
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
File: rtruqRF6HVzMMgIilVoJ-qB5j9k.mft (raw, json)
Hash identifier: xOupVYYjuYH5fA+Kp20qeGH5avtvlbzVAxtl+2hi/TQ=
Subject key identifier: 97:B3:14:AD:AB:12:68:03:D1:35:55:EB:C0:0F:FB:0D:D7:86:F8:88
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 01A0F2D61B69425FC58D7DE0D36A3B591D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
Manifest number: 1A91
Signing time: Wed 30 Sep 2026 15:01:52 +0000
Manifest this update: Wed 30 Sep 2026 15:01:52 +0000
Manifest next update: Thu 01 Oct 2026 15:01:52 +0000
Files and hashes: 1: 0grhf2XqQS0PbS4vuPKgFUJ4CtY.roa (hash: CABCkAtRB5z7qM37KIh3THIotph2AI+4ndFJUzJYceA=)
2: 1NhMJ7iAKt1XNkcwpqjAtxDr1tg.roa (hash: EnRdzd4XuA4kPVdeCj63BslUTaDS51Ig0OU7ONlJnmA=)
3: 7TDWyr5P0SFkG_1wE_zPclx-LJY.roa (hash: mwM+t2AjMGEMAQqYQt7qupjhUbDte5jBQzS3pFunV5E=)
4: 8qGSgqlkHDr914hHEHKKhmYVXnE.roa (hash: frQT+RP9L9JKaXT7O/jbBEr9AzGG4KNbuIOuQ79wIgI=)
5: DY4whTo7KFMsapAbjbck9KXaN2Q.roa (hash: Z3/CUxyVCWOqALKEDmYApn9KMCw1qs9OcKyU5Z8f4RU=)
6: I7MkmQek9TX_IQqyz6tzXHWahHc.roa (hash: guTyQfwBcIAtfrQpROz3rqT3lhXR49lhfULYZRlg2k4=)
7: KSert21IyVLdzTzI3FZycKPooac.roa (hash: enNDLKMhC0/+6E/ssv2WFmJ1HNQhuj49stCcOOz9a3U=)
8: MmwxwXtvbBi5TfpYulx_NsdGK8I.roa (hash: CpEEnuPEEQ/Lt5U7MuRSDkJQEaOqlXnkUBi298BTux0=)
9: bCg7tEgKsGBlhvfXQ_p7fAinDt4.roa (hash: irzJrYBfyhTaJEK1r/bwWtkoGmHHDM2zuMWB3WPr1vw=)
10: fCGYEGlgfKRgTz2ikieXaOSbdRE.roa (hash: FYEv1aBWOrr2YMP+bkGoFPlLBNqhRh64fwSr9xKf+yc=)
11: i_8Ltd9wbcfD0mAu6VNm7MTQ_Ac.roa (hash: LXGue0t/sMA2Z7REoNuZF9MeZQKOuFmufuOtJTo72DU=)
12: l46NNfdll0CkF-GyTagj6nVywQA.roa (hash: Bz8PpZZscQ882ZYbIbT/ZfP7vpdnPTaRcDmY5jTgHws=)
13: nhzxopyxtZ3ZNpXqMYr4_bVPXYw.roa (hash: XWNHr6I19HMZl/NwLAbZ/QL51wNU0N0GDXtB6ekbpGI=)
14: qXx90FSqDeV2TFA5z5gkzjt5MT4.roa (hash: GIcu6RV+4oLEen2ihNm9iiU1rL+T3G8HifCPdddrGao=)
15: rtruqRF6HVzMMgIilVoJ-qB5j9k.crl (hash: 3uzwRxZpYQ0MC0v4TO8FuIDf1jWRL+vr6rS/cB36wOc=)
16: vy_B141YrrWxhcrnlEIljoTLECk.roa (hash: xj/TtKRTGyOPxeeyCWIfxLPuFe3BEl/1ac8Kc9RexP0=)
17: w0RUzDJQ2sSi4lju4NoSu6IaZEM.roa (hash: jnFfoOHT3qsowloY5NEfrKxUN2Spb88yoOnFZYPFjK4=)
