
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
File: 8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json)
Hash identifier: gdAjWH9Fjf6BBzYjFF5urhs42otUBDudy7+93Krurg0=
Subject key identifier: C7:9A:68:5C:97:12:55:AB:BB:90:69:81:E8:15:11:C8:1C:F2:30:D0
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 01A115CF20FEA1AF4968D47D78CBB848517B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
Manifest number: 14B8
Signing time: Wed 07 Oct 2026 10:00:58 +0000
Manifest this update: Wed 07 Oct 2026 10:00:58 +0000
Manifest next update: Thu 08 Oct 2026 10:00:58 +0000
Files and hashes: 1: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: KErIZpr4XZNpQen7TkYXAL5ZCY78QKKP08SAkqMWOq8=)
2: 8Go9HdfslzEYYhsG162QyXxlPrg.roa (hash: Z3SgqSpV46u7mlUHzliku+RypQp4wBZXxjHASyqRXL8=)
3: 8Nrd_fmZeNL0BSH4rv9CXgqM66c.asa (hash: K5I1pf6HiAifVMzN9jkKOGVybg6UiRdsC7/R2MM8fPE=)
4: H39SCmBhfIAL4P80AMbv9vc00_8.roa (hash: cOtYtuq75jARRK/4tVOM91mG7sEB0LZ3Ph2khyzi9O8=)
5: HVUz-pGSDFLTZZg2T2E4peiELEU.roa (hash: wezVJrmcFZ7JTwvDKwpa7PsKgNm5GHs3DhA4vBq4DQY=)
6: HYEI0JEwrvGeEpfpFZTeCg5EH8g.asa (hash: ARMsZy0uoDJPAUtmO4+hjp62F/uBIE4HsM0N2UwPbqY=)
7: K_c7eVlzPkp6rhiHCxnA36F4-xc.roa (hash: 6S2BWd2mNzmFbAB+J2b2FN4NJksfT7p6QVbD3sv/VL8=)
8: WtD6mKlfmpS7KMd25I2nHKzWkGQ.roa (hash: 8kdIDFqVwJHFysKGYVAc28Ycb8D240Eugchj4O4w7C4=)
9: Xf3bZPWk0_bi28_oQ2232QrSJQQ.roa (hash: ffz/L4K0R9hVyQDyQ+n17EfkZ224IbQsJdVzmjU75wU=)
10: a0OAcZfUpJ_at-NAiRWnugtXHZs.roa (hash: CX3pL+do0k62/x9rzFqYTy+gZPu9+b2sUZEH679CN44=)
11: ek9-6det_a8IxIqHsWia7-WY-A4.roa (hash: w03N+IHDbJSsXXRy6rZBj/rl7phalEGurLQVXj4bedQ=)
12: hmPo_o1Wwb_fc_jDeTYw0RTyias.roa (hash: buOdy6wcshKPWdUb86nMrSnh3bWvA83WVFp55tOqeX4=)
13: kE6tecKZ0fG9qC_JtCBXfpG4g1A.roa (hash: CDpFmGMaqgiUJFuGVEP8AvEce972KDkWrlC2GvXzIOA=)
14: sD9_KvYGNd0gSG9dqlTzmRlJx9g.roa (hash: cpPGHuiYhlqjVa2ZLptrQ2LGEEYQM6YwJPoAsBdLFRc=)
15: xjJ15D14LS-olVuJZ7jEwkrPC0k.roa (hash: x/bc5dXq+6Lyq8Lw/fVl1pcZIUuQ/Nrr00RhE1xkTLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:cf:20:fe:a1:af:49:68:d4:7d:78:cb:b8:48:51:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Oct 7 10:00:58 2026 GMT
Not After : Oct 8 10:00:58 2026 GMT
Subject: CN=c79a685c971255abbb906981e81511c81cf230d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:ce:9d:b9:09:63:67:81:bc:62:50:c3:fc:
98:f4:5b:cc:93:b9:ee:3e:26:b1:00:8d:af:fd:7b:
9e:bf:9c:a1:bf:1c:59:56:18:30:27:54:1f:70:41:
c4:2c:d9:a0:f2:aa:0c:94:07:1d:b5:b1:d0:fc:4d:
8b:41:7f:b6:68:3a:c1:c9:ec:86:8d:e3:1b:ca:f3:
59:25:74:d4:e5:f1:03:fb:ce:6c:da:97:9c:16:cf:
b2:4a:59:b8:9c:9f:75:19:06:b0:ba:17:b6:ec:c2:
37:1e:04:d0:0f:aa:b8:d3:10:82:b1:72:5a:4d:f0:
e5:70:f1:7a:30:fd:25:27:db:1d:75:4c:a3:86:60:
98:fd:92:ef:79:1a:d6:48:bf:7b:12:5b:b2:f8:df:
7f:07:4f:e5:a2:b9:a7:57:75:ca:97:b6:da:99:d2:
75:59:cb:17:0e:fe:ff:aa:ff:09:2c:0c:2b:3c:24:
d2:c1:48:a0:03:2c:ad:0b:87:37:b5:b6:e4:48:8f:
01:8e:fe:12:c5:02:63:b7:05:24:f6:d7:5c:0e:d3:
8d:62:41:d1:11:6b:82:6e:f5:b5:81:47:b0:f5:7f:
57:aa:a9:49:2a:cc:fb:a9:ad:41:36:77:54:d8:74:
4a:fe:ce:79:a7:f1:f7:70:cb:14:93:48:1d:3d:57:
a0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9A:68:5C:97:12:55:AB:BB:90:69:81:E8:15:11:C8:1C:F2:30:D0
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a4:13:4c:0d:94:c4:06:f6:83:aa:50:1b:84:55:61:ef:58:
08:93:e9:33:4f:01:d5:79:e6:d8:a2:42:b0:a7:a6:3a:a5:7a:
cb:05:b8:aa:e9:10:17:1f:09:68:ce:f8:f6:c9:98:1c:d5:c2:
53:0a:92:cd:93:61:96:ee:fe:a7:71:de:16:40:20:19:cc:0e:
4d:5a:e4:7e:0f:83:4b:ea:e3:a8:45:b6:2c:0f:2f:d1:02:31:
59:db:77:98:c1:fc:67:0f:35:d9:b4:68:1a:01:f3:3f:9b:da:
5c:ae:29:15:5d:61:91:5f:22:f6:40:54:89:b6:66:86:ae:53:
ae:1f:d2:a3:07:69:9e:1a:dd:c5:2b:4b:f9:54:de:ff:14:6b:
ce:62:8f:43:60:77:5b:66:0f:f9:ce:ff:47:a4:5c:31:4c:80:
71:76:3b:99:3f:fb:3e:f7:18:73:9b:a2:3c:ad:31:48:a8:7c:
43:ed:a4:7d:cb:a2:5d:3e:36:20:c6:5d:b8:75:85:fb:04:a9:
45:b6:45:3d:bf:e4:f0:58:6b:13:d9:98:6a:a6:d2:c3:d8:32:
54:1d:dc:a5:c6:6e:95:89:01:62:32:57:f8:c3:c3:48:b6:e2:
88:ad:74:fb:28:7c:ea:bb:ad:0c:0b:10:23:43:6d:57:e7:d7:
97:7d:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:06:07 2026 by rpki-client