
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json)
Hash identifier: CE7FZguX58qEUElVHUY5fMCxjp4OvzOEWrWfpzY1Ogs=
Subject key identifier: E4:9D:94:A5:D6:A9:46:FD:32:FB:CD:2E:97:DA:E2:EF:51:D5:6F:D4
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 01A094A1E3D809B2B03BB175EBC9FA4E8ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
Manifest number: 10C7
Signing time: Sat 12 Sep 2026 08:00:32 +0000
Manifest this update: Sat 12 Sep 2026 08:00:32 +0000
Manifest next update: Sun 13 Sep 2026 08:00:32 +0000
Files and hashes: 1: 0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa (hash: TfGSU8XCSgVMZOD41y1990e2kIyriSC3XmqU7n3kfvE=)
2: 1M4CR97G2KsXmA_zCbIkIXY9AHc.roa (hash: GDf20c7QMRCTOktQNho+ECo62hgqNJJUdQUlkUBsHZE=)
3: 53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa (hash: Rge2VTZzY9AJwofj3q/Q6jFmREW3CoHsGJkonCRjf/E=)
4: 56x7RPvCFIkavkJq-b6E0Tp0YGM.roa (hash: MJmTuMsh03/hjb1Nv8Xb2bBkZIsz6aS9Hf9MlIMOLjI=)
5: A20W_5_G6C-OdgoqlsDfQ4OCw2M.roa (hash: FALYlcnA+YtKlalF7N3tNk7RIjxbvPOkk+v0cemQh20=)
6: BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa (hash: MVsrvMO39kJoc0mZmN7diOxB9EcjZr9Z1pn5l5VbIw0=)
7: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: qUPE4bchgCX1taQcVaebst0koFgmUCwwezbCssAxVFw=)
8: FgNKNW5B9puTce7TwiHPk7LKkM8.roa (hash: vwSEzoXOmoqMUtBgzMgDVlO/tkSbCfgKY6cTiF3Xr7o=)
9: I0pwg9CZMHqLfBbOSZRcrUCAXac.roa (hash: ez3uTbsX5XWKgBxDLIribBBe6QXM1/Sf5/DyeWPZIME=)
10: P8CPGWFsawUMl03GCUpKnxbjjlE.roa (hash: GAHel1W64Z9n1z13wYSseROdcgB58qy+711XhLs0e+w=)
11: QJ1xM-I48uzO02IgPeNQyuOaUqA.roa (hash: 6rMIGe2ob2Y14JHRw4XfL4QGb3VCibvSBGXwMtcGqqg=)
12: a1bxge9RaAQ4hUbIUGzCCu-i2F4.roa (hash: a1kP5I90YhkZZI2m2BFKJdlp4Oz3OlMvq6wsOXlcI4c=)
13: aASnsFjaGSv1507L70pG1D3Mylw.roa (hash: oa7lWKQuw6P6CITW8+9RNGq86p0mYNRQt2gm7DcEnkk=)
14: aE7dmxNnMqlbMvLqgzOsP-ooEsM.roa (hash: yRZuNFGwI8VBm9671WQ3wPUuTbQ9RDPs60a0RaW0q3g=)
15: cFgdjeeP9MpYfV_2AUL1U_5M24c.roa (hash: 7BBXQ8Fn1Y9T8QvfmXuLGCX/jZRN0auG1tMDaE9RoLs=)
16: fbDzpva5QPPmUMwTw415ySp9CiI.roa (hash: P8jqZqu6kzbZ3aLVmZys2OTCIU/hcpk5PrX6lFSeous=)
17: hATMJU8bHmx-K2k2EKF6wHzgYJg.roa (hash: xMvcViy2yfcgksu4DdP1xsEHftCpjl4csjaVjibAeTc=)
18: njGiyS1riv8o5Tx4DTboEJsmuyA.roa (hash: Jvb2eyKp3aYHDbslRvWJdCfA9jI/WLkz3iYOmnC0IPo=)
19: q6AprXpiRcVl5ELQQP4HzyoPU1s.roa (hash: y1TzMFIAWDqXBEbPleIWHolHXjF7gfy6B7SVOuVhNiA=)
