
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
File: mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft (raw, json)
Hash identifier: KtXgMONqi6RLc+lcqD+B2b55sekXNjNQ6alVqDWiMNE=
Subject key identifier: 9B:98:62:A6:FC:76:FB:EC:42:71:49:78:A0:C4:69:BD:D3:FF:54:9B
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 019FDE0770C86DC701A6A5963C8D67AE8A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
Manifest number: 1A7E
Signing time: Fri 07 Aug 2026 21:00:57 +0000
Manifest this update: Fri 07 Aug 2026 21:00:57 +0000
Manifest next update: Sat 08 Aug 2026 21:00:57 +0000
Files and hashes: 1: 5OGPGzofiEFa09GnFOAn5hhvk48.roa (hash: h2LTT9rBOO/bxXO9EO5NFwg/fB9HG26CM4uymezMPKI=)
2: IPMiCKDGg-4bycZ4wSrvvc3HolI.roa (hash: Up0dPWNya84ceqWIOnzBSjlOj2l1pRl6VXrPutXxbZ4=)
3: OyXa5XHUgsJSBsdbc3Qrhq4QU1Y.roa (hash: Gyfd0tsIEQsaZgvjHA4zwq5b2ZqvTwYd6Np55tiRmHQ=)
4: P_IQf465IziNUba5nDDuA9mYb2E.roa (hash: NtF/MIHSktYf3HQG++BY9SW33um7HsSxglhUDmVhaCg=)
5: THhHEbJLNflyjg0CGgDKLOWHmNw.roa (hash: hE5im+TYFFs2d+KHjtsfg9PpKV6WFy0Jtd49aeuY6Po=)
6: e7Lvz7EuGDsmNFIhRbwvynj9xTY.asa (hash: ns2I70ZkX4z8+mK5f+FUnkH52JTj0mfI9C5qd0rPQ1g=)
7: l6NUj59hnqy3JLtxFYVYwOzXNdc.roa (hash: FrjzAwtuQeTaIwwwPCyfJBI49cI+Unf2qW7eLS9drHQ=)
8: mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl (hash: O2YuTi51qA8WtZcd91Zj0sUubRRANY9KNmriI0k7MHE=)
9: vREpqPygKpqEUBRK1WP9YRnHT1U.roa (hash: aIOz9LGkgfShAFeGoLvJK3zSpzEcpe5gJpmAOuZIS1I=)
10: z0oaUfPMt3Z_xl8gY8NTLVtXaGM.roa (hash: q9SpH5VN4ogoXvDgwfQyWPD2v94u40id/9IL4OGY508=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:de:07:70:c8:6d:c7:01:a6:a5:96:3c:8d:67:ae:8a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Aug 7 21:00:57 2026 GMT
Not After : Aug 8 21:00:57 2026 GMT
Subject: CN=9b9862a6fc76fbec42714978a0c469bdd3ff549b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:bd:81:dc:21:e6:fc:09:17:cb:15:6c:2b:
e1:61:23:dd:ee:cd:1e:ac:68:5a:91:b8:ac:2f:ff:
87:c4:e2:28:a0:7e:57:21:97:e7:bf:64:cc:35:9a:
6d:7f:52:7a:1e:1f:d1:4d:b6:82:16:9f:c7:a8:e5:
27:59:6a:93:d6:fb:b6:2d:b8:ca:bd:c3:99:21:d7:
9e:bf:23:b5:aa:a5:b3:b0:1b:d4:76:74:b0:54:47:
21:b7:58:e3:d6:83:87:e4:5b:6e:37:f6:01:29:90:
d2:70:8c:e4:98:8a:5a:7c:3c:f2:49:f0:f8:e8:72:
a0:89:d9:08:b1:92:e3:28:7b:cc:56:ab:60:c4:fd:
af:0b:bb:a3:b0:ec:3e:1d:88:13:d2:d9:1d:00:f2:
5d:a0:dc:96:b9:1a:23:2b:fd:f8:0c:3a:b8:3b:1d:
05:46:ae:c8:58:39:12:f2:7b:51:45:5a:92:b1:ec:
29:1f:ed:ac:ea:ae:2c:1d:32:61:9a:e4:cc:f9:c1:
e9:4a:65:5d:7d:f4:f0:13:14:c6:f8:87:3b:15:a6:
83:97:69:0d:a5:3c:28:d7:a6:02:46:1f:e4:be:b5:
1d:4d:5c:66:ab:48:00:68:f0:bd:8f:86:32:6f:43:
a9:82:c8:c5:81:17:a8:9a:84:e8:31:59:8b:ee:55:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:98:62:A6:FC:76:FB:EC:42:71:49:78:A0:C4:69:BD:D3:FF:54:9B
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:95:5a:92:72:07:05:22:5d:f5:ae:05:a8:88:ea:08:86:a0:
7b:a3:f0:a5:29:d5:71:bf:9c:89:89:cd:3b:3e:0a:50:5a:9b:
8f:8a:b7:5f:50:57:c3:4e:bc:28:d6:a0:e1:a8:19:3a:74:49:
7b:40:67:f5:a4:ba:78:1e:2b:e5:e8:79:ed:5c:7e:9d:9e:18:
98:23:91:63:78:64:ca:b3:ae:3c:d0:4c:10:47:9c:ea:6c:df:
65:a2:9b:1e:8b:31:2a:9b:57:fc:5c:87:74:d2:a0:8c:05:28:
54:3c:ec:e7:fa:50:c7:d0:66:f5:ff:63:41:a3:97:1d:61:47:
d3:b5:78:a9:7b:42:cb:7b:e6:83:bb:05:64:86:53:af:28:2a:
d7:80:8c:11:dc:1a:ec:a3:70:c1:83:42:32:80:d0:0f:92:6a:
15:b7:4b:3e:27:ce:90:d2:5e:63:5c:85:cb:ae:87:36:be:0f:
b2:f1:a2:14:d0:12:5f:c0:c0:5b:2f:c8:77:4f:2d:1c:31:1d:
21:8e:a0:7f:2c:0e:a8:90:19:64:85:85:6b:0f:f6:bb:70:54:
09:4c:85:bd:c8:02:ee:90:a1:44:d1:94:2a:94:17:ad:26:a1:
40:62:e1:b0:86:dd:1d:bc:dd:6e:f6:cf:69:21:2f:28:7f:bb:
03:62:24:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 06:01:11 2026 by rpki-client