
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
File: 8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft (raw, json)
Hash identifier: KpOSOXtAH/JNRBh98eZnwwuNyjHBoquvRQsVh58qYhA=
Subject key identifier: 81:C5:DF:56:D4:3E:BC:EC:74:78:FF:2C:D1:DE:79:D5:FC:6A:49:31
Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Certificate serial: 01A182999F72F8CE31DDD00AB2B127C448FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
Manifest number: 02B6
Signing time: Wed 28 Oct 2026 13:01:08 +0000
Manifest this update: Wed 28 Oct 2026 13:01:08 +0000
Manifest next update: Thu 29 Oct 2026 13:01:08 +0000
Files and hashes: 1: 0PwBP1m5V8tHPFCHGGYOau0rRTc.roa (hash: M0W/FLJbKezFVRY+boZRSGO4f4RhltYple/V23X0j4c=)
2: 1vK1T7KdFH0hBpOuHuKe8W_luZE.roa (hash: qhZOYXpVTc+RHC0IfCFs2RzEIVYZAgoD6YvTFLHwFmE=)
3: 8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl (hash: 6xM/5x3KqL7LI6NDceJGBdXmFDSOogjhDJNnpOQl6kQ=)
4: JcePCXWu8_9ZZzjxfVygKM8dWzw.roa (hash: 0S4YgLpuoSBRqOUxV6YpZdqEiuMF4cz82gQj2otpNQw=)
5: Md-o3lGIoXUo9ynVTwQnDQUNyzM.roa (hash: AWCf1DkAv4fQq3K+BQw40VyMuDn4MGmNjixx31UPhmA=)
6: Nd6V0QCloRDIZfwDcQtVL1w6Z0A.roa (hash: TIjs2IbFM1v00nTvmxBW2uHZechx9jNZhQSCyvBAeP8=)
7: O9sJ-_TKMq6bS7__E1UX2XB1imA.roa (hash: +Z6Yn/3PglFToHJ9MMw/pkkVUwEYwsRd5WZO7o88I9I=)
8: QEGryiURhVI85Y_iwFPpO1kjb3E.roa (hash: f7QZn8PJdOvgT/DCDoEpmb1SfJG64+IFdudonB3DpJU=)
9: S64PRp6HfgfeBA5dqF_nm378oSE.roa (hash: KH+IlbpUNkPXeoQclXeI5i/KLaVnfhqbd5izf4u4qTc=)
10: SHnHAD4XActufnWbDbBuCezR5sk.roa (hash: nenlz/3VAG7POjOi6mcs6RNeMaF2/86fDvCTf+cSRc4=)
11: Sq_qOTsf7wVB0vwgreS3nB_jIPk.roa (hash: OK/CHpHTM2yPPc6litBPMbap80Y0eTVdGYncN8WvmXg=)
12: WFIitC1iC4SxaD-gROSFjGsIGEA.roa (hash: tUjrSM/VRqbKLANp+j7DdS1R8QyDACe7TIIRQbZyYRc=)
13: XZAVpeao-MzWMM0T1IBuo6mJOhw.roa (hash: 4OhzlwI1uDhgkruwa46Ix7LBdf/mbvESkAg3CQYlmdQ=)
14: bGTHKMCwmJVzyHYU3KNYDg0jpi4.roa (hash: t9eEDkdFYwdSvb8hr3A4ec+b83VLHsVFWQATSd2+69k=)
15: bIX0tHr0jNswqPbh1gH8l-5GqA8.roa (hash: 5BjYOxvY1gubdV0c42SuZfXnljPiDdTy3UNiDoGVdu4=)
16: bTLlcnL0Fm_nCJarfemQWZlQvug.asa (hash: +U6OavydfvrqqdI9vdtdZM6LAnVLXxOVl7v9NGcpnyo=)
17: ea-J5bW7cK-quuNuRi6CFgFcSLY.roa (hash: qIqvWSMcazfocJrExCZsZTdbNeOv46Qe1fgtgnWNwqY=)
18: fYhnGLcy2_Ou27KADH18mycTzz4.roa (hash: sP66OdJ/+I0oQxB3kcnMaYSOI2OOAjekthsNq69mxkE=)
19: vSXSp5A3lM38ZHU363V73iY2sOY.roa (hash: OEc0FstKUDyge4yjj89lJISWQxLtMasQvdcX8uQFwbM=)
