
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json)
Hash identifier: p9dD3HqapTWRmvQgzbJBebSpT77lgRyKTmvJkMnNik8=
Subject key identifier: 00:D1:C5:2F:13:BB:79:4B:A3:7C:D6:3C:0A:42:A8:C7:63:70:07:AF
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 01A06FF17A8E8BB3577A113D33A6DA4A91A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
Manifest number: 10B4
Signing time: Sat 05 Sep 2026 05:01:31 +0000
Manifest this update: Sat 05 Sep 2026 05:01:31 +0000
Manifest next update: Sun 06 Sep 2026 05:01:31 +0000
Files and hashes: 1: 0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa (hash: TfGSU8XCSgVMZOD41y1990e2kIyriSC3XmqU7n3kfvE=)
2: 1M4CR97G2KsXmA_zCbIkIXY9AHc.roa (hash: GDf20c7QMRCTOktQNho+ECo62hgqNJJUdQUlkUBsHZE=)
3: 53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa (hash: Rge2VTZzY9AJwofj3q/Q6jFmREW3CoHsGJkonCRjf/E=)
4: 56x7RPvCFIkavkJq-b6E0Tp0YGM.roa (hash: MJmTuMsh03/hjb1Nv8Xb2bBkZIsz6aS9Hf9MlIMOLjI=)
5: A20W_5_G6C-OdgoqlsDfQ4OCw2M.roa (hash: FALYlcnA+YtKlalF7N3tNk7RIjxbvPOkk+v0cemQh20=)
6: BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa (hash: MVsrvMO39kJoc0mZmN7diOxB9EcjZr9Z1pn5l5VbIw0=)
7: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: 90Jf8p94cMDWTxj6+c1XdcjJ06zpVtA6kzLKqEiAhPw=)
8: FgNKNW5B9puTce7TwiHPk7LKkM8.roa (hash: vwSEzoXOmoqMUtBgzMgDVlO/tkSbCfgKY6cTiF3Xr7o=)
9: I0pwg9CZMHqLfBbOSZRcrUCAXac.roa (hash: ez3uTbsX5XWKgBxDLIribBBe6QXM1/Sf5/DyeWPZIME=)
10: P8CPGWFsawUMl03GCUpKnxbjjlE.roa (hash: GAHel1W64Z9n1z13wYSseROdcgB58qy+711XhLs0e+w=)
11: QJ1xM-I48uzO02IgPeNQyuOaUqA.roa (hash: 6rMIGe2ob2Y14JHRw4XfL4QGb3VCibvSBGXwMtcGqqg=)
12: a1bxge9RaAQ4hUbIUGzCCu-i2F4.roa (hash: a1kP5I90YhkZZI2m2BFKJdlp4Oz3OlMvq6wsOXlcI4c=)
13: aASnsFjaGSv1507L70pG1D3Mylw.roa (hash: oa7lWKQuw6P6CITW8+9RNGq86p0mYNRQt2gm7DcEnkk=)
14: aE7dmxNnMqlbMvLqgzOsP-ooEsM.roa (hash: yRZuNFGwI8VBm9671WQ3wPUuTbQ9RDPs60a0RaW0q3g=)
15: cFgdjeeP9MpYfV_2AUL1U_5M24c.roa (hash: 7BBXQ8Fn1Y9T8QvfmXuLGCX/jZRN0auG1tMDaE9RoLs=)
16: fbDzpva5QPPmUMwTw415ySp9CiI.roa (hash: P8jqZqu6kzbZ3aLVmZys2OTCIU/hcpk5PrX6lFSeous=)
17: hATMJU8bHmx-K2k2EKF6wHzgYJg.roa (hash: xMvcViy2yfcgksu4DdP1xsEHftCpjl4csjaVjibAeTc=)
18: njGiyS1riv8o5Tx4DTboEJsmuyA.roa (hash: Jvb2eyKp3aYHDbslRvWJdCfA9jI/WLkz3iYOmnC0IPo=)
19: q6AprXpiRcVl5ELQQP4HzyoPU1s.roa (hash: y1TzMFIAWDqXBEbPleIWHolHXjF7gfy6B7SVOuVhNiA=)
