
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json)
Hash identifier: 5YVlu1hrSl794wO7nXjsmdNzh77F8TJIQoydghKeagE=
Subject key identifier: FF:6A:5A:EB:EB:01:4D:F0:1F:8A:D6:9E:B5:C8:BD:E9:AE:9A:77:21
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 01A04B3FBC18095722F224DBB5EE96D42D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
Manifest number: 10A0
Signing time: Sat 29 Aug 2026 02:01:03 +0000
Manifest this update: Sat 29 Aug 2026 02:01:03 +0000
Manifest next update: Sun 30 Aug 2026 02:01:03 +0000
Files and hashes: 1: 0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa (hash: TfGSU8XCSgVMZOD41y1990e2kIyriSC3XmqU7n3kfvE=)
2: 1M4CR97G2KsXmA_zCbIkIXY9AHc.roa (hash: GDf20c7QMRCTOktQNho+ECo62hgqNJJUdQUlkUBsHZE=)
3: 53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa (hash: Rge2VTZzY9AJwofj3q/Q6jFmREW3CoHsGJkonCRjf/E=)
4: 54lg5Z3PwYcVlmy8U--OorXyIRU.roa (hash: p4H+ojtQvC4UXZDuYUx4ZnC8qPB6jzl83dV6d963YfA=)
5: 56x7RPvCFIkavkJq-b6E0Tp0YGM.roa (hash: MJmTuMsh03/hjb1Nv8Xb2bBkZIsz6aS9Hf9MlIMOLjI=)
6: A20W_5_G6C-OdgoqlsDfQ4OCw2M.roa (hash: FALYlcnA+YtKlalF7N3tNk7RIjxbvPOkk+v0cemQh20=)
7: BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa (hash: MVsrvMO39kJoc0mZmN7diOxB9EcjZr9Z1pn5l5VbIw0=)
8: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: HwaajsTZHwm+aLwxVREzF0cLPCKcCBeZlvwNMyqn5rA=)
9: FgNKNW5B9puTce7TwiHPk7LKkM8.roa (hash: vwSEzoXOmoqMUtBgzMgDVlO/tkSbCfgKY6cTiF3Xr7o=)
10: I0pwg9CZMHqLfBbOSZRcrUCAXac.roa (hash: ez3uTbsX5XWKgBxDLIribBBe6QXM1/Sf5/DyeWPZIME=)
11: P8CPGWFsawUMl03GCUpKnxbjjlE.roa (hash: GAHel1W64Z9n1z13wYSseROdcgB58qy+711XhLs0e+w=)
12: QJ1xM-I48uzO02IgPeNQyuOaUqA.roa (hash: 6rMIGe2ob2Y14JHRw4XfL4QGb3VCibvSBGXwMtcGqqg=)
13: VHCbgB2ATThahBAQ0_Wyxf0owhM.roa (hash: hCVwSy59RxrE+Tg9Np1iqXmZk/e5opFjdQ7TOzl8JOk=)
14: a1bxge9RaAQ4hUbIUGzCCu-i2F4.roa (hash: a1kP5I90YhkZZI2m2BFKJdlp4Oz3OlMvq6wsOXlcI4c=)
15: aASnsFjaGSv1507L70pG1D3Mylw.roa (hash: oa7lWKQuw6P6CITW8+9RNGq86p0mYNRQt2gm7DcEnkk=)
16: aE7dmxNnMqlbMvLqgzOsP-ooEsM.roa (hash: yRZuNFGwI8VBm9671WQ3wPUuTbQ9RDPs60a0RaW0q3g=)
17: cFgdjeeP9MpYfV_2AUL1U_5M24c.roa (hash: 7BBXQ8Fn1Y9T8QvfmXuLGCX/jZRN0auG1tMDaE9RoLs=)
18: huTbYgpqurqxYkSbrMBeRshoxjw.roa (hash: XOmUVP6KC3R9djF2wr37Vopd4+qc2j38WB+awNW8Kn4=)
19: njGiyS1riv8o5Tx4DTboEJsmuyA.roa (hash: Jvb2eyKp3aYHDbslRvWJdCfA9jI/WLkz3iYOmnC0IPo=)
20: q6AprXpiRcVl5ELQQP4HzyoPU1s.roa (hash: y1TzMFIAWDqXBEbPleIWHolHXjF7gfy6B7SVOuVhNiA=)
21: rJ1qNlWDYbi69BE2ZEKvQVltAts.roa (hash: 9qgzkGC4YfmPbthdBZ7B/utLfGFA/3aVgJMfSvBGTpc=)
22: t5l7KHAEWqvhTIwVkhIeMMidR-M.roa (hash: A1nvslLXHKOUrzLO45L1cBt57BRFdo4XXdQju80rlCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4b:3f:bc:18:09:57:22:f2:24:db:b5:ee:96:d4:2d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Aug 29 02:01:03 2026 GMT
Not After : Aug 30 02:01:03 2026 GMT
Subject: CN=ff6a5aebeb014df01f8ad69eb5c8bde9ae9a7721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:9d:9c:cd:ee:51:c7:ce:5c:bc:3f:c6:cb:
ac:bf:ce:49:f8:ec:da:32:d8:07:04:c4:1d:cd:3c:
