
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json)
Hash identifier: 7TLZROijqzBU0VVJXh1/Upfivw/9ztUpmR53ZLDgTpY=
Subject key identifier: 0B:A0:A0:01:76:91:FD:BA:57:A0:96:3E:71:86:7A:08:72:2F:50:6E
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 01A114BCE4D640545FCF40CCF726018109A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
Manifest number: 1A9A
Signing time: Wed 07 Oct 2026 05:01:25 +0000
Manifest this update: Wed 07 Oct 2026 05:01:25 +0000
Manifest next update: Thu 08 Oct 2026 05:01:25 +0000
Files and hashes: 1: 38zDD4es76pMYfxWO9Kebz-WjWM.roa (hash: XhOYbvn2vBE0qAcPQlydDXoWbTL6inMfuQq3MWi5org=)
2: 47ifkKzolp3We1XOZB7ABGdtz3o.roa (hash: ZOzWEMjHn4XkxA4iw//kHkM6kX8r7Mzovz1lPBYdzEM=)
3: 52hDP3-ByQHgxfz5k5nyAXlJACs.roa (hash: CRx9eNE+otK+xDf1eK31D30RGTui93OxIqmdpwAHeSI=)
4: Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa (hash: 0ozhX8g/mw0yc94TISX70eWBPdkOuJmTnBUgWffqex8=)
5: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: Ef12FxtZuIvxODBXVYk32Vqi7Yhh4SJluMgB5BiZb0s=)
6: DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa (hash: zuCZB/urT4sKiPYtjrx8fYkL4fyeLc675iKf1n7+I0c=)
7: EVC6qGwfCrszAWIa6NrJgfF3FOc.roa (hash: DCMsxDwhcj1FYGt8tzMR5PXLqtpUWyGhfgYmt4MalDo=)
8: FbP_56k1b6aGcmDhdpjVA4rmcAc.roa (hash: IaKEOoYyppV+DdDU0hXMblKkbM/K5lk0d74Bwp+5+M4=)
9: IHH1-9eElmx6vzHS6CSeWaasjPI.roa (hash: 8l2d1ctkyvi2wD+52VfoZuD0gMg1JAj8dTjXtq4Gejg=)
10: OTrcuVgT2KGth-4ao2nFNpPxJV8.roa (hash: kDRTc7zw5QdnfyH9tTiJIXGOA8WOGvBsDzJJaWbcK+c=)
11: PhY8VpVCs-zI4pzSl1AlpcBUZyA.roa (hash: 0G8y+xYpap3HjnisbsPxH+9qWeTV3B8A8wt6Q+7UoOw=)
12: Y1OMIxkXJrvMhItcpsB6ZaRauGE.roa (hash: nR0JpFQFbz7bh4jT2eomGOeCYKnUB5v4/GBk+24NYXw=)
13: adgxxWCr4tdHIRHz-5o7Cl2CeCw.roa (hash: j73P2J+Eqx3LN/ksUURMXjJE1GVIstHtsDxZoQlR3lI=)
14: dhIuimCZB4PO82Y4wVepjTgpJks.roa (hash: 9kt45hDGOHdn87okzKM6GN9rkhMMHrV6hwVUBlGJ+Zg=)
15: jkqGxR1193tH-HpG6FCidOMGlew.roa (hash: m1WsC0zkTDIRW5PeFfcaixOxVBhdNi36TSkJPA9LJqw=)
16: lxiAgfluoVaNRQVi4iLsO1-qGug.roa (hash: oZ2uHGzF3a+GhzLpFCrGatkEqX80eZc8lpHPq5xBtlA=)
17: q3rbGoECoqVzoiEg67F8Le7vz1Q.roa (hash: u7wuzSzxMHXwNLDoDAPzL65dXF8XL5bh5VXZVXeIDP0=)
18: rYFpWuZruIrOhwpWXMP_IZ4tVUw.roa (hash: /VBan9NMmf+zcxvPCNJlk8CtUTHsxz+gzK37fTWPJe4=)
19: v47skhEQE84BTabypqito2-aQcw.roa (hash: CxzVAARRwuzZYbxF0QwhrV2Mn+y9yUJX8XBehR9owUI=)
20: wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa (hash: +eCQgpLGESeuv6nhdrhJ0WB9Ii8OiFx4YDBKHXoFeBE=)
