
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
File: A9uVtDb1McTmAvOWEK1T4m_f8VM.mft (raw, json)
Hash identifier: nZigsqlzHRBgx3/AuGt7tIqrlhjA/uOh2qiLHhOiz9k=
Subject key identifier: FD:37:C1:3E:1F:D1:B1:8A:75:CD:AD:69:96:D6:7F:93:98:3F:40:79
Authority key identifier: 03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
Certificate issuer: /CN=03db95b436f531c4e602f39610ad53e26fdff153
Certificate serial: 01A16120168CDBC5BC6C66A75F887670B860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
Manifest number: 96
Signing time: Thu 22 Oct 2026 01:00:55 +0000
Manifest this update: Thu 22 Oct 2026 01:00:55 +0000
Manifest next update: Fri 23 Oct 2026 01:00:55 +0000
Files and hashes: 1: 1_QmXSAoe0b8taNpxUnZobBZmPQ.roa (hash: 9SMBjKl9NUPhxIwfFFPsmWL9Xi6y6+eVN85q6Nncpe0=)
2: 1tJAgJmhFm6tMKpDwmcSt62Wn2s.roa (hash: N0+o9csLGlYXJvMSXqhtYb68mdXEYITcI45kRR5Y4yY=)
3: 7GR9tyFM_wMH98KUr6tNPpAI-jI.roa (hash: arvKwCfJlej86zLOUUxwoknPTtk8k66vGEDXuGtJauo=)
4: A9uVtDb1McTmAvOWEK1T4m_f8VM.crl (hash: W/unkgWl2RtTz7XC20SQwmOHMptrAsSqkhlDnk6TIj0=)
5: B1fQ2LImDzdDVrCDt4hIE8SUiY8.roa (hash: 0qzVZwboOKOK4wMKRb+MgasxkdGzjvY5iwVbOB4L2Vk=)
6: MKwiTdenphsYJ_kfTrcYo6UcD7I.roa (hash: nL9/mDZHDkh6gnqmoDFsouH6WUNsxINNDWtgs1jzkN4=)
7: Udd8VR3v6kWAPxifsBkp_SMlTzs.roa (hash: KfN08etDIWVn0Cz/yeU1yvPeWnaf4FOHuTeCGL/wkRA=)
8: XSfbPkvAFn3bhwJrBb3NgfJrWWE.roa (hash: e15uaNhvcCYBGRuKUIfJisu17/id98Z3TDf9Lo+NzRM=)
9: c0ZhaaZLIq15Oh_EgpTHm1B0c3Y.roa (hash: KT9KE79BSMnOUe9aMNfX3v6pUeJuFhmDw4RlRZ4SGW4=)
10: fJfk9udARV5inAKL917bZTd1EeQ.roa (hash: +ZHDuvPpsboDixA57iFt3QrxGUysB/3TF0CL20bof8s=)
11: lACClWJozZ2tD2fNvzjVVMhwmwI.roa (hash: IjdsAeFrshBWpjF/8m+vmuGJHcJ+aPot1Nr+V0xwglE=)
12: pi-ROLtMli7awGKUJO7UQ8Lvjn0.roa (hash: uwBBbyFPu4jWRTLTB2q1IA2l9Rly7f5Y/eDPv1LfJd0=)
13: q0L4UH47dCCDH60yZ_7AGNsn8qc.roa (hash: R7WRquGBsi9blcrsLvQ+AKqFw8Ezybqro9Uldd7Wbk8=)
14: sxHKxaxeqjCtyAXNtZ5N7PdG5kE.roa (hash: N2Kx7hvudVkhzuQ3LNBFw9LCsukl6jF7WE6axgq0NWY=)
15: uuQfg9kOGM3Zs2fZiwSZJKx0Frg.roa (hash: ccvfSFwgf7wVJZtroZjn/1/gK5jeTRUamoxFt3ZuiG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:20:16:8c:db:c5:bc:6c:66:a7:5f:88:76:70:b8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03db95b436f531c4e602f39610ad53e26fdff153
Validity
Not Before: Oct 22 01:00:55 2026 GMT
Not After : Oct 23 01:00:55 2026 GMT
Subject: CN=fd37c13e1fd1b18a75cdad6996d67f93983f4079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a2:69:80:85:f4:fa:aa:ef:8b:44:a6:43:cc:
88:71:62:01:4e:6c:b0:09:1b:9e:7f:60:f4:36:d2:
36:4c:d8:d7:fb:1e:5d:0b:27:5e:58:23:80:d2:fc:
d6:c8:03:a5:ef:e1:76:13:1e:35:e4:c5:80:34:ff:
f7:45:5e:66:e2:42:a4:22:41:d3:64:b4:55:38:a5:
9b:33:d9:a1:e5:70:c0:5b:23:f2:f0:97:3e:52:5d:
ef:56:19:2c:4a:19:2e:7f:76:fc:48:d7:d9:d4:49:
4f:93:59:cf:17:42:8e:17:ec:00:47:c3:32:8c:30:
2a:0f:dc:bd:94:f9:07:08:a6:5b:1a:63:fe:5d:ca:
e0:66:f7:a8:15:91:51:f6:6e:61:27:cb:dc:fc:77:
4c:84:56:da:07:9b:45:2f:01:ec:f6:82:3e:dc:6e:
