
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
File: 5llvGxY8qwxFqE7rEyYbZfGiKWI.mft (raw, json)
Hash identifier: Gp/bXwffuDrf/CwBrIGGO9st1t2cOB3Kbc5ZAEzBIzA=
Subject key identifier: 1D:AB:07:C7:F4:8D:5D:DE:18:2A:9B:07:E7:EA:2B:FA:5F:26:A1:30
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 01A10E4C0548ED7F27AF51F6389DA403D6C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
Manifest number: 1AA0
Signing time: Mon 05 Oct 2026 23:00:25 +0000
Manifest this update: Mon 05 Oct 2026 23:00:25 +0000
Manifest next update: Tue 06 Oct 2026 23:00:25 +0000
Files and hashes: 1: 1yFoGNscUr4CLW6dqLRm33BUYvg.roa (hash: JRIdLqy0jettzG16H9R0buawd/EdTcCwurGOVeJ4no4=)
2: 5llvGxY8qwxFqE7rEyYbZfGiKWI.crl (hash: WQfBuE/4KL0IH0lfnzWrtC+1EmWGzFGJ+LBLpPSfinU=)
3: 7Qfl9Mds2YXiGHI1bUT6XiSxVL4.roa (hash: q1b4P2s3t9bFP69gx0VvlkJ2k9wbhF00vIOXxyF0Vvc=)
4: 7TjKnhX5D5deQHoXLUoiSMDy9Y0.roa (hash: v9zlg7kFGnsHSQNcetbSYedV3Coh51JEiDo9qlPpjd0=)
5: Ohn1TkDNg86_ayTFKaxNgyeDWKw.roa (hash: UXNLfN4yk/bOhc93qSx+KAzobQ1bu0Nj3leNruG+aAI=)
6: RCGO8Oq5yEvN1IZ3X284dzzUQeU.roa (hash: LRdALHDMlvzEn3Mzy4S60miqNChz9RLJWshvg3Evc1c=)
7: RSoSsFPa67XJSU_rYMFvnteNoQk.roa (hash: EJat0fz8NMFL7YZfeXLEntqwJOOPR75hReV0Lx+zuHc=)
8: RZbOGzmRLKUkDrECsvD-FTI72cc.roa (hash: Fab+2t5Dd13ANxnSLzfHbZtJxR4520ho/Mfi1jtgezI=)
9: WahD60c8L22Ycb_BALwXUk0StuA.roa (hash: EVO53sqtSZqWFofeupHa94Am0ZrXjRJrcXXcGrDKcaU=)
10: __bescsDyAwNYJKFrHMgdDKxm34.roa (hash: ACM4zhp6ticayTpOrFeCe1H0xbn/X4/ekQ3eaJIxNvI=)
11: aBBjIklmYlMWX-vmbHGnuwsWD2M.roa (hash: +tC+W98mtUX2QstLidBAPcpltrAwZl6PNr50mq8krSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:4c:05:48:ed:7f:27:af:51:f6:38:9d:a4:03:d6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Oct 5 23:00:25 2026 GMT
Not After : Oct 6 23:00:25 2026 GMT
Subject: CN=1dab07c7f48d5dde182a9b07e7ea2bfa5f26a130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:83:e9:a1:96:1f:9d:fe:76:f3:40:05:69:70:
cd:18:62:fc:0f:c4:bc:f5:05:ce:30:aa:59:de:12:
4b:f7:f9:48:43:48:7d:56:6a:b8:9f:a1:7f:84:9a:
19:e5:a3:28:a2:8a:76:4e:d3:04:8d:1b:91:ba:ab:
ec:e5:61:18:9f:53:de:f3:32:8a:d0:0e:cd:65:ca:
f9:74:55:9a:8b:95:b5:be:11:f2:ce:2e:f9:60:30:
fc:16:08:ca:40:37:65:7a:b1:c6:6e:a5:16:06:dd:
56:18:42:e6:d0:a5:d3:e2:bf:c3:80:34:01:43:aa:
7f:e6:7b:d3:4c:06:02:1d:33:9d:f6:2d:99:85:3c:
a4:fc:00:b4:51:d9:44:52:0d:41:ca:60:8a:93:57:
61:c7:ff:ff:63:8b:e9:eb:1f:cb:68:08:6e:6e:79:
a8:d7:1f:b2:b1:23:24:c0:0e:58:f0:08:36:ac:8a:
76:82:c9:14:a4:eb:e7:0a:db:ba:e4:46:cd:70:ef:
25:25:e2:3e:52:2b:18:e7:cd:2c:54:67:87:1e:e2:
1a:5a:eb:c8:e2:b1:f0:c5:07:d0:ac:07:6f:d0:21:
b7:b2:85:53:eb:26:fb:01:3b:52:96:ec:5c:09:4c:
11:21:2f:40:15:8c:41:ce:b1:4f:08:d8:e0:ba:ef:
15:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AB:07:C7:F4:8D:5D:DE:18:2A:9B:07:E7:EA:2B:FA:5F:26:A1:30
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:cc:cd:c6:da:5d:4d:91:e7:d0:a6:ec:83:54:c9:cd:71:91:
f5:1d:67:92:5f:63:f3:54:9f:1f:3b:c2:6f:dd:89:56:8c:8c:
a9:2f:a4:58:1a:7a:99:96:5f:a8:69:d8:b3:51:a4:b7:38:24:
32:0d:7e:a9:b7:d8:ae:71:dd:3f:22:6c:78:b9:88:7e:72:33:
8a:1a:9e:8e:bc:5e:02:56:55:dc:2d:36:be:7b:d4:54:af:d8:
29:c8:88:13:3c:d5:2f:e4:04:52:9e:43:89:44:b8:a3:6f:3e:
6c:11:cc:d0:7b:60:69:f0:aa:31:cf:9e:12:f8:ec:d8:a1:54:
95:27:18:2a:26:a0:ce:1c:76:a7:e6:12:87:97:2d:3f:54:fb:
1f:f7:eb:29:91:9f:b2:b2:65:da:16:99:dd:db:d5:d6:45:1a:
b2:50:53:bd:d4:59:2c:66:49:5d:a0:14:12:2b:af:04:99:bd:
8f:72:cc:00:bd:b6:d2:01:03:38:31:13:ce:7d:c4:33:5b:a9:
70:15:dd:30:8e:c4:f4:6b:c4:22:c6:fb:21:ce:01:0c:a6:b2:
0e:e4:b9:6b:42:dd:92:ba:60:2a:c0:d0:09:96:e8:5f:60:a9:
f6:4d:61:c7:d5:f4:f8:91:3a:f6:90:40:88:56:36:63:58:a8:
50:a3:14:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:28:40 2026 by rpki-client