
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
File: 3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json)
Hash identifier: P9LWyofAlDMAitD0DyrxCYfvh/72h1bjmsULi/Fd6Ys=
Subject key identifier: BD:19:4F:70:8E:28:A1:FC:7F:57:23:84:DA:82:CA:95:EE:DB:CC:62
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 01A0E8C0E6A22D06D6DCE38513D452764274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
Manifest number: 113E
Signing time: Mon 28 Sep 2026 16:02:31 +0000
Manifest this update: Mon 28 Sep 2026 16:02:31 +0000
Manifest next update: Tue 29 Sep 2026 16:02:31 +0000
Files and hashes: 1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: k/3s6Nwo1K6W3wh5AZAQ5oOLurbzoGHBSiVjhk2uvic=)
2: 48gsZW50uLUlR46Ix3iYOx-Oil4.roa (hash: +bihXv/kdSh2a1W6VuWuSak9s9bbT1dvAV94HrBufKM=)
3: 7qlkFJrqlJHjJMafd1z2Ovx1xMg.roa (hash: /c/xy57bwbSPlEYy8aSToJUMaj9SVT1GxDFV+ZgmcDw=)
4: IBrDKx3-hL2m6eK_AnO4AvBHD7U.roa (hash: pmaFE96hLCvpJgnKb9xAQ3FBHDszY3+MnDTKdmd2aBc=)
5: J_MD5SMm_jnNcFzVAMqw1B15u58.roa (hash: FIwpk+45oiJmLelvUMKgCrOAF5Q6jpI+BLL5TNzUe60=)
6: KF_n2gzTBU6uDy1SMMT5K8iX9bA.roa (hash: NLc5HhxgKVru6o+xJI4sk97DQHit528jxpHdpZSMptc=)
7: PINsz1ecwdVhJzpxv6fsByeh4kA.roa (hash: ANLsT4S8VzVYj7/i5GCBTF2gWzdZH5BQdzxufPePg5s=)
8: Tvp9UTzcuphuhBetxzC7xnAANpk.roa (hash: XsVJrEsr9FE3t/s8zv/e1FiT9DrBI71L2xkk3P4iSPo=)
9: VqSk2F-cMltec__vt5GWmoZRbOs.asa (hash: DSTYqZUEAVPlYiwOcT/Aj9JtlDMu/1/7b3uouJr7QEg=)
10: fCh5cSZ1ojcXI4Uub3fOR46Ltrs.roa (hash: kJ7GyNYmLyOwu5BhWIvecFe90tFPLUPeOlUI+nps5x8=)
11: kZL9IaKbIXWtSeLhiixRuouVuZw.roa (hash: +8djmGYeV8gJTDYzSfSw3gkTCCP8XO1MSarDOtJj7zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c0:e6:a2:2d:06:d6:dc:e3:85:13:d4:52:76:42:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Sep 28 16:02:31 2026 GMT
Not After : Sep 29 16:02:31 2026 GMT
Subject: CN=bd194f708e28a1fc7f572384da82ca95eedbcc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6d:f2:56:42:60:d3:d0:73:ef:d3:52:4f:00:
37:86:ec:08:a6:4b:8f:ba:44:88:14:26:83:22:3c:
2c:2b:fc:b7:f1:ee:20:ec:74:62:8c:4d:dd:a9:e0:
a1:bd:9e:8b:66:b1:d7:54:ba:a8:95:18:4d:ab:9c:
44:46:6d:4f:f3:7f:8d:fb:4f:ca:fe:2a:38:c9:3f:
17:13:1d:a3:04:76:84:54:8a:5f:44:9a:d4:a2:3e:
1c:40:59:09:c6:80:89:70:4d:cb:48:db:23:6d:4b:
d3:d5:60:50:07:92:b6:c9:1a:c3:b9:23:14:6e:08:
73:4c:c0:3f:f5:67:b3:84:1b:92:db:72:40:d8:d1:
80:62:10:37:47:8d:e5:47:89:c9:e6:56:9d:21:dd:
7a:8a:a3:71:e5:d6:3d:80:99:a8:f8:96:a2:a1:07:
6e:a1:7f:79:94:cd:16:51:af:80:0e:ff:98:fd:19:
8b:f7:6b:ad:fc:f8:b1:6b:26:b4:dd:7e:bd:6f:61:
20:30:e0:9d:9e:12:ec:d3:f5:67:3f:45:43:cd:a4:
2a:5f:47:59:b6:04:4d:87:9d:00:62:f2:49:33:d9:
f7:d7:ab:d5:5a:1a:c1:15:e6:c5:80:95:39:76:4a:
56:53:20:18:af:f9:8f:82:a7:a1:61:92:e6:01:8c:
68:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:19:4F:70:8E:28:A1:FC:7F:57:23:84:DA:82:CA:95:EE:DB:CC:62
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c5:22:72:6f:5b:dc:b1:6a:f1:1f:d6:fe:89:64:5d:fb:bd:
5a:b0:a5:a1:14:06:37:85:f9:87:78:2a:85:27:a2:bd:26:13:
4c:d0:e4:58:a9:33:13:9b:c6:01:10:9d:bf:51:36:6d:6a:aa:
1d:bf:d0:ef:77:44:31:c7:e4:f6:a5:34:28:1a:62:0c:1b:d2:
65:28:88:0a:dc:a5:4f:84:72:32:49:aa:53:02:cf:42:36:c3:
3b:3b:2b:cc:d5:40:0e:24:fd:4b:6c:19:93:0e:df:07:e9:0c:
04:a1:0d:4d:2a:c1:cf:e8:1e:18:a5:fc:e7:4e:98:6c:bf:bc:
0c:82:de:78:c0:7f:b3:23:2f:20:96:c2:b2:7a:f4:72:59:ce:
2f:c0:40:87:05:3e:a8:3d:17:af:7b:90:d8:24:c6:bb:66:c8:
08:88:5b:59:f5:12:9a:7f:9d:88:c5:99:0f:d3:4f:5d:3c:ee:
6f:7e:fa:8c:44:8a:28:5a:51:1d:81:c9:3a:46:b2:55:22:e0:
a5:ac:f1:b2:16:01:45:32:e3:30:db:8e:b7:94:6b:82:86:f1:
eb:06:16:ee:e6:09:21:be:74:e5:d1:94:a7:73:d2:e8:f4:5c:
e2:76:32:dc:28:1c:94:a9:a8:2e:09:ba:bf:18:ff:bb:6b:9a:
02:83:00:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:29:47 2026 by rpki-client