e7:ce:8c:47:e9:52:cb:1c:84:a1:d4:ba:2d:a0:b0:
e8:59:a7:48:2c:84:a7:88:44:35:a0:80:92:29:8e:
4a:0e:9d:64:53:9f:7a:68:35:f3:14:3d:26:cf:fa:
57:a3:68:2f:0a:00:48:c6:00:bd:84:f1:ac:31:e0:
cb:ee:b5:59:8a:92:82:bb:ee:5f:89:59:f4:45:19:
d3:f1:b3:bb:e9:e6:ed:50:22:d5:40:79:92:37:fe:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:37:C1:3E:1F:D1:B1:8A:75:CD:AD:69:96:D6:7F:93:98:3F:40:79
X509v3 Authority Key Identifier:
keyid:03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5e:13:db:f4:c5:1e:67:45:87:77:99:a7:d6:49:2e:96:1d:
36:09:0d:77:46:24:d6:6a:e6:19:18:bd:3d:1f:0b:b7:16:ad:
3f:1c:88:77:c9:4d:26:ce:6f:bb:2a:2d:2b:da:f2:34:87:dc:
d6:57:8f:50:7a:e6:59:0e:36:02:b1:92:d0:2c:66:03:f8:89:
03:95:61:8e:e7:e8:25:c1:cf:87:e1:aa:29:6b:47:e2:53:00:
9e:6c:c4:8b:b1:a3:62:4c:4f:52:f9:6e:f6:6e:4c:31:eb:7e:
b2:0f:4f:37:10:f4:46:aa:99:bd:33:99:16:69:2a:46:7c:bb:
ee:52:be:64:b8:a9:15:ac:ee:2c:34:72:a2:3c:eb:c9:70:4f:
5d:0a:17:97:20:a2:49:1f:9a:9d:8c:f6:dd:04:76:e8:b4:21:
8b:3f:6c:c5:be:1a:fc:8e:de:e7:85:f6:df:a5:2b:15:22:ff:
28:6f:49:5c:c7:61:39:f6:88:93:5a:62:96:47:90:5d:9f:e6:
09:d4:93:eb:fc:3a:d8:ee:df:cc:c9:b3:49:c2:f1:3e:ad:32:
7a:f8:8e:ec:54:5d:ac:84:a1:52:40:67:84:11:26:f1:96:78:
5c:e5:97:a1:ee:ca:be:b4:98:e9:74:10:5a:d0:93:6a:96:5a:
11:61:27:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFhIBaM28W8bGanX4h2cLhgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZGI5NWI0MzZmNTMxYzRlNjAyZjM5NjEwYWQ1M2UyNmZk
ZmYxNTMwHhcNMjYxMDIyMDEwMDU1WhcNMjYxMDIzMDEwMDU1WjAzMTEwLwYDVQQD
EyhmZDM3YzEzZTFmZDFiMThhNzVjZGFkNjk5NmQ2N2Y5Mzk4M2Y0MDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KJpgIX0+qrvi0SmQ8yIcWIBTmyw
CRuef2D0NtI2TNjX+x5dCydeWCOA0vzWyAOl7+F2Ex415MWANP/3RV5m4kKkIkHT
ZLRVOKWbM9mh5XDAWyPy8Jc+Ul3vVhksShkuf3b8SNfZ1ElPk1nPF0KOF+wAR8My
jDAqD9y9lPkHCKZbGmP+XcrgZveoFZFR9m5hJ8vc/HdMhFbaB5tFLwHs9oI+3G7n
zoxH6VLLHISh1LotoLDoWadILISniEQ1oICSKY5KDp1kU596aDXzFD0mz/pXo2gv
CgBIxgC9hPGsMeDL7rVZipKCu+5fiVn0RRnT8bO76ebtUCLVQHmSN/75cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP03wT4f0bGKdc2taZbWf5OYP0B5MB8GA1UdIwQY
MBaAFAPblbQ29THE5gLzlhCtU+Jv3/FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTl1VnREYjFNY1RtQXZPV0VLMVQ0bV9mOFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zMWQyMzgtOTQ0Yi00MjgzLWI3MTAt
MzM3MTMzYWJiM2UwLzEvQTl1VnREYjFNY1RtQXZPV0VLMVQ0bV9mOFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8zMWQyMzgtOTQ0Yi00MjgzLWI3MTAtMzM3MTMzYWJiM2Uw
LzEvQTl1VnREYjFNY1RtQXZPV0VLMVQ0bV9mOFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfF4T2/TF
HmdFh3eZp9ZJLpYdNgkNd0Yk1mrmGRi9PR8LtxatPxyId8lNJs5vuyotK9ryNIfc
1lePUHrmWQ42ArGS0CxmA/iJA5VhjufoJcHPh+GqKWtH4lMAnmzEi7GjYkxPUvlu
9m5MMet+sg9PNxD0RqqZvTOZFmkqRny77lK+ZLipFazuLDRyojzryXBPXQoXlyCi
SR+anYz23QR26LQhiz9sxb4a/I7e54X236UrFSL/KG9JXMdhOfaIk1pilkeQXZ/m
CdST6/w62O7fzMmzScLxPq0yeviO7FRdrIShUkBnhBEm8ZZ4XOWXoe7KvrSY6XQQ
WtCTapZaEWEnMQ==
-----END CERTIFICATE-----
Generated at Thu Oct 22 05:12:15 2026 by rpki-client