
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
File: pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft (raw, json)
Hash identifier: RYmFZ0S9Fdt9LIG461wBo8zh8IAGO99B4/FNSH3ESTs=
Subject key identifier: AB:E7:BE:C0:67:01:5F:84:45:FA:84:18:33:89:7A:53:82:27:30:89
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 01A1298CB91CCBEEF8AB92BA7A3812AE5963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
Manifest number: 0114
Signing time: Sun 11 Oct 2026 06:00:50 +0000
Manifest this update: Sun 11 Oct 2026 06:00:50 +0000
Manifest next update: Mon 12 Oct 2026 06:00:50 +0000
Files and hashes: 1: 8eWn-LZ8SHda6Hq0PZ8MjLvheII.roa (hash: t0Q9JGg0FFkCyUnnAjxlIairjnAp1fGIhWq7kxGfNJg=)
2: Dl8kjWnig9EJLu_V18bsJwWgThI.roa (hash: l/ftiedkdOtevwG6rB8zoiK5YC04kv/8SOqTEc+HzIM=)
3: E2z6-aE0lSQ3PEiEzxW-JiraDEE.roa (hash: KsnALsa02zQjMMj5q5msrnek1tk5/ZfIcaQoMmke+mE=)
4: EFeoepCweNchcY3yfWtwGD_ZuaI.roa (hash: pYKBI/KFA8wkQgixMUY8skRW5VKXK8M6e31dK0HwAis=)
5: G_cJpHD_tLUwCg2RMVO24zq3Grw.roa (hash: xNL/dYNyvvIlOS2j+6Eyo8zzNd4uG3W4GbIaOCiKFl4=)
6: HAt__vrw52VuZkpPDGhyJ1Sqq6U.roa (hash: j9XKjBk7nFDWQWKVzLFTasY9jD5D/3qYwK+3ZpEzpj0=)
7: I4AgYPx6q-AXqCOLfyv2qdwV6wU.roa (hash: 8y1qmodCTXEdWfudBIOg5DrmRpEF6FezAaUs7Ropbsg=)
8: JEVNWQm_Cx4mWqq5f1Vg9xZ9JzQ.roa (hash: suXL0V83sdkLjwTY6BS/4DMQepDMTnnLPjHsyUslYPM=)
9: JpbDWGlEPEX32kqGhGQOeWSYx5Q.roa (hash: JNJaUsPN0pZohEeyDrNgCF5tl5YPCYCRSpC1PRT7kZo=)
10: MlxaAHik4Irhhg2pDV_s_Rvf7bI.roa (hash: 3NA/JBsu3EKmNF330/KjUrrDVxnecTt8Q2GPQT4XUMo=)
11: O1gPaiiuHk3Ynoh8wcqM-XkdraY.roa (hash: suwi7xOa2pEQsq5Ilao9i/obnAr3R24ZSt95W5s3w8g=)
12: QOM15JeN0LuoBWCIcbxrvBihxTo.roa (hash: RgmDFHjBWCEG8nuyIsqAeoRJCFfCkfWjGGmoJpZMo70=)
13: R26ho8RD5wA-FJFM2n4H8lCIMDU.roa (hash: K8bV/6TdZ6xy+XDttrJ2eOGl3w4V8h8EbfrCk8vy/rQ=)
14: SirBpcdRe0m-u_7kALpPCFiPrPs.roa (hash: Z3DSwVfj4GWtECnzKi66mFueac7BJgJGEnZh6Zx4AQg=)
15: UNcrdBCA_IAi--0l3IsFosaU7lY.roa (hash: 8FZC4gbje388SsnaqTJsrZ50Gofq4vRkK1UBtNYlK+4=)
16: X4pU60oDGJrdQI6mIHlAf5rK9qE.roa (hash: pOrJ7LztgT1wu4oDyjOGr9iWSnnOAH4w2AcPvFhqBnA=)
17: Xy2lL2DYT88B5SmizPLux-GXV3Q.roa (hash: Mh0mK933Nfyx6zsgugTVc4TLaFDjax/ayFtH6UHp1oo=)
18: ak2Qp1unBPBGGKshocpx5pL8uig.roa (hash: mOmd1/1RN87KSSOrhLIJgH1FH+upMs+93rOqXUD4go4=)
19: g4bMCR1I2A-6CXSx0W_2l3WKHNg.roa (hash: W5QhjY/Vw7lnM6k8E56FkxoOhrKCflFe48p21g7wGsM=)
20: i5MOqIaSyXP0Wf307JZ-H9fPCU8.roa (hash: WqvJAJL4M1ePBiSqQQISn5kDX+foal+qOH30XzgeJBs=)
21: n5NcxiT9PS0KRcc3R-BBqbuxAco.roa (hash: bz9bpUxzgrZqP4jqMtfZiRv9Qka9ZHViEEqOfmNETJA=)
