
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json)
Hash identifier: czygLwg1ZTpI8D7iwC/1P3gZNqQtLAU0khiwNC5iTpA=
Subject key identifier: 1F:70:60:93:89:8F:4E:8F:2A:19:73:0C:72:EB:C9:E5:B0:2F:DA:33
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 01A0013822A538B795FB85F5FAB11AD9A0ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
Manifest number: 1A4F
Signing time: Fri 14 Aug 2026 17:00:51 +0000
Manifest this update: Fri 14 Aug 2026 17:00:51 +0000
Manifest next update: Sat 15 Aug 2026 17:00:51 +0000
Files and hashes: 1: 1-Wl5nNIYq_W3pgo34yEVZQdbxyU.roa (hash: G+7+XKaWZcYGhV9Z4DnGNMnW/7HpmVdpN8SBoPugm7A=)
2: 6R28sM8NerO2u18G_AMWCWlWH18.roa (hash: NDy+Juig3WdCXI1JH5AcQ2fEURwLEtaXUjO+rQmeRKY=)
3: NFl71PMJau8OoVT-JEiyhHLSIZE.roa (hash: 3lKUsUjSDTNYTFbKVTbGnC0rr8zeipPM6TGCp1smax4=)
4: Qcb6MBj1jVMY5YJV__nFQrA67wU.roa (hash: eNJ8rbIWqEmXeV+vpidHVif1VOtq0n7KG9qEAuZBikM=)
5: TYbMVOnA1vB-wjFD6xsvHrGkVuw.roa (hash: gch7cDWOheOnpIwvXzaiQbw92kRVsDtErv7998avG0Y=)
6: XU-lnejjTfdYfkel9cu2qcj3jOg.asa (hash: 162FwGPbBSAqHbgij5iWFOSWYdvU5C2K98+sNPEBfXc=)
7: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: Dbm/DKq0Fg92Nbvk5RF3w2FliH8T/wjLZFpGmYiQA4g=)
8: cpt1ugrQd2rHwxe5DoZShXs9qzA.roa (hash: mY1xZ8RVFs4GaD6HtiYmaN9LhtKWxyqpPX89QA8Zdpk=)
9: eQvbuB-WIfPaU-Lzc20AVEFS6m8.roa (hash: kWCTa5bd0F2DthD4hV3kmVTOiwhDV1nanw9wkMyWs8c=)
10: lOg--qFlBmx76-ubYUaKmA6pugY.roa (hash: aef1dmSLDMXhGIpZWewz/Jm1+VbIUIAUbF9tc8qTQqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:22:a5:38:b7:95:fb:85:f5:fa:b1:1a:d9:a0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Aug 14 17:00:51 2026 GMT
Not After : Aug 15 17:00:51 2026 GMT
Subject: CN=1f706093898f4e8f2a19730c72ebc9e5b02fda33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:b4:c5:a7:e9:c7:de:ce:13:00:57:61:49:
84:86:00:46:20:0a:5c:46:7c:8b:70:7f:d4:86:ed:
53:77:e1:27:70:d2:89:96:f5:b6:80:93:31:d5:b5:
2a:29:48:a7:1d:70:a3:6d:9c:cf:dd:3d:66:30:ae:
d1:5d:fb:8d:36:f4:62:67:0d:e0:5b:45:6d:41:bc:
94:26:5e:6e:47:2f:4e:fb:5f:f5:8f:3e:0f:bc:66:
67:82:17:6c:4a:9a:77:7e:35:29:34:04:ec:d8:56:
7e:0a:3e:61:06:49:69:e1:81:b2:ce:bd:88:fc:d9:
56:5a:00:b0:a0:05:5b:53:f7:2b:09:78:96:06:00:
d5:b1:ac:d4:7a:29:f6:09:43:0d:db:d1:9a:55:28:
7c:24:94:bd:4e:c1:d1:60:0d:47:32:99:65:bf:fd:
c9:8f:1a:34:15:52:fc:37:f0:0f:46:d6:85:55:ad:
dd:08:c6:d0:31:5d:89:99:79:79:03:49:e5:f8:4f:
ff:e3:01:f6:e5:27:21:e2:1b:56:b4:b4:c8:4d:a1:
58:0b:07:80:44:99:bb:df:17:b8:9f:f4:d2:7c:90:
1d:d5:0c:ef:21:44:99:7e:b2:39:2c:c7:88:1c:3e:
6f:3d:98:a3:af:c1:d0:5f:56:41:0a:49:af:38:ab:
7a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:70:60:93:89:8F:4E:8F:2A:19:73:0C:72:EB:C9:E5:B0:2F:DA:33
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ac:c6:6c:37:e3:fb:27:bb:e0:3f:f4:aa:89:af:26:6e:0e:
2c:bf:ee:ef:0e:89:98:3f:16:a8:aa:84:7c:07:e0:f2:01:92:
fc:df:47:5c:ed:69:14:cb:81:53:1e:e9:22:f0:9d:b8:50:3c:
c5:c2:22:65:28:46:10:4c:5e:28:17:b3:f1:53:fc:31:81:4e:
b0:d0:ce:ad:c8:76:b6:73:e1:15:d1:70:0e:88:cc:42:18:3a:
49:fb:ee:c9:65:87:9e:aa:c0:8f:12:11:c0:6e:96:1c:76:7b:
d7:e3:cd:18:2d:0d:18:30:4a:b9:34:14:4e:e5:20:a1:ad:de:
a5:02:be:e4:ff:26:04:85:4e:7d:cb:96:02:4d:50:5a:84:27:
fb:da:17:ea:bb:8a:c9:10:f0:36:cf:26:ff:cf:6f:31:c2:86:
6f:37:74:69:ed:84:61:9b:46:24:69:4f:58:31:43:79:90:af:
fa:4f:9f:44:6d:42:79:0a:78:a1:77:32:0e:3f:35:7e:dc:5c:
5d:49:0f:d8:e6:7b:82:6a:69:28:f9:2a:68:7d:88:e3:7b:3a:
c5:6a:44:bb:e0:61:ae:5e:af:5d:3b:40:a1:2a:66:38:15:4b:
b0:51:7a:eb:ea:d3:8b:b2:74:83:4b:69:40:99:ff:ed:b5:31:
3a:53:ff:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:27:34 2026 by rpki-client