
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
File: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json)
Hash identifier: 5hCYJmWH07SGzhXa/4WzO2xSXZn7yJyvelwThuHLc+k=
Subject key identifier: 9D:6A:B0:3E:5D:17:E4:BD:68:F3:BB:20:C1:B3:D7:5A:E6:C5:6F:A2
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 01A0BE0BA8568AC4289A4CFE1C615A3F0A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
Manifest number: 1A6F
Signing time: Sun 20 Sep 2026 09:00:30 +0000
Manifest this update: Sun 20 Sep 2026 09:00:30 +0000
Manifest next update: Mon 21 Sep 2026 09:00:30 +0000
Files and hashes: 1: 0cWx-DBEWXofQGq4uONjR9-bH4Y.roa (hash: pTkOoFQAT359monWmVl8M1BT8bJvgYKuEr63L6+DXH0=)
2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: CdqId9qSVxpclI2Py0oMEerN2r3HcJC2kf9oos8QecQ=)
3: AoOT9bGlJWd-TIRNHpKTWvzqPSY.roa (hash: Zi71VPuABO0kIOBrih/loFOATBl1klL+p6nG7AFF/d0=)
4: Bcd1BhwhrloaAtNtyP-2iXTXB5A.roa (hash: dwpLC5kz/iKWj1XEBoyZJZ2yN/0XmLy1ykd/NJpK0sU=)
5: EUgnWUs3CsfaZnj_hnNyvxreJoQ.roa (hash: pJY6CLyIZmy66AbMBmwM31A1sACoy25h4xx0+iPYYKE=)
6: MP5IdtDl7YEwuRNByyv8kDyAVco.roa (hash: vqDoHpH/1+pER1chx+gV6UvPLCxswhMzI5LmhtQHsu4=)
7: TJn7hrwQDusGI6b-JvzCy0ryuuI.roa (hash: jB76SwGUuXPBEx6T4Yw/Gggaft9shy0ZMidb4G0i9nM=)
8: UNIm3YXiMDOMkRxhMMlo6vVHArk.roa (hash: Tj2pYqF/A8kH66w2NIt64SQxibERr8EqlG3Fz5Bjgag=)
9: UX6g7KL9WRWy9Rrda_z2jmHwIg0.roa (hash: NgIQIWjEkGD0w0vEE9BTQb05Jn1iZvBqKIdoPQLt1R0=)
10: XUiE35ZJ3I6RBM2rDx0ESiNgluI.roa (hash: k03+qzTCxQ7lrjUzBfLF9RxlBcgnBj56L5MGzoB6xFA=)
11: _6SUA7PKYEVFBTaDAhE_A7MmF48.roa (hash: uJO3tMs1LSBIuJd7osQRiXv584cj5QanzKyRrYPze+w=)
12: cOTwaK6RSeeGqDttEyYUstwdoCE.roa (hash: alEZzagowBG75tk1HZniA5+5QPNp5iyxbE6HUR50PHQ=)
13: fJWzhiz6ayYsqM8kzsREYtIJBgI.roa (hash: N8Chz/wqQxJEwp3lnnRBhU8gdawDyJefdia645ECTwg=)
14: gfMRF0Nj1ChxrdQTcKCsvqZqzRA.roa (hash: VFwJmY7TYTF5JsUpp282lqGtLaHhhYMOSpBJGNGXiME=)
15: q7ctECBBEGOXl7uVauozGHraScs.roa (hash: gH9pmibDk4Ofnm2E38XD3fGrNK+1ocC6xSl5pld1ojw=)
16: qyuH8NgRhRZdTsIxcPjney8uG5Y.roa (hash: n0uUMyMPIGkKTSZ3n9g1M0rkf82uD6ttedakSVtd8tQ=)
17: vhCKx6YE6UZfYQ_y2if0T0sJx9A.roa (hash: 4GxEPZps/hQabeBQl+bTu8j92zD3sd9eABLT3Mr/M3g=)
18: x0r6XLUbiGOM5wv_gPZskGbu2oc.roa (hash: cdp8ZKRLyyEX1Hh8O5VsarJhdWV3a3wqBRxkXALsMf0=)
