
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
File: i0eqCfLGEPb0S051wc2dzTiE5V0.mft (raw, json)
Hash identifier: 0+UJ+g/4y6agTl1w3G5WhaN6hj2i3mLJtX5dRNIkeeE=
Subject key identifier: ED:52:48:D6:9A:0C:23:58:79:25:B5:62:01:D6:A1:0D:F2:50:F2:FA
Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Certificate serial: 019FA260281313398D087BE27B91FDB91083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
Manifest number: 0A35
Signing time: Mon 27 Jul 2026 07:00:38 +0000
Manifest this update: Mon 27 Jul 2026 07:00:38 +0000
Manifest next update: Tue 28 Jul 2026 07:00:38 +0000
Files and hashes: 1: 1-ctnzOu2AqRoTotuUyqfmWZ69Sw.roa (hash: Y9R2l24kBbqyGrhSPstaoeJ69KKtfxGMiYaBVipK5z8=)
2: 6PHN4EINg95zsWmwMqR_LCCbpc0.roa (hash: Qlikbs7ZBI8ctlfaw3/jTu/l9GkQAhjSgxybaaSAR64=)
3: Mo9G1JhWigyZx8b4Z1ztpl3HoaU.roa (hash: 6/JX2hr5dQ72yy0qDOA4ItSaDR3CmA+Vunj3Be7K7Ww=)
4: SBvRByMqYGQLc42MhIv39wSrM14.roa (hash: +yuXK4U1plTB6Fi9dEb2HppH8vLHLdbotjVkOSomh4c=)
5: SYrllEJSlKvgkdw578ZRNVSFNWE.roa (hash: k4gJZrWaGXAakwoprVZK+70H4xXKeMYoqoBwpy13NQI=)
6: UUqnfAVDQa6lg6vG893HM0lVJYc.roa (hash: 36To8a4pjZ0Y2Qs8m/H0gopLfHuBJ5FyCcUXnUo0w+Q=)
7: aQNb-FqJ24XdWhT_swKdwi6zjfo.roa (hash: OZW1x0BW+Z3FS3TLXrrEiad6eP2zWg5FoTORYNZrouA=)
8: fIODe0F2H7U5wAQ5uy_1kDKWqm8.roa (hash: ETRCfd6hwLM8wB2Vmt5McaUCtMtxHeKB1rybYkoCFk0=)
9: i0eqCfLGEPb0S051wc2dzTiE5V0.crl (hash: KSoxapniZUddfUlI0YHnlHiGWvTJquYsfoHSRW7QtNI=)
10: jB4bYdWFXZMhIAjQMhMfN8vZ55w.roa (hash: EkZSSIno7HUUjqBtEwf8U/N90NHBkP5MsOxUQJnJNBo=)
11: qI5GOetXdKYh8lrEqXZOEzNWNgs.roa (hash: gOg5TzYEps9BVyLryEBMecl6jyfHJAcCMKO+ZNmQ0RI=)
12: qbK-9RQWdGS_xJXOliPpGoY-V4w.roa (hash: iAYy+5hd5UtMJbweD8Z+MTcR9zIJ+2tv0Xj7Rh16GJY=)
13: tASmvZQ1KYaQWQIw4lmKhvWcByY.roa (hash: ri7thGK0s4tAbDIwaqArMt7wR29/4q7zyG3uwLTYanM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:28:13:13:39:8d:08:7b:e2:7b:91:fd:b9:10:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Validity
Not Before: Jul 27 07:00:38 2026 GMT
Not After : Jul 28 07:00:38 2026 GMT
Subject: CN=ed5248d69a0c23587925b56201d6a10df250f2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:08:be:e7:da:fe:9b:78:f8:b3:ec:21:db:cf:
88:53:ad:98:66:0b:46:0a:d7:43:2c:f9:bf:be:8b:
6c:d9:93:70:82:bf:3b:1f:41:9c:e3:10:91:aa:02:
37:c4:d3:ec:7b:44:0e:17:60:02:8c:50:43:6d:d7:
05:d0:38:ca:4a:38:f8:ab:93:8d:12:6e:97:60:ad:
f3:49:53:08:ff:b4:00:bb:74:dc:6c:2d:4f:16:30:
97:25:ab:f5:d9:54:f8:0e:0c:f2:a3:7c:6b:e1:6c:
79:8b:05:1b:6f:f9:c1:a0:51:27:4d:90:80:d0:d1:
40:35:3b:5d:ec:8c:71:78:9c:b6:6e:3b:1e:af:de:
93:bb:a6:71:6f:23:8f:26:7b:d4:cf:e2:8c:ba:55:
1d:a3:87:7e:71:fa:1e:fc:df:f6:9c:5c:e7:31:40:
dc:b9:fd:46:5f:13:d2:45:bf:56:be:56:d6:f1:96:
58:c3:2d:96:3f:ee:b5:29:74:56:a2:c3:04:21:d0:
9d:53:4b:e9:4c:5c:cf:fa:83:52:e4:35:c8:62:c0:
66:b6:37:50:22:21:89:b2:02:2f:18:9f:a4:0b:ed:
81:4d:b8:65:96:ba:73:61:5c:e9:fd:63:6f:83:08:
37:6a:62:79:92:6d:d9:96:b7:6f:ad:99:2b:3d:5d:
e5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:52:48:D6:9A:0C:23:58:79:25:B5:62:01:D6:A1:0D:F2:50:F2:FA
X509v3 Authority Key Identifier:
keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6f:70:35:15:5e:18:f8:71:4d:68:1d:f3:b1:3f:31:7f:4e:
a9:65:88:6e:d2:a3:7e:48:45:20:9c:78:c6:fc:45:b7:e3:66:
2b:d5:10:34:0b:01:9c:4d:aa:29:df:dd:8d:80:8f:67:d0:33:
0a:68:8c:3f:50:ca:97:24:f6:7f:23:04:aa:b4:cd:a1:5e:56:
18:76:1b:80:25:e9:fb:0a:01:cd:15:6d:f6:df:d7:94:d1:f7:
b3:be:cc:0e:95:a3:9b:60:66:e9:c2:7e:eb:a8:c8:27:99:4b:
08:7a:6f:13:12:1f:8b:2e:26:fc:ae:d7:5f:be:3b:15:de:7d:
57:87:c8:db:84:6c:b1:5d:37:62:6f:05:a8:61:6b:84:c3:d0:
84:d6:a3:65:7a:2a:01:c8:3a:06:e0:6e:6f:61:b4:94:f3:e9:
81:d3:5a:3c:6f:81:ea:64:2f:dc:73:89:a0:91:0c:27:84:cf:
55:99:06:58:ae:b0:33:2c:77:9d:a0:86:d4:52:63:a3:29:89:
ad:b0:42:1d:0e:a4:27:19:db:e9:5f:b0:d3:73:9d:18:b7:a3:
78:de:7b:83:69:d5:24:ee:99:d0:26:4c:f6:55:67:31:59:10:
c5:e7:d5:30:ae:43:5d:c0:2b:9e:0d:2f:54:11:df:f0:f2:39:
cf:56:f3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:31:01 2026 by rpki-client