
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json)
Hash identifier: JB7Z1RrLTC93FUiY5PPuWglLviECaFoA1ZZLy7TJ7Ig=
Subject key identifier: 7B:42:AA:88:48:2C:EF:F0:52:2E:1D:47:B1:37:70:70:FF:9C:35:CB
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 01A182D1371F62FBA4F038A20EA52C80AFB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
Manifest number: 1ADB
Signing time: Wed 28 Oct 2026 14:01:51 +0000
Manifest this update: Wed 28 Oct 2026 14:01:51 +0000
Manifest next update: Thu 29 Oct 2026 14:01:51 +0000
Files and hashes: 1: 0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa (hash: VbJf/zpJU+nEIQciqPz/B0PK4md21WWEaGREZ1xeby8=)
2: 1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa (hash: EoOuCir1JdYOzVmD9C+0aCRnn0E0kdYzw6esRGPxmMQ=)
3: 53-Empt8fqhopJ7cOY61y1UNXLc.roa (hash: YjL+5qe2020D+DOQyVjhX1FTLXsdUT9QvCPVPeb6WkY=)
4: 6fl2PyZRjLFdwSBx3r61hkXya8k.roa (hash: D61QyHJ6S5T1IxCuN2yRBjSfJTg/+aLEQXnYgmdlUDs=)
5: ANtitpMQT-uK7LHD0X0IbBsKjWM.roa (hash: 5c2CNK7pBthzGV4Sg561qpwP1GJzRFFkA4PDWmW+aSg=)
6: CjV6mdrfVrhVAUrftKRzM-oPLEY.roa (hash: zq75eQCdFlGPvNTanm5A04Aosb4EDvywxu0fCf+FaxM=)
7: Df8h7qloFeTHYGavNQ4pJHpP5CU.roa (hash: 3kk9LrOCm1NH+leIgX8QEU4SIoLjtl1E1AbkJm7CLGc=)
8: IDuIILf-M7RgIDs4AJSYtPxrGic.roa (hash: Nv2s82WUeiBOVGtaFJF3rHfW4CDw9k2CQ7WS0TmM93s=)
9: ITKErq6hul380zQefCl7nGu5iiw.roa (hash: ThIKSMsSMV9/7c4Wu+9DRro9qpNPtMCBXl8IA6+T3z0=)
10: R-8E5zauBsFTDGfod6Tef2eLm4M.roa (hash: ClvLXgh4oJn2dvcbOHZrF6o7ap5IhqsfDX14XxeUfO0=)
11: a149HuY71oYMfosTA9HCL8g-pdI.roa (hash: FHyu/0R9GDUP3gmfU9JfTLPTviTJTT8eGmQ8uq/ZlfA=)
12: bTookxgPSxSd_gnM8XNiIJ3mpr8.roa (hash: qaTVa3H72kXabxQBE9N2TN7e2tyXH6RWDJSNci8VjEs=)
13: blYq_pKFV_IJYUCGIJ3ZWpeEWIs.roa (hash: aV35UJJhFzqPJKc16YBKA5F2EyafDubx6D6p0nLFPAk=)
14: ehRbssTu-uCbiOQmcMxAxNH82GI.roa (hash: aYjSWmwkop/Ic11eCu/RIPvn387xQFE72I0LsyWzzf0=)
15: fD0zMeFpTdbjlyII0WXNlsdWjwg.roa (hash: 1nJ8LKFZY40ZGZ9fyCE9tTFmLCEjP6khJLvEfhwNXts=)
16: hYygt2D_2n1pYi_NTrG2nkmeaiI.roa (hash: dQrBwFPxwSf58rNos8WFJkrSXg3GQyoC4p0wWkx0CkU=)
17: khIatClzzDAzsXKofHk3CzFjNwQ.roa (hash: VqTvtGjsJjhyzOsm3Z+fa0f8w1YFBA58VD7S9gC+DFg=)
18: ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa (hash: O3k8tfSgOWL0eFoLFOr80zr8e1hwzB6oN6psmB5jVbw=)
