
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier: jVbWYhqRCinxAirwsiWukTt67wu8Nc1KiLfNnHaP3ck=
Subject key identifier: C7:6E:60:DA:60:88:EE:77:8D:8B:3D:C7:57:AC:C0:3E:A5:33:A0:B2
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01A0CD10A517963BB92416827DA9837A2AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number: 112F
Signing time: Wed 23 Sep 2026 07:00:14 +0000
Manifest this update: Wed 23 Sep 2026 07:00:14 +0000
Manifest next update: Thu 24 Sep 2026 07:00:14 +0000
Files and hashes: 1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=)
3: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=)
4: JWw_FABd9Q-ewURwU3IZ1GpRRJY.roa (hash: ZCt1hbjV0Oxdybocx7QzONRXEhTOvQ3xXy28wEkffEM=)
5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
7: alg23em52u81qKf3TWMm9rQtp00.crl (hash: PH5mideJxqhmAEwnB5eUD6Ir0sXzy6p6ehIhfQ3wXuA=)
8: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
9: lbJDMqkl3r_zP_8RcjCwdgnRqqQ.roa (hash: MLj9IAZg1W5TsVOSKsUt+tjSOZpaYeIgJDEMRDXfZGo=)
10: mQKWGJcUH9K-JRzm__zzvh8RY30.roa (hash: kWUBDBmUmrcdRJVoYANr5CHiRnOgTYOm1wjhrADWFGE=)
11: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
12: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:a5:17:96:3b:b9:24:16:82:7d:a9:83:7a:2a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Sep 23 07:00:14 2026 GMT
Not After : Sep 24 07:00:14 2026 GMT
Subject: CN=c76e60da6088ee778d8b3dc757acc03ea533a0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:df:ce:90:c1:27:e8:fb:3a:bd:39:32:81:
39:64:fa:26:21:e7:9c:b6:5b:b5:f3:b3:66:c3:03:
58:45:ab:cc:e0:3f:4d:45:f8:42:6e:16:d4:09:b2:
d1:04:84:9f:a1:da:2e:f2:fd:fb:2b:57:47:15:de:
03:5f:e2:b0:aa:ec:eb:a8:dd:14:8b:1c:50:13:93:
50:f7:86:db:2c:0e:e9:8c:11:17:b3:d1:02:92:ea:
10:86:13:2d:ae:52:18:df:40:14:5b:24:c3:23:83:
74:8e:9e:bf:58:3a:a0:90:71:dc:f6:27:d1:18:49:
59:52:07:b3:42:c5:ad:27:44:44:85:55:98:b6:0d:
e2:da:9a:5f:29:9c:43:e4:ef:9c:6d:c3:3e:3c:c6:
b3:7d:82:6d:e0:28:95:7a:0a:6e:92:30:01:4b:0d:
47:b8:df:04:05:37:50:93:f2:ca:99:57:6a:e9:f4:
9b:81:d1:f2:dc:01:45:62:f9:aa:d2:3f:e5:bb:b4:
85:24:da:ca:d1:37:e4:f2:bc:98:85:51:a8:7b:03:
9d:98:89:bb:35:62:44:54:85:ec:78:23:30:d6:a0:
60:53:f2:93:6f:93:09:bf:bf:37:b3:43:aa:d9:12:
36:63:54:90:a2:5e:bd:8d:bd:d5:d0:b7:fe:db:c7:
f4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6E:60:DA:60:88:EE:77:8D:8B:3D:C7:57:AC:C0:3E:A5:33:A0:B2
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:04:78:1b:e1:64:3d:d8:8f:a8:d5:a8:40:70:86:e8:88:59:
f8:1a:d3:dd:57:91:cc:dc:74:f0:8d:b1:c5:db:66:5e:29:bb:
b4:82:70:0e:99:97:9d:75:cc:c4:bc:13:17:5b:fb:ba:24:fc:
66:c6:b3:9a:c9:81:ed:7e:7c:60:ed:d4:bd:c8:17:10:33:63:
e3:10:71:5c:e6:a0:e3:0d:a9:bf:e6:3a:cf:70:4b:a6:ba:54:
89:a0:d8:c8:02:3f:d7:9d:f9:7e:95:0d:31:2e:6e:73:41:d8:
dc:10:64:54:08:25:c6:2d:18:01:f9:a7:76:cd:d6:70:d2:07:
aa:c1:b3:41:77:08:65:5e:07:69:12:e1:dd:ae:25:1b:14:7e:
bd:7d:9c:d7:8d:02:86:be:fc:d9:e6:bf:9c:3e:93:9c:d5:1d:
df:49:c0:0c:cc:21:8a:98:01:19:f2:91:24:43:3a:08:30:ae:
41:61:ca:16:4d:e5:16:74:dc:e1:9e:19:fa:f7:42:42:42:1d:
d9:3e:9a:7e:6c:b2:66:19:98:55:11:08:f3:e0:da:3c:fe:73:
04:2c:f2:37:18:52:47:5e:e0:b8:93:d5:43:c9:a2:42:87:2f:
12:5c:87:ba:09:15:7c:fb:21:e1:58:6b:39:5b:a1:0f:ec:f2:
e6:57:d2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:09:46 2026 by rpki-client