
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json)
Hash identifier: gnUPnbdG3hJxjzQBoihTkQIwHyIfVdShPPJDJPbGebA=
Subject key identifier: F9:24:9E:5B:86:D1:60:BE:51:42:56:AD:98:51:4F:6A:57:7F:A5:F5
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 01A00101510E2D73D37F0BC1B41C8DEAEDE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
Manifest number: 082B
Signing time: Fri 14 Aug 2026 16:00:58 +0000
Manifest this update: Fri 14 Aug 2026 16:00:58 +0000
Manifest next update: Sat 15 Aug 2026 16:00:58 +0000
Files and hashes: 1: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: 7axG6owJ15NmOzwAv7Z2Rqsj3Le7qgyL3LpVtjR0VJM=)
2: 3MMGuyxk5BA1h4yKFwGuekYBWpE.roa (hash: qDDPw4rjqe8Of6FqTmZ8vNfrRu70pioyOFhkznkxbn0=)
3: 7PMwWghG1f2GH2kcgJJT1T19mKA.roa (hash: iSWM8zD4dnBfc8rm3hdCfD29wpDU7MXGImntX+CzTys=)
4: CUZDkD-NcFvyMKKqxpqKTImWldI.roa (hash: BjgaQINh/o8BqluKWpCRQpHRBGijPayFIzTWLEZZ+ZQ=)
5: Dhrq3603FXAC1wqjo20wzUmr4F8.roa (hash: 93F+LmWkBd0KITwFzxwwnm7wh1Nm582E0rUj/2gWiKA=)
6: DlLXddAis5e2NiYpDlPFgCC2fqQ.roa (hash: wChHj1a1SOAqKO2XbDKNiJzmDLWZ4VK+PUQtszQXCaA=)
7: aoX3qgSrCGpVmGI2-sNdQlbBEmo.roa (hash: fUASGNwLnomXxmckWPpEyeY/fBQ9vTiFVyQieAo28z4=)
8: cojKfvUL96n8v0NW6xv7i34QuKg.roa (hash: lYPKoP4F96eul1kxPLkPqkS5F4CgrEIREjfk+V+jg3o=)
9: f-9ciEqv18Kub9fxi8gMgTEDiN8.roa (hash: ys7Se75WP1iZvGd8oeyIka2FlXVNvmTKA8g4Bz+pUFE=)
10: pPL6_ILH_OSb0uend9BsYY1M5zM.roa (hash: uPRcSj9Qet/R5RDAAlJ1xCgadEw0HnsrDGUuZztgzUc=)
11: qse_CjeAhZ5mrJaaeqQbXdzwq6c.roa (hash: DcaCDcXxQuFqUhYc0T6gyos8/cyyoYS+q0uMnwfEmhU=)
12: qvL5cNpCo_XaFCNykh7Gx2HPj7A.roa (hash: Je87v5hgNV1x62aPiR7j/Cjy7ey6GNmVdBbyWoayWLE=)
13: rtaxspuDF4uli6my-kG3x-CfzyM.roa (hash: Mbr6HPYPHlUpdc2sSsGgV2VBSnLTCf311AToZ6BeZWw=)
14: sRTNLbJ3g2jrnoN7xO2uBbfWguU.roa (hash: 97xAwvGhhXW1GC5fGvIVMkcoGK7MfJbMcwrs0H6Prc8=)
15: sSEuPuJKSwvGPl8OYtUAbNgjLFs.roa (hash: t6MnFRdD+DMOOopxl5hauoDky6UirAHK0zqLM5bjQWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:51:0e:2d:73:d3:7f:0b:c1:b4:1c:8d:ea:ed:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Aug 14 16:00:58 2026 GMT
Not After : Aug 15 16:00:58 2026 GMT
Subject: CN=f9249e5b86d160be514256ad98514f6a577fa5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:e6:bd:2b:6c:10:a5:81:d2:bb:fe:20:99:
af:aa:2a:1c:61:be:2b:5e:9b:c5:b6:28:be:2d:b0:
8c:d6:f6:38:b8:ed:3f:31:0e:46:88:ef:22:c8:21:
f4:1f:8a:90:5b:6c:73:8f:fe:33:c0:ab:7a:64:c1:
63:86:fd:2a:d0:92:ef:72:35:f5:8b:a8:a7:66:b2:
d5:61:10:b9:be:69:9c:52:4a:10:cc:a7:ae:28:7e:
7f:df:a8:ef:db:40:77:05:8e:4a:35:dd:c3:88:a4:
90:78:e8:30:6c:d1:09:2f:27:c0:ff:d3:b7:ba:6b:
98:94:b5:14:b4:9a:9e:48:a1:c1:82:b8:2b:66:91:
51:76:8e:c3:01:1e:e4:45:1a:a9:98:4e:54:e0:23:
1a:bb:6f:a0:48:87:27:c2:03:f3:03:ec:77:73:73:
44:3f:68:06:11:d1:c0:eb:ba:19:ed:b7:0a:d5:d0:
22:13:96:30:73:e3:e5:0f:33:c8:74:d4:a2:21:31:
ad:79:ee:be:cb:d9:24:1d:9b:a2:c9:74:f0:6c:7a:
93:8c:ac:d5:ae:ce:ae:97:49:1c:84:84:63:3f:44:
59:80:c4:de:47:2a:eb:14:93:48:b7:d3:08:ba:c4:
60:72:a4:62:07:1d:91:b3:be:bd:0f:f7:8c:ca:13:
d9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:24:9E:5B:86:D1:60:BE:51:42:56:AD:98:51:4F:6A:57:7F:A5:F5
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b6:be:c8:85:a6:96:84:0f:14:1b:55:84:09:c8:6e:eb:7a:
88:b8:14:7d:f2:40:c5:71:ab:75:41:46:d8:b6:85:14:09:3a:
4c:b3:73:90:02:9a:64:cc:63:2f:b4:5c:53:96:ec:7b:fa:f4:
32:b6:fb:9c:5c:3c:2b:41:39:5f:7a:a9:88:61:9d:c4:f1:58:
43:7b:fd:78:3c:2c:6c:8b:c0:20:07:79:f3:b6:00:22:dd:0e:
7d:c2:f6:aa:2c:41:5d:8b:1c:9e:36:57:43:93:4a:ca:0d:af:
9d:9e:5b:b9:45:13:28:b7:5a:17:3e:f0:e1:bb:a2:c0:6b:28:
e5:ed:dd:f7:57:b8:0d:3b:86:85:ac:92:82:6e:8e:70:c3:08:
4c:00:15:62:e5:12:5b:67:67:d7:f4:e9:f6:1c:57:73:94:d7:
b1:ee:b9:94:5a:e8:80:b0:0c:2d:82:b8:21:15:aa:9c:63:19:
cb:6a:09:e7:67:a5:6d:b3:72:32:22:75:a3:8c:74:7a:8e:06:
e1:5a:d7:57:18:79:de:cc:be:8b:97:15:2f:cb:aa:c5:4c:53:
00:0b:02:2c:a6:6e:3e:f6:73:5f:b4:19:ad:f6:e7:d7:62:3e:
74:de:00:c5:04:63:e6:71:2d:93:2e:cc:bf:37:92:1b:1a:58:
bb:21:46:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:56 2026 by rpki-client