
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
File: _liVLTk5NfDTvOgU_ZF40EaTrrk.mft (raw, json)
Hash identifier: UBsAVCuCKy/8EQOo/zl1kiD95F0iZOp7hsP4UsdbLfo=
Subject key identifier: B4:F1:E5:78:F9:7F:C1:35:3D:9C:6D:50:15:78:C6:C1:A9:7A:EB:92
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01A158542F7EB666F5CEE6A91762486B5530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
Manifest number: 1B7A
Signing time: Tue 20 Oct 2026 08:01:14 +0000
Manifest this update: Tue 20 Oct 2026 08:01:14 +0000
Manifest next update: Wed 21 Oct 2026 08:01:14 +0000
Files and hashes: 1: 0H4yqkBQ_Tw0Wc2hgXpXoAs6y74.roa (hash: TXGYHpEkbA/gmBzhb7MEKc4sA2Fqy0eb/p6I+gL0THg=)
2: 1-pt-IXOEXqZu8kUDGquuL7-1gcc.roa (hash: NLxrLA0OqYxqRmfJGl+OFXBhEszRqDielh1bnhVcZzg=)
3: 2KUTocOpAT7sBhebTwh3G4FESlk.roa (hash: qCXP7Gzh5WeYsyND7xGMNVQazeCbTW+xxU01dOva01I=)
4: 4l9EsCgzSHlVTtpywsbUUFtExTk.roa (hash: YL2VEKNHNIjwIMrHgQShXB+ezdUEHsuR+LX2D+OX3sQ=)
5: 9-NL_3pPKwjoT10Tknd1fywwh6c.roa (hash: 2AUz3UyBm+hNCRPuqcyUa4lcxCahpjHfjKeNNTVRWhI=)
6: AkErl4jlY9bXi8pqa-fwgrweKKU.roa (hash: 0XWDTE5Tv62kIn8zLAqHgpnppEVXV8X+MfUWwrRak7w=)
7: CnjhaBCYf7ZnMG3Es2D005bWWPI.roa (hash: vnu28EkHQSIG2pnIVVAMbjcgAHNSaPZ05++SiDjH6LA=)
8: DXWq4IOQOSUjLKZDU6qEEnuZLTY.roa (hash: Hnl3vU32o8YiLsEXWTIhThoGNX5/Dq4KOzxN9AOmBos=)
9: DpVlP-CDojfJd8BFvlgfdr3f-T4.roa (hash: eNNDlrOJw2Jo/OW5o5qOgoZ27JzOfR4lVRHbMkq1Bdc=)
10: EKuLwMJDazSSbggWLeeqY64f0qk.roa (hash: OfYUgwGcfk/wwvQIpRfbrU+7ZSV91GDPgDRf/++1XoE=)
11: F9UQlAebc29GSseukVGk2Ly4-ig.roa (hash: SXDWRzwFnYBqyLhZKjGPwwWVf1aIUUbUr34+3OpNV9g=)
12: Fm258hcKsjpIMI7amylXAkeBtU4.roa (hash: CxYZdpQYo2Xh/OoIWujdvOfnnOrO6eV3QzrjFCJmgpY=)
13: I9zpyWAN-xNWTvwD3jTc-h-2YB4.roa (hash: 1D2AsC3t5Oo+fCH9DuB+RX3mIGavPSGBYdO7E8JcruM=)
14: Ip7B4awbZgfNeXA2x0V50-o-c9A.roa (hash: fF+qKa96LMcpcHr7gUx7PPq8EJWzQoCtAK5cioR9tRU=)
15: KmL9hUmZWVkaAtdmjfXfWJiHh-s.roa (hash: YDzujFQaz+G+jCdu6mA5zUHDiIZN9X1GHpvWadjwBgQ=)
16: L1Av8Agkg4BvWEWbPbNAsYEFxBk.roa (hash: v3b+ZpRVqPxC/PxnlvcYscfXPSpsRxuoNmW2s29gQ7E=)
17: L1z4gAbmtBr6IFjxlRf2f6QkURo.roa (hash: wfR+HjJDOFvJipZLYW4jdBeVJSrQq986lvQU2WiKhq8=)
