
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
File: iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft (raw, json)
Hash identifier: hgMMnDc0lgsWZJnHDc5HzPpcizYzWUtMOfB9KBYRkho=
Subject key identifier: 3D:98:8F:EA:D3:7E:DA:82:C0:AB:35:14:C5:2F:20:C9:EF:82:62:67
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial: 01A110E0922E70FC3F77D806E91911834018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
Manifest number: 03D3
Signing time: Tue 06 Oct 2026 11:01:55 +0000
Manifest this update: Tue 06 Oct 2026 11:01:55 +0000
Manifest next update: Wed 07 Oct 2026 11:01:55 +0000
Files and hashes: 1: 9CW7PS1O-yaGQw798fnARuiUrJY.roa (hash: pJA5oJPC8LVm68jDybSlz7FMMO+yc+xxykw7/S2Fs08=)
2: F7I5rnkHLQ8PitpUJJXzJQnZJaU.roa (hash: mzXoIYY5/cdBAcGj+HsD/eRCWuIVU1w+4VfWf00hQ20=)
3: INCU2iAXvTzNbBMSAxlrItQxyhA.roa (hash: QjZs1QBxW0pY83BtGBXtgMXwn/IF6AETwK3PZKsE2JQ=)
4: Jf0IiUw2yxEGHU21X5UBjTTFsPw.roa (hash: iznEwndgoL7LQZ3si+t9hPfxRdTHhoHEK3Tm2NJNWr8=)
5: Q3Znim6qxleuhiANfuzqn0XQe7Y.roa (hash: xqiLzxwXQFjHq+9P4kBJ5oqn9VLWT6Mr5rM7CUckdIc=)
6: UsGhEaTVOTKiKiirGjznuF2Gaak.roa (hash: F1w1woKo1BbT5Id/y5MMOZaDCzO3XoS91p9xrahgbXo=)
7: gjdIx7JpQJjhJVIboXcukmsgReA.roa (hash: 6IvSw94J4Pwlc26GeUiHVjeQmmn49KLLbVomZAh3xKI=)
8: iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl (hash: q05G8zVV8iDtN+DovCpg7Q8unx9/DvpXkdH54y2WGjQ=)
9: jJlQZpZevpI7sI0qTXUB9jMuUv0.roa (hash: sIoAPPkOgjZo6KC8AV3+ukTiCzKXpwR8qem4+cLmkos=)
10: q-RWodK7a-3CkL-IcmgLBAtseBw.roa (hash: IdzRoZdWnPk+8n2VcM7Jqg89nCMd+QL98y/Yo8OkRK4=)
11: wYwUaKIKd-bY8Wo70jEekOpz-dA.roa (hash: r5OOBgo8FfNpqi69a1yE5xLz64FR5eB/1u8J9jN8CoI=)
12: zCh_Z-NL-lt9latA7DFFhUPPEEE.roa (hash: H5XNQm6vSeKYsENIaBhTZdYpRcyi8dMupOSZNrKXWpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 11:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:e0:92:2e:70:fc:3f:77:d8:06:e9:19:11:83:40:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Validity
Not Before: Oct 6 11:01:55 2026 GMT
Not After : Oct 7 11:01:55 2026 GMT
Subject: CN=3d988fead37eda82c0ab3514c52f20c9ef826267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a7:ec:f6:4d:25:ca:e9:9c:62:3e:06:02:87:
2e:e2:3b:f1:6e:9e:fa:3e:aa:20:60:eb:12:85:8a:
50:4e:57:26:07:32:2a:59:4f:19:83:74:08:93:3a:
fa:a5:b7:55:45:23:5c:dc:bd:84:87:23:56:6e:7a:
83:4e:1d:88:d5:73:27:30:48:f7:a5:e5:2e:f4:01:
61:37:9c:f1:e7:aa:2c:bd:a0:32:3c:c9:d7:b3:ee:
eb:65:fa:39:a8:5e:12:34:ee:78:7d:60:ba:b1:a6:
af:2d:4f:b5:bb:67:02:95:cd:98:9f:e1:89:e9:2c:
b5:b1:f4:5c:98:f3:25:25:8a:0a:b5:14:8a:01:7d:
68:0a:8a:f4:48:69:55:83:bf:5a:45:ce:f4:d0:94:
b9:f2:dd:8e:72:2d:1b:cc:f7:aa:b3:2b:85:bf:9b:
e7:7f:57:f6:ba:9e:d0:74:7a:74:3d:d5:05:3a:60:
9b:3c:d3:02:8c:0d:89:95:cb:fd:7d:1f:b1:5d:9c:
07:9c:f5:9c:6f:23:7d:31:a1:ee:d1:55:66:28:98:
c0:a1:26:92:ca:07:44:4b:3e:6e:80:0c:53:8f:f0:
29:be:3d:f6:c9:41:46:23:cb:e7:51:91:05:79:32:
9e:7d:73:cb:0b:c8:b2:35:5d:41:1f:e3:7e:79:fd:
23:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:98:8F:EA:D3:7E:DA:82:C0:AB:35:14:C5:2F:20:C9:EF:82:62:67
X509v3 Authority Key Identifier:
keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8a:20:cd:98:dd:e8:3c:49:00:6d:17:ea:7d:fe:7e:15:fd:
95:e6:57:66:3e:f0:47:f8:47:ed:3a:96:02:0d:81:52:e7:14:
42:4d:fb:5e:f6:06:03:59:60:9b:51:13:81:83:67:28:d7:16:
d0:2c:11:ae:8c:e6:59:f2:2e:b2:f3:d0:ab:9a:cd:99:a1:44:
e2:b6:b9:7b:e6:77:b8:57:96:e1:be:a3:14:1d:5e:8e:e8:ab:
2a:c7:83:77:09:cd:27:5e:fa:fe:7e:e2:29:07:a4:0d:41:e1:
46:3e:50:68:87:5d:6f:60:a3:6c:1b:37:9f:5a:d3:54:7d:f6:
15:27:9c:3d:1b:43:4d:7f:c0:c4:e2:2f:43:38:d3:4d:f1:4e:
1b:61:57:0b:be:55:7e:35:0e:d0:61:7a:d0:9d:ac:a2:d9:10:
d5:7c:90:a1:07:ce:c7:91:0c:19:45:c3:3a:0d:ae:b9:01:06:
76:74:4e:dc:81:d4:dd:11:28:99:85:2a:75:7e:2d:32:b7:e9:
0f:ca:93:81:bc:37:40:05:1b:38:64:b2:ef:0e:84:c9:04:d2:
66:ea:22:dc:20:31:03:13:1b:f9:eb:a5:e6:82:16:81:f0:b1:
13:3d:bb:56:c0:eb:16:3d:6d:51:a4:5b:95:b7:b9:5a:05:0e:
25:09:3a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:00:26 2026 by rpki-client