
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier: QNWKnmZkFu6ScgHzMi0GyPSxSFR0GeUBULEYRpE4Mds=
Subject key identifier: 63:82:09:18:FE:D7:E7:68:D5:2C:C3:0B:ED:E2:2E:28:BF:4E:6C:4F
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A1DC4B55A65E937189AD5A05B0A402C403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number: 0A52
Signing time: Sat 14 Nov 2026 23:01:26 +0000
Manifest this update: Sat 14 Nov 2026 23:01:26 +0000
Manifest next update: Sun 15 Nov 2026 23:01:26 +0000
Files and hashes: 1: 3fOCVpT-Lf6UOXcD5Nc80w9uuEI.roa (hash: Olnc6TsFMf/lto0XZ/IXXC3VCnMMv6kWoXMR1B4Qilk=)
2: 6MROEyhCnQoDzzzLgMuqSp8WWW4.roa (hash: U2ETKysUzgCpOSOJ/qWrrLMDT5gA1Ft4qr0viHcAPBA=)
3: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
4: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
5: FJnvWNGFuLmbI2RkF1PBMfW4AaM.roa (hash: Lia6Niow9mvTIEp6IZQLMa57V883PVRlmqrb94CP8h4=)
6: IkJkaYlpuoQ1WcQmLqEIuT8sH1U.roa (hash: CE0DNuD4D/yJeIEVszLgwcKw03DllVEK/8YMYt+DCPU=)
7: JDO-N7w0Fa52JLt8GtUoT0ncalo.roa (hash: tzG8NZ2N7BL/I/RQ8HSnEMaZNAihPmVOsUxkrVflzJg=)
8: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
9: SLSMQo99u24Epa9sZ-35n9YwQ1g.roa (hash: XooSTwMO75gSa1IEA9BRq8RFfpIDKjq4YYrz5/hOOfU=)
10: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
11: WOqoJu5t09R3Cekgx_2O0sa6-Hc.roa (hash: 1qEbFKCQOOiO55/Z1NIx4D98L9A9xFqq+s2fxS0t2Dk=)
12: Y71JSOza9l99m2LkV-uZBA1qT4k.roa (hash: uUv6/DaQOMG287F0xQdwh94hSrXdbb62+qEzPa5p0o4=)
13: ZyKwbccyVfxFWStWGmNBds2K9AE.roa (hash: C74fBVKBp8P7zkaen+ft55vIs/92CO4DbwapwB4BQdE=)
14: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
15: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
16: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: oh65tx4KGSzhLfY5WTu6HLAU3Q8W3kEMNi2TrucDQrQ=)
17: hElXO4jKei6eIioTYSRMuOo2tUQ.roa (hash: 9Afji0izgzI/c8xd125iBWAIgGantscuH5lpVBS/wmo=)
18: kpma4xqgzEEytLfdE-9LrfzAf44.roa (hash: vgqc9IvueEpWlOduqOn71G/7ZnxuYFS4IHbsYXqcCYM=)
19: mE5DN157XZf7igs7Qp5o_mpfYoY.roa (hash: OK0s5oWuJ3ewBiMYcBCwgUB2nCoplpS+aaStS616Tlc=)
20: o6aWDaWLtgSw0yJqWoQY-eXoND4.roa (hash: 7Qa4eT/ei1RS6VIpX+STSPoJ4j3+B1WFU+LfkEGMwlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:4b:55:a6:5e:93:71:89:ad:5a:05:b0:a4:02:c4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Nov 14 23:01:26 2026 GMT
Not After : Nov 15 23:01:26 2026 GMT
Subject: CN=63820918fed7e768d52cc30bede22e28bf4e6c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:71:40:18:99:ac:31:43:66:74:c4:59:db:6d:
c1:b9:e0:bc:d6:56:cd:d0:d7:ba:04:25:6b:71:f3:
09:06:64:36:0b:44:eb:44:9f:c6:5e:e0:ba:83:be:
b3:b6:95:47:90:a2:0e:66:da:a1:c4:0e:ce:b8:13:
9c:e0:b6:48:1d:80:ef:ee:27:16:8a:78:2b:a9:f6:
51:3d:9a:19:01:da:68:b0:de:39:34:0f:53:24:11:
11:94:d3:9b:85:75:c6:0b:53:29:7e:3f:5a:ff:26:
77:e0:fb:ed:44:cd:24:91:ca:70:83:99:34:29:54:
e6:a8:f4:fa:de:d2:49:34:f2:34:fa:42:5e:d1:0b:
30:0b:e3:bc:d8:40:e1:b3:c2:d3:aa:2e:48:d5:8c:
ff:04:cb:77:74:e6:da:16:6b:5c:4b:a5:18:1c:10:
04:00:58:6a:8c:ae:16:6a:06:d6:fa:e3:dd:dc:5d:
ac:a2:ff:4a:86:24:58:f5:12:8f:39:08:82:5d:a6:
90:c6:46:83:5e:f7:85:e8:0e:26:93:50:37:83:77:
70:85:e8:fd:42:1e:ec:90:31:e3:00:6d:33:ed:05:
96:85:e2:23:45:a9:08:67:ae:f5:8e:48:43:8c:ae:
09:e6:93:8d:b3:84:67:f2:6a:c3:3e:cc:98:a8:52:
f7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:82:09:18:FE:D7:E7:68:D5:2C:C3:0B:ED:E2:2E:28:BF:4E:6C:4F
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:84:77:47:c3:3b:fc:6f:a0:04:3f:07:9b:e2:6f:b3:a1:ed:
35:46:ae:49:3e:5d:3f:03:a2:e1:c3:95:f4:a7:1e:16:b7:93:
03:31:a9:00:23:7a:b4:a0:7b:d7:df:ac:2a:dd:d3:08:4a:b4:
17:be:8b:67:5a:d3:d6:1e:c9:94:ca:5e:14:6d:95:d4:b2:25:
ad:dc:f1:64:93:9c:b2:06:c6:e1:41:83:ad:b0:17:46:62:e4:
05:59:c5:7a:a4:cf:99:b3:d4:3a:ab:86:2b:85:8c:d3:82:d2:
cb:ec:8d:a9:c6:30:12:d4:e4:c9:b3:c0:34:2d:bc:37:18:b7:
8d:1e:b2:fc:26:f9:37:63:f8:9a:00:d5:f4:51:f3:aa:7c:3f:
9d:11:3c:a4:35:9e:35:6b:89:69:63:6d:7d:e0:90:f4:6b:b5:
a8:06:22:4c:65:d5:d5:3c:1e:28:4f:8c:78:52:00:be:87:45:
0a:ed:74:5e:fc:91:8d:f4:5e:a7:45:da:3b:30:cf:7f:a2:16:
16:95:79:02:0b:9d:72:67:22:ce:1c:40:ab:18:1e:77:36:3e:
21:8f:8e:7f:e3:85:af:6f:a7:76:9f:a3:91:d8:7d:d6:d3:60:
c8:a4:93:24:23:7d:9d:62:9d:03:7b:87:18:6f:b8:3d:3b:f8:
5b:af:11:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:22:05 2026 by rpki-client