21: wdOcXKO_nHug7XQx40TtUWzLUsM.roa (hash: Ueb9fAlff6oWbWvuQdTKkKgLret/3JZuhuE+MXfwQBk=)
22: zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa (hash: qriExcmdT0xVkVAzyPuL6OCSHElFLzPBanJGO1rmv6A=)
23: zVjweoMYjQEop927xOWCjXM6xSw.roa (hash: AStpL3MDYMfeQtwUDgyamky+EYtSLylBM5r0UG73jzY=)
24: zvpbW0AJBnBw0bQshYm2MUX9XVk.roa (hash: 5lICS1+N8TUyxPCwI2DL37ljYI8YB9nq4jlyXqCwtCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:bc:e4:d6:40:54:5f:cf:40:cc:f7:26:01:81:09:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Oct 7 05:01:25 2026 GMT
Not After : Oct 8 05:01:25 2026 GMT
Subject: CN=0ba0a0017691fdba57a0963e71867a08722f506e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d2:03:82:61:90:88:c7:d3:ef:64:d2:17:2b:
50:c2:31:1f:10:11:39:6f:d3:70:ea:a2:5c:76:29:
84:01:ec:53:e5:f0:9e:ca:bd:14:31:a2:26:92:93:
e3:96:76:d4:20:9f:18:6b:3a:a2:c8:20:32:09:0a:
ef:35:b6:e0:51:c9:15:80:d4:40:c2:14:81:32:2d:
41:42:d3:0a:db:96:8d:07:29:1a:4f:c8:73:f5:9e:
c4:72:28:5c:a0:a2:76:8e:a2:ad:7f:4e:ab:b6:c0:
a9:b4:b8:76:18:98:de:c6:20:22:de:d9:0e:9e:6e:
86:70:b6:94:05:f5:65:9d:fd:84:da:72:a5:c6:1d:
e7:54:67:bf:41:d5:d9:28:c9:45:7d:74:c0:04:bf:
db:cc:38:46:eb:b3:72:f7:b2:fb:65:0e:3d:4d:9b:
2e:7d:f2:cd:31:1d:fc:09:6d:9a:9c:93:8a:81:cd:
4d:e0:3e:61:51:df:ab:4c:5a:84:17:d4:7a:f3:ef:
32:6f:6d:75:62:5f:37:27:b9:da:5e:75:be:9e:a3:
1f:b1:bb:fa:74:f7:ef:1b:b8:24:ee:3c:f4:8a:49:
89:2f:08:7c:eb:ef:96:4b:01:99:b8:7f:0d:6c:dd:
bb:78:0f:d2:d6:b3:61:9f:a6:45:54:4d:d3:90:f9:
a3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A0:A0:01:76:91:FD:BA:57:A0:96:3E:71:86:7A:08:72:2F:50:6E
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f7:1b:6e:de:cf:cf:1c:4e:26:5b:04:e0:6e:a9:84:10:9a:
8b:dc:47:82:df:d0:f9:9f:9c:91:55:5d:fe:88:a5:93:bd:2a:
ef:d4:58:7b:d6:6f:a0:82:47:32:62:95:67:b2:28:96:29:dd:
03:e1:f3:0a:31:20:bd:95:eb:46:43:fe:d0:d2:15:37:da:0b:
df:ae:92:aa:eb:e7:53:e1:07:39:f6:d2:46:b4:ee:1a:1f:ba:
47:0e:8e:1f:9e:17:0c:f2:c3:41:8d:6a:5a:10:e3:f0:d7:44:
f3:8b:b4:30:bf:3f:3b:d9:f3:77:91:cf:8f:6e:6d:b8:72:8e:
71:4d:4c:c0:08:fe:22:22:66:79:de:9a:e5:3c:be:38:85:91:
c6:d0:10:f1:6c:e9:20:53:6d:5e:b2:db:eb:06:47:51:1e:b2:
b4:87:07:2e:9b:01:aa:e6:10:5a:7c:60:31:07:ef:42:71:53:
38:3a:05:f4:1c:27:10:20:bd:3a:8b:dc:5c:8e:89:77:ce:09:
db:70:a8:b6:c6:3f:6e:81:69:8a:37:c2:bd:10:2a:0e:dd:96:
12:c6:35:c3:e4:22:8c:c4:95:3e:66:2a:81:7e:05:ee:ca:95:
1d:48:67:36:e2:b5:17:b9:b0:6c:81:98:f1:87:16:8c:ca:f3:
5d:1c:9a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:11:26 2026 by rpki-client