
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
File: b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json)
Hash identifier: USozdem2/T6hIE/rpwduhCKK0weeDCX6oa/B5XiR5XI=
Subject key identifier: 26:67:9D:B3:7D:3B:58:B5:E3:6A:C3:61:E0:BD:3C:41:4B:E3:26:B5
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01A0B0F50307FDF57110579E7325C0DB8EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
Manifest number: 11FA
Signing time: Thu 17 Sep 2026 20:00:42 +0000
Manifest this update: Thu 17 Sep 2026 20:00:42 +0000
Manifest next update: Fri 18 Sep 2026 20:00:42 +0000
Files and hashes: 1: 8Hr1uTYn9-iLvJsHdtsL5Jf3hZg.roa (hash: ALf2f0JzISd3UyPZWmsk9XvraX01Mwn8kdYoc4TunL8=)
2: B4KYwS05QgHpINLFLm8jx9WAMUE.roa (hash: Y/ZtdGLIxiXNc+93eNU6l9a/8sOjOG7FjbIkKfPBPaw=)
3: CHlF7hxgiJMCvSrfgZpDmvUe7vo.roa (hash: 3cUTX1iPlbQoeoEy9GPcHhj4EZ6G/JFPu4+djGhZwgU=)
4: J__1HHACshyPBDOUFdqrFfiSJ_s.asa (hash: P4+NQewmqawZRA1cbeRpbU6AVi0HkrkZVkGActNtwQ4=)
5: TFWQMBrTQ_CUA4Cak7djWi9jRiA.roa (hash: iHPrQntxBQ8Yfodv7+5kSSwaLAG1oIn9WUEjo4EhvoI=)
6: WOAffnwybG4qj9V7edyDhpSbDkQ.roa (hash: ycSdSma33JvpNylbgkwuYkr1DaAfpIkfLpSIfBA6Am8=)
7: X-7RGlKtsXnKDGcSIk1zeqLC3xE.roa (hash: vlE/UfbvsTFziInTrQV9Dm8p9m7aTpBtK8sK1NvBCUE=)
8: X1bpbfnEeWysnkVlNQYpli_JB9U.roa (hash: z2gfYvH3Y3eC1HsP9BRSds53oOJzBhG8NMfygnzQq2s=)
9: Zaa1ETdAWKfFJ07i5VWdeKJq1Y8.roa (hash: HTBLtFAfHFVHfxP1ldP56H7tmRP+j3VLoPGVIHLY2sI=)
10: ZryCLfhsn2tbfNcOOBqTDrmtBr4.roa (hash: s6nWvNWtX9EXW2C5iu+kYBDobKWsqyYEDZBG1jZg8kw=)
11: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: GisJVOgzH6xoYzZox9s9xhzCsPnN6eIPYY8WAQbeBl0=)
12: gxo_Krn-tQ_Z3uSlx4SQJvS2R_Y.roa (hash: v4kU1V7WuMllKhANWEP+pXEZ9tPT1PxzJDS6a6AIcxI=)
13: j9lc-ex-WkmM9BnD45iMpsjwroI.roa (hash: ZeS0Wk64Zr/6kFmoZd3JWU6lISb8tSsRWZWDLFzpZ2c=)
14: m2JTyGp4X6-RsWcP55ddpkw-Hg0.roa (hash: 4rgGHVodyolHBv2C9f3mYQBlduQorUGZxt4DTiTwjJY=)
15: ryfEVRKZnK1jVhVaw9sfrzHqLCM.roa (hash: r6enxmx5xQGmlOEDSFrMxun8mtTQGChD+RDV9jYpnaQ=)
16: xakVfcHMl_3waxWLag9wjIyIEyY.roa (hash: 8zAufra/LX45mNIP6WBoxyrn6rEShlzjSf5RR8HSpQA=)
