
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
File: rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json)
Hash identifier: 0BTP1zFemyZz+5krjiGzBCLRmP0w5xpty1rY1HGgRYc=
Subject key identifier: D1:55:49:65:69:28:75:9C:49:85:9E:B0:72:E5:40:FC:9C:F6:4E:92
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial: 019F9DDEDDF8F05E78B0C838E66C39B75D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
Manifest number: 1894
Signing time: Sun 26 Jul 2026 10:00:56 +0000
Manifest this update: Sun 26 Jul 2026 10:00:56 +0000
Manifest next update: Mon 27 Jul 2026 10:00:56 +0000
Files and hashes: 1: 9FFbtl92SQwflV8MtJzAZegLGXA.roa (hash: +FwC+M5wIyk/fhrmXIflqm7L2WDvRv2FjdVHYMVPPzU=)
2: FQ-zr24LwDkwYEmw_FlDbzx5P4s.roa (hash: 72rsnmpdkRSkNBR0uk4zMj5njaCBagS3GBHGnSWVLYw=)
3: h_0cAkv9bRuqII55SmmjCPAtEkY.roa (hash: f3qXMN3stUSn8npXGtiCTxgNOHC/rASxYRfTCA56R9E=)
4: kxHXeC-RgFki1x0jEKzH48eBz8c.roa (hash: E6qamccMc25rG9FxeXNYkNGoky+PcxFg+Xq4GlM3NUs=)
5: oYoaCxePjZcRzRJTrNBrONO_Ym0.roa (hash: 4nGnf7vQYWEUFNLWW0oRGYuPycV7h1x++stMCLyo5Bk=)
6: plMF4273xJNdefV7r7jo8RJ8QbU.roa (hash: D9odZxGtxbDzG6OiIstvUcJ7z0OpJ5jME5X2lJ31p5A=)
7: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: 5FoNl3xQnp1J3ylu7VsHda4nSxAQ+LZMG2SiXfLndHY=)
8: un_1tb4ETb7dJsP5Mq8V0llGT80.roa (hash: cP4I0MaCsjRNc87FbMAxnApmXsIjWX9M4UbopOynI2E=)
9: x1uPGMrYnISpD0QmPBO-tTbLGlM.roa (hash: ZFPHDA01tmwtDf5lu3JucB42d6leTrbu6L4QKi5eAhk=)
10: zLCHjeiw_ejDI_VbLsjC7k1DbE4.roa (hash: 5Mti0up92969Oa1c08K/2LG50PP0mj7MqErSz+8DQcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:de:dd:f8:f0:5e:78:b0:c8:38:e6:6c:39:b7:5d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Validity
Not Before: Jul 26 10:00:56 2026 GMT
Not After : Jul 27 10:00:56 2026 GMT
Subject: CN=d15549656928759c49859eb072e540fc9cf64e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:df:a5:b8:a1:b2:27:29:1c:5a:a5:29:12:f8:
e9:35:04:c0:71:59:02:b4:08:13:01:1d:fe:d7:81:
60:a0:34:76:6c:b6:5f:de:6a:20:d9:55:ce:ed:18:
62:c5:82:c5:4b:77:06:26:60:d0:3a:34:29:0f:72:
43:27:9f:41:9b:b2:f8:6b:81:3a:8e:37:6d:5b:75:
d8:32:38:9e:7d:06:f8:db:b6:5c:b1:e4:14:44:2e:
5f:af:5f:ec:15:d0:e3:5b:0d:1c:d9:b6:ec:c9:15:
3a:21:08:95:d1:c4:e9:d6:f7:49:70:5b:3a:54:49:
e9:08:30:cb:d6:bb:9a:10:bc:d9:5e:05:52:a0:6d:
3e:48:f2:16:e6:70:d3:d5:18:77:a0:eb:62:26:b5:
c2:60:09:85:06:66:91:80:6e:73:16:43:c9:5b:7e:
46:d9:fa:3f:14:32:30:23:ca:1c:46:72:52:77:7f:
f2:98:78:bb:45:a6:07:59:e9:2d:fd:d6:79:cb:98:
dd:a4:f0:af:42:ca:3f:20:e9:6c:1b:32:4c:72:2d:
96:1f:c0:8d:7c:fa:c7:c1:6b:ad:c9:22:00:d1:3b:
8d:42:d1:4b:ea:4a:69:55:a7:46:d2:38:55:b9:c6:
c9:28:0e:00:96:61:24:80:64:26:c7:4c:ba:70:79:
c0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:55:49:65:69:28:75:9C:49:85:9E:B0:72:E5:40:FC:9C:F6:4E:92
X509v3 Authority Key Identifier:
keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c2:8e:78:66:24:5f:35:d3:29:66:e8:20:d2:2e:22:d6:d8:
3c:fd:62:81:a0:32:b9:d0:7b:15:68:42:cd:49:15:70:3f:c9:
d2:ae:64:c0:90:f8:75:04:7e:90:9c:d3:7c:71:9e:9c:bd:d0:
4e:af:f2:54:91:9f:54:bb:21:b4:7a:0d:58:b0:60:ec:23:74:
5b:97:0e:e7:fb:6b:a2:06:c2:e4:09:56:83:70:45:b3:d7:43:
6c:31:ca:78:f4:50:28:3a:f7:8b:c2:51:73:35:40:35:d7:2c:
af:10:88:95:da:cc:ae:1f:8c:54:02:02:ca:a4:d7:de:77:7c:
2c:06:eb:38:97:af:0c:fd:10:52:fd:85:30:a0:d0:66:93:2b:
30:9f:96:f2:98:e4:16:c3:c0:66:a5:38:de:dc:76:1b:19:82:
42:84:78:0b:ea:e9:f2:9a:8f:01:c1:b0:9b:d2:18:ee:8e:9f:
5b:de:9d:37:0e:fa:30:62:d5:ad:83:e6:1b:3b:b2:0b:b8:c5:
cb:a3:c5:8f:67:77:1c:64:3c:f5:7e:f3:22:a6:5e:cc:29:c5:
d7:ba:15:ea:00:31:69:55:6f:6c:47:04:a0:37:cd:0a:24:24:
a5:c7:7c:58:1b:fd:18:06:62:3a:52:7c:73:97:5b:46:92:89:
c1:71:7c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:54:35 2026 by rpki-client