19: l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa (hash: 0ZLcxVq4SbMJb/Tzs+R0ez5dGHPb27PKXrdMSol7/iI=)
20: lh0U2VbssLYHQuI_GeDtu-78fs8.roa (hash: argvv+35DPV6sAk39FUkOQj04x5r0LiO2lKQbHUbgZU=)
21: o2CtVQw5GkFX89PhUjlW0skEA5w.roa (hash: m4/K5u0ohrJNEPA+u5iCk/BUETlDCODb4D0JMGKGkg4=)
22: oy53UV29ZxGHyA7mlLseXZBnge8.roa (hash: zmREFQtkqLZ8wJLGEuvGnLyo+ZygeKXKKyJIbyBcMM4=)
23: qSnbVpCUTBo3CbEFeEaAeBg12KU.roa (hash: lUFBwmvXAt5o1tXZm7PlCC3E71TOjkaQgtMQg6Erswc=)
24: uhWP65iIcvZTsGSiBTIcefinHZQ.roa (hash: RDsU+on83wZCchaROnKt/rVWQYfzxwy4j90xxJ6pfyg=)
25: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: a1IpCbYrOt6XT6qe9EcplEYCLpCiSc1Ml2ej26a1cRA=)
26: vuod5WTfo-bMzWgcehLtUNsV8iQ.roa (hash: S3lLxKRzTk1ObgBCNRSt9Y3FAylgCuMuERfb8CAqXtY=)
27: xSEYJ36rS-kznLQUl3DFtM3R1jM.roa (hash: 3mFKbERmZQc21I9KRtXeu1S3oH9xaIQQ0cmDzkgXhUM=)
28: zwv3K8hhT-LR13y1jpshQxH_QY8.roa (hash: +DaC16Zol9eSUsi0C3VzkYxeAwCevxKNLFH6dVkAkpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:58:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:d1:37:1f:62:fb:a4:f0:38:a2:0e:a5:2c:80:af:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Oct 28 14:01:51 2026 GMT
Not After : Oct 29 14:01:51 2026 GMT
Subject: CN=7b42aa88482ceff0522e1d47b1377070ff9c35cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:58:c6:c6:37:22:c1:e1:55:8d:02:29:86:f8:
34:b9:d6:c7:69:05:37:dd:ac:41:eb:31:c7:f0:99:
e5:e8:07:9f:8d:cb:a0:be:41:44:1b:f8:9f:d5:a2:
95:49:3a:ee:06:3e:cf:22:39:97:8a:e1:dd:2e:47:
6a:a1:fd:27:e0:9b:62:65:d0:d3:08:0a:b3:43:2b:
4d:f1:d7:17:79:a3:fc:71:fa:e3:e8:51:03:c5:cc:
c1:20:e6:53:ae:f3:ab:aa:a9:8f:a1:99:54:40:ff:
22:33:ae:22:49:79:1e:1d:3a:69:db:f2:0f:8a:04:
de:80:1e:aa:86:cc:fe:2f:99:40:16:5c:ea:26:b7:
b4:6d:97:8a:83:fd:6f:09:ce:d1:9d:b7:28:a6:52:
a2:9e:e6:3b:45:a7:aa:10:0b:c4:28:74:95:5b:3d:
08:77:8c:40:53:dd:16:7f:c5:15:38:69:27:03:16:
38:de:29:1d:8a:54:c7:f6:30:c1:5d:e9:2c:9a:7b:
7e:5a:7b:59:74:45:c0:83:32:b4:fe:0c:a6:0a:0c:
4f:53:3a:75:65:88:ec:c5:8e:92:98:2b:df:33:c7:
24:45:c1:be:de:cc:28:e0:2a:00:4a:5d:ad:ab:c2:
3d:0d:18:71:5b:53:d1:a6:db:3a:70:e2:41:78:a8:
eb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:42:AA:88:48:2C:EF:F0:52:2E:1D:47:B1:37:70:70:FF:9C:35:CB
