
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
File: dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json)
Hash identifier: ja8NjMTjX919HHYiavtrKQ7IU3JMv0UcxquAiKMbEx8=
Subject key identifier: E0:6D:DB:B9:19:95:39:5F:5A:FD:5F:31:A4:6F:FF:B8:EB:AF:12:50
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01A0B98A5A62813D9EB0ABE0B6BDF49C439F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
Manifest number: 1AE1
Signing time: Sat 19 Sep 2026 12:00:47 +0000
Manifest this update: Sat 19 Sep 2026 12:00:47 +0000
Manifest next update: Sun 20 Sep 2026 12:00:47 +0000
Files and hashes: 1: 0i_tJFCQkW4BL4d6bXm4WAypJS8.roa (hash: 61MZ18IZL5EgLoB9w4TH7mfQX+7U0VC5x9A0388yn8A=)
2: 1-JP0PPtCDIK_UNysSaQZClIqsZk.roa (hash: sfCZXINYiH/YUUcCfwXIvxbn90PofsIEnjQBdiFjFFQ=)
3: 3uJwNTCNY55i-5jM3CaDGvETngw.roa (hash: eQzu9ZxiIAP/taHhjsse4i1771g6Ywd3F2q34YSnFrQ=)
4: 42j6rh74kZK8B4TK9TrxT-yy6qs.roa (hash: TpgZQPZnpYPaVp9fqt+Gp0r1j/N3bvdYSt8BYEQV4W8=)
5: 4rdTxE4U8SWi3axBDMycJ1e2dVc.roa (hash: Xdko31FAcZqa8CKzUmvaPLbn8FzZeXlJr3Mz2L3FEGY=)
6: 59Sth-R3BuV9Hjri6g95SVuIU_8.roa (hash: rE2f8KGpsTiN9qUjtXDjk/27rrXTQHhiM7ABCMeYpTI=)
7: 9ONi4c-7XF6Vn2zgdYwKAE0upGE.roa (hash: GdwVnVj0Er6zQr8pOtzRgza7jVJzxa5V5nFDEZ8imc8=)
8: LKaOQokfTIgkWBs2UdoqCTA22vc.roa (hash: cUUhEOlVftW9+j+XpaAsAph0Rp9J2xVMMProgn5lBRE=)
9: LNX9e0qM1FUUPu7JPg66r69yK3k.roa (hash: 4hdxVQWJPFAuhVTEnkZxRAKzt32xutYmv7LRrS+WM4M=)
10: LXHUHSO9WQWL1yjZx_1oGkRxSgI.roa (hash: HOm4ChKdSMnn++SpgwP+q1pIqlQSDcmq1lnjp8gr6/k=)
11: O5gW9hOPRMxR11eVov12x6UzYHU.roa (hash: bkCHLibjEuyg8IqJTSvrDEUtIjNQgIWoyJGDY8GOdz0=)
12: P0EJh06dBX2Z_uKMMzzVb3_JpQI.roa (hash: 265lew4gp/M7KbfXgY3mqUSmqEnG/TJjkIcENzjUQ9M=)
13: P4odDKYu1lCKx-0-6xh-2d3gFVU.roa (hash: pJx8PCnMcEoTQpCvLj2jXwglNIUY3fH2OwKcEuhWXsg=)
14: QGcED9nMBFNEcLIYKfsWpbPgFeo.roa (hash: ZoZ5qhejcJ2eD+U6g8CGcswJ1q+2gIH8nSKoh9/Kbps=)
15: T0yNiTnMr7rQj6L4yFcQz5luZuc.roa (hash: qkIXR7MhpFqaBJh+vVhJ5yECXOO2wVNGqePTqIktFFM=)
16: VWM7lA-UncwK30_u4wZN9H8N1gk.roa (hash: UAC5m76d6Heuh1OxbGU6JpOHUBx0MhMtwx6y8Lbk9fg=)
17: WtbHisRdncnw4HB-C-Q2nOatpCk.roa (hash: 3wmWRlMXTcqOjL6bnR/KTtOAF4ruJh0llk95iowxjzE=)
18: Yu_uuzMGePwC0icaYNERVoH0Cfk.roa (hash: PATzSiQXd51zhFdnNpl0DeghvMrZihxoQe+PXsEdhqA=)
19: Z5QikMa7UwGfn8uO2JzMrRFXYnY.roa (hash: U7DHGYIkh2PVaJpwB3Rs6rnlNqHm+IBWFv5Y36W7frQ=)
