
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
File: dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json)
Hash identifier: JISmbBzCkoLHLPClkRSZSLaa9crNMNHOe8AXhJToyXc=
Subject key identifier: 7B:20:E9:83:1D:A0:DC:E3:C9:F8:34:94:E2:DA:A9:79:E2:A3:01:BA
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01A1A902A0E8B1E9F185047A70274B5823D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
Manifest number: 1B5D
Signing time: Thu 05 Nov 2026 00:01:24 +0000
Manifest this update: Thu 05 Nov 2026 00:01:24 +0000
Manifest next update: Fri 06 Nov 2026 00:01:24 +0000
Files and hashes: 1: 0i_tJFCQkW4BL4d6bXm4WAypJS8.roa (hash: 61MZ18IZL5EgLoB9w4TH7mfQX+7U0VC5x9A0388yn8A=)
2: 1-JP0PPtCDIK_UNysSaQZClIqsZk.roa (hash: sfCZXINYiH/YUUcCfwXIvxbn90PofsIEnjQBdiFjFFQ=)
3: 3uJwNTCNY55i-5jM3CaDGvETngw.roa (hash: eQzu9ZxiIAP/taHhjsse4i1771g6Ywd3F2q34YSnFrQ=)
4: 42j6rh74kZK8B4TK9TrxT-yy6qs.roa (hash: TpgZQPZnpYPaVp9fqt+Gp0r1j/N3bvdYSt8BYEQV4W8=)
5: 4rdTxE4U8SWi3axBDMycJ1e2dVc.roa (hash: Xdko31FAcZqa8CKzUmvaPLbn8FzZeXlJr3Mz2L3FEGY=)
6: 59Sth-R3BuV9Hjri6g95SVuIU_8.roa (hash: rE2f8KGpsTiN9qUjtXDjk/27rrXTQHhiM7ABCMeYpTI=)
7: 9ONi4c-7XF6Vn2zgdYwKAE0upGE.roa (hash: GdwVnVj0Er6zQr8pOtzRgza7jVJzxa5V5nFDEZ8imc8=)
8: LKaOQokfTIgkWBs2UdoqCTA22vc.roa (hash: cUUhEOlVftW9+j+XpaAsAph0Rp9J2xVMMProgn5lBRE=)
9: LNX9e0qM1FUUPu7JPg66r69yK3k.roa (hash: 4hdxVQWJPFAuhVTEnkZxRAKzt32xutYmv7LRrS+WM4M=)
10: LXHUHSO9WQWL1yjZx_1oGkRxSgI.roa (hash: HOm4ChKdSMnn++SpgwP+q1pIqlQSDcmq1lnjp8gr6/k=)
11: O5gW9hOPRMxR11eVov12x6UzYHU.roa (hash: bkCHLibjEuyg8IqJTSvrDEUtIjNQgIWoyJGDY8GOdz0=)
12: P0EJh06dBX2Z_uKMMzzVb3_JpQI.roa (hash: 265lew4gp/M7KbfXgY3mqUSmqEnG/TJjkIcENzjUQ9M=)
13: P4odDKYu1lCKx-0-6xh-2d3gFVU.roa (hash: pJx8PCnMcEoTQpCvLj2jXwglNIUY3fH2OwKcEuhWXsg=)
14: QGcED9nMBFNEcLIYKfsWpbPgFeo.roa (hash: ZoZ5qhejcJ2eD+U6g8CGcswJ1q+2gIH8nSKoh9/Kbps=)
15: T0yNiTnMr7rQj6L4yFcQz5luZuc.roa (hash: qkIXR7MhpFqaBJh+vVhJ5yECXOO2wVNGqePTqIktFFM=)
16: VWM7lA-UncwK30_u4wZN9H8N1gk.roa (hash: UAC5m76d6Heuh1OxbGU6JpOHUBx0MhMtwx6y8Lbk9fg=)
17: WtbHisRdncnw4HB-C-Q2nOatpCk.roa (hash: 3wmWRlMXTcqOjL6bnR/KTtOAF4ruJh0llk95iowxjzE=)
18: Yu_uuzMGePwC0icaYNERVoH0Cfk.roa (hash: PATzSiQXd51zhFdnNpl0DeghvMrZihxoQe+PXsEdhqA=)
19: Z5QikMa7UwGfn8uO2JzMrRFXYnY.roa (hash: U7DHGYIkh2PVaJpwB3Rs6rnlNqHm+IBWFv5Y36W7frQ=)
20: _Z4F7M-QmFI0Z18UQdlG6FBfQ7o.roa (hash: qJW2rDHAQqCfDrhYBEnMSMAxF6KCHBOPVWkKVY8Nuv8=)
21: b9yPzny7g7NzZoMSg-I0-4xYJRQ.roa (hash: oex26xfzNOy0QvV3r0CTF5Po3sMUSsRDc+0RGORVsd4=)
22: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: COQORwJDGm0T3lXf9sTE1TXmkTIGU2UKIDdNZOUNFSg=)
23: doMjCvh-T_oVkJKD3Y7qOZoudQA.roa (hash: O0rnzXZPufM0mBq+veKdhSLIRnUWNnJekiSLuJW+WPg=)
24: f8cXMfB8GmIppgsZFcI-OCvQxNk.roa (hash: C/qkMAbaZbD1CDux6NhG+NBRCWcc4xbDi8mJQpA9u78=)
25: fW59nKWFAAcX3FkGdJCNC4LY0lU.roa (hash: QrZ99mG5ipIB8lihFmB86+BQ62v5THWSecfMtXAd/Vk=)
26: hQi_2v4PVaU2DxK_ubm6-NXJZ54.roa (hash: /DoibVc0zt1dXzmqKhW2/HUrHirpTFgRWlWufv4zCoY=)