19: z1vIHaPgOEf1CFFXxVhQ7UIS68w.roa (hash: rFdz4/+higPiFTrvJsOTs2dDOqXP1ja44+BB/HAKISI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:0b:a8:56:8a:c4:28:9a:4c:fe:1c:61:5a:3f:0a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Sep 20 09:00:30 2026 GMT
Not After : Sep 21 09:00:30 2026 GMT
Subject: CN=9d6ab03e5d17e4bd68f3bb20c1b3d75ae6c56fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:53:2f:81:ea:b2:c6:d9:8a:b9:b1:d8:c3:
2b:0d:0e:78:8f:3d:53:39:4a:53:98:af:4c:db:59:
c6:44:f5:b3:e3:fa:28:29:dd:8c:14:4b:27:9c:e9:
a7:fd:af:22:c1:45:88:7f:3d:a8:3a:c6:0e:71:d6:
ce:88:df:8d:af:35:60:3d:a1:32:bd:14:23:43:36:
1c:73:81:34:af:16:50:e0:8e:03:2e:c0:2d:77:53:
dc:29:7c:7d:af:09:2b:df:45:7f:e4:08:0d:b1:2b:
3f:1d:0c:a0:52:e2:ae:21:d6:22:ca:5f:32:fd:75:
51:ad:a7:e7:c7:cf:79:cd:26:6a:b6:ce:13:3d:d6:
aa:64:48:27:09:33:f0:51:73:3b:18:29:71:d3:2e:
ac:c9:50:6b:f9:3b:df:6a:7b:76:b6:c9:b2:2c:45:
2b:c8:44:6a:92:3f:9d:f5:ac:42:4c:32:04:57:33:
79:5a:70:1a:7c:d3:17:6d:6c:6d:e7:29:75:00:61:
3b:c9:f6:bf:db:68:d7:e2:71:06:8a:d4:b8:cc:21:
92:b2:e2:80:d6:db:6d:06:91:7c:09:1a:0f:0c:0a:
a6:1c:19:ba:0e:2d:22:87:b1:9d:5e:21:48:8c:07:
2c:e6:eb:1c:25:ec:a4:e6:5c:ca:99:76:d9:de:45:
b1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6A:B0:3E:5D:17:E4:BD:68:F3:BB:20:C1:B3:D7:5A:E6:C5:6F:A2
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1f:8f:f3:62:10:6f:3c:ad:14:7e:37:66:dc:d4:ac:01:c1:
cf:c4:e9:54:9f:d2:c4:71:0d:1e:7b:72:03:e8:41:d5:8c:56:
0d:6c:da:78:a1:0b:90:98:a5:83:22:b6:8b:20:df:38:e9:39:
93:65:6a:f6:4d:87:db:bd:cf:ca:f8:05:cc:9a:43:98:9b:56:
22:47:5b:2d:6b:2a:64:a9:11:a3:60:cb:bd:e6:a9:c1:a5:ca:
c8:40:53:cd:66:c7:79:31:34:17:17:f3:0d:e6:f3:33:10:24:
1b:e4:dd:21:09:a8:c4:14:8e:0a:80:94:5f:bc:7e:12:c3:13:
62:64:73:d9:63:c6:18:d9:6b:2e:d1:7d:19:22:c5:e0:92:0c:
43:a0:a4:73:3d:11:9e:2e:17:fb:d1:ba:aa:18:5a:f4:9e:7b:
5a:84:b4:70:d2:be:e4:0c:20:66:c5:92:92:84:d5:6e:27:1f:
12:6f:7a:26:03:6a:7d:91:e0:8c:54:8a:89:a0:38:1c:70:e8:
9c:ef:37:60:a1:4b:4d:51:16:5a:e1:6e:2e:05:01:33:df:43:
b7:42:dd:c4:55:4d:62:7c:aa:76:51:27:1f:da:01:b4:58:51:
7f:4c:e6:c8:48:90:34:4b:5a:b6:c4:5b:07:de:5c:4f:f5:e0:
fd:cf:05:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:03:11 2026 by rpki-client