
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json)
Hash identifier: YlY90FKwHyQeYgQZQqT8rayClxWFZyA3XuyZdblOQd0=
Subject key identifier: 9A:1C:88:AB:4D:FF:27:77:6B:E9:67:6D:A3:1B:14:5C:06:38:1F:CF
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 01A0E663D597BCA34D6E8163E49686105FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
Manifest number: 1A87
Signing time: Mon 28 Sep 2026 05:01:37 +0000
Manifest this update: Mon 28 Sep 2026 05:01:37 +0000
Manifest next update: Tue 29 Sep 2026 05:01:37 +0000
Files and hashes: 1: 1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa (hash: YEqko0/rX2ob+3AZDq3uooNVJSO5Y7pQBV9N/OfoJ0U=)
2: 8A3g6hd04la3Px2TyuTjfHWXmdY.roa (hash: iwl9hWmxy1BIkyJmP1xReY7WIyqXtDNFiAQ47HDp3qA=)
3: CutVr_X7gS8lDaDuNw9F7uzem1c.roa (hash: A1mIXRTWd/wu1bWANlXDqimnRKUXOgou4evCbpodPm0=)
4: E3TSZxhxz52fsgneQ6hYKE9lnR0.roa (hash: Jo3p0YGshAOZXbJIFqjcNfVnpH22iKmlH4Gttc0OVQE=)
5: J_a4ymcJIY3L6HOzFARmH41d5es.asa (hash: bpzpa0qKowmOhDsx7cnZXh9EOSP6XWxhHtsK/Z/ggTU=)
6: LfkCmSO1I7GGpJ0of5l-0c5AGBc.asa (hash: UgfWuPDLjqxThrUgxhNFddbI4VXPReh33QeUjBvYjVs=)
7: LuOgAc37LU8V7dGgdj8hy6ymH64.asa (hash: pkN431oI3RFQuibIh8RwZRrzTHAA18y2t6J/hjni00c=)
8: NAZAaNdWKeXHuv43xyaeXGZkj24.roa (hash: 7OpOUts+KUACTRn/Jnhi/5hlzxiHmq7rQOZw5wD3ZMs=)
9: VHaZ9xAWUz6t5_O77Zl57zRscxg.roa (hash: 2yv7yBBLi6h8Nduk7IpZ8p6TZNV35NVDX377GsAgTP4=)
10: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: yny5ssOTdMmCZEA5IiXNfDDoraMPn7luWtnuTXCFZfI=)
11: cIcqaLXZmekavhCmoIAJhBRw3JE.roa (hash: 8QflktthB1MZE1m+SbfCOvT58wwBH/AnF87SL9k5yss=)
12: fxCBjLdqX_evkWfiqAm6qjLArlI.roa (hash: tk7gywwYFiYzZLlhE1m73NGnM9inNgbBSNjaCbvZCNY=)
13: hRI7RDa7PGK-ctecQ63wDq0HUqI.roa (hash: tUVamYyn9duDeEqDyKxRIvl+qRN9U3COd67wexVVyLs=)
14: oaZumtYBqB2DBSwMpqnmqOIkGm0.roa (hash: 9YqR7q1fJK+xrhMWwkV3smWMIV3JZ5y1OxTGOkJ6aPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:63:d5:97:bc:a3:4d:6e:81:63:e4:96:86:10:5f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Sep 28 05:01:37 2026 GMT
Not After : Sep 29 05:01:37 2026 GMT
Subject: CN=9a1c88ab4dff27776be9676da31b145c06381fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:ef:ac:09:0a:f0:78:b1:56:38:6e:4f:02:
ad:5b:ca:1a:f6:2e:94:e5:68:20:69:a6:54:da:7b:
92:11:40:11:43:90:12:80:08:14:6f:8a:1f:54:68:
9c:f2:dc:52:bc:e3:2f:11:37:51:74:4c:da:b6:75:
57:9a:c0:1b:7e:90:d0:2b:a6:f6:8d:35:10:e5:4c:
c4:c5:84:f7:24:e3:7e:8c:16:47:ff:a7:76:41:b3:
b3:54:c6:d7:14:57:71:cf:42:4b:6e:ae:33:4c:e5:
c3:a3:71:68:09:cc:ab:7a:3b:96:77:fa:5d:a2:12:
4a:e2:78:0c:5d:9a:26:ab:29:bf:08:37:cc:3e:0a:
02:c4:a6:9d:9a:7f:2f:dc:e3:a6:32:a9:3b:d5:b9:
0b:65:3e:94:0d:91:8f:50:95:f1:5b:f5:41:b3:b0:
a3:2d:bf:7d:c2:f3:ad:e6:d5:4c:d8:1b:5a:05:c3:
b4:d0:e9:ce:4b:33:c5:30:7e:c4:d7:e3:12:d8:e0:
1c:5f:18:f9:e8:e9:82:2c:2b:7e:d4:34:9d:ce:2c:
e6:28:6a:62:2d:9d:35:40:35:2d:cf:fa:73:60:8c:
ac:2d:68:3d:dd:6e:e0:04:e1:5e:c4:03:65:54:aa:
d1:9c:24:08:4f:d3:8b:38:59:35:13:2d:14:f0:25:
b3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1C:88:AB:4D:FF:27:77:6B:E9:67:6D:A3:1B:14:5C:06:38:1F:CF
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4d:46:97:9d:ff:f0:0b:99:e5:1b:a9:89:1d:bf:33:4c:0e:
29:79:fd:ca:c9:5c:a2:f6:ea:c9:fc:b6:ba:3c:1b:3e:56:8e:
99:79:4b:b1:54:38:89:74:ce:09:b8:be:5c:a2:a2:27:94:bf:
c4:5c:cf:81:d6:b1:44:ec:2b:11:03:89:49:5a:52:9f:36:30:
3f:cc:0b:66:b8:6d:b9:46:ed:c3:eb:e3:86:df:0f:dc:b9:d3:
7c:3f:f1:27:78:bd:9f:4e:7d:01:8f:fc:1d:65:67:d6:2a:39:
b3:fb:55:23:70:48:41:4a:d9:b8:ec:f3:a2:1a:6c:9e:7e:e7:
f4:ff:97:87:d1:26:72:96:46:31:b7:b8:a6:f3:0f:04:55:f0:
e5:b2:89:35:b2:2e:71:94:45:33:23:70:9f:ad:23:56:71:df:
1d:bd:ce:6e:df:9d:35:51:98:91:13:f9:64:43:6e:0b:6c:31:
e2:f2:e8:13:2b:a2:b8:c2:65:38:80:7b:b9:8e:11:6d:1d:1d:
f6:4c:a6:e4:71:1c:72:84:4f:49:3e:ff:6f:e7:81:7e:c0:85:
71:be:9a:64:27:4c:9d:74:26:41:1d:7c:0a:27:9f:c8:83:2f:
e6:60:45:f4:45:05:c4:2e:55:91:07:e2:1e:32:cd:7b:ba:a6:
74:2f:77:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:43:30 2026 by rpki-client