52:86:7e:42:0c:bc:57:e4:e4:2d:3e:d3:d8:63:ca:
c2:23:03:39:be:b0:f8:75:13:c8:1b:b9:d3:34:71:
21:9c:b9:3c:fa:fa:75:84:00:e0:e7:0b:c6:a6:99:
42:38:77:04:9b:f8:cc:58:f3:79:8a:0d:50:04:e0:
41:1b:8a:d5:28:ae:3b:ee:55:81:02:38:85:ea:40:
78:3e:96:9f:46:3e:0d:7c:49:25:08:27:65:36:bc:
4f:63:b9:3a:f2:ed:76:56:84:dc:05:af:7d:4f:1d:
3b:1c:38:10:eb:83:0c:c7:35:fa:be:2a:48:9c:66:
93:fe:f9:7b:1a:f9:eb:96:25:d6:3b:e5:33:2b:59:
e7:85:cf:55:39:8e:27:0a:7b:02:27:81:7b:ea:15:
39:36:6a:0f:65:5a:c6:c8:b5:c0:1f:d3:7f:60:5f:
d2:d4:59:62:3e:26:7d:ad:13:7f:0d:b1:21:f5:1d:
14:b3:34:44:5f:55:14:90:b1:37:b0:1c:01:bf:94:
7f:46:59:8d:e9:d0:2f:af:5b:67:75:ba:e4:68:18:
43:f6:c3:89:37:8f:6c:75:48:ed:e9:e8:83:89:ba:
67:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6A:5A:EB:EB:01:4D:F0:1F:8A:D6:9E:B5:C8:BD:E9:AE:9A:77:21
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:fa:1f:da:4a:c5:67:05:cb:23:09:ab:b5:70:f8:71:70:a8:
e1:e0:79:ba:ca:aa:94:a1:d4:96:51:7a:a3:6e:b4:fb:52:b2:
55:19:3e:d5:a3:9f:55:e7:54:50:bc:3d:10:ce:1b:70:1e:2c:
e2:8f:34:30:74:06:1b:90:de:3c:4f:e1:b5:f0:9c:72:b9:99:
ab:a0:ef:c1:f6:e7:d6:13:98:6d:ad:53:06:e0:ab:f9:80:a3:
7f:87:e8:df:4f:32:c2:a5:1e:10:0e:49:61:78:85:37:71:00:
0e:30:b6:93:7d:6e:20:6f:fc:1c:0f:21:0f:35:ef:4d:c2:4b:
e0:bd:4a:80:58:80:1b:4a:d5:87:74:68:f3:4d:0d:68:2f:29:
c8:ef:bb:cf:56:b8:78:2c:15:74:e2:a8:4f:72:10:a0:d4:57:
bb:37:4f:34:a8:ac:9a:99:0c:08:8c:a0:b2:6c:91:cc:9f:f5:
e2:c4:ce:4e:af:5a:c5:1a:5b:ec:1e:ea:9d:65:6f:68:89:13:
5e:95:df:ea:11:b1:11:16:e6:d3:99:21:73:19:c6:45:c1:17:
f4:58:f3:e6:a7:c1:77:6a:d8:e1:bc:36:4b:3a:11:e7:09:19:
73:59:c6:3f:08:81:8c:a7:40:9c:3c:19:49:5b:76:f2:84:a8:
ec:07:13:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBLP7wYCVci8iTbte6W1C1+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1
MThjYjkwHhcNMjYwODI5MDIwMTAzWhcNMjYwODMwMDIwMTAzWjAzMTEwLwYDVQQD
EyhmZjZhNWFlYmViMDE0ZGYwMWY4YWQ2OWViNWM4YmRlOWFlOWE3NzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuOdnM3uUcfOXLw/xsusv85J+Oza
MtgHBMQdzTxShn5CDLxX5OQtPtPYY8rCIwM5vrD4dRPIG7nTNHEhnLk8+vp1hADg
5wvGpplCOHcEm/jMWPN5ig1QBOBBG4rVKK477lWBAjiF6kB4PpafRj4NfEklCCdl
NrxPY7k68u12VoTcBa99Tx07HDgQ64MMxzX6vipInGaT/vl7GvnrliXWO+UzK1nn
hc9VOY4nCnsCJ4F76hU5NmoPZVrGyLXAH9N/YF/S1FliPiZ9rRN/DbEh9R0UszRE
X1UUkLE3sBwBv5R/RlmN6dAvr1tndbrkaBhD9sOJN49sdUjt6eiDibpnrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9qWuvrAU3wH4rWnrXIvemumnchMB8GA1UdIwQY
MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt
MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3
LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfof2krF
ZwXLIwmrtXD4cXCo4eB5usqqlKHUllF6o260+1KyVRk+1aOfVedUULw9EM4bcB4s
4o80MHQGG5DePE/htfCccrmZq6Dvwfbn1hOYba1TBuCr+YCjf4fo308ywqUeEA5J
YXiFN3EADjC2k31uIG/8HA8hDzXvTcJL4L1KgFiAG0rVh3Ro800NaC8pyO+7z1a4
eCwVdOKoT3IQoNRXuzdPNKismpkMCIygsmyRzJ/14sTOTq9axRpb7B7qnWVvaIkT
XpXf6hGxERbm05khcxnGRcEX9Fjz5qfBd2rY4bw2SzoR5wkZc1nGPwiBjKdAnDwZ
SVt28oSo7AcThg==
-----END CERTIFICATE-----
Generated at Sat Aug 29 11:15:49 2026 by rpki-client