17: zqTDWnmSlSWX01iiSNinTnu0Zp4.roa (hash: ZNxewe66vaT/4odCrv5OwpxaOR47BEPKOgzkNOaHMeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 14:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:f5:03:07:fd:f5:71:10:57:9e:73:25:c0:db:8e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Sep 17 20:00:42 2026 GMT
Not After : Sep 18 20:00:42 2026 GMT
Subject: CN=26679db37d3b58b5e36ac361e0bd3c414be326b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:a0:2f:76:0a:13:f4:b6:e7:f5:07:75:fb:
71:21:4c:72:7d:50:4f:75:df:a9:2c:67:a0:9b:d2:
ea:00:fe:cb:81:ca:7d:d8:9c:65:1c:2a:fb:5a:f2:
6e:e7:a0:67:19:ee:f4:5f:a7:83:6e:0f:9b:11:bd:
bf:94:43:d2:93:d3:02:59:a1:36:cc:7f:e1:48:d2:
b5:03:a1:e6:5a:da:fb:30:0b:46:34:a0:23:6e:f0:
19:6f:0d:06:10:94:f3:92:f3:5b:be:ec:b6:2e:63:
95:94:ac:d1:97:3c:18:f6:89:52:b3:7d:c3:d6:48:
5d:3a:f6:49:82:f1:39:3c:75:d7:52:64:3e:6a:f2:
4f:30:d7:33:88:d0:1e:96:1c:22:4f:2e:14:10:54:
06:3e:d5:46:4d:36:d4:80:66:3d:49:62:80:e0:3d:
1e:b3:33:ed:ed:38:84:ab:d7:31:da:77:00:95:b1:
13:56:ce:35:79:56:77:2c:41:b8:17:c9:63:64:9f:
99:33:de:2b:ce:cc:aa:43:fb:48:c2:84:f0:ed:93:
be:3b:e6:45:c6:77:5f:37:fa:f6:d3:bf:4c:7b:33:
0a:86:45:ab:e7:31:0d:72:64:93:ce:5f:6f:61:37:
14:7c:45:a6:fd:b5:a3:c5:e7:e9:2f:64:6c:bd:1d:
35:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:67:9D:B3:7D:3B:58:B5:E3:6A:C3:61:E0:BD:3C:41:4B:E3:26:B5
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:69:dd:a6:94:47:97:6c:d0:75:dc:e3:20:8c:43:c9:f7:56:
95:f7:94:91:67:69:e8:8f:22:9d:21:5f:5a:3f:2a:34:e6:8b:
79:44:5b:85:23:b6:6f:9b:41:ad:e8:a4:fc:4d:63:6e:dd:cc:
88:c2:02:fd:d3:e3:1e:86:69:8f:b2:5c:d1:97:00:c7:41:4c:
97:86:22:fe:1f:5c:4f:42:38:da:62:a5:0b:e0:a5:f0:df:57:
17:f1:71:9a:f9:90:22:56:da:c2:5e:83:5d:a5:23:76:18:ae:
1a:bf:f3:a4:03:64:3d:b2:b8:7c:f2:27:4d:8a:7b:32:4b:7c:
66:07:c4:b7:d9:d1:bb:d6:bf:f2:9f:83:71:dd:4c:f5:0d:6d:
ae:8d:b2:93:d2:7f:34:78:3a:97:de:c8:64:a4:e3:ac:16:86:
5b:c3:e5:b3:a1:7e:90:75:47:91:a7:bb:ba:99:bd:6e:2c:72:
7b:26:12:2f:c4:50:bf:c6:12:51:55:94:37:87:3c:f0:b5:1f:
a6:ad:a0:86:d8:c8:3c:2a:ad:88:6d:79:f1:d7:e5:90:c4:4e:
d2:86:bf:27:15:c5:df:30:31:02:d4:6e:04:d2:57:11:e0:3a:
2f:3f:9f:36:74:34:a6:0d:e9:e4:23:44:1d:c8:b5:fc:cf:95:
02:08:51:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 00:34:41 2026 by rpki-client