
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
File: dqdYJumRIlpCn_ih5__cgEZkIN8.mft (raw, json)
Hash identifier: dMscDZgdx6kMRKUu9wID2buNOrkXFT1OXWneTMAft+0=
Subject key identifier: C1:B8:AF:43:E9:C1:87:11:69:68:07:C7:A6:8D:68:04:C5:D1:B4:1A
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 01A1795EFC37B05DE975F610D3EFEC40CB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
Manifest number: 1AEA
Signing time: Mon 26 Oct 2026 18:00:30 +0000
Manifest this update: Mon 26 Oct 2026 18:00:30 +0000
Manifest next update: Tue 27 Oct 2026 18:00:30 +0000
Files and hashes: 1: 3lVoSteGkpKcde56m2WcsA8N-s0.roa (hash: 1XrtONYMpJVe4WnBQhEVaGnetVY+4paKXOigWmRK674=)
2: 72qqOl08Ng_75PrEX39wChvsHq8.roa (hash: wdAGiwDNclYEAAkLFN5CEwmjhcr+4EBdtbN76kXOOjo=)
3: AFJzhmH9R0mG2bUCJPJT6j8bKrw.roa (hash: EzibNTyau7BTPE7oIO9TUlGehtGq8uPVCAnORk3k9nM=)
4: HBckW3ER80MSeSiwpy-Z-q1qiGA.roa (hash: QBBHo4qiNBL+JHuv6YtHpt1D3ezGsz5yopdFgNvM84U=)
5: Jj6QniBhg0ekrss-TvVc94h0S2M.roa (hash: qf4l8DU2kkBt1QRzcva1hlT0ObLg86RVHmV+gl/DthY=)
6: M_Zrv0eTt-hhAHKM89cDFtPfvPI.roa (hash: 8QhFDfLhK8OB14NksFoRCKIZ2O0CQM/pbJL/g+vvAt4=)
7: Piwh6Gdq7GydD4rudpdk_H1-iJ8.roa (hash: wtN9D7HevPrfH3K/IMhwZNny7MHPmsA5+nenLp6rWiU=)
8: b4ESO_pvGgCqVp88yRCz-5OoSf0.roa (hash: gzB0VXXq99U/xkP9oWFBiaWwqsbZ9lY1uOT5L1wm/Fk=)
9: dKz_j_O-lAoD6qg2pO9vZUA4BGw.roa (hash: AKN2pF1PfbziQzZH+0SJyj3F9OOfW1sRqDb4wG8eZgw=)
10: dNznR1-S7vVnFASVh_hci4jZkMQ.roa (hash: zQ1QJ64mxnosKyQobzETFihGQBbENfar+9z/U7xN1lc=)
11: dqdYJumRIlpCn_ih5__cgEZkIN8.crl (hash: Il0gFdNCCHqmrw8YBRDBhEzuElgVz/ixnb43osTMiDc=)
12: fUNqCWuIckYGiVfEbuqCIkLI6d4.roa (hash: 2XlV9ynqjk3ChcE4Iw5juKC67TwbxBsySYHKnmHonQo=)
13: j2x4B6ObPzHT8ea8R_EMWP2PPik.roa (hash: X9UYUryQZPrf+c81HDCEnwfx3vw9iA0hQ/eJMGoOoMU=)
14: lkbj_rHQ3odPB7yMiampsN-UZno.roa (hash: qptKUULvCznnpcjyPdRsDYHUthdNfWlbjNhIIyjJ/gg=)
15: mcWyzJOHr9Zx7r67vsArKVYzm-M.roa (hash: jPJa6OTo4Vh6SlUAyeSF3ybtpQx5852t+NVU3VYBCWg=)
16: p5-KSOQJoRc-a4h6VGwthwBmpAw.roa (hash: Oaku+ye04iIHVUwLwL5t3yBGhVH08pyoMvs2MjpbNqY=)
17: qrN-Uu0M-3HDr-76__U4MO8Jem0.roa (hash: F/0Bv+YLgCLY8hUXxBuIT6dqQV4aBe4yFDyDrHdklVY=)
18: sN7KZAb0tSBb8kQXanj5RVDo87M.roa (hash: sNtlv5Kfns7Qub92+PG+1MiYKqG3uVLYzRGiFbw3ks8=)
19: u3HM98A-Q9MDGyUnaURhtvW-lGU.roa (hash: orjD4qXj9t+4NhQVjT8wKDidu8IPZ4dL81G059Mpu9c=)
20: vbIqeSU0561jYPf76GOTQkgqkkU.roa (hash: I6pxxL2tdL5sG8uXzs35tb/DbPA84Se4ObiynAzOPa8=)
