
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
File: 8uFg8M5eA1rzyyH039BOq56n7lE.mft (raw, json)
Hash identifier: LREu8SIjvr4KI2MrRYInVPkEqjKVvIaNs77DndpmmQk=
Subject key identifier: 8F:7E:F2:68:7C:1E:16:53:C9:F8:11:03:72:E5:1C:29:6B:32:92:CC
Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Certificate serial: 01A088670A61590F7520450B630F7A35F3A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
Manifest number: 0284
Signing time: Wed 09 Sep 2026 23:00:49 +0000
Manifest this update: Wed 09 Sep 2026 23:00:49 +0000
Manifest next update: Thu 10 Sep 2026 23:00:49 +0000
Files and hashes: 1: 1-BXJvjRZK9EAgxmoIL9zEqtie4U.roa (hash: eIjaA6tFXeGOC8TZxrzK/xbOybNP9upJeQZsoLhhvCc=)
2: 8uFg8M5eA1rzyyH039BOq56n7lE.crl (hash: m8TmBkd9M0EZ3IZ4s2YmNPMVjqra2OMedf1zLNZ8t4I=)
3: FRRRnwExpXw7a2MuDv5ABSNE0os.roa (hash: 3ZQFCRFjP8UeMQLhH1/qjBrVW66rsV7z4ra4rGbF/Rk=)
4: G_UPWjhIcvhRhbrsCzFiU4-Xung.roa (hash: 047QljbRvFtkey6qy1tumtUXHbVbw0WiHtNwMdYTktY=)
5: IYhXGcvuReRwLkKFqkHfMT0xdMQ.roa (hash: P65YHmORj/Qbi7gb1HICB61t5DJTFwQfC/ueE2C3wHQ=)
6: LD4LiJakMnd2fM_muaGzK3OCDm4.roa (hash: 06z+15zWX5rCsS3FhV81kHp2Sa4vXMzL9qdPTiJ9zeM=)
7: LlwR7tMJ6zTGEQz3JxR7zXWwYmU.roa (hash: /i0EGLMOcxHYvXs6bbWKcMGoGwpP0rScQ+j7WNhkmNc=)
8: ZZ8EJAvAm0C06wzFaBzSONJZFPk.roa (hash: HIvZs/TkMx+bymwhUhZwvlQVHu6QM24ito4FjiIQX2c=)
9: ZjMYC0UoF-rr4Yr68ciz53_Avuk.roa (hash: XSFfC2tpTl7pGI7s34smkuOaa4jrXUiaCPuucJLlqxI=)
10: gDVnbdgyGBxPjaEc46h1SC6bKGc.roa (hash: bRdUEdhFNf/pMvUllLg5PTYpswbssaY0ednf3AqAQx4=)
11: hxVjN4ViTYov07b0DOLl2w6qTEI.roa (hash: 5T+oFS29RJ0l8yQWiVqg0MoWL/i6NlSEWAxcmSYEMqE=)
12: ilqY9c8IbcEKTWk24AXRgSNrWO0.roa (hash: m73bbuMRMSiNr5UeY5P6BQ8Ud8zaXgZ2oA4zOG5Tf2M=)
13: s0HOCx3ToCFGRzZUHm_UV-cLZBI.roa (hash: OKS1HAKlGU2JN5vzskZAI17mKtPa16rejzU50FR3zwM=)
14: sGNYZDKF8s8_UsTeuK9XpTB6Wkw.roa (hash: gaT8D+qDaVi3KbUN95vQ0WglNN0OnaGWaUxlYVphb+c=)
15: v_MCckuvkmHRzh3YWE8nt-ZoR54.roa (hash: FGgmeFbXcFcehxYNJD3aNuzFTZwBgyIrsfMAVTMWYLw=)
16: wn04xik7FuP4gNiote_AyEI-TH4.roa (hash: bYiBFxmpMXwoS8YsBEBlGL5iQCRxSNGgPRCdmHKK+iU=)