22: os3bcu3roUzbLBzHQwm9bp3nxZ8.roa (hash: lfz697NMPxlXy6wIBOMRer/mHkvfB1xMD+9SuaGfDyQ=)
23: pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl (hash: QCmcS7h34mwbfFrLlpd+jtO4u+TV3yFNPeGRP+6JICw=)
24: wyD5rZUYnotDvDLBTn1HvdDE-sg.roa (hash: LP8H59Ja7nr0y53p7ISvyJuUcJ0QD06m9kkaSrByJHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:8c:b9:1c:cb:ee:f8:ab:92:ba:7a:38:12:ae:59:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Oct 11 06:00:50 2026 GMT
Not After : Oct 12 06:00:50 2026 GMT
Subject: CN=abe7bec067015f8445fa841833897a5382273089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:e8:b0:ac:2c:7e:a4:e5:60:30:99:9d:41:
33:b3:2d:c4:4b:54:c5:8b:d5:e7:ce:a8:49:d5:80:
fe:15:df:ca:72:be:79:6e:af:cc:99:df:d7:68:7e:
12:dd:eb:91:f3:fd:e8:36:cf:d7:91:1f:42:bd:d8:
c8:6c:87:37:90:71:1d:63:6c:a9:3a:f9:8c:02:11:
b1:57:e5:99:c8:40:66:39:05:ac:00:73:41:6f:ac:
e2:d0:be:a9:45:c9:27:a5:96:4d:3c:9e:a5:b7:3f:
1b:e0:2f:41:a3:d0:fc:05:78:6f:87:51:97:18:5b:
58:6d:b9:13:ed:d6:a6:b8:66:58:c9:78:58:7d:96:
28:87:55:6c:d4:56:9f:cb:2e:da:d1:0b:a1:fa:f6:
52:18:6c:40:88:d4:04:94:11:69:e8:ca:be:3e:ae:
4e:91:b1:fe:a5:99:72:2c:4a:01:28:98:5a:79:85:
43:de:93:27:8d:00:02:01:71:de:68:b8:82:3f:c4:
7a:d4:88:2c:9b:38:c9:3c:de:4d:16:0c:74:80:0d:
8b:05:c6:73:49:5f:88:07:4b:89:80:95:c1:de:70:
5b:62:a6:f5:c1:2b:0e:8f:55:2a:b2:7b:de:df:33:
a4:0f:1f:f1:b7:a9:00:6a:8c:ba:4d:e2:5c:1b:e1:
fa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E7:BE:C0:67:01:5F:84:45:FA:84:18:33:89:7A:53:82:27:30:89
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a0:17:29:45:6b:f8:39:f9:a5:43:3f:60:ef:c9:06:36:7e:
58:ac:54:c0:6e:ab:83:c0:dd:4d:76:d8:01:a6:98:73:10:01:
e8:78:97:b4:6f:b3:77:06:7a:33:c1:fd:41:d2:bc:27:95:0a:
75:6a:ff:29:3f:9e:23:cb:af:fc:f1:ff:51:f9:3a:0a:35:c3:
83:d9:20:1c:cc:c2:73:bb:ff:4c:d4:35:5f:f9:ae:f1:49:ba:
4d:9b:98:da:6e:9b:73:56:1c:b6:49:f7:48:6f:0f:70:99:02:
30:78:0d:f4:c0:6e:8b:89:38:38:f0:b6:bb:bb:3f:2b:97:1b:
a3:ef:30:1b:1d:7b:e9:84:c4:80:68:e2:0d:2e:35:8a:70:ca:
4c:58:71:7a:78:a7:96:10:aa:49:4b:8b:20:3b:aa:7b:53:c8:
d1:73:97:b3:2a:bf:cf:47:bb:48:96:a1:ba:e9:69:41:c2:88:
04:96:bb:e7:03:17:38:00:63:83:4f:6a:c8:5b:a3:93:92:77:
78:65:07:82:89:85:fe:9b:61:8b:0b:34:a5:ab:87:5d:67:77:
3c:48:8c:36:0c:7e:3b:ac:ca:a0:0f:2b:f9:72:de:b7:63:82:
07:6a:7e:03:54:f6:e9:ba:56:49:0a:40:25:10:f6:1d:d6:30:
ea:fd:2c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:15:27 2026 by rpki-client