
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
File: 8DmVMU18LHBTsc_z4T-WUCquq88.mft (raw, json)
Hash identifier: aX3gW4VlICjO+JPea/e84H2RXDz9/DZ7AwxvV3KgUR4=
Subject key identifier: 80:0F:11:F6:6A:DD:34:2F:A0:EE:D3:CA:F1:2F:C1:3A:35:00:3E:52
Authority key identifier: F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
Certificate issuer: /CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Certificate serial: 01A17815E72206DE85041B98FB4109A688C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
Manifest number: 013C
Signing time: Mon 26 Oct 2026 12:01:03 +0000
Manifest this update: Mon 26 Oct 2026 12:01:03 +0000
Manifest next update: Tue 27 Oct 2026 12:01:03 +0000
Files and hashes: 1: 7Y-WGHeIKmavhhwyUtVSTv4dV74.roa (hash: 6aCml1iAjI5Ul10/DV9KNxyhcQNoCoHzIBHaF4XKERk=)
2: 8DmVMU18LHBTsc_z4T-WUCquq88.crl (hash: SeDozovg5StOMEuh5K2MPz/e9OZW7Qn692eYu33G3Lk=)
3: 8VBWQ2XfCMC5lByDcRYfdGeXThw.roa (hash: HzqPO66uE1+HiOwrkh0W6gUEqECAgV0PXkfjdzoF6Fc=)
4: ADSFjd7CdbzaI3rWM5WXzSr78b8.roa (hash: dpJ1bSM5jDKoR+wXRYlGh5z+uNOn0fdbBQpUFJegB00=)
5: DOhltBe7Jjwt-Zang59aCLv9pyk.roa (hash: r1rLZd7khJrDRQV2tg8gcIC9iFKyZ3MlcWZBnZyazys=)
6: GKNBUzbX6fk_ZGvEdYf3qJ03AqY.roa (hash: Yk5Z2ApUIFrV+C536vj94AjIDEb8pim9xmLcinHBJbs=)
7: Py5-SfzgdBopcKEbr1S0y6HLpi0.roa (hash: UfuqXVAeefVJVDWI/7a6Zdo2dE/lpe7wMglvajxwHoY=)
8: RHorQ2xcAb-F7Xna9K5af7FEmzs.roa (hash: S44AKUCf5f+EQxBGcjX+XoCjjJ0ey5c7k0eoY9Ekr5g=)
9: UgtMS63_CIHp4yrDJgi3ZLPBmnI.roa (hash: WN89G26tYkg2OtwRMyqMK1Q84ryZ7bW/B8p2iEKccX8=)
10: a1QWWFZ6s4DRdUSOTU03JY_v_Rs.roa (hash: Cmtap6+ZacRGEaEZSRlUzvkfeKN7ipRh2grGmp1mnfA=)
11: lKpsaMhWZ0fV61kPqKZYx1tVCjY.roa (hash: 3krPNydBrnfH95dkgxU42zpY/EBgzcVqcHPdZ1SpwQs=)
12: qEMDrkRlxLB5UG0Z6mCAhLBikio.roa (hash: mHPLMjrq5nmaQwjZOJcQiDtgEZxLquTnwJyzydmKSCE=)
13: wwpquAWTUuFb0E9CJs-YBNeMQ7E.roa (hash: 2XANtZptrutEVaXB3duL9dMIg7D+kzakEupuwq2jEe4=)
14: x3AkqqWCM_jT5RY8dyci5qYm37o.roa (hash: 6wh4k7uKUw5+QRgS1jkmB585ZTOG6T4LIDLdP+mMWWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:15:e7:22:06:de:85:04:1b:98:fb:41:09:a6:88:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Validity
Not Before: Oct 26 12:01:03 2026 GMT
Not After : Oct 27 12:01:03 2026 GMT
Subject: CN=800f11f66add342fa0eed3caf12fc13a35003e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:d4:be:ec:aa:d9:c1:5d:31:ac:b1:b6:e8:
28:1f:f3:be:28:8a:4e:68:97:03:5f:c3:61:10:56:
d9:9b:7f:94:7c:7a:79:b0:c7:2f:d7:a1:98:57:1e:
c8:be:0c:b2:0c:f2:fa:41:c2:59:08:a2:19:1f:cb:
0a:16:81:79:67:16:b2:7f:57:fe:7e:23:8b:9c:db:
9e:ad:a9:7a:18:9d:9d:27:77:35:75:e3:6a:d4:b0:
37:f5:44:82:70:de:e1:38:0b:fc:99:dd:40:3c:2e:
a8:d1:6e:c4:9d:18:9d:7d:06:a9:ec:d1:37:02:0f:
33:4a:73:11:a8:b0:8b:95:d3:5b:d6:d8:96:c0:43:
80:5a:bb:7e:c5:25:22:12:1d:e6:84:74:5e:2b:aa:
fb:52:a1:c8:20:a3:d9:c1:7c:83:7b:5e:20:6f:a6:
26:a1:35:12:de:92:85:6f:16:d8:4b:3d:65:b6:45:
