
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
File: 5eAzVGZsTLKr_VFBHspdUksNW-U.mft (raw, json)
Hash identifier: JHb+bv/1SCS4kINmWlKfqo7T3SsQYMR/wjk/nXASQX0=
Subject key identifier: CB:A1:F2:2B:4B:A7:3B:51:07:B8:6F:AC:26:3C:70:26:80:10:28:1D
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 019DCC741DB56841DA7BA756A7C1F7773683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
Manifest number: 87
Signing time: Mon 27 Apr 2026 01:00:54 +0000
Manifest this update: Mon 27 Apr 2026 01:00:54 +0000
Manifest next update: Tue 28 Apr 2026 01:00:54 +0000
Files and hashes: 1: 5eAzVGZsTLKr_VFBHspdUksNW-U.crl (hash: R8bOIHxPj3882iIt/dRd8nMMfQiqFeFrkcCvtMpxpZU=)
2: H0LmI3hwP5vuk6s2D4uvDcdqzVk.roa (hash: 2sxJRLlrwU2S9zOA5ff7Badv9IoN7irocgD2LEsbLN0=)
3: c8eJl-3JP9AxZFULMhM6YkciJnY.roa (hash: T6HFSllAOvG1TkfBGfSjeP+EN0EobptIaOD6pvtjKUM=)
4: kdWUYDREoQ3N2A7deVtO68-yqs4.roa (hash: bUgQp1LB1aMffjw2lKit1+GbbhesVmXQqan+Qw/1ROI=)
5: kw51Lm0mc5w8FwzYeE7YIp_f-Gk.roa (hash: OMZso7/dCWxfJTLo4VPx0QJ4cvTP9uIN1LOsWuS06Cs=)
6: o548aWjyv_hfBdpA1bVFK3wrNP4.roa (hash: zUyBvFaEHdugGyGKIt6bIfLj0Nkxf9FI6lzJjaoR1s4=)
7: skRcoxVV_e4zKUJ-PcawwudWhvs.roa (hash: /T5/7ESG8AnsEEwa67YOqMxxgqR+qtDogLVw2PIFibM=)
8: w2BhL8IoeKHyOBrWe4qdH75R0rE.roa (hash: f7oxnga0mFy31MbGdu6HRoHXFf4LdXAjl0cocBZKmKw=)
9: xqkIGkwCiGI9_ROxA-753BCeMSo.roa (hash: 6Wbd2frdsClpbkut2snIQAUUZt2yqFLdakRBdxOpvPI=)
10: yv3IV4Vlkd8eePPSX6RP7lOMXhU.roa (hash: IlfKdK3YlVuTxh1bRqhdGRqWCOTVftiLmI4fUhCGywY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:1d:b5:68:41:da:7b:a7:56:a7:c1:f7:77:36:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Apr 27 01:00:54 2026 GMT
Not After : Apr 28 01:00:54 2026 GMT
Subject: CN=cba1f22b4ba73b5107b86fac263c70268010281d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:2e:21:3a:21:86:5d:60:c8:8e:5d:d7:a7:
36:57:e4:04:42:1e:25:e0:94:b1:19:93:4f:41:10:
56:06:bc:bb:95:5c:11:5f:58:e6:eb:1b:f8:ba:97:
71:ca:b0:15:ae:b7:aa:96:02:03:24:a7:68:69:53:
0c:d6:c3:e3:02:61:bc:52:42:69:ac:98:04:d9:25:
40:61:27:23:09:b4:f4:4d:57:14:c4:af:76:af:d2:
cc:98:d5:d9:b4:3c:32:c4:87:c1:83:1e:2c:ab:78:
11:fc:f0:aa:34:7d:a4:1b:8c:ca:ff:99:22:e4:fe:
9b:b2:0d:65:c7:47:86:75:a2:74:47:ec:85:39:00:
6e:4c:62:b6:f6:4f:ae:ca:36:2c:7f:af:82:f5:19:
0d:be:23:73:1c:bf:d3:17:c9:48:4a:24:b4:46:28:
5f:0a:6b:2c:51:a4:2e:67:7d:7d:3b:28:42:fa:c2:
43:28:4a:fb:e9:10:3f:c2:93:48:97:5e:75:46:72:
df:ea:8a:52:eb:54:a3:c7:c3:29:ed:cd:c2:f3:fb:
2d:38:86:f3:5b:a3:d4:ce:01:a9:80:6b:e8:bc:94:
41:4b:81:54:1b:c5:5f:4b:64:b5:28:3c:be:b7:54:
8f:3b:eb:11:30:0c:39:c0:f3:49:22:bd:63:05:b1:
61:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A1:F2:2B:4B:A7:3B:51:07:B8:6F:AC:26:3C:70:26:80:10:28:1D
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:82:b0:23:f2:a6:c4:ff:23:47:e5:26:2e:07:07:6a:45:f0:
af:30:09:2d:e3:73:f5:ca:15:d6:cb:ea:17:65:a1:3b:96:de:
87:e6:3e:e3:e0:61:9c:2c:f2:61:d0:b8:06:a1:4c:d5:cf:74:
69:4c:fe:b7:14:88:d7:f3:0f:ee:5d:41:70:42:37:a9:a1:42:
37:ba:f0:b9:4d:65:df:c9:1f:9c:fe:ad:2f:3d:94:5a:75:d5:
fb:e8:e1:25:a8:dd:7e:2c:ef:21:f5:c6:d7:0e:9f:62:5a:84:
66:d8:54:5b:87:71:4f:97:e3:d2:1a:d1:75:62:9d:76:5b:ee:
a4:db:6b:82:aa:5b:96:f2:58:02:4d:59:0e:71:f5:3f:b0:af:
76:6a:04:8b:6b:d3:9a:a3:f1:e2:60:80:2c:de:6e:3e:22:1a:
31:dd:33:78:ea:11:79:27:0a:0d:d8:77:c3:ee:5f:06:44:80:
67:cb:15:7e:a3:da:b3:26:5b:81:a9:9e:e9:60:64:f1:1f:22:
b8:76:56:a9:4f:03:f7:7c:61:60:43:ef:86:25:4b:b7:a2:4f:
5d:fd:b5:ff:8d:6b:d5:c4:6c:2d:0e:bd:24:35:0b:89:5a:2e:
c7:9d:97:6c:d2:17:58:e3:be:c2:01:ce:dd:f1:1d:13:ef:0e:
52:5b:93:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:02 2026 by rpki-client