27: iTv_taBhSWWSwucljCvdm_j4RW8.roa (hash: GE2aWALIL/q/9QPvVk6yJa+XbND+dNPP+iVv+vbA798=)
28: iqkz-oFIpTUAukJ-q0KYzZGnhbY.roa (hash: 4JwiIgby6A2ltqK6a4PhfhVkPMKWfaYDYeB6aMX/De4=)
29: kepdZXENoY0lFOiOd2VYC5Jt8PU.roa (hash: bBmIVbb4z4z4JQQlPc3j4zkDZyWk/Dmtse596NYk1Vs=)
30: mz3LKflSaCjzbLbt50UYZRI14QU.roa (hash: R+3MLAMskLr07qEIftdxyai6y/lFHGIWJS1jtU8VQFw=)
31: q4er2ti9h_W7MKRTNBtj0R5wg8I.roa (hash: Y7raLSBcr0F4VthCcXXBIhwj7MwB/MaClEuc9miqnEI=)
32: rTAcqrsLjdQzWLiPeTE0J8tFjHs.roa (hash: kpmFc9kxITW5Y/O6sK7eQ8xr12ovnarFA8jerArDTmw=)
33: sa0irmG5fTuP-s-e7ehVBplCJx4.roa (hash: 7SZESPqbjMHr+1YpDP1XwHSl42AkB6k/wkqvHyEDf5U=)
34: wA9ChWaX9aTjQjNN5mYeaC542Nc.roa (hash: uwS9DbntInTGgRyBcScvO12ZNTWYbWh0ii3LNRApI90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 00:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:02:a0:e8:b1:e9:f1:85:04:7a:70:27:4b:58:23:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Nov 5 00:01:24 2026 GMT
Not After : Nov 6 00:01:24 2026 GMT
Subject: CN=7b20e9831da0dce3c9f83494e2daa979e2a301ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ac:72:67:b5:4d:f8:06:f2:50:b8:2c:b9:0d:
25:b8:fa:36:4b:27:78:01:0d:50:b8:f4:56:1e:33:
61:be:db:f0:de:24:2c:f1:82:b4:4c:6b:91:06:e4:
4a:3d:d3:76:15:a3:75:f6:d5:30:0f:d0:2f:2b:af:
bc:17:ec:60:46:97:72:b0:69:ef:fb:e9:39:7a:ea:
af:bc:4b:d1:c2:0e:93:05:cf:75:a7:9d:3a:47:cb:
42:96:86:8c:db:43:8f:52:67:f9:b5:ab:23:d0:90:
f5:a5:53:1d:8f:a1:fe:ef:e6:73:3a:9f:6d:d9:5d:
0e:53:60:5a:6c:46:77:cc:e8:5f:10:dc:3b:be:63:
41:7f:df:24:1a:8c:7a:18:d9:b9:84:4d:0b:e5:f4:
c9:21:27:40:b3:d1:88:e9:da:be:1e:b3:4f:5e:9e:
67:29:5e:fb:31:27:c7:ce:d1:c0:5e:04:1d:22:de:
2b:b6:d7:e0:4e:0f:4e:85:5a:e4:21:16:2f:3a:4b:
f2:8f:23:2a:c6:3b:56:73:8e:79:d0:ed:8e:2b:f8:
9d:e8:c9:48:ed:0f:88:c7:3c:68:69:ab:70:92:3b:
aa:b1:09:4b:10:88:ce:63:5c:02:16:b4:ea:e0:a7:
ae:f7:c9:8d:89:d7:8b:c5:49:10:df:32:f8:bb:5d:
af:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:20:E9:83:1D:A0:DC:E3:C9:F8:34:94:E2:DA:A9:79:E2:A3:01:BA
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:37:73:f6:fc:b4:23:2c:ec:ef:9c:a0:15:37:4d:ca:86:5a:
b5:8a:c0:05:52:bf:2f:78:4b:d5:e4:b4:f8:77:8c:71:fd:95:
1b:d8:c2:97:65:bd:44:f1:4a:74:05:b4:85:29:84:62:aa:bf:
54:cc:43:70:9e:36:39:d4:3b:9b:4d:a2:85:4b:04:44:53:80:
8d:63:75:2b:ab:2e:50:3c:4b:3a:ab:8c:26:84:c8:13:5e:a6:
1f:3c:a6:33:a8:34:0a:28:61:99:55:ed:c2:50:f4:81:d1:b3:
ae:9e:b7:6c:7c:14:08:ee:96:d1:6e:84:08:7b:20:c9:04:97:
44:be:e4:7a:53:cb:6e:44:35:50:d0:0b:1e:a0:e0:c7:5b:3c:
98:e0:d1:16:85:df:9f:51:42:65:46:bc:24:d0:9c:53:94:39:
68:3b:e5:ef:1b:57:80:14:ec:fb:0d:4a:46:72:e6:16:ca:83:
9b:a8:bc:df:d3:1b:12:6c:b4:c0:96:fb:d6:98:59:0b:b1:81:
9a:d8:12:40:50:b2:e0:6e:2c:b8:c2:42:b4:6d:c1:ce:c1:50:
5b:60:00:34:1a:25:52:f7:ce:ce:ae:da:f7:c6:42:15:6d:84:
9e:dd:68:17:28:56:e9:c0:f7:c9:5c:13:4c:02:fa:25:c0:ee:
70:fa:45:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:18:31 2026 by rpki-client