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d9:a5:51:52:3c:b3:4c:37:e5:82:70:93:54:cf:92:81:1e:
18:bf:fb:3d:88:aa:e4:92:de:29:59:06:18:9a:93:8c:c3:3f:
1a:1a:9f:20:78:29:62:31:34:d6:03:df:2e:41:67:39:26:99:
89:61:f5:5d:bd:12:5a:b9:65:60:c9:e6:0f:9c:59:f0:bf:44:
5f:e8:a2:af:b5:60:71:a3:72:3b:2b:e5:66:0b:2a:2e:ea:bd:
d1:08:84:68:2a:0f:ea:3d:a3:59:2c:d9:2c:c0:f2:e7:04:07:
3c:9e:4a:8c:0d:af:a9:26:bc:e4:9d:00:fe:3a:14:a9:f9:e7:
43:ac:99:6b:44:c9:7a:ed:a3:65:f4:b0:75:6e:72:c0:3e:a6:
b0:a5:67:14:7b:a7:9f:3d:a9:c2:1d:7e:30:bd:96:f8:09:5b:
44:78:2c:22:e0:c3:4a:74:0d:60:37:ec:3d:d6:cb:c0:dd:12:
88:6e:fd:4b:e1:11:3d:df:1e:36:2a:59:4f:eb:92:7b:47:03:
09:d9:cc:07:90:cc:1c:2c:6a:fb:38:21:7a:74:18:0b:95:e0:
ea:ae:04:7c:e7:79:f2:81:b2:76:f4:76:28:89:79:ae:d1:aa:
3f:b8:fd:99:87:87:88:64:78:f4:92:cc:78:03:48:75:66:17:
72:cf:3b:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGC0TcfYvuk8DiiDqUsgK+2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw
NGNlMmIwHhcNMjYxMDI4MTQwMTUxWhcNMjYxMDI5MTQwMTUxWjAzMTEwLwYDVQQD
Eyg3YjQyYWE4ODQ4MmNlZmYwNTIyZTFkNDdiMTM3NzA3MGZmOWMzNWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVjGxjciweFVjQIphvg0udbHaQU3
3axB6zHH8Jnl6AefjcugvkFEG/if1aKVSTruBj7PIjmXiuHdLkdqof0n4JtiZdDT
CAqzQytN8dcXeaP8cfrj6FEDxczBIOZTrvOrqqmPoZlUQP8iM64iSXkeHTpp2/IP
igTegB6qhsz+L5lAFlzqJre0bZeKg/1vCc7RnbcoplKinuY7RaeqEAvEKHSVWz0I
d4xAU90Wf8UVOGknAxY43ikdilTH9jDBXeksmnt+WntZdEXAgzK0/gymCgxPUzp1
ZYjsxY6SmCvfM8ckRcG+3swo4CoASl2tq8I9DRhxW1PRpts6cOJBeKjroQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtCqohILO/wUi4dR7E3cHD/nDXLMB8GA1UdIwQY
MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt
NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3
LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnNmlUVI8
s0w35YJwk1TPkoEeGL/7PYiq5JLeKVkGGJqTjMM/GhqfIHgpYjE01gPfLkFnOSaZ
iWH1Xb0SWrllYMnmD5xZ8L9EX+iir7VgcaNyOyvlZgsqLuq90QiEaCoP6j2jWSzZ
LMDy5wQHPJ5KjA2vqSa85J0A/joUqfnnQ6yZa0TJeu2jZfSwdW5ywD6msKVnFHun
nz2pwh1+ML2W+AlbRHgsIuDDSnQNYDfsPdbLwN0SiG79S+ERPd8eNipZT+uSe0cD
CdnMB5DMHCxq+zghenQYC5Xg6q4EfOd58oGydvR2KIl5rtGqP7j9mYeHiGR49JLM
eANIdWYXcs87Zg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 16:32:33 2026 by rpki-client