18: wJJlJoFiOUkrOpb9ptdc5xDpkt0.roa (hash: dmGJEO5REXkLJeMFm08GEDBzv38Ylu5Doyq2n0KUXjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:d6:1b:69:42:5f:c5:8d:7d:e0:d3:6a:3b:59:1d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Sep 30 15:01:52 2026 GMT
Not After : Oct 1 15:01:52 2026 GMT
Subject: CN=97b314adab126803d13555ebc00ffb0dd786f888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:cc:d2:a0:5b:4a:f0:56:96:65:0a:a2:ee:
f2:fe:09:64:fc:9e:f4:44:fe:a2:d7:10:e4:42:1a:
8e:ea:dc:8e:7c:06:60:04:87:7d:80:e6:2f:8b:24:
d9:fd:3d:6c:70:ec:0d:ca:7a:9d:8f:14:4d:47:08:
b4:0f:be:4d:44:39:16:37:4d:99:ca:4b:1c:4a:9d:
74:ab:ed:16:3f:b3:0b:1e:24:0b:fe:6a:43:b8:77:
99:1f:f9:ae:fe:7b:cc:a0:8a:d5:c4:ef:7f:f6:1e:
1f:25:50:92:72:bb:cc:47:56:c7:6e:df:9a:f3:50:
3f:a2:2e:be:0f:2d:96:81:e1:1b:f7:59:10:24:88:
d1:4f:08:30:4e:1d:2c:48:b4:b7:95:31:69:b7:d3:
74:88:14:71:7c:34:0d:bd:34:3c:c2:59:9a:a1:17:
78:e6:38:86:1c:34:ff:4d:84:41:88:89:30:0c:f4:
f1:b6:19:68:31:54:6f:ee:be:0f:47:d6:70:8e:9d:
73:e1:39:61:b1:ca:64:e1:b8:9d:97:66:03:28:07:
5c:06:1b:9f:70:02:91:14:e7:75:48:14:e2:9d:d3:
a2:18:bc:77:70:3d:a0:b4:3a:e5:a4:a7:f4:7e:aa:
5e:c6:41:47:b5:38:e7:27:36:a3:79:b3:59:17:b8:
ea:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B3:14:AD:AB:12:68:03:D1:35:55:EB:C0:0F:FB:0D:D7:86:F8:88
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a2:c9:48:45:3b:8d:27:24:19:41:4b:ec:a8:86:60:af:40:
30:81:8f:17:a8:89:13:a7:3a:bc:04:e8:03:8f:3f:9c:86:02:
fe:ba:33:b3:6a:ca:68:fb:62:17:72:11:21:38:13:32:5e:4a:
fd:28:c2:7a:03:bd:31:fc:54:61:aa:30:87:3c:a8:ee:d7:5e:
4b:2b:d4:67:90:d0:a4:92:9c:35:02:27:5a:a0:4e:eb:3d:43:
18:c3:f9:ae:98:5a:50:77:df:27:e4:69:20:ac:35:b5:58:09:
35:1d:7f:80:bc:73:2d:4a:a5:da:1f:8b:55:21:b6:9d:63:0d:
37:9c:df:ab:50:59:ce:5f:41:cd:f7:dc:55:51:e6:39:1f:9a:
1b:d9:35:0c:11:e3:ea:eb:54:98:14:ce:cf:89:46:39:c6:ca:
18:fc:7d:75:21:14:4c:f6:aa:ff:33:d8:18:af:6f:6c:dc:77:
96:46:76:b3:64:ca:39:f8:c8:38:a2:8c:d4:ae:78:99:3b:a3:
7a:c5:99:9a:c4:c2:c9:c2:cd:9d:5d:d8:e8:d8:36:19:cb:bb:
05:4d:a1:a8:0e:7d:8b:c2:b8:73:6f:ac:e3:83:c4:d2:44:6d:
ad:e7:2b:e3:d9:34:60:c3:58:48:e1:62:c5:57:53:07:47:64:
c4:a9:e6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:04:53 2026 by rpki-client