
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json)
Hash identifier: o8NTg/ejK3Q7pWVvVSJG36Gg+2VuQcYQzmdk7GfxCyY=
Subject key identifier: 2E:62:66:2B:6A:D4:24:E1:B5:18:AB:96:D2:22:46:30:50:F2:EF:00
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 01A0E8532C834324E3226F6294E15B23BAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
Manifest number: 0F3C
Signing time: Mon 28 Sep 2026 14:02:39 +0000
Manifest this update: Mon 28 Sep 2026 14:02:39 +0000
Manifest next update: Tue 29 Sep 2026 14:02:39 +0000
Files and hashes: 1: 8r1K1OM5qngui5thmoePxmjOGcI.roa (hash: Lc08lhuuRKkKxvYSfc9k1w2HHAp3Uz/xuk8BCj5oIrU=)
2: A1CXr4dOt7xuCmQiPBtgt3iWtAo.roa (hash: GtPqaBuYk/tZ5YQVdapU19lv8Ijc7CBMwLU16C7BxnM=)
3: HMy1wxSppt6a370WgOiNsXQlVPk.roa (hash: nDhnb6wdJq1bcejnMDwW0L0rGJF02QbJ2F6fT5r9zng=)
4: JpNz-5mJsFq7butKO_csWbCEm5Q.roa (hash: VpAczQvbgQ1Ym4VsrRQcCrHDbx+vYYfxzFiOJ1msYps=)
5: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: uJ4gzbweex2+umwN8rzjR0M5h4Kne5Ro5OMeMdcvUNQ=)
6: ZuS-gRLhfC_n_ype4xj8F1xzPiw.roa (hash: EZUmDI/jcW023J4DXzaS1TmCl7OpJwcwm1bJROBPAP8=)
7: aOh1-99JcOZxqAcykG11EP2F9_g.roa (hash: 5HlRoHZPsDB8WS/Sga5nh3qNHpa39AaXfQFzVc0mT+4=)
8: eqKnQgR3Z3QzGQfveZTC-r9HgHg.asa (hash: zwc2/cXGVh90A6S8KR+/k+8p7KQXn9Hn6gTyZ7Bdy4M=)
9: fN_qyC3q0DgZifOUjvgGUIVLuLE.roa (hash: Ghng4SHLOPaXZFJc/gZf2VJ82XHj4yYptmX1zNVV1oI=)
10: mP8zF_bJOTWvXPulXS_oUR4vAd8.roa (hash: 4byK92brafemOMsopEaLGHGlykZBiRbGdrhWO9EemSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:53:2c:83:43:24:e3:22:6f:62:94:e1:5b:23:ba:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Sep 28 14:02:39 2026 GMT
Not After : Sep 29 14:02:39 2026 GMT
Subject: CN=2e62662b6ad424e1b518ab96d222463050f2ef00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:85:e6:01:5c:ff:54:ef:b7:ca:ce:50:eb:
8c:f7:36:ca:49:5c:ba:54:d1:13:5d:ca:53:44:2a:
c5:10:dd:f6:eb:0e:69:68:6b:b5:05:2c:18:5a:d4:
8b:94:f6:f0:23:96:af:dc:dd:a1:69:96:f3:f8:07:
08:3c:67:24:7e:f8:12:7f:ca:8c:e9:ca:7d:f5:9e:
99:7d:2a:57:e3:7f:06:ef:13:00:9f:ea:97:11:f8:
56:de:e6:79:c0:91:08:9e:12:69:b4:a6:0f:b2:df:
4e:ac:37:69:fa:18:bc:ff:57:d9:b9:0d:f6:fd:23:
3e:b3:22:e5:c3:f4:0b:b1:a7:c1:d3:2f:68:80:13:
02:db:7c:0f:dc:c8:3f:bd:72:63:6b:54:83:25:20:
1d:55:3b:b8:01:b8:67:0e:17:b1:ae:2a:ed:c9:12:
88:e9:02:c9:00:cc:29:8d:e2:34:2e:69:8c:7f:2a:
9a:20:3c:f2:1c:cb:c9:0c:af:1b:65:0b:97:54:8b:
82:44:e9:79:dc:59:3b:4c:2e:99:f8:0d:a7:5d:79:
68:3c:65:1c:a9:c9:d0:df:37:73:cc:b8:1c:92:3e:
