
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier: RliLHdsMdUY3d0kMzEkGXptVCWtKOzvPanCm8n/l7oM=
Subject key identifier: FE:4D:B2:0A:DC:DC:22:3A:7B:39:9D:01:7B:61:F1:2F:34:8C:A5:E1
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019DE47D385E24BE87AC49CF7F38B3CE0B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number: 0816
Signing time: Fri 01 May 2026 17:01:44 +0000
Manifest this update: Fri 01 May 2026 17:01:44 +0000
Manifest next update: Sat 02 May 2026 17:01:44 +0000
Files and hashes: 1: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=)
2: 2TYRDr2pySCMtYew5__1_7bLb3g.roa (hash: VUHOwjKSCIiQY6rT6HOWQYIPz6JCd/WPBcORbiGknvI=)
3: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
4: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
5: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
6: JoRZb6wnnFqboc1Hfworo-INSTo.roa (hash: 3kFMMmmewFn/VnOgm6ByD7QgvC9zd1GMeXvRH0/hyaw=)
7: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
8: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
9: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
10: RW1Mn5jGY_fNwEa4nhfDdOF4euY.roa (hash: rormOO+Scyvc6/IMwyduU2PX9d097afAopSHjpl3a98=)
11: RnPVD9gf9jZqdZp1P8aZvT1Sy1E.roa (hash: 3pjV0gpZSof9VU2uFqwQB+SFUSkzl8zy0feUmyfywNM=)
12: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
13: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=)
14: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
15: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
16: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: mJF8Q23syNJaeH+s9sWOUEDFyUUSssuW6QfuA5LVtNQ=)
17: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
18: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=)
19: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
20: pOZHVjX8onM9oBBZ12RCzAbquBs.roa (hash: pOOINsyyZRyr8GyLY4+525uladm5E7MLq4xyYrftyKY=)
21: tCmMoUtYFPQDVVVvD1xexWaYCPs.roa (hash: 8vL7GZMxy/ZTgYn7qa4CYEJlWKlh7uFIJGQ6a6Vvspg=)
22: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e4:7d:38:5e:24:be:87:ac:49:cf:7f:38:b3:ce:0b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: May 1 17:01:44 2026 GMT
Not After : May 2 17:01:44 2026 GMT
Subject: CN=fe4db20adcdc223a7b399d017b61f12f348ca5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:d1:ee:3c:eb:b0:06:48:cb:21:ee:00:88:
c5:1f:33:e8:81:4b:94:40:cf:8e:ef:96:94:22:4b:
8c:68:ec:05:5e:59:80:c5:e0:86:07:8a:7c:b9:b7:
5c:29:c3:4a:30:6a:39:ff:72:35:da:1c:36:3f:0a:
b7:ad:03:e2:5b:7d:98:fb:91:2f:27:ee:7b:30:8b:
94:ec:95:0a:39:75:3c:21:17:be:64:80:69:a0:cb:
af:84:ac:16:41:76:51:40:67:26:df:03:86:78:b9:
db:9e:aa:ee:ef:66:b5:2c:23:8d:b1:d6:19:75:5e:
e4:42:9d:1f:4c:78:0b:28:29:89:62:09:d9:9a:7f:
81:24:a8:f0:eb:7d:c0:91:62:9b:86:75:e4:59:32:
d2:e4:17:11:73:c0:8d:a7:2e:a6:59:6e:96:c8:32:
49:ea:fc:7f:30:85:a4:93:db:06:0e:79:69:f9:27:
93:b3:a7:14:62:0a:bd:dc:e5:9f:35:63:c8:4f:09:
70:ab:c7:45:2b:1f:22:5a:2f:a6:5f:d5:bd:8a:ad:
bf:90:f9:20:b5:05:a1:fe:b5:e8:37:ec:fc:3a:c1:
75:87:d0:10:7b:b6:0b:15:da:20:bf:79:dd:19:47:
49:12:22:b4:c0:6b:d3:9d:61:9d:c3:bd:3a:99:63:
0a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4D:B2:0A:DC:DC:22:3A:7B:39:9D:01:7B:61:F1:2F:34:8C:A5:E1
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f0:70:29:98:1b:4e:c9:49:a9:61:54:0b:a2:cb:17:ca:e4:
7b:ae:c5:9f:d4:e7:df:3d:11:17:11:b9:28:8b:6a:d2:ef:3c:
92:f6:c7:e8:dc:0e:ae:89:32:28:4f:2f:49:d1:48:e7:6c:9c:
a1:22:c9:e8:f5:1a:79:d0:e8:08:10:f1:d1:09:73:fb:35:6d:
e1:37:7c:35:86:ad:78:31:75:29:db:5a:49:fe:6b:f5:70:3c:
9c:5b:59:23:0f:d8:3c:1c:c7:f6:b2:c5:9b:5f:2d:dd:01:72:
3a:9e:a7:bd:89:d9:27:0d:3b:89:35:6e:cf:0b:8e:92:16:31:
19:ca:ec:cb:d2:16:de:e9:b7:b3:09:6a:0f:8b:fe:2e:95:23:
74:da:28:d4:84:1f:5a:c2:1e:5f:8d:a6:9b:59:0f:d3:36:d7:
83:ec:4f:09:42:ff:0e:1b:fd:af:0f:5a:11:ae:d0:bf:97:2b:
0b:1b:cb:29:2f:f0:dd:d5:e1:79:34:e6:53:fd:6a:02:2d:78:
9d:7f:bd:a1:21:47:6c:42:60:7f:8d:ce:e4:4d:23:d0:8a:9d:
8a:6c:12:fd:a8:2a:9b:60:70:0b:d6:2e:50:df:f0:5f:ed:8f:
cc:56:3a:34:c5:f3:b0:0a:9a:25:ab:0a:73:b9:4f:76:8a:fb:
fe:ad:a6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 00:50:06 2026 by rpki-client