
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
File: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft (raw, json)
Hash identifier: LT399VGOKM1cUDiiSqJt44mK10e3ix7/7oAcb/RA4bA=
Subject key identifier: 61:97:83:62:ED:26:5F:54:65:F3:5C:98:50:C4:7D:9D:8A:A4:AE:27
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 01A1784C5D5FBBDB02488FF0B8D911D923FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
Manifest number: 1AD7
Signing time: Mon 26 Oct 2026 13:00:32 +0000
Manifest this update: Mon 26 Oct 2026 13:00:32 +0000
Manifest next update: Tue 27 Oct 2026 13:00:32 +0000
Files and hashes: 1: 1KzAL4WrD5dhhGZJOCxuUIPFwOk.roa (hash: aO9dX9fJ0rrae7yQKAQfFledrNyIupTZnT+cq07JYUA=)
2: 2fnNi2RG50nUnV2NcaaKxkNfurs.roa (hash: YjCnMRPFuN3k5TRvL6rGrwmbFWVhQVPPpGvWD61uUkg=)
3: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl (hash: j5twZq7R6pVnuCEiOAjK6ytCz0dFZuNSvRfOUwgRfeU=)
4: 88YNLmciNd0j13-H2-rZxVQMdGQ.roa (hash: PZ0hEGC0oEs598gQ8xeAY2EzI4szP3Vs9gNvciW2BKM=)
5: AnqEtz5hZkYAy4yO8qlLikZWRJw.roa (hash: j2OhR3ENDnTZP9Lf8x78QsTXcfAZEG3FS513keiFcpI=)
6: HQdRd7-uxpWaApI_yUxbm_9_dzg.roa (hash: i48eXcWynnm44Ui4IjxVTSgQ+VI6di3z/zykGcaGJUk=)
7: OCuIuLoTyx6UI4cRdqXTZdZqrRE.roa (hash: NtYeBn7vObBSrZet17ESmCNvYRE2bEdCvdV04YI1os0=)
8: RBopAdVF60vgkqykUfTCW-bkIG8.roa (hash: QhamcW1yECyAqJIZtVxwyJIdNVMOgAFF2TzQ8FAjUVo=)
9: RahkU4tOoQngjkSl9mhdDwc4pFU.roa (hash: JWZJdzvFdiQ85WtuycaeUgc1cy9Tzhri/PcDTONVm3Q=)
10: Rsj6R_5dXiHi1eUSKzpDKZzkTiE.roa (hash: nMPA233TUV9gqlw8aP+/RPCmhirOQucfaoSyNAu6fXc=)
11: YUsCKqNl16pDs_8KVE5VLmDFj5M.roa (hash: enLSqBELUYJ70Ss/6MuXxuUTa0RNR44fL5GLxYESEBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:4c:5d:5f:bb:db:02:48:8f:f0:b8:d9:11:d9:23:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Oct 26 13:00:32 2026 GMT
Not After : Oct 27 13:00:32 2026 GMT
Subject: CN=61978362ed265f5465f35c9850c47d9d8aa4ae27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cc:7d:62:3a:e7:21:59:2c:bb:d7:c1:2b:c6:
aa:34:fd:99:05:ee:69:69:37:bc:9c:a4:3b:74:93:
28:a3:7f:3e:56:fa:66:05:e7:fc:93:a2:21:cc:b5:
4d:2d:4b:e4:9d:06:1c:b9:f3:42:86:f5:bf:f3:02:
1b:36:ef:61:94:4a:66:b6:5d:ad:25:e3:53:6f:7d:
63:da:ba:29:06:1f:ed:99:34:4d:66:5d:e0:b3:04:
73:ed:32:a9:26:2d:c0:91:f3:8b:d4:35:df:0e:e1:
62:93:fc:a2:01:5f:6d:a0:9c:f7:22:e9:fc:c8:69:
56:96:f3:28:bc:45:90:63:6e:d6:f7:9e:fc:fd:29:
68:ff:94:b1:36:d8:0d:e8:8e:41:af:50:d4:19:e8:
6f:09:d8:22:7c:09:d1:45:35:9c:60:17:48:c5:65:
90:37:85:f5:62:d4:5c:0b:f5:17:f9:96:99:74:38:
d6:4a:0c:0f:70:42:7a:af:20:aa:7c:17:fa:df:d9:
39:de:ed:56:f9:29:d9:e1:6f:24:1e:ed:58:fa:37:
84:6b:f5:5e:83:ce:97:55:30:81:ef:50:ea:4c:13:
a8:5b:f5:8b:60:04:2f:b4:05:e5:c6:02:a4:34:97:
70:ff:4c:8f:6b:69:89:d5:e2:85:da:6d:48:f2:4e:
28:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:97:83:62:ED:26:5F:54:65:F3:5C:98:50:C4:7D:9D:8A:A4:AE:27
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c8:d8:e1:24:b0:77:bf:28:32:af:e5:9e:11:78:b8:d7:0a:
79:49:ad:f7:e4:77:0d:60:c8:c2:72:64:36:16:19:32:25:f8:
8d:23:37:04:a9:85:06:94:94:18:fc:49:6d:d8:27:37:63:62:
34:1f:e3:01:fb:70:80:ce:cd:3c:c1:a9:86:ef:50:39:e7:3e:
d0:ab:5c:fd:13:de:9c:bb:8c:ef:d8:9d:e4:cb:9c:52:cd:ea:
ce:33:83:16:87:94:bd:a1:18:8a:0b:dd:aa:24:ba:01:80:c7:
a6:80:a4:da:3c:4e:02:6a:e8:57:fa:e4:d9:ae:6e:b8:60:f9:
4d:93:36:92:87:28:2d:eb:eb:9e:9b:ee:9f:e1:0e:80:64:53:
5b:1f:43:0b:a6:22:65:bb:e3:3a:89:f6:f6:54:e0:a8:ec:dc:
78:56:ac:69:36:10:a8:93:39:52:47:3c:d8:db:eb:37:bd:50:
1a:bf:fe:23:d0:44:a4:f2:27:b2:63:21:b6:5d:6d:78:5c:f8:
1e:fb:89:ce:be:55:3b:60:a6:88:e3:94:28:c6:38:73:85:fb:
d7:4a:b1:c3:65:7a:ff:a6:40:77:87:60:f6:d2:4a:23:b6:04:
0a:1c:bc:bb:a8:34:1f:6e:22:a1:47:96:67:8c:90:71:92:a7:
17:ce:e2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:56:18 2026 by rpki-client