
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier: C7oXPJ2D+KL6XzSVwBg8DJaTHCV8EwTaVhJZcOfJGqI=
Subject key identifier: 90:4D:D3:54:76:5F:3F:EF:BF:69:8C:69:F3:DF:6C:5A:48:2B:BC:D6
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A0E43EF221960E27E68B111EA2CCD1149F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number: 1AF8
Signing time: Sun 27 Sep 2026 19:02:05 +0000
Manifest this update: Sun 27 Sep 2026 19:02:05 +0000
Manifest next update: Mon 28 Sep 2026 19:02:05 +0000
Files and hashes: 1: 49Ros6yQCBCZx-lT7pJaksTqTxI.roa (hash: 6aT2vpkyxb5g2x4cqRIpe85BI1NJlRToFTz1Sp4RhTw=)
2: 50fRZ_9ljoxREyT_TdBgZknmvJI.roa (hash: /U9b7J/FTxe76b/ItHXeMk6ppBPAZYgHjV7XAHQ3/no=)
3: 9R-hF03pvKN9Tr1XUu-pJjdJz5s.roa (hash: PNCji/dwuNWe8P78z94y85iajnIaoysJ5zZCU1SO3uY=)
4: BAZ0FnaaVytQZOkZ4fspuOiPPCg.roa (hash: FYuNFRgpem1nIyN04S6XqEZK2vzBKNkZv0k48zdRy0Y=)
5: BsgOR-jlxaE3aejY8-m20EgFpik.roa (hash: 9FJKPRIwYTC9Hrz2A7gRNewXh7ioKHFgJGggkHSZ3SM=)
6: COubicxoLQYNHPm7IuamIaJms7A.roa (hash: DPKpxvHcQPmtiyQrWCKJCZwbumqS5dpT5ppeHnZZldE=)
7: EcWr-W81psfgufDVyILeXTABMYU.roa (hash: Q7ZojWjLU3NYmmRMRKMJpTREhBfsFuLKwES406c+itM=)
8: GEEG8zA7QPQfWRNYaF-MeG-FH2o.roa (hash: Od5aaHmZO8nzIw8gpu+vj3l0/IixcQGIkPSaeNmsAF8=)
9: JExJtb-2H86T5l_2TNtSXSkGdK4.roa (hash: PhyjLCVkG5sspCrwOMxylvOtWm2ph/t/PSTEggPhL8U=)
10: NZQD7zphjc7dwSVHnNXMxdSVoe4.roa (hash: CpXGIWH2XcatYwFCPQUw5JGi2uWQv9n7uu+NX++NCAk=)
11: OKSPa8mzNk_qq-j1U7rgAv7ffgM.roa (hash: wmHdiaZTSDXsWXW8dypkj9Ghpyj4Czm7t9dAC9g04Gs=)
12: PC-iVVZ05dZHm_NUXQPnsC6xQwg.roa (hash: T4XDV8OugBxctQY/seZan5oxKdFcqtcy8aX2Fp8HYzk=)
13: PVCfsL-DQGnWmfi4fX0uMc9N_9U.roa (hash: /8uBdugQxCn2UEVIfNew348UrCQbDCLW4B+BK9vD+Ss=)
14: PkLF5Qe23NpZ0qUxVzRcrTiMnQg.roa (hash: WhFKLI35lPl0xgI1Abtq0FpDyLm3DVBgk69s+Al9tJ0=)
15: QUfl3vC0AijBE9gxWtxJeJ66-d0.roa (hash: 8wj4uVOZlghlyIWBLuNvLWWLYHGut3Zij1oZ2ixoXwg=)
16: RpN8yNXdR3f4DSdXt3tk0xuMCyE.roa (hash: 1alxNFlJvEY1BuW09S2xYs3ItiGO5a/H13N9dbNkTdw=)
17: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: sc8ux3qV6IF0OCp3nj3V/0WcEuzDrwACknAULSbj69I=)
18: _z1dTWhWp3bC5Wji-rMML9bC-i0.roa (hash: spUxR6tKaRhP0L3x6sz5MaLREHIwM94S0kMPw6XM9uI=)
19: doO-DYqobZmFvdLcd-K-qxcr84E.roa (hash: 7zGwklkpyjE5YZHV1coBMWX3WdDjVnJMXK20a6+4lgI=)
20: e2wYsPl0c2v5jvUrMJ-FcsncdaQ.roa (hash: N1xgKMxZ6JNLp0L0Qd+l/YBBESUI4Q2awE17GKoo6Lc=)
21: gZMt62YXB3fOXlkUgEoT0ISZk38.roa (hash: 7CvKQ04ac0nYoFEHRru1nH3qJSkBG+4xElv372aI5mM=)
22: ijx72sOLkdFwyQPnNALm-uXb8bM.roa (hash: kfeWR9mNoEB+1dBFEGtvr8qeUJFz99AzeH22Swmzpw8=)
23: jK_3LgcUvw_YXHb3vUGOSp1VfSc.roa (hash: P0th7HsuFLYcn8GMMOM/Z7wJfSVbtZTeQOBS9o5yvmI=)
24: jgh8NnLwzjri3MSOsGXlpztaBYs.roa (hash: IBQXhoH6ej0Nw2qzmYZzN7CQPaNFa0BJsoZRgMo/qZo=)
25: oAREAYwnEiar868cqZwF4n7hEjE.roa (hash: TExAcqFUE4fhPV6CJ+QipcX3DkWsYg7w0Y8fuo3f4m0=)
26: qIg2XpXa-svWQfgOJuGymZyqIOo.roa (hash: 1fPR+4RzMuotW22NPG4OI/dZoy8XwZU4Lt4oQG8dlZk=)