21: xFb3afKCHZ5K-TLErHfTSuMJKOU.roa (hash: 6l4PHj5QdfEodyTxnZX/6jrZVq4xk62zNf4EfjYJEmo=)
22: y2z9eC0pey0L-F8Me0uxP0CdRNE.roa (hash: ynALlANptr3j2opU4Eof0BTlyqYbPLK8fhfTetUFwTw=)
23: ygWs-sHzivtfoMPPnMV6aV1UCv4.roa (hash: KjRCKq03kFFE3PyzvTA3OcOazG7q6LPfF+mD7puBZ4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:5e:fc:37:b0:5d:e9:75:f6:10:d3:ef:ec:40:cb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Oct 26 18:00:30 2026 GMT
Not After : Oct 27 18:00:30 2026 GMT
Subject: CN=c1b8af43e9c18711696807c7a68d6804c5d1b41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:9b:20:32:ca:88:10:bd:4b:08:82:49:86:
a9:73:76:35:e5:19:f2:31:c1:53:9e:45:0c:0c:df:
91:58:42:20:fd:6f:d3:db:14:37:13:1c:d8:ee:57:
1c:6a:b3:3a:4c:50:b5:43:09:75:ed:a7:b9:12:ed:
17:87:04:14:58:45:30:c7:c6:3b:e6:a2:66:1b:4b:
e2:1a:24:c5:69:82:59:36:81:ef:52:60:5b:51:b1:
b9:42:68:7d:78:5f:89:05:9a:48:29:9a:5f:74:47:
bb:ad:fb:3c:f7:66:41:99:12:8b:ee:71:24:18:8b:
64:5c:8b:f6:78:37:5b:36:ca:19:d0:3d:af:ee:2c:
af:65:7b:dc:41:d5:06:f0:da:58:7b:72:be:30:b9:
d6:ce:3f:51:21:9c:b0:dc:a1:5c:8b:e2:43:4a:cb:
39:59:b5:9f:b0:da:f9:53:10:bf:a9:19:5c:87:ba:
e2:0c:6e:89:0a:46:01:75:00:83:99:b3:5c:72:a9:
8b:6e:b9:41:63:98:56:79:7a:cf:58:da:9f:a9:97:
83:d9:a5:e4:d9:99:80:2e:63:a1:e1:ab:4f:20:1c:
6c:7f:fb:25:61:b6:cb:a6:f2:8a:c5:23:53:e0:35:
a3:d3:65:3c:e8:a1:b0:ed:02:1f:08:d6:81:e0:0f:
cb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B8:AF:43:E9:C1:87:11:69:68:07:C7:A6:8D:68:04:C5:D1:B4:1A
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ec:fd:05:87:e7:96:ea:73:67:5b:7b:de:67:ad:b0:82:c0:
a8:04:3f:c5:da:3f:a7:3c:c8:7e:97:25:a9:40:7a:0e:58:50:
9f:c0:bd:43:79:0b:a6:8e:03:26:98:3f:d7:7b:e2:c1:69:02:
3a:97:d3:05:44:09:d3:d3:e3:02:10:da:3c:f4:5d:b4:c5:10:
ce:be:cd:23:95:03:71:9e:b2:2a:23:e7:18:ac:c8:38:ac:e4:
ae:7a:2c:36:2d:d8:64:69:ef:e8:7e:f0:71:57:13:38:cb:ca:
d1:25:4d:a2:4a:1d:f4:83:64:a9:74:da:27:4c:2f:be:7a:4d:
8a:3b:8b:00:73:6e:d2:0b:b3:63:72:c4:0b:eb:79:ea:12:78:
df:36:9b:79:e1:c0:bc:08:4d:68:f5:e3:98:e0:f1:6f:8a:9f:
da:f9:48:a9:e0:1b:68:f5:4e:7b:3f:4f:fc:15:f7:3d:52:9b:
3b:cf:3a:04:bd:b3:8a:42:a7:48:01:f8:ab:df:b0:74:22:58:
9e:5c:d4:cb:6b:9f:bf:73:8f:fa:5e:3c:b9:d9:7e:ce:c5:a2:
d0:46:4f:ac:71:9d:7c:a2:e1:70:2a:32:87:b9:9e:65:e1:53:
89:cf:4f:cd:6f:ab:94:16:73:9e:27:a7:78:5a:d4:4e:3d:60:
a1:bc:0f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:53:21 2026 by rpki-client