9b:d8:8e:83:24:84:60:3c:6a:f8:d2:a1:57:20:38:
39:87:ac:6b:6f:63:6c:ca:81:da:f4:10:4b:72:15:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:62:66:2B:6A:D4:24:E1:B5:18:AB:96:D2:22:46:30:50:F2:EF:00
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:26:65:ee:4d:e9:7d:e1:09:1c:f4:26:c7:f1:a1:4b:9b:5f:
b8:be:71:ff:67:b6:c3:44:36:07:ef:c1:42:0f:ed:b8:7f:52:
94:63:da:6d:53:d1:d5:02:17:b6:5e:0b:d3:f3:6a:d9:89:99:
7c:cc:9d:cb:42:f6:68:17:ba:95:86:55:2b:86:95:ad:a5:7a:
1b:16:a4:88:17:79:fd:73:bd:d1:4b:36:ab:0a:d0:16:aa:d0:
37:ec:ac:2e:e0:e0:36:a3:1e:a5:01:7a:44:8e:1f:04:f6:22:
ff:0d:3e:20:90:f2:27:ac:df:03:08:0d:d2:0d:18:59:2f:18:
63:38:91:da:18:ef:2d:95:a3:bb:bc:14:23:e4:03:bd:58:93:
f5:cf:dd:50:22:c2:b6:77:f2:62:2c:a9:cc:35:0b:d7:b9:d3:
6d:bc:e2:d4:72:4b:71:09:53:ca:29:c0:95:72:7b:73:bf:0c:
c9:43:28:da:8a:93:67:3d:6f:85:63:88:2d:34:ea:9a:14:f2:
e4:21:27:41:0d:8c:0b:dd:d9:66:cd:f8:89:5d:e2:4a:9c:82:
6e:5d:24:f1:e7:5f:c0:11:80:a7:6a:f0:de:49:1f:cf:3f:25:
bc:48:b4:2a:31:60:0d:6a:8c:88:0f:33:93:79:d6:e9:dc:6f:
5a:93:51:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoUyyDQyTjIm9ilOFbI7q0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Y2UxNzljYmUxM2RkYjE0MDEyOTg1YTA2NzEwMGVmOThh
NTU2MDEwHhcNMjYwOTI4MTQwMjM5WhcNMjYwOTI5MTQwMjM5WjAzMTEwLwYDVQQD
EygyZTYyNjYyYjZhZDQyNGUxYjUxOGFiOTZkMjIyNDYzMDUwZjJlZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzayF5gFc/1Tvt8rOUOuM9zbKSVy6
VNETXcpTRCrFEN326w5paGu1BSwYWtSLlPbwI5av3N2haZbz+AcIPGckfvgSf8qM
6cp99Z6ZfSpX438G7xMAn+qXEfhW3uZ5wJEInhJptKYPst9OrDdp+hi8/1fZuQ32
/SM+syLlw/QLsafB0y9ogBMC23wP3Mg/vXJja1SDJSAdVTu4AbhnDhexrirtyRKI
6QLJAMwpjeI0LmmMfyqaIDzyHMvJDK8bZQuXVIuCROl53Fk7TC6Z+A2nXXloPGUc
qcnQ3zdzzLgckj6b2I6DJIRgPGr40qFXIDg5h6xrb2NsyoHa9BBLchWd4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5iZitq1CThtRirltIiRjBQ8u8AMB8GA1UdIwQY
MBaAFGfOF5y+E92xQBKYWgZxAO+YpVYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEt
NjJjMDFkYzY5Y2NhLzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEtNjJjMDFkYzY5Y2Nh
LzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSZl7k3p
feEJHPQmx/GhS5tfuL5x/2e2w0Q2B+/BQg/tuH9SlGPabVPR1QIXtl4L0/Nq2YmZ
fMydy0L2aBe6lYZVK4aVraV6GxakiBd5/XO90Us2qwrQFqrQN+ysLuDgNqMepQF6
RI4fBPYi/w0+IJDyJ6zfAwgN0g0YWS8YYziR2hjvLZWju7wUI+QDvViT9c/dUCLC
tnfyYiypzDUL17nTbbzi1HJLcQlTyinAlXJ7c78MyUMo2oqTZz1vhWOILTTqmhTy
5CEnQQ2MC93ZZs34iV3iSpyCbl0k8edfwBGAp2rw3kkfzz8lvEi0KjFgDWqMiA8z
k3nW6dxvWpNRWA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 17:12:13 2026 by rpki-client