
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: JBVJr1vd3oiW2VGRZM2pFHjRYLWNv8UFAbgACjA0Mas=
Subject key identifier: 2B:9E:37:1F:29:81:8B:2C:43:3C:D8:13:F3:0B:E4:67:C2:45:C5:81
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A1A6A69BAAD9AAC0383D54F326A375302C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 1B39
Signing time: Wed 04 Nov 2026 13:01:38 +0000
Manifest this update: Wed 04 Nov 2026 13:01:38 +0000
Manifest next update: Thu 05 Nov 2026 13:01:38 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: 5lZSlukstep8t8iGtcspGGIXudc.roa (hash: 2HisxFB+lIfH6x5qfJ2BbD71zUZkoyCOyQw011g7v5Y=)
3: 7liLho7mm8qK1hKdo9pzuzDUrKI.roa (hash: eORnpEQIWy2dF7BiQX+y/iU7zzf2f5oTCK8LoTwy4OE=)
4: FbsD3IaJEYz-fngs_BkxMzDcei8.roa (hash: sIhRNJSFg1QvsagQ533HplVxtNWu8BYrTJIuHiVYaZw=)
5: I6-j-8BvQfa7uemDIhOjpDrfaIo.roa (hash: 4oPWEYVGarVF168W3qSKbbTkYi3cD0iLoXF1q+SMw64=)
6: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: nKF3nGlZT0C5tmbMFNXS4nVQbQDVLUimYSaVSPlNj2g=)
7: T-qUaTppWdjXOEe8zDVxP2wl2mU.roa (hash: BctL7i3w8G6/dn3DlfdZ96WAphGXQa+OTA6hPMPwVs4=)
8: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
9: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
10: e7qy2cTt6p5gNaMBLvc92aaNc_Y.roa (hash: 9Mx+CD/LnDGLKhs7WTJY4mZKGHAB4Ii0cAqMmkj5NmM=)
11: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
12: o1M2nS6jpYqNPr4PmmyksnsPNkU.roa (hash: jZ7Fzk5UdE4bi+zoHAjfUyUn+7hvus7ThrXaF9l7HRE=)
13: pFnqQ8OxY0QNC7HRy-4FkWixiwE.roa (hash: fU2bUXH43phXIA3gQxBK8wzLYma3/YTLay/lAz3pmTg=)
14: plplcojObk3dawLZH3Mnt5_h870.roa (hash: Gar10ZJnWDhjrWeDdE6koBMvPsyWvXDelCNNbF7bBp0=)
15: r9cyYz5gQDHO7JEIkBDX-MYg38Q.roa (hash: HRtQbXTLeClS9SRzwe/ZSriRk7p5DeNMKB9PPL2Rh68=)
16: wyBaD-xrWNM3oZ7omW2NVE0N4wg.roa (hash: nsnhyDk/6uhCCDvXfECiZ8RZAYd1WeMo4ansEBsj3V8=)
17: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:a6:9b:aa:d9:aa:c0:38:3d:54:f3:26:a3:75:30:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Nov 4 13:01:38 2026 GMT
Not After : Nov 5 13:01:38 2026 GMT
Subject: CN=2b9e371f29818b2c433cd813f30be467c245c581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e5:4a:a2:71:e7:5e:db:31:93:df:7b:03:bd:
9d:84:98:31:87:37:5b:de:1b:e8:ff:78:ac:85:cb:
5f:49:35:e3:c4:bf:61:f1:8d:d2:37:88:ae:37:5a:
40:f9:94:49:71:d1:a3:32:45:f2:e0:07:7e:f2:1c:
ba:1e:a0:f3:24:9b:0f:6e:bf:b9:08:ac:70:b1:1d:
70:2a:ec:46:a2:9a:ed:23:b9:cf:a9:b6:5b:42:e7:
25:e1:1e:a8:88:a5:d0:23:1e:bd:d4:7e:2c:db:b7:
50:bf:3d:4c:08:8b:d5:c1:d5:9b:0c:6c:aa:75:0e:
12:d9:78:4f:5a:8a:10:1c:50:1f:3a:f6:6d:1b:ed:
de:ab:12:ad:20:20:35:92:a6:b5:d6:00:c0:89:a7:
1e:41:a8:51:22:e0:65:8c:b1:76:cb:f3:3d:1b:9c:
3f:30:51:b1:73:f2:aa:c1:74:d3:11:6b:d1:24:b4:
c9:b4:3a:bc:2e:06:5e:95:12:0b:9b:be:47:de:40:
92:9e:a1:c4:63:a5:80:90:a2:f7:f4:9a:5d:51:97:
25:77:3e:e4:30:c0:2d:c3:4f:5d:6b:8f:21:ee:94:
d3:93:9f:36:e6:a8:46:4d:d7:c3:cc:da:0a:d8:2f:
1d:08:cb:21:35:eb:3f:ab:3f:cb:03:35:ec:42:eb:
2f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9E:37:1F:29:81:8B:2C:43:3C:D8:13:F3:0B:E4:67:C2:45:C5:81
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7e:98:9b:87:8f:a6:1c:63:f2:f5:48:bc:6d:05:da:bc:50:
44:b2:9d:d9:3d:c8:b9:17:d8:f0:06:45:0c:b3:ba:fd:d9:91:
d1:63:6a:b0:c8:7e:0e:83:79:1f:45:f9:19:17:8d:2a:0f:25:
ff:dc:db:e8:83:33:48:2d:18:76:02:bf:0f:d7:3c:51:14:22:
52:5e:25:2e:52:1d:7b:e4:3d:92:a4:87:a6:14:9e:a7:6b:60:
1b:f2:a8:b5:3a:37:19:e4:a0:59:31:d2:73:d7:b4:da:05:36:
58:df:9d:9a:98:ba:6b:35:18:5a:22:87:5a:38:47:7e:6f:13:
ed:44:c2:d2:65:41:80:6f:bc:bb:25:73:f3:a8:d0:b0:c5:d1:
0c:45:83:be:3d:a4:13:da:28:63:64:db:c8:f9:8d:d3:72:fc:
a4:e8:8f:07:34:2a:d0:25:dc:1d:a1:43:a6:05:de:3f:02:2b:
26:a8:45:a6:9a:70:ea:0e:d0:2a:99:56:37:4c:f6:a4:e2:3a:
2d:e1:05:51:09:44:75:71:69:9c:3d:b7:4e:ef:37:79:33:b1:
a6:dc:3d:44:50:39:f7:40:1b:19:05:e4:0c:e7:b8:7a:49:b0:
62:38:ad:8c:4d:1c:8d:09:3b:6c:61:95:66:65:07:c1:fb:e8:
89:83:03:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:25:44 2026 by rpki-client