
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft
File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json)
Hash identifier: b8Wsq2EBlCG2564p+YfhvnR/xOMMdHf0PoUjwPMrMbY=
Subject key identifier: 92:89:5B:F8:E2:15:F3:72:4D:F7:65:E1:8E:FE:8D:64:93:73:26:42
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial: 01A180E224DFFD27D54273C2FA558FFCB678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft
Manifest number: 1384
Signing time: Wed 28 Oct 2026 05:01:06 +0000
Manifest this update: Wed 28 Oct 2026 05:01:06 +0000
Manifest next update: Thu 29 Oct 2026 05:01:06 +0000
Files and hashes: 1: B3LQrbE0D8oQ4aL3oL7prkhZdyg.roa (hash: DlK6M5zssqdBfWBogBRgB1KWMlUPTeM22cLgGd9OR+E=)
2: EblpiwRL9HlLzK24T8oP9IND1vQ.roa (hash: xm23w0o3y4eEG4Z/X+VeKtyIUdl513KI04Rcim87iI8=)
3: H96_Qc9SsITA0naiCSVL6y7VEJM.roa (hash: Rixat+/GKfD+/Qc5Q1rAIKjAt7zVyl2ONWoiw+w/7aY=)
4: KkqMLgVSOl4C9gkiDIZV5IAys_A.roa (hash: yUWuR1LKMlNOOPlPCHzgsf5Jj1BpkzuEJuF1kFFXOiw=)
5: Rb5hHaoWK42HVqMlLmdL2Q_tqs4.roa (hash: pvzrnsOI9tdcc9ULSntzOOVe3GikcQWZKLx+48F0nCc=)
6: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: RYMncqtpiD9CB/wS1DBVBsKTPRSMTbMuolHTnqLL6KQ=)
7: _5dPGZCcsdHmpRhCTkOU-sos5GE.roa (hash: /u2/VDIfFnty31Q0Cg5Ee6PvdpGvq/sk0Sz5/j6Z4z4=)
8: _XOkat_tVbZSyUJD4uuRenyP92k.roa (hash: MO61vUIPE4xYG1HoXyKAbuzO/+H56vWiFpAKuIhdAOU=)
9: pUUovyR_3zQtaWqDGAW7Ac9HvB4.roa (hash: Fe3L3094CE69Fi+Zh6n4NgsG3bWV3oT1EQEavw3p2f4=)
10: qXcS6OI26rFTLi_T2I0DI0xKoyk.roa (hash: 7rGGuHEL+nQFILlUsjH4I+jgvUwVxc2dc664sGkuKo4=)
11: tz7F4eng4GbKZrftZOga_11upMA.roa (hash: pkYGrfaCo0zVxHfUdGVs2eZr/bDW6rBfCQtsQyDfE4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:24:df:fd:27:d5:42:73:c2:fa:55:8f:fc:b6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Validity
Not Before: Oct 28 05:01:06 2026 GMT
Not After : Oct 29 05:01:06 2026 GMT
Subject: CN=92895bf8e215f3724df765e18efe8d6493732642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:74:8c:e8:55:d4:e5:15:ec:da:25:9f:a9:2b:
cb:2e:01:83:04:0f:49:03:e4:ab:14:0f:bc:83:d5:
65:c4:28:53:b6:6b:50:e4:61:ab:3f:0a:44:69:a9:
65:97:a8:e5:1d:cb:70:01:ff:90:54:e9:78:84:d7:
a6:dd:c7:69:95:dc:f3:0c:fb:9f:96:6b:0b:27:91:
1c:f6:f8:74:14:bc:54:a0:c0:f3:14:0e:c5:02:b7:
a1:24:04:a6:c3:d6:cb:be:ab:1f:fb:e2:d3:b7:c5:
9b:6c:b0:29:21:d7:47:93:65:61:03:47:e0:25:d4:
63:1e:c4:cf:24:5a:d8:46:42:22:08:53:78:8d:04:
64:10:86:87:e0:49:40:6f:cb:e2:be:96:ce:6b:ca:
55:85:21:7b:83:50:3f:1b:29:1e:59:42:4d:0a:c8:
4f:0f:93:0a:ba:a5:18:e3:6b:b3:0b:28:04:7b:8d:
45:f5:3b:cc:a9:1d:38:77:29:78:62:04:2b:67:82:
c4:3e:41:6c:dc:eb:25:15:b1:de:1f:56:b7:23:47:
46:1f:93:fe:03:fc:d8:d7:17:ca:16:54:43:92:a8:
2d:e9:e7:29:6b:12:db:0a:4f:a9:1a:dc:6c:64:1b:
85:12:bd:87:e5:34:67:aa:39:29:42:85:93:7d:10:
cf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:89:5B:F8:E2:15:F3:72:4D:F7:65:E1:8E:FE:8D:64:93:73:26:42
X509v3 Authority Key Identifier:
keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:13:89:23:ba:35:6a:d3:a0:84:6a:3b:93:ed:c9:f7:83:fa:
8a:0d:b9:bc:26:8c:99:24:0d:6d:14:72:96:8c:7a:a7:8c:79:
33:c1:1a:14:cf:8d:65:d6:53:e5:e5:d9:66:ea:1d:c4:b8:dd:
3f:aa:b2:8f:fa:1e:4f:c1:89:00:fd:8e:e7:98:62:5d:ed:e7:
cf:00:59:63:9d:5e:e1:0f:5f:ce:3c:e4:a1:73:7c:04:35:ef:
e0:6d:b7:7e:4d:4a:2f:0e:a1:db:bf:32:2c:53:be:f2:eb:84:
65:09:13:c6:c8:a7:45:00:f5:e1:75:be:18:9a:1e:33:2c:aa:
5d:8e:93:ff:e6:cc:dd:f6:14:90:e7:a4:3c:30:5f:e6:80:b1:
60:ea:e2:ac:7e:a9:c9:c0:ef:75:e8:65:6d:3b:76:87:5c:ce:
47:fb:ef:55:9e:9b:d0:43:a0:cc:21:d9:77:49:3e:85:9f:5c:
bf:03:ab:9a:35:4c:f5:3c:e3:62:6c:44:d1:e9:b5:2d:65:0c:
d6:d5:67:59:f8:be:03:7d:35:00:d7:a1:38:ae:d4:01:2e:22:
cc:50:95:cc:31:e0:f7:bd:dd:f4:ac:ea:9e:bd:21:6b:85:95:
26:1a:d7:bb:1c:8f:38:c7:3d:22:b5:fb:f9:f3:66:a8:8f:0c:
9a:5e:48:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:31:27 2026 by rpki-client