
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: ReZRPtXMwusgHNHzeGpsA2zEw5tqpmMzPMb0gJdb1z4=
Subject key identifier: 1A:46:DB:12:46:BA:8A:EC:BC:3D:B7:AA:AD:20:C7:6B:D6:C4:0B:64
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A0916ACC6B37AC12B2B5A79B0C6A55EBB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 1A98
Signing time: Fri 11 Sep 2026 17:01:30 +0000
Manifest this update: Fri 11 Sep 2026 17:01:30 +0000
Manifest next update: Sat 12 Sep 2026 17:01:30 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: 9xcDq5BERTPl-taAcvBbAPdIa2s.roa (hash: /rCSnPIAiOhKYzHr0b4Aa11HLmoGu1kBXDiI9N5EJA0=)
3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: xk3JH55xftf7CQ2DY+uxaCtzETT7Ov+shn8ODljTkHU=)
5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
6: Wu9fqzsO0e3dDW7pg9IW4kd8ca4.roa (hash: DnNwN484bQ2o81uJz2zDwIJLdkB1zuHM5PscTbmg5Ns=)
7: ZsvTx9SfJapFLF0M3RriUR8HtMM.roa (hash: lxhDwbf/d9lixiDK0WW+B7DIvTUm3qDzeV3VF8OSC8M=)
8: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
9: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
10: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
11: i3YTAJozwkOZYg6f7KZcf--oZvY.roa (hash: N6vYaUT4my73KK+I3kEXMZHN6vjd2Vf3D+a9de3TkZE=)
12: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
13: vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa (hash: MKd69gZ2Jcg9+PMYCJYIj+vJw76cSWTcSBs7Eexy3D4=)
14: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
15: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:6a:cc:6b:37:ac:12:b2:b5:a7:9b:0c:6a:55:eb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Sep 11 17:01:30 2026 GMT
Not After : Sep 12 17:01:30 2026 GMT
Subject: CN=1a46db1246ba8aecbc3db7aaad20c76bd6c40b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:84:04:0d:3f:de:a5:5b:dc:14:d3:86:c8:a6:
b2:89:36:e2:c4:81:9d:54:00:59:bd:2c:e2:43:62:
7a:26:0e:79:f7:85:02:76:1f:08:8a:63:50:b7:c5:
17:0a:af:06:47:c8:bd:c5:d1:ef:28:ce:b4:79:62:
85:9a:fa:5b:b7:ca:e6:80:3a:4c:13:14:8b:2b:36:
57:8c:47:28:24:3c:4a:9b:cd:84:05:1e:ce:65:cd:
62:11:ee:2b:85:c5:7c:1b:ee:26:49:e6:96:b5:14:
c7:c1:67:45:bc:bf:dc:11:a2:aa:d2:97:bd:f2:e6:
99:d2:f9:96:33:b0:15:0d:cc:1c:3a:25:aa:95:6b:
ce:16:9a:e0:cb:cf:ad:f7:df:21:77:ab:c6:da:df:
e7:b4:ae:82:bc:87:14:81:41:6f:16:96:30:a8:b9:
52:ad:f5:3f:eb:7e:15:0a:73:c6:34:82:f7:f4:8b:
84:60:e2:26:a2:bd:e3:1f:a6:e8:b0:8e:06:0a:ea:
77:11:37:9c:be:e5:6a:e2:f2:c9:16:2a:73:fa:58:
35:68:8c:12:1a:1d:bd:e5:8a:66:e8:ec:b7:a7:d0:
ff:57:11:a7:66:d1:86:27:be:6b:0c:6e:1f:fa:0d:
12:9f:30:e7:0c:45:d4:58:5c:89:69:7f:87:ba:90:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:46:DB:12:46:BA:8A:EC:BC:3D:B7:AA:AD:20:C7:6B:D6:C4:0B:64
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a0:79:7d:de:89:7b:62:51:13:23:f8:d7:21:51:ec:10:91:
8a:0d:3f:92:33:e1:b4:bd:a3:5e:6f:e7:bb:10:db:fa:07:66:
8f:a5:a2:5a:a8:30:31:21:c6:bb:d0:17:82:94:24:ad:1f:2f:
a5:3c:a0:d7:dc:37:70:05:d5:bd:0e:22:67:64:9a:c6:10:80:
65:33:fa:2d:e2:3c:64:0f:60:04:7e:55:0c:99:4c:70:c8:3f:
02:39:c7:0c:55:c7:f9:04:2f:96:80:04:e7:47:38:26:f0:d2:
2d:f7:71:0e:74:a2:03:fb:27:07:b8:41:86:d2:d2:2f:20:3e:
29:e0:83:36:9f:81:91:35:5c:31:a8:ab:6f:96:eb:e2:6c:05:
52:cb:3e:64:b0:3e:e5:af:2d:c4:54:f0:c4:ad:55:6d:25:2d:
64:85:3b:46:05:c9:3c:64:59:62:3e:86:81:12:cd:7f:5f:33:
75:14:36:d7:60:62:65:50:f1:c2:42:a5:7d:94:00:d0:09:75:
2c:eb:18:44:01:f0:aa:13:80:77:39:e0:51:cb:c2:24:a0:ba:
90:69:7c:3c:a5:69:bf:0b:25:c7:97:26:0a:96:c1:11:c3:bf:
23:08:3d:b1:0d:46:4d:47:f6:33:1c:a3:bd:b0:e0:00:e2:3e:
70:75:3f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 01:37:08 2026 by rpki-client