
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
File: sMIK4drMoxgVsnRwKSfBpanbx7M.mft (raw, json)
Hash identifier: AByhnXAv12wtZgtWXAhpOPKBwqlFMpVjdQzMY/N7dt8=
Subject key identifier: 87:71:08:75:5B:58:CE:5D:89:A1:55:47:A9:34:72:10:79:ED:0C:6F
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 01A12C1FE9F1053DE6F214DADBD829F344F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
Manifest number: 1AC4
Signing time: Sun 11 Oct 2026 18:00:51 +0000
Manifest this update: Sun 11 Oct 2026 18:00:51 +0000
Manifest next update: Mon 12 Oct 2026 18:00:51 +0000
Files and hashes: 1: E8mOohDcmePz8wTu6FwWLzSrlS8.roa (hash: GTMclphGCva6x2txMNdZeOKZzdKFQq0vbNyBSMSOHFk=)
2: FFAXFP5ez3X5u3h1IVAvcRBfHk4.roa (hash: OODOGsmCz6Qm7uE5z8GW3j0W0K6FvMl33OoYR/8rp0M=)
3: Hx4xdNwCvgB9fLiWs9xvE8usxW8.roa (hash: Y7e1WnGcVWNvFMUYbkyeqz5FloZW76Eh6KqSDa6fAQI=)
4: IwxdusqS3Ab_hpHPJ_FWRPbtoeg.roa (hash: H55puMmQB5OWgkG+g+z4d3V7omo2rQK1VzH3hQXYY3o=)
5: O69azZLJgNqAunz5z_lWfvgC56o.roa (hash: y+mBalpZhDFTPhkJAkGyUyBVLw40n3SmTyy9Fbh3dKI=)
6: PSaX76hLXCC3HwZfR6n8D2sk5yo.roa (hash: /hW3Ol8jGkzLopkuNwrc+rk1t6CwIFcpRCLkUh52Nz0=)
7: Ql1YFiUReCktjzOXgcJSrBSI6No.roa (hash: USou/kCPcPW7NF+NsAzNyLXe0GEfMruJyzGdt4jQ4H8=)
8: SICqctuob7LKpjHMHlTL9BKMXF0.roa (hash: YxXg8B/+U9HgCgcJlh6pzSviIU9e9c6Wth+N8tKmuIM=)
9: WoJUK_VlF2x2Y6RewR1W0jcXELM.roa (hash: 49/N0yckcfgw+Jpt1B3ZylVpCRtLmR+tToTlhzbYrNM=)
10: sMIK4drMoxgVsnRwKSfBpanbx7M.crl (hash: LszacRMwmNmZCDFhmetYNwm8Gj49Bzh0LIJHvOV6fn0=)
11: srs-2gJxDmgBkFBU7WzheGqpBy4.roa (hash: M8sahyn+CGhviykxLGO4OXGDUGLt5W/3MG5YlWrxi28=)
12: zO8B6pGMJX9XU98xnLdwntnL3vI.roa (hash: 3CDxux5G2RSqAQp+WPxKqKOTx95LFqdOHC+tvDKHc4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:1f:e9:f1:05:3d:e6:f2:14:da:db:d8:29:f3:44:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Oct 11 18:00:51 2026 GMT
Not After : Oct 12 18:00:51 2026 GMT
Subject: CN=877108755b58ce5d89a15547a934721079ed0c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6c:c5:63:05:1a:61:69:33:5d:d4:85:06:3c:
0f:c7:5f:f4:9d:dc:a8:51:37:ba:23:19:7e:31:1d:
2c:e7:d3:2a:cf:88:da:38:be:d2:97:2f:81:e5:8e:
ad:ac:ed:a1:23:c2:57:14:46:a9:c6:cc:5a:3e:47:
ba:67:86:10:3d:2a:fe:d2:bf:0c:9b:a5:a5:1e:1e:
f4:d6:08:d2:5b:65:29:02:ec:e0:13:97:ad:66:95:
d7:d4:1f:ac:c4:2b:59:ca:32:5b:e0:85:23:7d:f0:
39:eb:e4:41:73:9e:37:77:ba:27:0d:53:69:b3:d9:
c5:44:ae:46:e9:7b:a7:d9:2c:cc:ab:0d:59:05:74:
b1:98:a2:51:85:ce:c9:c3:c9:30:d7:e4:77:08:0e:
16:3f:4a:1a:d7:34:fc:ac:d4:ab:7f:fc:77:92:ca:
9b:05:95:a9:a2:12:a3:e1:df:ef:65:f0:2b:48:3a:
31:38:61:58:0e:c0:b7:a1:27:6f:b8:d4:84:cb:9e:
87:c6:d4:f3:f0:9a:81:3d:57:29:76:88:68:d8:ee:
91:83:77:99:15:fe:f3:10:35:d7:24:cd:fa:a4:ae:
5d:c0:4a:de:ef:42:37:cc:01:cd:1a:06:77:34:3e:
de:a2:0d:71:b1:8b:b0:83:14:1d:42:cb:68:f2:fc:
35:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:71:08:75:5B:58:CE:5D:89:A1:55:47:A9:34:72:10:79:ED:0C:6F
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9f:e4:18:04:0b:f4:f1:27:3c:6f:dd:ff:6e:0f:02:6b:dc:
32:cc:06:5e:d7:d3:b4:28:c2:28:03:b7:4f:1f:30:d8:f5:58:
d3:1d:0d:cb:b0:3c:54:39:72:75:3b:42:7a:94:6b:0e:0d:e1:
d9:c8:da:48:80:b2:46:15:ae:98:44:94:8d:99:67:48:2c:5f:
c1:41:84:e1:29:03:1f:eb:bc:75:e5:17:7a:c3:27:df:6f:b8:
2c:b6:1e:47:ee:40:5e:c2:75:e9:d4:c8:93:5f:29:c5:85:c2:
20:3b:8a:b9:14:e4:bb:64:e2:18:c3:dc:83:83:58:f8:a7:8b:
79:44:7b:36:cc:d4:14:ca:0a:56:ab:0d:ec:2c:c4:dd:3b:12:
7d:29:e7:6d:52:71:9c:31:0e:9d:85:a9:dc:e1:71:cb:46:17:
5b:3c:39:30:05:3b:58:0d:d3:e1:a2:46:9d:c5:e1:c9:a4:8a:
10:f0:74:f1:8d:44:55:1e:a2:b9:32:68:d3:2c:b5:e6:b1:b6:
9c:91:3e:e4:b3:3e:bc:52:99:b4:89:6d:eb:3f:dc:16:59:d5:
a7:a1:09:6d:92:23:6e:97:a2:d6:66:d9:96:f6:9d:5b:19:64:
72:11:47:d1:6a:19:85:b2:8c:a1:62:1d:70:c4:99:74:56:1a:
74:2d:5b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:38:35 2026 by rpki-client