20: znznPgmiVfClQspsE4FxbLwuLGk.roa (hash: P3S6+AOoBSM1R2KGeRW8cymJyc/ckeqjjTGRQ6mN/pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:9f:72:f8:ce:31:dd:d0:0a:b2:b1:27:c4:48:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Validity
Not Before: Oct 28 13:01:08 2026 GMT
Not After : Oct 29 13:01:08 2026 GMT
Subject: CN=81c5df56d43ebcec7478ff2cd1de79d5fc6a4931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ec:cd:64:60:b2:59:33:75:bc:ef:0e:fe:c4:
86:37:69:3d:a2:87:d1:88:77:33:31:dc:cc:17:36:
81:90:de:45:ab:23:3d:68:d8:96:85:51:c4:bf:ec:
37:85:ad:6e:f7:21:e7:1a:c2:22:2a:db:b1:46:f8:
d6:c1:69:03:e4:20:f9:18:db:4f:1c:83:83:d8:c9:
7c:8e:b7:78:de:81:10:61:06:23:27:8e:8e:e8:9f:
97:93:95:d0:f3:30:64:08:92:2d:58:6e:90:ac:3d:
ee:68:54:df:37:ff:11:ee:2b:52:98:2e:a6:7f:95:
4f:77:b2:c7:4c:5f:f1:6a:16:7e:88:2d:19:b0:41:
5e:e3:95:a7:53:07:70:39:a0:cc:97:e5:84:b7:e5:
14:b8:82:ea:a6:8f:aa:82:ba:2c:00:91:87:f8:75:
86:08:94:16:09:24:91:cb:e4:12:62:a6:84:5c:ec:
83:ef:7e:fd:d2:17:a1:cf:b6:3b:71:34:17:50:61:
f0:e8:10:28:ac:7a:03:7b:fb:6a:93:f6:36:f2:63:
17:2d:0c:a7:2d:b3:37:0e:bb:2c:1e:d3:f6:4d:ec:
2f:8d:9f:ab:c6:6c:9b:0d:7b:65:ae:2e:c8:9c:4e:
d9:e3:8a:5a:8d:7b:bc:65:f7:4d:98:bf:9f:38:d2:
cc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C5:DF:56:D4:3E:BC:EC:74:78:FF:2C:D1:DE:79:D5:FC:6A:49:31
X509v3 Authority Key Identifier:
keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3f:f4:1c:02:6c:dc:cf:90:fd:c5:8b:06:d9:c1:65:b8:cc:
0d:bd:76:82:67:3f:61:77:01:da:22:c3:81:fd:f0:6c:06:94:
1a:6a:89:51:64:b7:65:48:6a:e9:7f:fb:4b:46:80:cf:1e:c3:
07:9a:bd:70:56:ff:9c:79:d3:a7:13:2e:15:c2:3e:e8:65:0c:
ea:98:f2:73:7c:ca:b4:39:fb:cf:2e:9e:98:4a:8a:9c:b5:37:
17:a7:55:81:a2:31:37:01:f2:e1:3c:6d:46:b9:4b:be:60:27:
30:6a:d2:c2:75:81:64:76:53:63:e7:d6:ab:e3:15:59:93:d9:
02:aa:15:12:92:97:79:1e:07:ee:86:aa:a2:30:03:84:5f:ad:
9e:f7:6e:28:21:53:94:bc:0c:0e:a7:db:95:70:c6:76:41:ba:
ad:07:b6:af:6d:66:cb:54:ef:64:a4:5b:0d:39:72:55:86:d6:
4a:d9:f0:9d:07:6d:8a:d8:6a:e2:96:84:a5:8b:4b:dd:3d:c1:
f4:03:9e:55:6b:36:9f:d2:fb:39:b5:8e:b2:c8:7c:8f:2a:ed:
6e:a0:92:4c:f8:c4:2b:d9:39:9c:b8:0b:d1:62:c0:cf:6e:1f:
78:53:c6:ae:d5:de:1b:60:79:11:0c:c5:1f:79:14:0e:18:93:
42:f0:ed:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:47:58 2026 by rpki-client