
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: abXweT9Yr3n3bUxAdjCDe/QjucZN4VkCM2BGimW8Z2M=
Subject key identifier: 60:17:6A:1E:14:55:3D:83:54:EE:F9:A8:1A:32:8E:88:E8:7A:76:24
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A0800909664C78C1845C4DB6F14EF4FD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 1A8F
Signing time: Tue 08 Sep 2026 08:01:10 +0000
Manifest this update: Tue 08 Sep 2026 08:01:10 +0000
Manifest next update: Wed 09 Sep 2026 08:01:10 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: 9xcDq5BERTPl-taAcvBbAPdIa2s.roa (hash: /rCSnPIAiOhKYzHr0b4Aa11HLmoGu1kBXDiI9N5EJA0=)
3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: BI/1beFs8LbkON1BjWOgmpn5sqBWezGrCRZ1HV/LqzI=)
5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
6: Wu9fqzsO0e3dDW7pg9IW4kd8ca4.roa (hash: DnNwN484bQ2o81uJz2zDwIJLdkB1zuHM5PscTbmg5Ns=)
7: ZsvTx9SfJapFLF0M3RriUR8HtMM.roa (hash: lxhDwbf/d9lixiDK0WW+B7DIvTUm3qDzeV3VF8OSC8M=)
8: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
9: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
10: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
11: i3YTAJozwkOZYg6f7KZcf--oZvY.roa (hash: N6vYaUT4my73KK+I3kEXMZHN6vjd2Vf3D+a9de3TkZE=)
12: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
13: vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa (hash: MKd69gZ2Jcg9+PMYCJYIj+vJw76cSWTcSBs7Eexy3D4=)
14: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
15: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:09:09:66:4c:78:c1:84:5c:4d:b6:f1:4e:f4:fd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Sep 8 08:01:10 2026 GMT
Not After : Sep 9 08:01:10 2026 GMT
Subject: CN=60176a1e14553d8354eef9a81a328e88e87a7624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:24:c4:86:30:42:0f:13:c7:dc:ce:d5:6d:
86:b5:5b:2f:2c:20:5a:16:6e:61:93:51:bb:90:78:
ee:7b:04:68:b7:be:4f:a1:b2:ea:77:42:05:00:1e:
b5:62:40:c1:66:3a:78:b5:44:11:f4:4b:9a:26:8c:
46:15:ad:c1:f8:5f:e6:21:5b:ab:66:b1:ab:cc:bb:
88:45:8c:f2:3b:88:92:54:55:04:26:75:62:3e:0e:
13:3a:17:83:07:65:7e:fa:aa:b5:75:52:11:22:cc:
17:be:be:4e:84:5e:70:5a:9f:ea:a6:42:e8:d2:dc:
00:d6:1f:68:39:48:79:e3:f5:b5:75:93:eb:a5:09:
3c:e5:59:5a:24:75:cc:fc:78:c0:e4:a3:fc:08:c6:
eb:b0:51:b9:27:66:dd:5d:cf:7e:c0:9a:04:d9:ab:
cf:b0:42:65:2d:0a:5c:57:ef:87:2f:dc:4d:09:e8:
3c:e6:45:73:42:23:4c:8d:9c:80:56:24:97:ab:2a:
32:d4:0b:ce:2a:82:22:52:0e:6c:46:ec:f9:99:b3:
eb:b9:b3:af:96:7c:37:46:47:70:3b:09:e1:9e:e4:
11:fc:8a:15:34:32:ca:a7:78:3f:f1:9c:d4:7d:75:
28:96:9e:ca:6a:e1:1c:10:80:03:42:a1:c4:5a:61:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:17:6A:1E:14:55:3D:83:54:EE:F9:A8:1A:32:8E:88:E8:7A:76:24
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a3:54:f2:7e:fe:2c:a7:63:46:97:1c:75:d9:e6:b6:2a:4a:
51:5b:21:07:de:97:a9:d5:58:50:7b:f4:9a:66:5d:a3:cc:4f:
1f:f5:34:3e:97:1e:04:4d:97:3a:d6:eb:4e:82:c2:e5:71:19:
fe:39:b9:e8:1e:59:f3:32:c3:ee:88:51:95:a9:34:9e:a6:85:
e3:74:1b:fa:db:39:79:2e:76:e4:b4:c1:73:34:6f:a4:9c:47:
fe:bb:82:56:dd:2b:66:ce:c2:84:57:97:3d:43:c6:49:05:c9:
be:4d:34:e8:10:51:d4:97:67:00:85:ee:cf:fb:a5:fd:32:1e:
b1:41:14:01:f6:93:72:2f:53:1a:86:89:cc:2a:c6:8b:30:b6:
80:50:32:32:92:69:70:63:63:b9:88:79:70:0a:f7:f9:0c:c2:
5f:57:b1:9e:0b:64:ee:98:fc:ba:9f:e5:75:81:59:b5:53:8f:
cb:93:f5:2f:25:28:56:5a:88:a3:ec:8f:cd:29:a8:b0:87:22:
2e:c0:e0:43:e6:72:bd:2c:f8:ac:82:18:e1:ea:27:39:ca:ec:
6a:19:eb:f4:53:fd:49:54:1a:6a:28:89:a2:83:14:cc:a2:a9:
9e:db:fa:2c:4b:66:74:21:d1:02:15:86:c2:e9:f5:6b:a5:22:
5b:cc:e5:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCACQlmTHjBhFxNtvFO9P14MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl
M2ZlZjMwHhcNMjYwOTA4MDgwMTEwWhcNMjYwOTA5MDgwMTEwWjAzMTEwLwYDVQQD
Eyg2MDE3NmExZTE0NTUzZDgzNTRlZWY5YTgxYTMyOGU4OGU4N2E3NjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveYkxIYwQg8Tx9zO1W2GtVsvLCBa
Fm5hk1G7kHjuewRot75PobLqd0IFAB61YkDBZjp4tUQR9EuaJoxGFa3B+F/mIVur
ZrGrzLuIRYzyO4iSVFUEJnViPg4TOheDB2V++qq1dVIRIswXvr5OhF5wWp/qpkLo
0twA1h9oOUh54/W1dZPrpQk85VlaJHXM/HjA5KP8CMbrsFG5J2bdXc9+wJoE2avP
sEJlLQpcV++HL9xNCeg85kVzQiNMjZyAViSXqyoy1AvOKoIiUg5sRuz5mbPrubOv
lnw3RkdwOwnhnuQR/IoVNDLKp3g/8ZzUfXUolp7KauEcEIADQqHEWmEMdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAXah4UVT2DVO75qBoyjojoenYkMB8GA1UdIwQY
MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt
NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz
LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6NU8n7+
LKdjRpccddnmtipKUVshB96XqdVYUHv0mmZdo8xPH/U0PpceBE2XOtbrToLC5XEZ
/jm56B5Z8zLD7ohRlak0nqaF43Qb+ts5eS525LTBczRvpJxH/ruCVt0rZs7ChFeX
PUPGSQXJvk006BBR1JdnAIXuz/ul/TIesUEUAfaTci9TGoaJzCrGizC2gFAyMpJp
cGNjuYh5cAr3+QzCX1exngtk7pj8up/ldYFZtVOPy5P1LyUoVlqIo+yPzSmosIci
LsDgQ+ZyvSz4rIIY4eonOcrsahnr9FP9SVQaaiiJooMUzKKpntv6LEtmdCHRAhWG
wun1a6UiW8zlQw==
-----END CERTIFICATE-----
Generated at Tue Sep 8 19:17:23 2026 by rpki-client