17: zykPnjolFt2OKhMEu2SeOAG0N3k.roa (hash: vMmczSDv2P7kmvRApRVGBrOXghKNhAgyXktPnIT3lVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:67:0a:61:59:0f:75:20:45:0b:63:0f:7a:35:f3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Validity
Not Before: Sep 9 23:00:49 2026 GMT
Not After : Sep 10 23:00:49 2026 GMT
Subject: CN=8f7ef2687c1e1653c9f8110372e51c296b3292cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:62:e8:94:2f:a6:2a:b8:aa:32:17:48:80:
4c:23:14:21:8b:7a:39:86:43:4f:55:b6:ee:a0:9a:
04:d3:d8:a2:15:be:76:4c:b8:00:52:36:3c:4a:f1:
10:5f:a8:fc:2b:8e:86:03:39:79:cb:87:56:49:ff:
cb:da:66:02:31:70:01:16:84:72:0a:00:b4:b2:c3:
d5:5d:37:b4:06:5d:c7:8b:02:4f:46:f0:e3:36:7f:
a8:ad:5c:c7:ef:2f:1b:d5:f3:14:2c:a8:c8:93:a2:
ca:ec:34:c8:32:3b:4d:44:1a:5d:cf:59:25:94:d5:
d0:b6:4b:fc:80:b0:34:f3:0c:2d:d9:3d:c2:88:22:
19:d6:0f:92:5e:8e:ae:e8:6b:17:cc:83:9f:36:5a:
14:69:ca:57:88:a9:a7:2e:46:5a:a4:35:39:56:f8:
43:8c:cc:0d:a2:fb:0d:83:51:bd:92:2b:56:de:d3:
73:6f:94:4e:f3:7d:93:0a:c9:ce:cf:82:fe:21:d3:
36:65:eb:9b:85:64:56:0c:41:d7:8e:67:73:a8:c5:
e8:4f:72:0e:32:9a:6d:cd:5b:d9:7b:d3:81:44:9b:
5f:3e:b9:c8:d7:18:c0:ff:76:7e:10:cf:56:c9:fa:
1a:95:19:34:2c:dc:32:01:ca:d1:09:f1:e1:ca:57:
92:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7E:F2:68:7C:1E:16:53:C9:F8:11:03:72:E5:1C:29:6B:32:92:CC
X509v3 Authority Key Identifier:
keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a8:11:21:81:15:ae:f4:73:f5:35:5e:68:bd:00:cd:72:2b:
c1:63:35:1b:55:82:65:5b:f4:7c:66:11:da:0e:a7:6d:80:c8:
33:ed:d2:6e:88:e3:10:ab:b7:8e:c3:05:d8:f2:b0:6d:75:b2:
1e:10:2b:bf:27:ca:01:01:b3:81:14:ac:c4:bd:4e:1f:3c:f2:
e3:14:e5:8a:a2:bc:80:b4:95:83:f5:0c:b2:21:06:13:dd:a1:
f0:c4:ac:53:2b:94:51:a5:58:2d:b9:dd:cd:4c:ee:6a:96:b1:
84:cd:8c:73:84:f9:47:46:b1:72:c3:28:c0:da:f1:24:17:c0:
f2:8a:0a:be:cb:2e:28:a4:5a:91:b6:66:77:7f:b9:31:d4:de:
5b:8d:3e:34:82:47:a2:f2:b5:d4:b4:24:53:5e:1d:54:eb:f0:
3b:37:2b:3b:05:8f:bf:6d:8e:27:e1:35:49:3c:11:cf:d0:a9:
a7:3b:c9:96:4a:c0:96:ad:8f:ea:5a:80:7c:cd:59:e5:33:32:
71:ba:5f:c5:83:fe:87:65:f2:4b:49:55:b9:0d:b5:f7:e1:d7:
5c:ca:4a:2f:88:d0:77:15:81:ce:0b:5f:e5:fb:6d:8a:03:11:
fc:c0:14:30:13:3d:0f:82:8d:13:8d:f6:5f:ca:2f:8b:c8:f8:
77:e5:d1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:23:22 2026 by rpki-client