
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier: MBxlieGIAC8q6boPS3JxGQJrUeYxk78vocgwPk066a4=
Subject key identifier: 64:07:3C:F0:79:23:A7:7F:9C:34:37:5C:5D:E9:D3:7D:6E:1B:AF:B4
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A105EE9406DF636DF690A98895C6452FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number: 09DA
Signing time: Sun 04 Oct 2026 08:01:23 +0000
Manifest this update: Sun 04 Oct 2026 08:01:23 +0000
Manifest next update: Mon 05 Oct 2026 08:01:23 +0000
Files and hashes: 1: 2XNigP1XX5v-b3FUJHAwFh0xXbY.roa (hash: Oo5YPE7FvlEd2/zNBUPSdHNjdbk39M4tT85PV9QMW+4=)
2: 3fOCVpT-Lf6UOXcD5Nc80w9uuEI.roa (hash: Olnc6TsFMf/lto0XZ/IXXC3VCnMMv6kWoXMR1B4Qilk=)
3: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
4: COxwzaAe-R0jbJcmK5ZEQBvI8Bg.roa (hash: C8/sSHtf0SbNfSPV69qmG7STbyqxXjDjzdiBxYpNmhk=)
5: DR9VqkVtbZff3gkUBcaPLf1vbp4.roa (hash: sIqhfmAWjnSCKWQ8+ZuDooV52eSu6wgQtTvetBcOvWQ=)
6: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
7: FJnvWNGFuLmbI2RkF1PBMfW4AaM.roa (hash: Lia6Niow9mvTIEp6IZQLMa57V883PVRlmqrb94CP8h4=)
8: IyHLg3suZFaQuVarnDT09yy0X2o.roa (hash: 6+BW/hTb1umKDUBp2nCuMYA44iYB5QhDbwWwEQM2hgQ=)
9: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
10: NOTd4-A4PmSQj4XSSOacvmdiako.roa (hash: 8iobNGMtq59P99qMnRi2vFVNNvHMw8CEZpBCxMHYatM=)
11: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
12: WOqoJu5t09R3Cekgx_2O0sa6-Hc.roa (hash: 1qEbFKCQOOiO55/Z1NIx4D98L9A9xFqq+s2fxS0t2Dk=)
13: Y71JSOza9l99m2LkV-uZBA1qT4k.roa (hash: uUv6/DaQOMG287F0xQdwh94hSrXdbb62+qEzPa5p0o4=)
14: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
15: alomw2OsWHbd8tHr8rQUVSaTf48.roa (hash: /SgtQ+hB/USe7wR/Kp74UDlxjPB2bz9JIMvjDNTyblY=)
16: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
17: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: reh6I4lPunJd03uI9Ksulo+8HY4ahTi505op6FqEWZw=)
18: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
19: kpma4xqgzEEytLfdE-9LrfzAf44.roa (hash: vgqc9IvueEpWlOduqOn71G/7ZnxuYFS4IHbsYXqcCYM=)
20: mE5DN157XZf7igs7Qp5o_mpfYoY.roa (hash: OK0s5oWuJ3ewBiMYcBCwgUB2nCoplpS+aaStS616Tlc=)
21: nv5fiWXYzHu66gzzAc2gY1E_2Ws.roa (hash: bTjCfnE77NEactYbdS6nJYXWVoGC6Uw3L9qEunQvAs8=)
22: o6aWDaWLtgSw0yJqWoQY-eXoND4.roa (hash: 7Qa4eT/ei1RS6VIpX+STSPoJ4j3+B1WFU+LfkEGMwlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:ee:94:06:df:63:6d:f6:90:a9:88:95:c6:45:2f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Oct 4 08:01:23 2026 GMT
Not After : Oct 5 08:01:23 2026 GMT
Subject: CN=64073cf07923a77f9c34375c5de9d37d6e1bafb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:a9:9e:07:c9:a4:18:da:35:c4:f7:a6:e3:
52:42:b5:ac:c9:68:6a:1b:6a:5a:5d:9c:33:4f:50:
7a:20:9f:0b:bf:56:2c:a7:08:e3:52:3d:26:8c:e5:
04:ff:55:76:9c:c9:00:f6:e2:94:bb:c2:3e:10:c8:
89:5f:cf:49:37:7d:24:3f:06:24:dc:9f:ba:f8:ea:
6a:9e:a6:91:79:9e:34:17:37:99:2e:ba:2f:ec:a9:
ad:d4:e0:4e:cf:07:76:02:88:10:7a:7b:05:7a:72:
fd:4f:f7:11:78:c0:e5:51:69:07:64:09:86:89:5e:
48:1a:7f:fe:b0:14:34:04:e5:ae:86:5f:1a:b0:9d:
f8:ae:ff:67:84:10:84:a9:50:15:06:2a:7e:04:7f:
7d:b8:bf:75:cf:6f:3a:9d:d7:2b:9e:77:44:d6:3f:
ec:12:7c:ce:36:1d:ff:c9:7c:a4:bb:46:4d:60:ed:
96:c0:72:67:ef:d6:18:37:a5:61:ce:18:65:ed:69:
d9:59:fd:55:63:87:07:a7:07:0e:db:4b:ee:52:67:
21:89:e8:1e:21:62:9a:2e:13:b3:2a:cb:ff:23:50:
d6:c5:30:5d:b4:77:fc:9f:37:4a:0e:e5:f6:9e:a8:
e9:03:8b:15:53:90:ca:e5:c2:42:6b:46:55:2a:84:
e7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:07:3C:F0:79:23:A7:7F:9C:34:37:5C:5D:E9:D3:7D:6E:1B:AF:B4
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b2:ca:fc:10:b3:0a:f3:d0:f7:0c:9c:b3:e0:3e:15:b3:39:
1b:a3:ef:32:7c:0a:b9:85:f4:0f:27:ae:ba:6c:f8:1d:52:1b:
b8:3c:7c:0b:eb:c5:dc:4b:2e:eb:b3:33:51:e6:82:ec:ee:ab:
d8:eb:30:85:d1:3e:54:a6:84:16:44:dd:5b:07:09:ee:0a:f2:
7f:a6:d6:df:f2:9a:f9:f3:b3:91:10:9d:2f:a8:3a:1d:eb:8d:
50:ba:24:b8:cc:de:b8:cd:b4:32:b9:49:c7:63:70:dc:f5:dd:
bf:67:73:de:34:2d:d6:76:b8:7f:ee:52:58:89:f1:1a:a0:70:
4e:75:0c:90:9c:93:05:ad:a9:14:c0:90:7c:68:fd:e8:57:29:
60:cd:3b:07:aa:fa:8d:22:a8:15:90:67:c7:55:45:52:9b:8b:
2a:2f:41:06:e0:db:6c:2f:c7:c9:f8:96:a9:d8:cc:81:a9:50:
8e:2c:a5:e2:6c:4d:9d:0e:f8:f4:25:80:94:cd:1a:b2:f4:35:
e8:af:29:28:3e:d7:63:3f:b0:cd:f7:b4:e3:c3:91:fa:b5:55:
24:14:aa:6c:7f:21:46:17:2f:66:5c:c3:cb:9a:21:25:41:96:
4a:f6:b6:47:8a:91:1a:5b:9e:2f:a0:d5:41:23:86:d9:7a:c6:
ac:06:bc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:18:43 2026 by rpki-client