
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft
File: rrZuxejyQF9vjUhuc_uCuN4N7g8.mft (raw, json)
Hash identifier: W3mS3YqtS2tuhtkySQ+bHBUgbcjXptM84ImqxyGvyN4=
Subject key identifier: 0F:24:72:A9:61:04:23:C8:EB:8B:10:42:11:BE:87:6C:C6:1B:53:4F
Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Certificate serial: 01A155537D5B13EE299CC939A8DB7BDF060E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft
Manifest number: 1AB4
Signing time: Mon 19 Oct 2026 18:01:37 +0000
Manifest this update: Mon 19 Oct 2026 18:01:37 +0000
Manifest next update: Tue 20 Oct 2026 18:01:37 +0000
Files and hashes: 1: 1-Pe2TnywVmfaP-WemWu9F6D1uY.roa (hash: TO2cGriDwgxNlyLdj4bg8MbV1G1jK45ogoJF4793fSo=)
2: 1cuv-12cm2QhTHJFihj8rVlWS38.roa (hash: bcoEGOaQcgkLD12rX+LR5QgbfI3SBiV6QabZt9HzI0k=)
3: 2V5uX7zz8rLZM3EIe_aMe1EFHf4.roa (hash: L4MUyeDgRyRa1SAE3WijwMUBcPHzc9BZm/cEJ6tCJQ0=)
4: 60RghjJR7fbMZmTjDd1goDTxFO4.roa (hash: FTGk3AHz/GL0pHnXXED/nhsF8Ezap2Jkso8Zx9XbdsY=)
5: 7v01OOv6lsa5SDVTbq2sDUyqghU.roa (hash: 674pqR/ZC6RweHjRad+sALRIi4soda9NrCU2Y8CRUAk=)
6: VeUDemYMUkamvLNvu71jm8kXCWQ.roa (hash: sDlj2eIeTmzMHoHM8lIyD6YCl1o4NeFPnKRaymevkd8=)
7: ZMcpzSwF8sfXNSwmkOe8TDMBSJw.roa (hash: +y1O8tgMcUGxxeeg9mLZswZb6MR8jtPoqrvAjwcYJzU=)
8: bcQk1dNiHStablJSpfOMgKvzyB4.roa (hash: vRaLHdtxEoTI3K0Ud0h8BsRxBaZPY4lVipsFC/qsS/8=)
9: eEv6Dzp18N3mnwft_tpFzD3jA9s.roa (hash: Bu5vlAgH4Sy8ybAbPwvMy42MlBplqri0XGE/ouWApbI=)
10: exX8D204pUSMlQDRe6-0vKudRw8.roa (hash: hw0brhXYOTSxVJVmx1MBXDRVxmLR1RsTQRFAr9ka18U=)
11: jCzBcgQ2ecHLxm36fGHNj6MQZAY.roa (hash: pXkAi/m1GNEU9RCztBpU/RufugyhkhNnDbgVYNdhfJo=)
12: rrZuxejyQF9vjUhuc_uCuN4N7g8.crl (hash: T8OY6dTgrm9rgwVkRwaCT6E7WS4/BoBdMI7jLF1QWNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:53:7d:5b:13:ee:29:9c:c9:39:a8:db:7b:df:06:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Validity
Not Before: Oct 19 18:01:37 2026 GMT
Not After : Oct 20 18:01:37 2026 GMT
Subject: CN=0f2472a9610423c8eb8b104211be876cc61b534f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c3:12:0f:14:00:3e:bc:2a:e2:89:3b:58:41:
26:78:9e:1c:28:05:0a:0c:31:e4:ea:36:43:fc:82:
87:2b:f5:3d:56:62:ad:7a:31:ac:af:3f:66:91:12:
52:c6:e9:7a:72:6b:cb:8e:25:1b:c2:7c:fe:65:eb:
29:38:07:9e:9d:e7:3f:c1:6c:c9:66:5a:4e:bd:f3:
32:63:e5:9b:94:25:77:b3:2b:bf:5a:e9:0b:3f:96:
78:e4:b4:9b:11:50:99:9f:c2:93:7b:c1:55:f6:0f:
5c:a7:17:c3:6d:aa:b5:ec:4a:b6:2f:30:ce:9c:be:
d7:1b:2c:87:85:51:b2:3b:52:2b:b1:d7:6f:c4:b1:
c3:da:26:28:56:33:62:30:ac:f2:4c:5e:e2:c1:b6:
47:7a:0f:63:ac:c6:82:00:6a:89:14:c0:18:b0:57:
5d:08:02:87:71:05:87:ed:af:9b:c9:f4:e8:e1:8e:
ec:61:30:fb:34:37:15:f9:93:20:d9:14:d9:39:c2:
78:1a:fc:5e:cc:99:ab:21:1a:f4:3b:f2:98:f5:35:
a5:d8:52:b1:f3:03:a1:69:49:25:52:80:c0:f9:95:
11:cb:a8:73:e7:4b:09:29:90:8b:3e:76:9b:59:91:
e5:b5:4f:6f:9d:d3:8d:eb:31:0e:b5:c6:fc:12:95:
d0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:24:72:A9:61:04:23:C8:EB:8B:10:42:11:BE:87:6C:C6:1B:53:4F
X509v3 Authority Key Identifier:
keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a8:4b:f6:d7:06:6b:c0:e1:44:b7:18:a1:2b:7c:be:bd:5d:
07:02:d1:c0:e9:a4:0d:15:b5:ab:22:77:c1:1b:95:09:6b:00:
7a:f1:58:7f:38:30:31:50:01:e0:3f:8d:6f:4d:4a:0a:98:d6:
b8:a6:09:82:4f:75:b9:2a:43:aa:f6:01:f2:11:f4:57:15:3d:
74:27:34:5f:84:e1:41:17:14:a4:72:59:f9:28:f2:57:f4:c4:
fd:ce:c0:60:94:b4:00:7c:83:9e:bc:ef:84:3c:67:d2:2c:60:
89:56:39:7a:5f:98:63:3a:7c:44:f5:38:af:32:48:26:0c:d8:
ff:ab:99:b1:6b:bb:43:92:a2:0c:63:4f:d0:d2:b2:b1:2f:20:
45:e8:76:cb:ac:db:c8:1f:5b:56:7c:c7:72:24:a7:e0:f3:df:
14:46:e8:76:45:98:57:3b:a0:04:3a:15:08:f0:4a:1b:ab:f5:
ff:b5:de:cf:65:01:87:84:b8:3e:03:b0:dc:c0:f9:6d:a5:12:
c6:ec:db:50:30:85:89:89:a3:09:45:97:90:c7:2a:40:1f:bd:
45:c2:11:a4:d8:2c:c7:34:18:df:22:9f:d3:8e:cc:f6:3e:ad:
44:3c:8c:cf:f9:92:4b:54:90:1d:fe:5a:8d:63:f4:1a:50:df:
f6:eb:3b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:29:09 2026 by rpki-client