20: rJ1qNlWDYbi69BE2ZEKvQVltAts.roa (hash: 9qgzkGC4YfmPbthdBZ7B/utLfGFA/3aVgJMfSvBGTpc=)
21: t5l7KHAEWqvhTIwVkhIeMMidR-M.roa (hash: A1nvslLXHKOUrzLO45L1cBt57BRFdo4XXdQju80rlCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:a1:e3:d8:09:b2:b0:3b:b1:75:eb:c9:fa:4e:8a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Sep 12 08:00:32 2026 GMT
Not After : Sep 13 08:00:32 2026 GMT
Subject: CN=e49d94a5d6a946fd32fbcd2e97dae2ef51d56fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:bc:bc:5c:d2:d9:6d:7b:19:90:fd:aa:f6:
43:c0:a9:a7:d0:1c:82:99:72:a5:c0:4c:44:b5:58:
80:4c:72:7f:f8:c4:50:a0:9d:c0:84:d8:e2:f2:10:
52:6c:45:db:9e:88:ec:e9:c6:7c:e5:3d:cf:2a:3a:
3e:22:b0:74:3a:63:15:28:5f:a7:c9:15:37:cf:47:
ef:d3:cf:93:a0:3e:f8:11:f1:fb:47:de:f0:59:2b:
43:06:c5:0e:66:52:bc:80:39:a7:05:5e:75:b0:eb:
3b:f7:13:8c:63:a4:f2:c2:90:13:fe:74:d1:43:c7:
16:67:5a:ea:1b:5a:93:d7:60:a3:e4:64:fd:8c:f3:
58:7b:0f:e4:77:37:92:74:0c:78:61:66:5e:bd:da:
0f:82:fd:24:50:2f:46:e1:b9:87:d2:24:dd:87:4d:
a8:4e:72:72:55:29:d8:ad:bf:cf:f4:94:8a:5b:2d:
93:f2:23:4c:8b:b0:80:f6:c4:48:85:0c:9d:7e:5a:
19:1b:ef:9e:b4:9f:b0:66:be:a5:d6:54:fe:8c:d4:
57:e3:9a:87:e3:88:f0:16:f1:bf:d4:4e:9f:0c:a2:
dc:ea:8f:5c:38:82:47:34:bc:2e:c5:8b:38:c1:d5:
47:27:fe:61:c0:05:f2:2a:f7:52:09:e1:62:a3:cc:
57:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9D:94:A5:D6:A9:46:FD:32:FB:CD:2E:97:DA:E2:EF:51:D5:6F:D4
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:33:d8:91:6c:90:6c:0a:ac:2d:f8:b8:97:5e:5c:39:09:d1:
aa:4e:76:5f:48:7d:2f:05:17:8b:3a:87:cf:78:e9:ba:df:e6:
0b:b6:95:80:9b:96:38:81:a8:c6:86:3d:e3:8d:93:4b:58:64:
2f:98:1f:c2:76:e5:e7:33:87:a4:2e:37:b3:25:4d:ba:d5:64:
6d:60:b0:ff:81:c0:3a:f1:d3:50:91:25:7a:9d:c7:ec:05:ea:
d5:a5:be:d4:24:07:c1:92:6f:72:6f:e0:7a:b6:49:44:68:1d:
fc:87:5f:a3:53:d0:b7:15:66:ef:3a:a7:44:f4:ac:79:97:21:
eb:db:6e:a8:13:d9:50:1d:a1:18:28:d6:9c:6a:8b:12:7b:2f:
a7:04:6c:04:6d:f0:67:34:9f:92:fc:2d:46:43:d2:e7:f8:7c:
53:15:c8:5b:27:85:3c:8d:12:e7:bf:f6:89:98:cc:2f:1e:49:
60:ab:9e:0b:69:72:2e:c4:71:2f:19:02:11:02:00:99:af:62:
9d:7b:9f:dd:b1:d7:f6:81:f3:1c:03:89:4b:da:eb:3a:32:0d:
21:be:b0:1c:32:8d:51:af:5f:a8:e8:cb:57:ef:ba:c2:f6:42:
c1:74:f3:99:36:3a:01:e5:82:bf:9c:7b:52:be:0e:30:7a:10:
de:68:2d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 15:27:38 2026 by rpki-client