
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json)
Hash identifier: SBuJnzFkC2WdeMGM5ICBs6aP9hh7Lq78f7ic0Pn4cnA=
Subject key identifier: 37:AB:B1:A3:C6:5F:1D:08:7D:6F:1F:EA:9C:64:20:77:66:4C:AB:84
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 01A1513F2091D23BD67B8F828721E14714C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
Manifest number: 1881
Signing time: Sun 18 Oct 2026 23:00:53 +0000
Manifest this update: Sun 18 Oct 2026 23:00:53 +0000
Manifest next update: Mon 19 Oct 2026 23:00:53 +0000
Files and hashes: 1: 1meLaYKO2Tl3bhYSsOjqpf-iDLo.roa (hash: aO+cgckrFpHbMOnuICmuB1xPZYgfmGDfrFdfNUo8hwg=)
2: 5GG9Ao4ScwCTaqCwAi8GnKy-uIk.roa (hash: BbSg6kfepD5G3rCNp1AAX9gRiwipTBnqXkjrl5sWhEU=)
3: BN0rBq-tNCIxQPqmFjFDV44qYpk.roa (hash: jKAg3bTdZuNi/EJCwdlUsNQtwlFvyoL5tw2t5y9MU1I=)
4: HO2U7d5NcmWKb9JFFOS4xst6Ap0.roa (hash: jIkU93mIxfPKkS6ZV5Em7YZjODmsWtP1r4eJlBEyOBI=)
5: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: 4yntRUmpOX1DzwcdEBz+RWzUxy6p57dLtR9noXNktK4=)
6: MPhp410gGVKP5mkd7p544bUnjxA.roa (hash: QAd6nrSjBEFE5oh4hmKUtP3RiDgmKVq2ERPv15zMcC4=)
7: PWFCC016ViMQwsbajGFaPsVXWpU.roa (hash: XU7EaVjH4kPpzpd1I6Ws6W/k6BLYUdpZHPYkfznROSU=)
8: R5nQRJbnGIfuNPFQmSy5KyUN1Ng.roa (hash: S8J2YibhrFYHi+05w7dwd4Hy2ZPqL9ZfsTP/e0tcqoA=)
9: SR_Oqw4W1f3U3vok1BVIM_3prOQ.roa (hash: xZRfZAtOOEJIXE0XPSwwSTYi/tKeXWXICqEFbpdqCLE=)
10: U5PzUqS57vTjjx9_NuB_p28poME.roa (hash: EecuoD5KCgYIaHtGBTK+FwW6d592SQsn5M0lKdZlos8=)
11: gu8Xb0EdAj5QQiEbcZUHWSiqy4o.roa (hash: Qu77EoHxyeTpqNbgaiHUpPIuYcauYq9nmWOzOey7QMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:3f:20:91:d2:3b:d6:7b:8f:82:87:21:e1:47:14:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Oct 18 23:00:53 2026 GMT
Not After : Oct 19 23:00:53 2026 GMT
Subject: CN=37abb1a3c65f1d087d6f1fea9c642077664cab84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:18:8f:40:a5:c2:c1:05:42:84:d9:6d:78:
ad:92:93:52:96:6a:5f:c2:d0:ab:ac:ce:04:e7:cf:
a6:1e:85:d8:38:b7:b1:8d:3b:bd:ca:43:e5:19:2a:
12:01:aa:92:0e:ea:27:b9:e9:c7:47:e6:69:52:94:
0d:36:c7:8a:35:77:ee:df:42:0f:db:08:3f:f1:16:
d7:b5:c5:4d:0d:c5:88:1f:b8:96:42:b0:03:05:4a:
1d:a6:99:1c:af:fd:b1:10:b4:8d:8b:e1:cf:4d:c4:
95:4f:0d:16:2c:b6:5d:05:50:db:d9:ea:6f:4c:13:
8b:8d:26:42:68:bf:1b:80:72:56:91:85:37:14:d8:
8e:11:61:f0:d3:10:b7:0f:3e:ca:68:d6:49:6b:c3:
62:ba:b8:74:34:9e:9b:3e:27:6a:21:09:b5:8c:43:
ff:8e:fb:f2:eb:69:bc:27:95:cb:30:5b:c9:fa:17:
7f:d4:8d:4a:82:b0:89:8b:56:ee:e5:c3:3c:3c:a3:
02:fd:cf:78:33:11:06:8f:a4:40:51:b7:d2:0d:43:
9e:c5:72:0b:3a:d0:55:d4:f1:75:13:6e:79:01:8a:
ed:91:76:64:df:51:fd:f8:db:09:de:a5:1e:eb:f9:
54:33:c3:ef:92:e7:b2:bc:fc:ea:64:fa:a8:7b:b0:
b1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AB:B1:A3:C6:5F:1D:08:7D:6F:1F:EA:9C:64:20:77:66:4C:AB:84
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9e:f0:7c:0e:c9:5c:2d:4d:ad:d7:ea:2f:cd:76:0f:ae:c2:
30:a7:46:51:1a:44:4f:ad:f9:ed:42:25:6c:61:ce:67:f6:d7:
d5:f7:76:3e:d9:08:af:28:2e:67:b2:aa:d4:58:fc:63:e7:61:
9b:a8:ac:eb:23:b0:2d:57:d6:04:43:84:c1:6d:07:9a:0f:dc:
d4:76:9e:11:4e:6d:df:28:90:b3:0d:c3:ab:22:8f:9d:1c:17:
54:45:85:54:54:cf:ab:27:80:5a:22:87:91:6b:9d:2a:15:18:
f4:2d:dd:c1:01:b1:f5:cd:94:c7:cf:81:8c:c0:75:78:3c:20:
b6:d8:71:ab:86:c4:db:34:59:2c:22:a1:9b:42:0c:5c:6f:92:
a9:e1:11:9c:ec:7e:8d:91:cd:bc:a9:6e:f9:00:33:99:36:71:
6e:e2:d6:e3:81:b3:38:0f:b3:26:1e:fa:4d:7b:88:dc:19:bd:
30:d3:52:ab:db:de:d0:28:9d:ad:50:20:53:bb:8b:8a:4f:1b:
02:35:00:0e:e8:30:28:d0:22:87:48:93:e4:94:cc:7e:4e:03:
1d:7d:b7:10:74:71:06:40:fe:aa:6d:5b:88:b9:bc:07:36:1f:
0b:25:ff:9a:58:de:74:c2:3f:99:87:8a:26:65:21:b2:26:a7:
54:8a:2c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:12:59 2026 by rpki-client