
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
File: 9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json)
Hash identifier: WWMmwj6q5oMmjcrXPClQsdWWswuFh3pF58w0dGu3ee8=
Subject key identifier: 8F:82:B0:05:45:D4:78:F5:54:8F:9A:0F:2D:9F:5A:97:2C:18:D5:99
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 01A17EF3AE79471FFA98EB2C6BC9E448B3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
Manifest number: 1B6C
Signing time: Tue 27 Oct 2026 20:01:01 +0000
Manifest this update: Tue 27 Oct 2026 20:01:01 +0000
Manifest next update: Wed 28 Oct 2026 20:01:01 +0000
Files and hashes: 1: 1-dWfWWM2Q4bjUSimugWWfOBMll4.roa (hash: 9k9cnyjwgTflpSvsCNop1Tp//B4oTSziXJvJrKx7enw=)
2: 1-vkSUj3IhBaF6QCupk9p-QFNkpg.roa (hash: NyoZpDBj6nyKZfID52EDPnf8kCWXyPjqV37Bafp3IEk=)
3: 1if2l0vuSUyA8aKOlZRwZBTqr58.roa (hash: MYKlinKANRkkXALYuH4dNJZg3DMiY6cZlGtlrNDBss0=)
4: 3OlFo1BIMO58jOKinsgaHCIGcPI.asa (hash: It3e1tK83I/+WtTNXWRr1Q1FRwlRAB4eApvNExQnd0Y=)
5: 6c9spiMI22fbQ_S_riFTxN6JTnQ.roa (hash: WySy31z3A7Sqe9phj35VMgqeabINWeNkJj5/iHanhck=)
6: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: +hG9N4OJfq//HkBviIy25IJYQrpggGfaVi30Dzn6OWY=)
7: bSIf0T0EwRvYabxLmjmKKkxKJuc.roa (hash: QjhZut+rcecUKTU/gefSSs0Q8mSl4Rg0xTqiyiwiuWQ=)
8: k-YRkliMRVoXShQ8PbWy-9N7SjQ.roa (hash: lMxKbbsuVDDpKDp0TZpDMbjhyk3buYEiXF/UkdpZabc=)
9: oiD41d0i1VuwEQttPBFodXn6upI.roa (hash: uAOn8Pa9tipVHC9vk2BfHXqfrIzw8lI2qK4bQp5y4a8=)
10: qcBLaf6H5Hv30eXMa7IbsI7K2Eo.roa (hash: /8G6T8+RIvDyAMYfFzoKNpDCtHywa0CfF5MXcl8AVF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f3:ae:79:47:1f:fa:98:eb:2c:6b:c9:e4:48:b3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Oct 27 20:01:01 2026 GMT
Not After : Oct 28 20:01:01 2026 GMT
Subject: CN=8f82b00545d478f5548f9a0f2d9f5a972c18d599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b5:c6:ce:0f:1f:09:c9:9a:0c:76:64:c2:d1:
e0:d2:1c:4e:f7:d9:14:55:59:1a:89:7a:e7:3b:6a:
fb:64:ce:6a:09:2a:d9:52:f7:47:5a:0d:73:0a:c2:
e4:49:64:a7:92:77:a2:1c:5a:5c:e4:c2:15:ad:e0:
fe:85:d6:64:aa:cb:b8:44:13:f5:06:1e:90:cb:ce:
63:65:56:d7:ec:e0:38:b4:da:24:90:7c:6e:9b:ad:
2c:bd:89:07:4d:cf:52:6a:fc:22:91:f4:e7:bd:c0:
e0:16:81:60:d5:71:e1:c3:b3:0b:b8:86:d2:eb:d7:
d6:9b:5c:ba:16:57:90:3f:2b:a9:a2:6d:d3:0b:fc:
c5:16:5b:31:e9:87:93:d4:3b:d9:d5:2c:fd:85:af:
b6:62:ea:77:31:fd:42:d3:89:bd:b2:aa:56:d8:1b:
5a:4c:a5:54:92:69:2d:42:ad:b9:0d:f8:17:03:47:
a1:f5:53:d1:13:fd:cf:46:f0:2e:ec:5c:07:86:7a:
f4:67:8d:0c:06:89:b1:74:d6:9a:3c:49:68:c1:af:
dd:89:e7:d8:75:84:5a:59:47:09:35:ba:b0:46:cc:
9e:6f:14:b2:62:16:75:7d:10:7f:dc:35:f3:92:1c:
53:7c:2f:4d:62:78:51:75:89:1a:98:c1:33:ea:0d:
0f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:82:B0:05:45:D4:78:F5:54:8F:9A:0F:2D:9F:5A:97:2C:18:D5:99
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:72:2f:7c:06:8e:d0:bc:03:16:e1:84:96:15:c9:38:dc:49:
de:db:db:43:c4:57:f8:81:cb:76:c6:9d:a9:d1:b1:a4:56:4a:
d0:b0:09:61:1a:98:ea:67:0f:34:07:27:61:65:70:ba:97:a3:
74:f6:0f:20:b0:8d:f4:74:7a:7a:74:77:e2:f0:9b:17:55:40:
db:f3:c1:ef:1a:55:ee:7e:e8:c5:3a:5d:ed:fc:64:5b:e4:1d:
05:0f:fd:a7:75:91:01:66:3a:18:6d:dc:90:25:93:b9:32:bf:
6d:34:03:ac:07:c5:0e:1e:76:52:d2:83:10:65:34:c1:ab:21:
dc:ff:e5:f1:1e:ca:82:60:03:5e:cf:a8:93:d0:5c:5e:c1:00:
89:89:b4:d1:ea:29:df:27:c1:86:74:5a:25:b7:69:63:ed:f2:
f7:e3:1c:f3:9b:87:1d:c2:70:14:94:bb:b9:96:3c:d2:c7:94:
a7:f4:6a:99:77:ae:58:af:ab:8d:b5:ee:77:44:88:e0:02:bf:
f3:2c:0a:e9:45:4a:f2:c9:12:38:3a:f6:16:46:0a:38:9c:d3:
95:fc:8e:05:bf:6f:ea:b1:75:07:59:74:a1:79:3e:87:4f:3c:
93:7c:f1:84:12:77:36:51:8a:d4:80:54:fa:0e:5d:da:68:00:
5d:98:a7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:46:12 2026 by rpki-client