
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json)
Hash identifier: ShNQOLeEqW3wJdNYQ6mQ/9pWxVZLThS9+K/h73nr1ds=
Subject key identifier: 6D:BB:5A:3F:30:C3:EF:33:B9:A2:92:99:73:C3:6F:32:A3:16:93:C0
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 01A088300FE8077BFA30532D05BB31853F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
Manifest number: 1A59
Signing time: Wed 09 Sep 2026 22:00:46 +0000
Manifest this update: Wed 09 Sep 2026 22:00:46 +0000
Manifest next update: Thu 10 Sep 2026 22:00:46 +0000
Files and hashes: 1: 7FZJTSyZd-nU__CcRlBlCG3_Pn0.roa (hash: noUOCFFTHGmwRjfnOiZSbY4dF3Bfkgx9GSd4XfEBnhk=)
2: EQEuBryRxEtPlweSUJeuZZ3EudM.roa (hash: t5gpiKl+cjOje+0MxgLYfbY+toiD/bOlBv49FVybdJ8=)
3: GdbR_idqMFPPvTnMDLo84FSRLLE.roa (hash: 9wA72fFqTL25Susq0KJt1IgIugCWrwoBtcIiJv1WM5U=)
4: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: 9mgL78sapcOKJIYTpDGqt5glFhiTw09ErBXBhgPL0wA=)
5: LDWe2SngnhCT8P4q-miYjt99pqY.roa (hash: aLbq8y9d6k1sRpBOiELvMKcrET2yuN4aNlw+zUtUThI=)
6: PK-bzrtIQoBqm48y8NO258iLnos.roa (hash: aA8j5N6Zlr7QdjHAkUvyPHOUE/w+nJNmGzUvN0yq064=)
7: RkYKbdX8YWW1g1REm_cJUS7GYP8.roa (hash: XBhm8T8sayUo8xGJ7zpJupaK88M7yfhNyFTulthcP+s=)
8: SxCmwkP6Nm4OCkq0cafIGZz0UzE.roa (hash: xnBBhj7JCuhXFRvrPefaRqPCoJ+R9TXOqzjYihjmxgg=)
9: iw99MEfgWCk8jzXEVkDUVL7mRVE.roa (hash: sLeHG7bJoAQLwEnzTf++99j3zH2x5tEIEtEUj3mnDCE=)
10: jQqjqLwCIiP-UmycKlMjQDwW93o.roa (hash: gWG3bMZ8YKFN55wAMNLYWj4K1vXJyhwVCCdzs0fCImU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:30:0f:e8:07:7b:fa:30:53:2d:05:bb:31:85:3f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Sep 9 22:00:46 2026 GMT
Not After : Sep 10 22:00:46 2026 GMT
Subject: CN=6dbb5a3f30c3ef33b9a2929973c36f32a31693c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:bd:88:9d:32:1e:cf:3e:3b:07:96:cf:0b:
09:79:48:8a:e2:63:a5:17:4d:75:24:55:0c:64:6d:
74:c8:d7:78:83:a0:67:89:87:2b:ab:cc:fc:06:bd:
55:22:78:74:3d:8e:3a:3d:dc:3d:bb:85:e7:89:cf:
a7:59:71:20:6a:b9:62:6b:80:9e:8e:b1:d9:9e:af:
35:fa:29:cf:83:01:d5:c1:33:48:c0:4b:71:06:ed:
4a:b5:a4:c2:13:60:7d:42:56:c2:cb:0d:54:99:a0:
8a:eb:d5:c1:1f:c6:2b:2e:d4:e3:64:80:5d:a9:46:
cd:bd:41:e9:dd:14:4f:62:98:43:12:b8:b4:e5:4c:
13:4b:4b:ca:ea:a0:f3:a0:d7:d0:49:2b:5f:91:a6:
4f:23:e1:41:2e:9f:14:b6:b9:71:23:e6:23:4b:53:
2a:89:9b:3d:76:8b:3c:fd:fc:7a:0a:f9:03:95:79:
8d:fc:9e:1e:74:db:fc:78:47:75:fd:29:ca:00:5f:
a1:6c:d4:19:8a:1d:18:88:24:4f:4d:78:91:69:8b:
1c:35:f7:12:05:6f:2b:a0:df:50:55:a6:ec:bd:62:
c7:e7:5e:b2:ee:58:44:98:f5:82:5a:d2:a3:3c:39:
ea:86:f0:53:b2:0a:db:2c:73:41:9b:24:40:8a:e4:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BB:5A:3F:30:C3:EF:33:B9:A2:92:99:73:C3:6F:32:A3:16:93:C0
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9c:94:d0:9a:0d:13:5d:72:c7:46:d8:ad:b5:c1:ea:ac:5d:
37:0b:94:d8:e6:83:9c:4b:0c:37:f7:cc:73:ae:3a:a0:05:34:
bd:a4:7c:15:b4:a3:af:55:f0:d8:ba:cb:71:f2:4e:8f:ca:c0:
d7:c0:71:f4:a0:1e:0d:7b:7f:de:e0:73:a0:5e:3f:08:df:ee:
f8:29:72:d9:cf:cf:35:c8:80:8a:ca:8a:b4:15:37:56:e1:39:
a8:e3:41:1e:71:f0:f8:2d:77:9b:a2:58:b4:3d:c8:f9:dd:a6:
7f:06:c9:0c:aa:9c:53:32:3b:e7:dd:1d:d0:d8:11:69:eb:25:
7c:7e:03:12:18:a0:89:1e:00:82:c9:23:4f:14:b2:54:ba:1d:
e0:94:cf:7b:51:6a:8f:87:bc:90:13:b2:d1:dd:f4:37:80:ce:
f3:35:91:68:52:58:2c:d3:d3:d9:7e:6d:9f:71:2a:4b:36:2b:
b4:51:10:ab:79:61:62:e6:1b:ba:6a:c2:0d:cb:40:9f:d9:57:
21:28:1b:8f:12:9f:2e:15:0d:71:3c:fa:0f:2e:72:ad:50:66:
b3:74:f4:29:f2:2a:31:2a:7b:89:a3:a7:e2:e0:4f:98:e5:95:
45:1a:12:41:13:fe:73:ec:46:e8:21:bd:4f:21:89:4a:78:9b:
50:61:ab:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:16:38 2026 by rpki-client