
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: Np4gXlRqEQI2HsC8fVqsNyuadfcErix0qsvksqP03H0=
Subject key identifier: 0A:7C:0E:6F:B8:25:D6:B4:77:FA:E1:AE:32:AE:0E:EF:16:F6:43:74
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A026574BF06FA218B4FD8630882671547F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 1A5D
Signing time: Fri 21 Aug 2026 22:00:50 +0000
Manifest this update: Fri 21 Aug 2026 22:00:50 +0000
Manifest next update: Sat 22 Aug 2026 22:00:50 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
3: JQQNGg1KudUDH0fH8zF77cHH04g.roa (hash: 7IYYPE95u23gGvwnp7lVhhX844kU4uZYL5U7EqRsXDU=)
4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: oBenmeGjbF5zrNLAmqiLz/LA9QpNVS3tzuCFQBw0ZBo=)
5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
6: ZsvTx9SfJapFLF0M3RriUR8HtMM.roa (hash: lxhDwbf/d9lixiDK0WW+B7DIvTUm3qDzeV3VF8OSC8M=)
7: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
8: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
9: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
10: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
11: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
12: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:57:4b:f0:6f:a2:18:b4:fd:86:30:88:26:71:54:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Aug 21 22:00:50 2026 GMT
Not After : Aug 22 22:00:50 2026 GMT
Subject: CN=0a7c0e6fb825d6b477fae1ae32ae0eef16f64374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:92:1a:6f:75:45:2e:48:b5:cc:2a:89:12:
58:23:03:5b:f1:65:cd:a7:2c:3f:52:f1:74:ff:00:
88:40:4d:d0:4f:9f:95:cf:57:a2:45:51:d6:b5:d4:
01:95:3d:1f:4a:8a:af:5d:ef:30:8b:22:41:5d:fe:
89:52:76:1f:c6:00:3d:49:2c:5b:3b:6a:e9:65:3a:
0b:23:35:11:07:98:13:ba:6b:e0:71:b5:70:44:22:
0f:3f:a3:78:69:e7:3f:e9:14:49:9b:6c:ac:da:24:
10:61:52:04:b1:88:c0:ae:b5:8e:eb:46:c0:fb:00:
e1:16:19:af:44:c2:62:d1:dc:ab:3d:cd:40:fe:41:
f0:e5:0f:6e:30:48:31:fe:6f:80:17:22:8c:e2:0f:
b7:b3:07:fa:b0:41:d4:d7:04:47:3b:02:8b:72:3f:
1d:f3:21:7e:a3:9f:bf:4b:1a:01:7a:62:46:fe:bf:
d8:2f:88:46:3b:d3:94:59:44:31:7b:98:7f:51:9f:
e7:26:fc:f2:df:2b:79:a5:84:7b:3f:55:8b:0b:1f:
9d:4a:4c:ce:1b:ed:97:69:0e:39:ee:d8:69:00:23:
45:0c:6e:2b:04:b7:b0:a5:83:7a:6b:e6:c1:fc:d9:
1e:96:bc:95:71:41:f9:89:91:52:f0:4d:34:ed:ad:
cc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7C:0E:6F:B8:25:D6:B4:77:FA:E1:AE:32:AE:0E:EF:16:F6:43:74
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:be:12:87:7e:29:58:c9:0d:9b:69:2b:b4:1b:5c:36:0f:63:
99:f9:5d:a2:7e:02:dc:2f:13:44:24:4d:80:d1:36:53:4d:b5:
5c:24:4d:ef:34:ba:47:b2:26:e3:f1:61:1d:04:7e:8b:6d:0d:
8d:b7:72:ee:62:13:0f:b8:43:60:2f:e2:e8:5b:92:0e:77:4b:
e0:11:21:17:0b:5f:ec:bf:b0:74:a3:b1:f7:26:93:8b:d5:5b:
bb:c1:b8:54:d6:5e:14:bc:c1:5c:80:57:90:f1:a2:18:88:94:
01:45:95:12:c7:ae:d7:5f:43:88:66:0c:7d:23:2a:dd:75:a5:
63:1f:e0:3c:b7:8f:44:21:be:93:22:35:bd:69:da:e0:c3:39:
53:31:85:d1:68:de:e8:59:5f:be:3f:a0:d8:61:b1:60:3d:60:
a8:62:df:c5:21:50:28:24:5b:ca:c5:4f:62:c8:37:f5:b9:c1:
d0:05:90:d8:15:4a:87:63:8e:29:f0:c0:19:15:5f:4a:44:33:
6d:10:7f:13:11:fe:c2:59:3a:ee:96:f3:ff:ca:32:ae:d8:2a:
98:30:ac:67:7f:c2:8e:67:ea:a6:49:99:03:ad:dc:c8:c5:62:
41:2e:cc:70:44:56:03:08:fa:46:68:8d:b4:d7:2f:be:41:00:
c4:b6:b5:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAmV0vwb6IYtP2GMIgmcVR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl
M2ZlZjMwHhcNMjYwODIxMjIwMDUwWhcNMjYwODIyMjIwMDUwWjAzMTEwLwYDVQQD
EygwYTdjMGU2ZmI4MjVkNmI0NzdmYWUxYWUzMmFlMGVlZjE2ZjY0Mzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMySGm91RS5ItcwqiRJYIwNb8WXN
pyw/UvF0/wCIQE3QT5+Vz1eiRVHWtdQBlT0fSoqvXe8wiyJBXf6JUnYfxgA9SSxb
O2rpZToLIzURB5gTumvgcbVwRCIPP6N4aec/6RRJm2ys2iQQYVIEsYjArrWO60bA
+wDhFhmvRMJi0dyrPc1A/kHw5Q9uMEgx/m+AFyKM4g+3swf6sEHU1wRHOwKLcj8d
8yF+o5+/SxoBemJG/r/YL4hGO9OUWUQxe5h/UZ/nJvzy3yt5pYR7P1WLCx+dSkzO
G+2XaQ457thpACNFDG4rBLewpYN6a+bB/NkelryVcUH5iZFS8E007a3M7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAp8Dm+4Jda0d/rhrjKuDu8W9kN0MB8GA1UdIwQY
MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt
NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz
LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKL4Sh34p
WMkNm2krtBtcNg9jmfldon4C3C8TRCRNgNE2U021XCRN7zS6R7Im4/FhHQR+i20N
jbdy7mITD7hDYC/i6FuSDndL4BEhFwtf7L+wdKOx9yaTi9Vbu8G4VNZeFLzBXIBX
kPGiGIiUAUWVEseu119DiGYMfSMq3XWlYx/gPLePRCG+kyI1vWna4MM5UzGF0Wje
6Flfvj+g2GGxYD1gqGLfxSFQKCRbysVPYsg39bnB0AWQ2BVKh2OOKfDAGRVfSkQz
bRB/ExH+wlk67pbz/8oyrtgqmDCsZ3/CjmfqpkmZA63cyMViQS7McERWAwj6RmiN
tNcvvkEAxLa1fg==
-----END CERTIFICATE-----
Generated at Sat Aug 22 06:11:30 2026 by rpki-client