20: rJ1qNlWDYbi69BE2ZEKvQVltAts.roa (hash: 9qgzkGC4YfmPbthdBZ7B/utLfGFA/3aVgJMfSvBGTpc=)
21: t5l7KHAEWqvhTIwVkhIeMMidR-M.roa (hash: A1nvslLXHKOUrzLO45L1cBt57BRFdo4XXdQju80rlCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 05:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:f1:7a:8e:8b:b3:57:7a:11:3d:33:a6:da:4a:91:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Sep 5 05:01:31 2026 GMT
Not After : Sep 6 05:01:31 2026 GMT
Subject: CN=00d1c52f13bb794ba37cd63c0a42a8c7637007af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9c:33:82:59:3e:05:4c:2e:14:e5:16:7f:c7:
89:94:27:29:bf:29:c0:4a:a0:ef:da:67:eb:64:8a:
07:37:d3:88:ec:22:27:b6:d2:78:35:34:bb:9d:35:
41:1d:7b:db:b9:a6:e0:98:cb:0a:fb:42:12:6e:36:
47:68:49:5a:4d:5e:15:d8:05:f6:bd:04:38:32:7c:
a4:ef:85:e3:93:22:a7:5f:3d:cd:cb:8c:86:0d:6e:
f6:6c:dc:90:95:dd:00:1e:df:f1:e6:3b:6b:2d:d2:
64:7d:b0:1f:ec:83:29:4d:93:49:d4:4a:99:2b:10:
ae:c6:2c:43:e0:5a:b9:71:73:62:c5:e8:69:a9:63:
61:10:10:08:0d:7b:95:a6:5f:65:cc:87:21:bc:35:
66:3f:6e:83:5d:c3:08:eb:dc:bc:69:89:17:cf:a4:
da:12:ae:e8:6e:78:af:be:18:e0:6a:74:eb:9c:d6:
d1:58:80:4b:ac:fb:3c:25:3c:ee:a4:bc:13:c5:41:
b2:98:56:af:10:f2:1c:7f:70:ae:6d:eb:bb:17:e4:
a9:05:33:7f:1c:39:8f:80:8d:b6:8c:03:03:8f:7a:
f6:b3:c8:ac:24:bd:34:1e:4c:d6:8c:32:f6:d7:c2:
49:e3:53:b9:7a:13:2f:a8:0b:c6:12:35:67:41:d7:
9a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D1:C5:2F:13:BB:79:4B:A3:7C:D6:3C:0A:42:A8:C7:63:70:07:AF
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:48:22:f7:16:46:45:7e:e5:76:4f:be:8d:71:ff:e8:2f:38:
db:9c:8d:bb:40:59:59:97:49:59:f6:55:bb:49:99:39:33:96:
48:2d:e6:c9:71:5a:c1:15:85:f5:80:83:d2:b8:b8:fa:04:ee:
28:6a:d7:65:10:2a:f7:de:9c:5d:3b:40:73:1b:2a:1f:1d:55:
c7:a0:bc:e6:61:43:55:07:37:33:7f:49:6c:24:4c:4a:94:5c:
e4:da:93:ef:c0:eb:fe:a2:09:73:e8:20:43:a3:ba:1c:5b:d0:
e2:62:a0:48:6c:3b:ad:86:02:45:83:c5:a8:14:e7:7f:a1:a5:
0f:5a:ff:0c:c3:6a:89:a7:33:5d:9b:15:62:22:b0:fc:a9:68:
ca:6e:87:28:f7:db:dd:0a:52:09:c2:a4:cb:ad:cb:e9:fc:bf:
f0:79:e1:b7:7f:0d:7d:1e:c4:26:70:5b:25:0c:f0:3a:76:a5:
a8:cd:f9:e4:27:b9:5b:d5:94:d0:d1:92:78:d8:30:b4:cf:b8:
bb:b1:78:a2:35:f0:c8:6b:53:44:d4:72:87:9e:c2:12:09:fa:
d6:93:c1:96:5f:bc:b5:5b:f5:35:4f:a2:b6:cf:c2:f9:b0:62:
ee:5c:9d:54:e4:ed:6a:32:f0:fa:90:b4:2d:ef:0f:79:f7:2b:
9f:bc:4f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 14:53:53 2026 by rpki-client