18: MS8Bv_7T3F3D_VAzb7WSaLcYpfc.roa (hash: lk0a4eNfHng0En9tKf/4Xz/4DH1EMESKWrpSRzXWN9g=)
19: N7A86p6PRImcj39W7i3dmRULO6M.roa (hash: aoYmassX8XrXtggl4g+64gU3So7LOrBiC8s9TUO4xas=)
20: NB2LWnjHT9_OdID1ts0RcFPwKGQ.roa (hash: mZou46RX6NNyW8lU0qa5tsLs6e+gZ1j+Q57s8qZ9Pp0=)
21: OtGcmTXxtlAndkCENkgPfZ5qkpY.roa (hash: /n2XdyxLOIwoRSagcNtXKkIFcsp0vWI29IPSu/5Oazw=)
22: PuWhap-0muVvQV-0BrycJNZtn1s.roa (hash: cwkFpse9f5j5nHN/rRZOX3pPvRyqmiPVwVbzwBgvaHU=)
23: SrXqNvmuvQJBIjB0Di8xUFoZez0.roa (hash: SRA4RELyTLPR3imea02LrnsTj3Gu/dAsOF+7lBcjxe8=)
24: XgyNYXwLhPSXrny8NDix9oprHDI.roa (hash: PWGs9rS5sBhLApUjUmFl5ISIFI1Oly8X3m/3XXPeS0g=)
25: Zes9PUIGZdo_9LrDP7M15p5oawc.roa (hash: 6bUtaGElpOGGE63DLlZtFA5PJo8DtZ4UODrtR53uq4o=)
26: _liVLTk5NfDTvOgU_ZF40EaTrrk.crl (hash: pZUA2t5fHKt6RpVA4DkWXDmrzv+oLau8Qpb287EZKOM=)
27: als8bOZv4fKBOCQtVsZ9-tvIHNM.roa (hash: Nm1Cu1BIVmttqtDjEB5m5E1PnL0WvKuShJjAPmq2bJs=)
28: eVUCZ2gkOg648kh9IahZkIBOJA8.roa (hash: vMKWl4EbBRXZC+tfwMZgbq5f1CG1UUPRzQXxRawEkC0=)
29: fTRzb2cZPSIq__glS6tFSc9lGdI.roa (hash: /O7Vv8jDvx8wOvP3bnJZXgbV+VYFXbf+4qH/zIndzEA=)
30: kRm---guYcInSUKq-QookHvNTuM.roa (hash: iGZFzrsQlmqEd4hUxjMucE/uvpD/1KA4uLxkKOBPLhA=)
31: kmtJGb31zTt_pJ6GCyTQ9LzmkzE.roa (hash: Q5L6eWKaIz5gBzH7B4mLua9KGWq+PLDJnwr9Kj6N+qo=)
32: msSEI6HlL5d64JwmuUz8Sr8pWG0.roa (hash: Te8OnG1Rs5zfBbzAKPB1q6JjnhlnmawlvBxGi0xWVuw=)
33: mv252XC-r2Fp7WH9gax3y1kCf_w.roa (hash: TyOu2J6Gg6ncup4jNkEuboP+B2/EiWFPV9rxEB3IXsY=)
34: n9jXeCQebePRp-nZqBI8SlNOL0A.roa (hash: iRFY1MascouzPY6CQ9pd/hkDj4KxTl5LRhZinPt+4Z8=)
35: pNL3oico6rSRy7HI-qZpBv7USh8.roa (hash: nkMrE3yZ9+wbGR6nyZRKmZOaTcWk2iFc5i+D0HRUuvk=)
36: t-Nlrb3jkWKMql0R-gWy6KV2tzg.roa (hash: oIu2af2fOLn1wMUWQi6xhmqoR7yT8Ct2Fe39qmDYJjg=)
37: t2l4yAzjOlij6gTRgBqv7EnlgoI.roa (hash: IkTCiHAgmfqKf9DWDK0iqXOzM3D1JVhN80sC9d5A+VA=)
38: uf9kYM6bm6nAONdl8a65rkIYgu0.roa (hash: eilXyuZnlj2dgxzjRmoRlIqnyiAwWyw+VjTTRqknEa8=)
39: yHQN8cWjZJSj8-u46Gu-gsyRDTU.roa (hash: EHU24D0qUh2tmsJEt6bSbVEdFShB4gt4fc5fgyaoi/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:54:2f:7e:b6:66:f5:ce:e6:a9:17:62:48:6b:55:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Oct 20 08:01:14 2026 GMT
