=)
9: nr9k1CgFTONdLf6R9QxhHnNqn0s.roa (hash: p4nvZA3enPe2lQ5RM8LvTtTA0KKajVqsnKOLaWopgI8=)
10: tdnQohzHZr8uW9f2J4849lgRnNs.roa (hash: R/F7DsXRI6l5OyjK0XOgTrIjrxtiZQtQIcujVHWYsus=)
11: uLh37d-CZyi_CuBp_4qkf4KKeHY.roa (hash: 4Y8qT4eDZwwuj7P5bcinlRoVnttb6kb3uO1Y02tcU4g=)
12: wFfaatQDGVsMpN2fH-zvzPesV3g.roa (hash: 3ZM6HdXkNcqvPo4Y/liQTynJdayCJYTJLnDaTRRsnVI=)
13: wLx0CVIubWTYoCjwsL2Po__MQUM.roa (hash: F8k0Jt+fxP76purtLa3GdhBDmrpeFIZqPR/m/8/wT2Y=)
14: x5Qwhv7R0VHh2__9bUe3MfdsZS8.roa (hash: DGtjPXc9IfmH8Lv2uA77Pdq/vDMpd2Jc/ZwXsO4TcZ0=)
15: yz9kj_FWQhCmpskN-2MCDdY5uBw.roa (hash: cgLL1yo6vIv8E9t7kQH/ixztHSmNjb1gmVnvmFzrVfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:a8:a1:42:38:c7:38:f5:7e:3d:66:4e:68:72:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Aug 14 20:00:33 2026 GMT
Not After : Aug 15 20:00:33 2026 GMT
Subject: CN=d9410fec24d4704773822a7884f878438bdc5580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c2:8a:0f:9b:17:c6:e2:b5:0c:d6:1d:7f:e7:
6e:41:48:e3:b2:05:f1:8d:90:86:c7:8a:8d:4f:1b:
86:65:3a:09:56:5e:9e:d3:ea:ae:26:20:df:6f:67:
01:97:1b:4a:ad:5f:06:ad:8d:87:31:d1:7f:f8:13:
61:ce:c2:23:63:c7:6b:28:88:38:a1:4e:26:52:8b:
1c:62:31:03:fd:32:ad:c8:fc:ea:c3:ab:89:11:4f:
5f:42:60:16:5f:76:e7:23:e0:1b:6f:99:98:32:cd:
0c:a5:7e:7f:ef:38:b4:9a:82:96:48:df:27:c9:6f:
f5:a2:e5:60:73:e5:52:74:ce:86:c2:c9:32:de:50:
2c:de:0f:5f:0c:a4:af:1e:68:16:48:e2:3c:cf:ca:
7d:ce:81:85:ae:ac:fb:8f:f9:e1:74:a2:03:3c:6f:
0a:bc:aa:05:51:96:6a:d4:0b:82:13:e0:bd:b9:6b:
ba:6c:e7:f9:54:6a:44:3b:01:42:aa:9d:0f:d0:a6:
d8:67:2e:a5:81:f1:e4:19:b0:4e:2b:02:ff:3f:38:
0c:59:89:75:a6:53:78:6b:4e:0d:88:41:9d:f6:98:
31:53:3f:b7:22:29:af:fd:b8:33:9c:e6:72:3b:e1:
d7:75:e9:77:52:7d:99:c3:12:02:cf:ea:40:1e:9b:
d0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:41:0F:EC:24:D4:70:47:73:82:2A:78:84:F8:78:43:8B:DC:55:80
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ca:b5:88:0e:e9:79:f9:dd:c3:cf:a8:47:34:92:a3:19:42:
83:0e:ea:9d:0a:9a:69:e3:34:6e:4a:98:04:91:f6:33:8b:e2:
fb:9a:86:07:5f:74:ae:65:13:5c:2b:b9:74:53:2c:d1:03:67:
ec:28:5d:69:ea:52:1f:ad:0e:42:7d:3a:34:06:77:36:b8:8b:
2a:d5:b4:b2:99:ca:09:a2:d0:93:4b:39:6a:55:52:f6:41:bb:
7a:57:18:fa:c8:54:c0:98:fb:c9:db:60:37:9a:e8:0b:a8:54:
c7:00:f0:fa:eb:71:7c:61:24:0f:8d:01:4f:7d:b0:61:18:a8:
16:07:61:46:71:5e:fc:33:7d:24:63:f0:91:35:f7:b9:d2:51:
ff:5b:8f:59:7e:67:c1:2e:6e:74:22:22:7a:f1:97:3d:52:b7:
86:b1:a7:17:b8:4d:10:be:3f:1e:fd:1f:25:3d:64:e0:82:a3:
92:ff:54:6a:1e:6f:af:fa:49:62:09:14:ef:66:ba:28:96:3f:
b8:ca:be:67:ff:ce:3c:1a:eb:c9:54:36:50:b1:1f:ef:a8:6d:
5b:0e:e8:98:f5:b2:3a:b6:2f:6c:dc:90:3a:c0:d9:d6:1a:05:
41:df:2f:e6:58:e7:8e:c7:be:70:b0:88:38:4b:8d:cf:b1:d2:
b9:4b:72:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:07:09 2026 by rpki-client