
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json)
Hash identifier: GLtJq4NjRoZislibYCjNuzIBFH0hLTx7SKnnkGM7H8w=
Subject key identifier: 29:C0:F4:A7:82:9E:28:29:A6:20:29:F2:ED:12:6C:52:90:B9:47:1B
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 019E29274D4D7B6581EB9D083271C83DFC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
Manifest number: 13A4
Signing time: Fri 15 May 2026 01:01:41 +0000
Manifest this update: Fri 15 May 2026 01:01:41 +0000
Manifest next update: Sat 16 May 2026 01:01:41 +0000
Files and hashes: 1: 1-RxvuJO_jTchUynlUq2UfaQo14s.roa (hash: RiJrCfh6jrOWp/Kdbsy9E1iiVv4aVjYDrT7ENiEz4TE=)
2: 1-a4Jfvl73sg74p_0XL8QwTt9GSg.roa (hash: FUZwlR5+IowctwR2O6qPAipX2v6y8pLQV+4UDQvBld4=)
3: 1BivsgHv80evKrJUr40JTZlUflQ.roa (hash: V8wFTbk/nUscM1lOnu4fmHl0eVlRMSa47L0o0dXKIUQ=)
4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: LX4IIMPRWj4+VrzJcrzNPuZhCIq4no0WkM/S7NQqyYE=)
5: BYf7RoVtzwx1yTG9FshawkhjTK4.roa (hash: sDDf+aqw1FGJKYG+5FCvmvbUR9TO2CTrbICWskjL/F0=)
6: HL42GB5yCeK03X0nAabkVkH3_Aw.roa (hash: uOANZs2dCcg3I2ddPUvkq5JotkivRlYW0T26ryzPHHM=)
7: Iw5mcpwalTXPnZnnTmYTdsqiUzs.roa (hash: sk1P8Pv/vu7n71J9ytQoTHDjd9XCgIlEXHvpDdpVHFw=)
8: UReyeEdRYk-K5jTcIl8Ooq7M3tc.roa (hash: RUl0rxhnXo8q1lbp04pAM7Ge7Yr5f6OK0CqmmmjACe4=)
9: V-aCqzfb1a5nr18Dpdo59TdOJ2o.roa (hash: cKOWN1Y85BplWaYgItYhxxODhX9O9HAW97DEPTPY4i8=)
10: fl0ZAFdlfHmaO-tRgRiDI18HGbI.roa (hash: MwB5gNGA9bGWfwt6Pb+LVkIHTpzaIDIKiSps/GwLDPs=)
11: ha79IahEugt55pyXch2rl5eqNpY.roa (hash: /2Q4OxJwb2IrGYC5cRQW4yWcjEMQEg/M8fPIE1oKn0c=)
12: z9xaJu4-grqg2GhotcVjg60Bphs.roa (hash: X87I15rWlYwJRZh2iXyNZTDnLknqtSiwvXkNxh+oeds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:27:4d:4d:7b:65:81:eb:9d:08:32:71:c8:3d:fc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: May 15 01:01:41 2026 GMT
Not After : May 16 01:01:41 2026 GMT
Subject: CN=29c0f4a7829e2829a62029f2ed126c5290b9471b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:12:e4:3b:f1:c4:f8:f4:e5:a0:84:d0:6e:7e:
79:de:78:0e:7c:bd:db:dc:53:c2:af:78:a6:47:6d:
a8:3d:e8:c9:ac:69:f5:c8:30:c1:f2:18:95:2e:1b:
02:89:aa:2c:b2:95:91:e7:44:d5:c8:9c:ab:6c:e9:
fd:27:08:7a:e1:99:32:6c:39:4f:7f:38:1e:3f:e9:
d4:29:95:0b:d2:1a:c7:d5:1f:eb:56:8b:75:a2:dd:
55:12:03:55:a9:b8:21:75:69:3f:f3:18:01:d8:7e:
b1:97:03:e2:e6:1c:41:20:33:cd:b7:90:ca:bc:e4:
ab:ba:c8:10:63:88:82:5b:9f:ca:9d:af:94:78:8c:
aa:3f:d7:41:4d:16:6d:ac:d2:f7:6a:a7:4d:e1:1f:
ad:4c:86:5e:ca:c6:e2:88:71:f0:da:d0:a3:c4:14:
ea:df:d7:25:6c:f9:8a:61:55:33:fa:2d:7e:43:00:
26:27:08:5f:dd:1f:38:f2:66:4a:cd:bb:2e:e5:3c:
55:b3:ed:8f:a4:63:14:6c:07:85:95:4a:82:5e:cf:
16:d8:05:63:56:68:de:7c:5d:de:2f:d9:cf:c2:63:
a8:05:fb:db:1e:dd:74:15:d9:7d:0f:84:fc:fb:80:
5d:27:3b:72:b3:44:dd:5a:52:f7:61:55:e6:63:0b:
93:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C0:F4:A7:82:9E:28:29:A6:20:29:F2:ED:12:6C:52:90:B9:47:1B
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f1:7c:8e:59:80:63:cb:d4:27:0d:cd:eb:34:87:b0:a8:bb:
b7:37:44:81:a7:cf:d6:0c:66:1e:ab:0d:73:de:52:54:41:0b:
60:dd:20:95:8f:4d:7f:af:03:f4:71:74:2f:f0:e7:8a:7a:4b:
55:b2:ac:72:c9:f9:f5:a4:de:8b:2a:2b:25:39:73:22:ef:4a:
70:1c:27:df:8a:f3:e6:a7:f1:f7:0b:66:19:5e:fe:4f:94:63:
dd:07:35:ec:12:7c:7c:4c:07:b0:02:25:9e:d1:1b:5c:ed:bc:
92:44:dc:70:2f:c8:2b:e0:4e:37:b2:18:6a:b9:9c:af:17:75:
2b:6e:34:6e:42:a2:8e:68:f1:12:7b:9a:47:e9:00:fe:4d:25:
c2:06:de:02:28:d6:df:54:4a:af:54:f6:cd:39:68:2e:1a:af:
8a:8f:bc:ed:7e:f5:74:31:1b:fa:aa:73:14:bb:9b:bb:b5:d2:
61:46:3c:2b:5f:f3:38:3a:26:71:7a:d7:71:ac:39:9a:e9:66:
bf:a7:f2:45:60:d4:13:5f:86:82:36:2b:e4:33:7b:8f:e8:bb:
1f:fa:c6:9e:83:e6:44:6e:05:8a:d2:89:3c:05:d0:00:2d:c2:
cb:a7:91:bc:bd:9e:ba:3f:1d:4a:18:e3:45:cb:7b:62:7e:94:
51:92:83:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:51:15 2026 by rpki-client