Not After : Oct 21 08:01:14 2026 GMT
Subject: CN=b4f1e578f97fc1353d9c6d501578c6c1a97aeb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:93:cf:b4:49:22:19:0a:ac:ba:24:65:d5:
04:ff:b8:25:0c:57:90:13:52:d3:f2:bd:10:ad:a4:
58:ad:e9:85:90:52:13:f5:8f:8d:50:4a:a2:13:e9:
8b:80:43:02:9d:de:a2:d6:d9:d1:cf:c8:fe:48:c7:
a8:9a:60:a1:37:29:a1:e8:75:c8:40:61:e6:37:8e:
a4:fa:ef:2d:ab:6c:48:d1:26:a4:f1:3a:6b:30:46:
d1:a9:79:19:e8:2d:33:17:2f:14:62:4c:2f:99:32:
10:c0:43:0e:46:fc:61:ef:6e:14:87:87:f9:86:c4:
2c:19:18:26:1a:6f:e2:86:ff:c3:92:11:3c:dd:15:
ec:08:a1:89:70:df:49:98:b8:dd:bc:83:f8:87:2e:
4d:4c:41:9e:4f:b7:cf:54:9a:de:de:bc:61:50:86:
45:79:7d:d0:07:6b:c0:23:dd:72:83:74:b5:d6:f8:
ba:9d:16:ee:12:da:92:ab:8a:3d:57:ed:5f:75:fa:
cb:05:c7:21:5e:dc:cd:8d:d7:74:21:ed:7a:e2:a2:
5d:f2:91:18:89:e2:90:57:34:71:08:71:bb:11:75:
7d:78:3c:e6:f5:9f:99:29:de:f6:f8:34:0e:d6:08:
95:0d:4e:18:4b:62:5b:1c:59:ef:a5:e5:1f:b5:5a:
cf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F1:E5:78:F9:7F:C1:35:3D:9C:6D:50:15:78:C6:C1:A9:7A:EB:92
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:70:65:15:6e:5e:e8:8c:59:4b:76:ad:5b:78:9c:e5:26:da:
fb:2a:12:c8:70:c8:ef:86:19:fa:42:9f:b3:dd:71:c2:5c:48:
7b:ec:56:d9:92:76:e1:34:72:ab:f4:e0:79:63:b6:d6:10:cf:
f6:6b:e9:eb:50:16:52:f6:27:9a:7e:17:40:3d:88:d1:1a:ad:
50:1d:97:00:a8:05:69:55:dd:f5:40:4a:a7:fc:ff:da:28:12:
98:7c:09:20:91:cc:3e:51:88:49:b8:4a:2d:a0:a7:c7:75:f2:
c7:ea:66:f9:d6:9d:20:b1:a6:ca:7d:b1:d7:ff:44:b5:e6:02:
5f:d2:30:7c:49:86:01:0f:07:e1:44:20:84:57:c0:cb:01:b6:
58:2b:44:db:08:a1:d0:30:5e:dd:df:b9:26:e5:3b:1e:f7:02:
12:6d:35:a8:67:bf:9f:58:26:18:f6:b4:a8:a4:e7:40:5c:e2:
a4:ee:9a:21:39:2a:3f:1a:02:35:82:ac:98:5c:ce:48:6d:01:
a6:f4:23:75:af:d8:5b:ac:78:3e:45:b8:66:cf:cf:45:ee:4d:
54:f1:50:9a:13:fe:df:45:a4:4f:62:52:85:de:90:cd:9f:b2:
7b:3f:80:c6:4d:83:10:1c:81:a6:7b:c8:85:37:74:c2:b4:39:
3a:78:13:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:23:22 2026 by rpki-client