
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: sh93zT9gA6RLP4DduGvaPhqrmcuP+hNrSFu4Q2syWk8=
Subject key identifier: 9F:D3:10:CD:33:CA:9B:77:01:6A:FF:E4:FB:CD:03:25:31:EB:33:1D
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A09D01379EFA29114C399C3A0CC83878A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 1A9E
Signing time: Sun 13 Sep 2026 23:01:37 +0000
Manifest this update: Sun 13 Sep 2026 23:01:37 +0000
Manifest next update: Mon 14 Sep 2026 23:01:37 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: 9xcDq5BERTPl-taAcvBbAPdIa2s.roa (hash: /rCSnPIAiOhKYzHr0b4Aa11HLmoGu1kBXDiI9N5EJA0=)
3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: tGLtsoEWkW2Ld5WALCvmHbhsLfMLPUt+QhMdxOjD4EI=)
5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
6: Wu9fqzsO0e3dDW7pg9IW4kd8ca4.roa (hash: DnNwN484bQ2o81uJz2zDwIJLdkB1zuHM5PscTbmg5Ns=)
7: ZsvTx9SfJapFLF0M3RriUR8HtMM.roa (hash: lxhDwbf/d9lixiDK0WW+B7DIvTUm3qDzeV3VF8OSC8M=)
8: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
9: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
10: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
11: i3YTAJozwkOZYg6f7KZcf--oZvY.roa (hash: N6vYaUT4my73KK+I3kEXMZHN6vjd2Vf3D+a9de3TkZE=)
12: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
13: vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa (hash: MKd69gZ2Jcg9+PMYCJYIj+vJw76cSWTcSBs7Eexy3D4=)
14: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
15: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9d:01:37:9e:fa:29:11:4c:39:9c:3a:0c:c8:38:78:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Sep 13 23:01:37 2026 GMT
Not After : Sep 14 23:01:37 2026 GMT
Subject: CN=9fd310cd33ca9b77016affe4fbcd032531eb331d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:86:93:92:cb:cb:04:1d:be:d5:0d:a7:bb:
cd:5a:40:3d:f2:a9:32:9a:9f:7d:41:02:f0:63:9e:
11:c1:c7:22:98:e4:e5:9f:7f:7b:e2:c0:54:82:88:
1a:ec:54:c8:43:0d:e4:c3:d5:46:8d:4d:6e:f7:3f:
0c:fb:88:ce:32:a3:e7:12:b1:9e:38:99:9f:25:cd:
7f:db:0e:bd:a3:f7:f7:41:c5:9f:9a:47:d9:f8:f9:
31:c9:0c:12:be:b4:43:ef:ad:0b:f5:42:de:e5:b6:
63:1d:a8:16:cf:54:3c:d9:6c:7b:00:c1:8c:ea:c5:
c3:67:90:90:45:d0:c4:eb:9c:93:53:24:5c:78:be:
b1:18:33:fe:5e:26:08:a9:90:7d:3c:22:f8:f1:f5:
49:df:f9:10:ea:d8:93:38:3a:20:34:7e:c4:11:ee:
0c:ef:69:59:7c:25:e4:78:37:7b:dc:4e:c9:e5:58:
ac:b8:95:3f:de:2d:f7:9a:b2:5e:19:4d:41:cf:02:
e6:e0:8d:e3:66:de:7a:f3:4b:84:c4:20:30:b8:e9:
a6:da:03:01:f2:26:0e:0e:a3:c7:23:4c:29:d8:da:
8a:9c:86:d4:76:86:8a:3e:49:3f:5f:49:1e:67:ee:
56:66:f1:21:22:51:b0:7f:a9:28:90:80:98:80:2d:
3a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D3:10:CD:33:CA:9B:77:01:6A:FF:E4:FB:CD:03:25:31:EB:33:1D
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6d:83:e9:f9:4b:bf:5d:f5:3e:d6:15:52:84:de:7e:17:6f:
07:ce:6f:8f:1b:2d:aa:ce:02:0c:bb:8e:cc:f0:87:06:14:b3:
16:b6:ad:bc:10:cb:4a:8a:4e:02:74:06:9d:bd:a5:28:bc:18:
49:b6:e4:69:46:0c:63:95:0e:cb:f9:54:69:b0:54:de:c0:a8:
2e:29:88:1b:84:ea:eb:80:ea:0a:f5:2b:eb:41:db:f6:00:92:
c5:47:2e:1f:17:5d:55:25:f2:3b:7f:f3:3a:58:e1:20:08:6d:
30:ed:4d:fe:cb:95:33:53:ce:44:8a:29:49:3d:07:24:23:fc:
07:9f:8c:d4:1e:85:ea:10:a2:aa:c6:0e:26:38:44:02:45:06:
3d:81:28:ba:c6:90:92:5d:0c:51:18:b8:f2:c6:f9:32:65:20:
3b:be:b7:c6:13:cc:f6:27:b5:b9:32:e4:48:88:ec:22:93:36:
96:ea:1f:89:02:25:79:70:1a:34:ef:69:a2:53:17:b6:e7:e9:
4c:9b:89:49:58:dd:f8:f6:e9:78:8a:1c:43:83:09:b1:b2:6c:
ab:0e:7a:78:0c:c2:e1:8f:3f:70:57:23:96:bb:0b:15:64:b5:
11:ad:e7:57:60:95:13:2f:aa:e1:bf:88:5c:b7:c2:05:d6:57:
d0:9a:1c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 03:04:10 2026 by rpki-client