27: qzN7XEG2qrjRDEGede8d9URKs6Q.roa (hash: xo0BmF8bRFeMZiCLBhu0QPgUZZhLlevhMTfWpCXxN6w=)
28: rbGp9q6QTIXhFc7ecNyZW_lW4oo.roa (hash: Qdhnr+sJnGz2cYaD5wovLPOgYlD7v0unzqdOgyFrUIw=)
29: s9mIDmbQfjDng3F9afVsbGicW3Y.roa (hash: T2f9fV0PTZVsLbj7OMR7LqfcLJh8reznahmZKNLLplk=)
30: tIKo2k5gq-fp-6tfS86FzLgTab8.roa (hash: CrwGDGko0/zRWxWCog4St/Gt4rv69G+wedTKo2ccmtM=)
31: tWkJg-Njy_cAjwuiUk4TpSEYEvM.roa (hash: 9937kKwYldSYJlo3Ui4EC2PBOZKpdB3BtsLZjtGHQBI=)
32: x3WmRf0Md0k8R3KmWEUPm6QIHk0.roa (hash: A0TksUeR1WaGrl4BD+O45qSGasWdey6T/TGmVp9nZLc=)
33: xfymiOaGkXDgwwLlqKOQEGSsXN8.roa (hash: LUf079Ipr2cYBKWBVKbcSJUL/8hC//aGHxyeNjrF6jE=)
34: xlZMo02ie36ogJ0dZ4jfkr6_EgA.roa (hash: lYAG9LJCT1e4qcqagtD7wUdtWmWH2kRZheOBDzQ9ReE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3e:f2:21:96:0e:27:e6:8b:11:1e:a2:cc:d1:14:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 27 19:02:05 2026 GMT
Not After : Sep 28 19:02:05 2026 GMT
Subject: CN=904dd354765f3fefbf698c69f3df6c5a482bbcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:1a:9c:2e:ef:d3:41:79:f4:88:f1:5f:09:
bf:b1:6f:9b:27:5a:54:71:87:04:d1:33:4a:3e:e8:
ac:c1:79:8a:b1:3a:0e:07:5b:12:66:eb:09:84:92:
b7:c2:b2:44:04:11:7b:c9:fb:65:87:dd:5d:2a:d4:
83:00:3d:36:8d:4a:ba:fe:c7:6e:66:47:f0:c2:ac:
0a:fe:d4:9f:e5:d2:ef:be:4e:6b:b0:a9:b6:cd:09:
6e:fc:f8:61:fe:1b:4c:dd:f4:ad:7b:e7:47:33:e9:
d6:42:df:8d:68:ac:04:48:82:72:5f:23:57:cb:06:
da:ef:ec:54:42:3c:ae:de:b9:f9:3f:a2:d4:de:9c:
84:bc:f9:62:66:32:68:c2:5d:fe:98:93:79:16:7e:
71:34:7d:25:e5:1a:13:c2:68:95:03:ee:53:19:63:
75:ed:53:5c:40:d5:05:cb:50:94:9e:9b:86:07:8e:
1e:87:d8:1c:e3:43:73:61:84:1a:d7:f9:d8:e2:45:
44:06:b7:34:61:ae:34:a9:13:9e:79:58:33:cf:dc:
d0:4e:94:29:a0:93:e4:02:21:e5:c3:b5:46:ae:7f:
ef:a7:43:e9:ab:95:0c:03:91:f8:32:18:68:7c:2a:
ac:f2:95:72:3b:86:af:09:8c:67:2f:b3:5d:37:f1:
6d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4D:D3:54:76:5F:3F:EF:BF:69:8C:69:F3:DF:6C:5A:48:2B:BC:D6
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1d:d3:61:17:ee:9c:b2:09:c3:61:d1:c4:3b:bb:c1:c1:4a:
67:d0:c4:7d:d3:00:83:1f:86:e8:57:4c:04:6d:bc:4f:e8:5e:
29:d1:64:d2:23:c1:46:01:d5:ee:e1:3a:c2:5c:b0:d9:4e:50:
05:c9:17:59:70:5f:7a:84:7b:e3:65:6b:31:3e:4e:74:47:35:
07:8b:05:41:c4:21:83:5f:d5:cf:05:7a:94:b4:df:7a:fd:0d:
f7:ab:9e:5d:90:23:42:e4:82:b9:1d:74:fb:86:76:ec:37:33:
88:8b:e1:d8:26:7e:c7:55:1a:56:6b:63:2f:ac:9d:69:6c:bb:
32:92:f9:af:5d:65:8c:fc:a2:ed:64:6d:b4:60:cf:62:ab:bd:
e9:5f:9f:2a:38:9b:37:69:1d:8f:ba:d7:0d:e5:51:5f:dd:1b:
3e:87:e9:68:db:80:04:c0:02:06:19:9f:2b:0f:34:37:8b:d8:
72:d8:30:b5:c3:43:8f:db:95:1d:48:98:bb:2a:9c:ff:48:4c:
07:0b:87:e4:59:47:1f:5d:c1:b4:d1:47:b8:8d:66:c8:50:60:
a6:2e:83:10:4d:f2:8d:da:1b:f8:c4:5f:40:f9:51:5f:f2:41:
cc:66:3e:5d:12:1d:5b:3f:41:e1:8d:bb:ed:4a:3b:78:9b:59:
fa:7c:a3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:39:44 2026 by rpki-client