49:9e:42:1a:41:63:05:b6:54:0d:72:f2:ec:f4:ce:
63:ca:4c:83:a6:7e:36:9e:c8:60:9e:13:a1:fe:6c:
64:f9:de:55:56:47:96:75:3d:40:da:c4:45:65:a7:
4a:05:11:e1:c7:a8:f7:d7:88:42:20:8b:c9:30:71:
33:0a:c0:43:65:c8:ff:0a:5a:f3:a8:ea:03:e4:7e:
c5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0F:11:F6:6A:DD:34:2F:A0:EE:D3:CA:F1:2F:C1:3A:35:00:3E:52
X509v3 Authority Key Identifier:
keyid:F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c3:32:63:04:78:35:96:f5:7f:18:1f:b0:88:07:8d:eb:c7:
db:f1:d6:03:41:a6:77:9e:c2:f6:14:e7:5a:79:a0:d5:a1:ae:
bb:48:78:0a:55:2d:03:76:09:0a:59:0d:e5:88:c4:54:d8:b0:
10:9e:74:58:43:a9:ab:53:41:51:8a:3f:51:e8:68:a8:b6:8f:
d6:e4:ee:72:08:f0:9c:42:7d:dd:26:7d:87:7a:15:d1:e3:87:
7a:4c:f5:b8:94:c2:20:2b:a1:ec:7c:82:4f:c3:12:61:b8:c4:
5a:c0:d4:4a:cb:fd:17:04:e2:3c:17:cd:26:b1:8e:76:39:45:
9c:b7:39:91:7e:9e:32:d7:f7:f7:87:39:21:1a:0e:90:42:39:
e4:68:44:94:8e:86:96:c2:84:f2:68:d5:35:6d:58:33:8c:54:
47:4e:59:21:7b:a6:88:81:6c:e3:24:f3:48:8c:9c:a6:19:92:
b3:b0:ee:d5:13:77:0c:7e:53:42:c2:1c:f3:36:65:8b:7f:57:
07:32:a0:16:aa:58:de:f2:19:21:85:09:3c:7e:31:61:80:72:
8b:fa:8f:ad:4d:a0:88:93:74:1d:de:a1:28:c3:2d:d5:08:00:
06:c8:51:29:14:01:83:c9:56:96:a5:51:a3:9c:bf:76:5d:70:
26:b7:f8:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF4FeciBt6FBBuY+0EJpojCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMzk5NTMxNGQ3YzJjNzA1M2IxY2ZmM2UxM2Y5NjUwMmFh
ZWFiY2YwHhcNMjYxMDI2MTIwMTAzWhcNMjYxMDI3MTIwMTAzWjAzMTEwLwYDVQQD
Eyg4MDBmMTFmNjZhZGQzNDJmYTBlZWQzY2FmMTJmYzEzYTM1MDAzZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTjUvuyq2cFdMayxtugoH/O+KIpO
aJcDX8NhEFbZm3+UfHp5sMcv16GYVx7IvgyyDPL6QcJZCKIZH8sKFoF5Zxayf1f+
fiOLnNueral6GJ2dJ3c1deNq1LA39USCcN7hOAv8md1APC6o0W7EnRidfQap7NE3
Ag8zSnMRqLCLldNb1tiWwEOAWrt+xSUiEh3mhHReK6r7UqHIIKPZwXyDe14gb6Ym
oTUS3pKFbxbYSz1ltkVJnkIaQWMFtlQNcvLs9M5jykyDpn42nshgnhOh/mxk+d5V
VkeWdT1A2sRFZadKBRHhx6j314hCIIvJMHEzCsBDZcj/ClrzqOoD5H7FEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAPEfZq3TQvoO7TyvEvwTo1AD5SMB8GA1UdIwQY
MBaAFPA5lTFNfCxwU7HP8+E/llAqrqvPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERtVk1VMThMSEJUc2NfejRULVdVQ3F1cTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct
NWI1ZTMzY2U3MGFkLzEvOERtVk1VMThMSEJUc2NfejRULVdVQ3F1cTg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk
LzEvOERtVk1VMThMSEJUc2NfejRULVdVQ3F1cTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8MyYwR4
NZb1fxgfsIgHjevH2/HWA0Gmd57C9hTnWnmg1aGuu0h4ClUtA3YJClkN5YjEVNiw
EJ50WEOpq1NBUYo/UehoqLaP1uTucgjwnEJ93SZ9h3oV0eOHekz1uJTCICuh7HyC
T8MSYbjEWsDUSsv9FwTiPBfNJrGOdjlFnLc5kX6eMtf394c5IRoOkEI55GhElI6G
lsKE8mjVNW1YM4xUR05ZIXumiIFs4yTzSIycphmSs7Du1RN3DH5TQsIc8zZli39X
BzKgFqpY3vIZIYUJPH4xYYByi/qPrU2giJN0Hd6hKMMt1QgABshRKRQBg8lWlqVR
o5y/dl1wJrf4OA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 22:55:28 2026 by rpki-client