20: _Z4F7M-QmFI0Z18UQdlG6FBfQ7o.roa (hash: qJW2rDHAQqCfDrhYBEnMSMAxF6KCHBOPVWkKVY8Nuv8=)
21: b9yPzny7g7NzZoMSg-I0-4xYJRQ.roa (hash: oex26xfzNOy0QvV3r0CTF5Po3sMUSsRDc+0RGORVsd4=)
22: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: rWzsFl+r2VDj47yQGV5Okmm70OsnR9aoWjZRSTmdcLY=)
23: doMjCvh-T_oVkJKD3Y7qOZoudQA.roa (hash: O0rnzXZPufM0mBq+veKdhSLIRnUWNnJekiSLuJW+WPg=)
24: f8cXMfB8GmIppgsZFcI-OCvQxNk.roa (hash: C/qkMAbaZbD1CDux6NhG+NBRCWcc4xbDi8mJQpA9u78=)
25: fW59nKWFAAcX3FkGdJCNC4LY0lU.roa (hash: QrZ99mG5ipIB8lihFmB86+BQ62v5THWSecfMtXAd/Vk=)
26: hQi_2v4PVaU2DxK_ubm6-NXJZ54.roa (hash: /DoibVc0zt1dXzmqKhW2/HUrHirpTFgRWlWufv4zCoY=)
27: iTv_taBhSWWSwucljCvdm_j4RW8.roa (hash: GE2aWALIL/q/9QPvVk6yJa+XbND+dNPP+iVv+vbA798=)
28: iqkz-oFIpTUAukJ-q0KYzZGnhbY.roa (hash: 4JwiIgby6A2ltqK6a4PhfhVkPMKWfaYDYeB6aMX/De4=)
29: kepdZXENoY0lFOiOd2VYC5Jt8PU.roa (hash: bBmIVbb4z4z4JQQlPc3j4zkDZyWk/Dmtse596NYk1Vs=)
30: mz3LKflSaCjzbLbt50UYZRI14QU.roa (hash: R+3MLAMskLr07qEIftdxyai6y/lFHGIWJS1jtU8VQFw=)
31: q4er2ti9h_W7MKRTNBtj0R5wg8I.roa (hash: Y7raLSBcr0F4VthCcXXBIhwj7MwB/MaClEuc9miqnEI=)
32: rTAcqrsLjdQzWLiPeTE0J8tFjHs.roa (hash: kpmFc9kxITW5Y/O6sK7eQ8xr12ovnarFA8jerArDTmw=)
33: sa0irmG5fTuP-s-e7ehVBplCJx4.roa (hash: 7SZESPqbjMHr+1YpDP1XwHSl42AkB6k/wkqvHyEDf5U=)
34: wA9ChWaX9aTjQjNN5mYeaC542Nc.roa (hash: uwS9DbntInTGgRyBcScvO12ZNTWYbWh0ii3LNRApI90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:8a:5a:62:81:3d:9e:b0:ab:e0:b6:bd:f4:9c:43:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Sep 19 12:00:47 2026 GMT
Not After : Sep 20 12:00:47 2026 GMT
Subject: CN=e06ddbb91995395f5afd5f31a46fffb8ebaf1250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:2f:ce:a6:92:0d:be:bd:27:5e:fc:22:df:
60:8c:9e:e8:c9:23:09:ad:70:2f:35:03:6d:b9:8c:
42:72:7e:ac:f5:bd:8a:1d:12:86:0d:94:3b:ec:90:
e8:64:43:0b:b8:64:38:65:cc:2d:b5:c3:77:0f:b4:
74:f7:8e:dd:d4:48:75:77:45:f0:4a:c6:db:8b:3d:
7c:52:3f:d1:d6:78:66:c2:03:32:58:38:b8:33:ef:
72:a0:de:aa:cf:d0:40:26:a2:c8:4c:34:e6:38:e0:
f0:79:38:a3:79:dd:a7:ea:45:18:83:8d:d4:36:56:
30:b7:84:fb:65:8a:27:ee:9d:f7:7c:13:f2:01:2a:
06:ef:67:28:5f:15:0b:9b:9f:5a:72:d3:b5:f6:a9:
05:ac:d9:17:a8:67:3f:a9:16:db:97:48:d7:38:dc:
fd:ee:78:49:62:71:46:6c:00:7e:aa:5e:15:c5:8c:
fd:07:b6:cc:b7:a7:2e:f0:55:1b:6f:16:68:11:cd:
e3:ce:ed:d5:6e:6b:45:81:91:36:a1:ad:c3:b5:d6:
5c:b7:a8:ca:44:55:58:ee:22:2f:88:fb:b9:2e:5f:
c1:1c:e2:69:5f:06:c1:df:08:4a:65:4a:58:4b:5e:
da:45:9f:16:d3:40:94:71:88:89:8f:3e:86:d1:14:
a3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6D:DB:B9:19:95:39:5F:5A:FD:5F:31:A4:6F:FF:B8:EB:AF:12:50
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ad:3d:b3:ea:81:c0:5b:e5:7d:ce:2e:2a:27:42:2b:dd:d7:
f9:0e:ab:22:fa:d7:74:15:b7:cc:1f:03:ec:a4:3d:a4:26:79:
22:0d:3c:95:87:23:7a:45:16:17:38:39:06:6f:d7:a5:e4:14:
e1:ce:19:93:94:e6:c5:4a:54:c4:e4:b1:a7:32:8c:e5:d8:ed:
6e:7f:d5:9e:fa:b2:e6:a2:45:e5:e7:25:6c:6f:55:0d:5d:a3:
42:49:c2:25:0a:73:4a:ce:ef:f3:da:d5:78:12:e8:2c:4b:0e:
2a:7c:1a:50:9d:f2:36:12:9a:7d:da:7e:36:e0:6f:86:4b:63:
29:a0:48:bc:a3:26:5e:95:35:bf:f8:f6:f5:51:c5:95:75:5e:
40:80:2e:13:50:e1:28:cd:5b:16:0a:e4:2e:2b:65:1d:a0:75:
5a:17:70:ab:d7:fa:78:70:60:08:3e:2a:54:2c:c8:5b:3b:fa:
3c:26:e2:31:f3:e6:2e:8a:77:cf:7c:69:58:40:5f:25:25:f9:
c8:c1:76:2d:ab:e2:e3:38:9e:72:b5:e1:c2:bd:8a:f5:82:72:
04:04:12:93:91:b1:c9:23:7c:b2:20:71:de:f3:15:f1:d5:83:
5f:28:16:89:e0:22:9d:9f:2b:c7:5d:15:7a:37:52:78:6b:57:
b7:11:6f:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC5ilpigT2esKvgtr30nEOfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjYwOTE5MTIwMDQ3WhcNMjYwOTIwMTIwMDQ3WjAzMTEwLwYDVQQD
EyhlMDZkZGJiOTE5OTUzOTVmNWFmZDVmMzFhNDZmZmZiOGViYWYxMjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaQvzqaSDb69J178It9gjJ7oySMJ
rXAvNQNtuYxCcn6s9b2KHRKGDZQ77JDoZEMLuGQ4ZcwttcN3D7R0947d1Eh1d0Xw
Ssbbiz18Uj/R1nhmwgMyWDi4M+9yoN6qz9BAJqLITDTmOODweTijed2n6kUYg43U
NlYwt4T7ZYon7p33fBPyASoG72coXxULm59actO19qkFrNkXqGc/qRbbl0jXONz9
7nhJYnFGbAB+ql4VxYz9B7bMt6cu8FUbbxZoEc3jzu3VbmtFgZE2oa3DtdZct6jK
RFVY7iIviPu5Ll/BHOJpXwbB3whKZUpYS17aRZ8W00CUcYiJjz6G0RSjcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBt27kZlTlfWv1fMaRv/7jrrxJQMB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoq09s+qB
wFvlfc4uKidCK93X+Q6rIvrXdBW3zB8D7KQ9pCZ5Ig08lYcjekUWFzg5Bm/XpeQU
4c4Zk5TmxUpUxOSxpzKM5djtbn/Vnvqy5qJF5eclbG9VDV2jQknCJQpzSs7v89rV
eBLoLEsOKnwaUJ3yNhKafdp+NuBvhktjKaBIvKMmXpU1v/j29VHFlXVeQIAuE1Dh
KM1bFgrkLitlHaB1Whdwq9f6eHBgCD4qVCzIWzv6PCbiMfPmLop3z3xpWEBfJSX5
yMF2Lavi4ziecrXhwr2K9YJyBAQSk5GxySN8siBx3vMV8dWDXygWieAinZ8rx10V
ejdSeGtXtxFvWw==
-----END CERTIFICATE-----
Generated at Sat Sep 19 19:57:36 2026 by rpki-client