
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json)
Hash identifier: FvHmYu3cbLx7lkXzicCqc8/EEnFSr0DvM6eWEautKTs=
Subject key identifier: 7E:24:3D:96:26:78:93:35:06:C0:E2:92:8E:8E:D5:2A:DE:49:C5:53
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 01A003268FFCB64B0BA0FDE4641382862CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
Manifest number: 19E3
Signing time: Sat 15 Aug 2026 02:00:53 +0000
Manifest this update: Sat 15 Aug 2026 02:00:53 +0000
Manifest next update: Sun 16 Aug 2026 02:00:53 +0000
Files and hashes: 1: 0kI-1w2SNQehfoRycoNU1Pziv3I.roa (hash: viuJDQhBSgYavhQbluwLnuiQSVTVx0a9HzJyfcAYcOw=)
2: 5DlckLw7-djlSZ1lp36YaxGlvKE.roa (hash: eYIP1EqGYnvhmzjtkEGHQx/0NRgSz/vE0nE/kWbBXzk=)
3: 9lOq7Wh0Dc-TKs_jMnqAjp9qty8.roa (hash: gQsP3f9jY08L6TReTRhgCoFcXcYx56yiIKyEwP5fgis=)
4: B7aE9R9fg8NCdOQeiZzwMIi2ZNw.roa (hash: d1Ep9dN1bkXXcsIWaTx6sw5pJSc2xeGu6SeeEZeK/UM=)
5: H3x0T_83rlo2BTe5d7dbAF2ptxg.roa (hash: PQJVU6JoM83KwjANErOepQ3bz3i1NBfWfLmiBsgEm0c=)
6: KQ8fXNipeYkCVN179So0D0TWljQ.roa (hash: XxbQ5bE5bKEdW9jXnVZEomEiZqEsNztBM796TwnerwI=)
7: Tapjbvh-PuZAz-k3jhJRlpWxLVk.roa (hash: 4kpMa9oce3yLyGOA9Rf9dgs0rQL4kCPs5/HrQzn7jc8=)
8: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: CGzLASWsJJ8tDofqw3+tW0m79Jw0/SmmuF+VwR3u8Bo=)
9: apYOCQON8Q50nYzp4ypso-jbqys.roa (hash: GBiBhZg5+hSaQBI+hKWqc24pEoVUkpkEuUna1OBDqxw=)
10: no_ORyMn9T6-xikFSqLg-Gz96M4.roa (hash: Cp3JrKwrBj3GbQGbhILQy1X/3llVpyj5IPBpaVZnel0=)
11: qkO3HWUjh2SeVz2kOfBJ3fz48jY.roa (hash: /yTAZn/rmLrDKLc8NDsiQRU6zHvgZlDcdPO4KfqzKvE=)
12: se8BvmMQMrcgHtpi_ujjg8KT8CQ.roa (hash: cAQdGWRmSeLyjwmIoEHBdUkwP7QnABnaaE31A7C6720=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:26:8f:fc:b6:4b:0b:a0:fd:e4:64:13:82:86:2c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Aug 15 02:00:53 2026 GMT
Not After : Aug 16 02:00:53 2026 GMT
Subject: CN=7e243d962678933506c0e2928e8ed52ade49c553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:9c:50:08:c7:4d:4e:9b:0d:24:f5:f2:2c:
d6:53:dd:92:03:70:d2:15:a8:ab:07:ec:b3:a6:8b:
9f:bf:58:cc:a9:8b:b6:aa:9b:7d:ec:6b:3b:7b:c1:
68:f5:de:96:d9:c4:be:7d:7e:9a:29:7a:f2:d0:cf:
91:9f:a9:75:0c:cc:33:ab:9f:42:d1:37:1e:3d:b3:
a4:d6:a0:2d:38:22:5e:dc:d5:5e:8c:b7:90:71:c0:
84:70:33:11:8e:cb:ab:11:b5:c2:c0:cb:82:8d:f3:
4c:70:e6:22:41:f9:96:0d:ed:86:8f:5b:70:36:e6:
fc:7a:2f:00:84:e3:95:fb:ae:71:35:d7:91:75:ee:
78:1f:e8:0b:a3:e1:c6:8f:40:ff:7c:dc:8c:43:dd:
9c:e8:0e:be:86:dd:d6:e1:8e:a2:90:fd:f5:2c:fb:
54:ce:b6:71:47:91:37:d2:70:ac:7b:a4:ad:37:76:
2e:b4:74:fc:41:10:c1:43:ba:82:4c:c1:c7:f2:19:
06:df:c8:21:9f:f6:6e:bb:42:34:ad:fa:eb:ad:28:
21:b8:e1:f8:b8:52:ef:23:12:37:67:9f:6f:fc:83:
31:26:a5:6d:00:bb:b7:1a:38:8f:84:73:aa:83:03:
56:ba:b3:e8:20:80:31:50:25:84:d5:47:a3:24:e6:
da:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:24:3D:96:26:78:93:35:06:C0:E2:92:8E:8E:D5:2A:DE:49:C5:53
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:87:e4:86:cf:5c:6b:79:2c:ae:15:b6:c6:b0:b7:3d:1f:2a:
39:27:e0:1e:39:7d:4b:48:91:af:e6:b5:c7:2c:a5:f1:42:89:
c6:ae:06:5e:6c:14:9e:12:03:57:23:51:b3:58:30:c9:2d:4b:
72:e8:6f:b2:a1:60:90:1a:04:25:cd:38:b5:d8:6e:9f:70:d9:
a5:09:f5:6a:07:2a:05:02:3b:25:9e:7c:90:ee:b1:81:80:8c:
bd:7e:95:09:98:eb:99:39:fc:67:db:f8:62:46:fc:fc:18:d2:
3b:2e:74:e0:c7:a9:e1:bc:99:9c:27:a5:80:fd:4e:55:75:29:
d9:d7:38:59:4a:3d:17:dd:83:90:57:a5:ed:3c:ef:c6:b4:ce:
15:2e:4c:d6:30:f8:dd:c8:ef:16:c5:a8:0e:47:1f:78:95:89:
96:e1:bb:ce:a7:be:11:b9:67:c6:28:f6:30:d2:da:65:22:b5:
77:fa:9f:ed:53:60:26:b4:68:89:fe:1c:be:16:af:e3:05:1c:
bf:ba:b5:82:d9:04:62:d1:94:d3:de:a8:72:c3:b4:66:24:fc:
fc:94:f3:16:78:77:4c:8e:43:d7:25:9d:69:82:2c:9a:02:a6:
81:7b:b4:21:82:f3:cf:2f:55:37:d2:53:4c:33:10:63:e5:18:
75:e7:da:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:36:10 2026 by rpki-client