
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json)
Hash identifier: IqV5i8HAibATVWic9eGXgSzJUkKwqEybzRiP4Miz34Q=
Subject key identifier: 91:91:66:A1:A1:01:34:D6:30:9D:8E:6E:D0:D6:CF:1E:0A:37:10:68
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 01A17739EA63771838E9CEFEF58746610309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
Manifest number: 16B8
Signing time: Mon 26 Oct 2026 08:00:46 +0000
Manifest this update: Mon 26 Oct 2026 08:00:46 +0000
Manifest next update: Tue 27 Oct 2026 08:00:46 +0000
Files and hashes: 1: 1_FG2YBqdRhKKIdbfUoaXRIcZtY.roa (hash: DZwW0dAX0l87sLjk9z+qjZR2gAmIuChfWqvnjdJSHpE=)
2: ExLhkVGO_IcP9FKIq81f0oI-oCg.roa (hash: 5HCccmMIa3ZS3Rm7UZ7dWL9/99iZ3k4KgXviDu7U84Y=)
3: H6mXElUtGqkaAjyOWeq60UIxFTg.roa (hash: w/TMQtz3h82vi+GWHVA7q+rO8Depf0bjlxba/vl6eeg=)
4: OwOin32AoXhBJ_iuSSZtdUpdHEA.roa (hash: r6AonYcdKDjFrDRqsif54MlJGphnOtEytVNCx0qvCio=)
5: SCLX0yMUDK_0tO4v6NxcoovzWj8.roa (hash: 9dBLmpKDLrwgh9sSkk5HAo/xRWDF0x1027A7nhDZK08=)
6: U2zR2wxNZR-C_elTQ_PCnfByBwY.roa (hash: OLi955MoAoQc7KvGiHIZSl5vpca4xWCeVTWNOe8m2YI=)
7: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: nNVjr90dlB7IZehjILiF+cWTwCpyYWy2LVceUkEfaDE=)
8: c-5WHUGe7Cokv7tp6uqgS70r8Ic.roa (hash: DoQj2C6sdy5dVILWLV9HA8ZssSHksnBbLRNoxs++EvU=)
9: eHu3rtcXjdq31CwIQ4nx7nvhB2A.roa (hash: eqAtKP8l84cvF2pEaSF30rGhGOuNYfoTW/MjLLS2XHU=)
10: jI-hqwxak8Tg6ancnuy3V90l4fQ.roa (hash: SFQVGGwwzufvH2Q6e3Xanl+xEEo+gFMHtCdjrjGcZV4=)
11: k5tcy3X-bfkTgY-KuojhW38Hb84.roa (hash: /njehwBJ3hy+S6rVtCdBk1btpc3S6jZQpXCGPHURc0Y=)
12: nqJ6Q3D61md2LC4-yJPH7bUWU4A.roa (hash: sLTLPurFLTwE8YAq+DTkGVZv2q4SAYzP5ZK8/ib+u2M=)
13: omuRSlN3uxDC5Q-fxRiwTPk66HM.roa (hash: GxwNrXChKZTEhS9UT+A6aKihcuWe4QoSUJOCbKFbnmw=)
14: ova4DZPGmvsGGPiVCauJt7d6bFk.roa (hash: FJLqImsR5CthuAk7jPWHhT6Jl73gBfGj24WDFfNiWgI=)
15: woLmD7M3XCh8hzd96HJkdchNmr0.roa (hash: IO6F5iDxJpzGWBZGaFRUP1UT9NVbjAY85NrP45yAAgA=)
16: zEU1dCR-4rlXlEW4u-atk395zhk.roa (hash: Kfvh6mjf8zMx7Jx8eSoWtHWYqopwifCIKWlHo0qGGIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:39:ea:63:77:18:38:e9:ce:fe:f5:87:46:61:03:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Oct 26 08:00:46 2026 GMT
Not After : Oct 27 08:00:46 2026 GMT
Subject: CN=919166a1a10134d6309d8e6ed0d6cf1e0a371068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bc:9e:f5:05:12:e8:b5:f7:90:c0:78:28:f1:
3a:a9:67:d9:9f:f3:ce:fa:61:01:a6:80:51:60:5c:
b6:14:e6:2f:e3:9d:6a:66:ef:18:4e:ad:db:6c:84:
4e:d1:a8:4b:43:1b:05:9d:45:80:da:6a:0c:30:30:
37:db:45:09:72:ca:60:52:0e:6e:5f:3c:88:f8:aa:
85:4a:45:fe:f1:81:fd:b8:e8:a9:ca:12:9b:26:66:
83:a4:12:4d:fe:d9:06:a9:17:d7:ce:ef:8b:09:bf:
ec:87:d7:a7:ea:02:79:0e:1f:6d:56:19:dc:d0:d3:
dd:2e:92:bd:85:8e:6b:63:89:b2:1b:89:b8:12:a9:
28:fb:01:3b:14:cf:14:11:d6:40:04:49:64:39:fa:
58:65:d0:49:2b:31:f5:04:0e:90:0d:77:ef:02:a9:
5d:29:08:f1:69:ab:18:a7:26:b9:dc:5c:ea:9e:c8:
51:e5:ae:dd:f8:82:04:a3:93:3d:fd:89:ac:ba:8d:
f9:ec:3d:8c:f5:b1:01:07:37:82:a7:19:c8:da:0e:
60:33:68:32:3f:c3:5a:3f:0c:90:b4:43:51:a2:8e:
b8:5b:89:be:ec:55:a4:21:0e:af:0a:dc:fe:70:8f:
a6:aa:ed:dd:0f:7c:7a:d2:15:2c:51:84:1b:9d:40:
ad:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:91:66:A1:A1:01:34:D6:30:9D:8E:6E:D0:D6:CF:1E:0A:37:10:68
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:27:07:50:74:12:32:67:4b:41:5f:77:4a:84:51:5b:11:cc:
b7:dc:44:ef:fd:3e:59:66:e4:cc:a4:0c:46:ad:f5:e7:d2:e9:
a2:20:85:fb:bb:63:81:4d:91:88:9e:72:e0:5b:0a:db:01:72:
dc:8d:6f:aa:8f:78:98:12:5f:17:81:e8:7d:79:17:d3:bc:2a:
36:a6:1a:96:80:9b:88:e6:f4:a2:0e:77:70:9e:b4:ff:3d:88:
4c:34:b6:64:eb:3e:ba:d5:60:89:39:d6:0d:6a:23:7b:de:cd:
ee:53:1c:ff:0b:f6:f1:db:1e:ba:d5:b5:3e:1b:03:a2:58:c9:
6e:39:c2:09:b9:8d:50:e4:52:24:61:13:c9:a0:fa:02:f5:7b:
eb:16:3c:f1:f3:2a:e3:8b:ee:c4:01:05:45:09:c4:dc:ce:4e:
00:6a:36:17:37:09:2c:e8:27:e0:7c:fd:bc:b9:66:5f:9e:30:
e2:7e:16:43:52:16:a1:25:ed:0d:a6:72:fe:34:e2:e0:8e:d0:
79:4c:a7:03:10:3c:a0:0e:71:d4:fc:ee:49:2b:c0:7e:72:a6:
7a:87:a4:47:dc:d3:f7:58:62:86:cb:17:c4:17:bd:48:ed:7f:
b4:d9:cb:a9:97:d0:ac:97:fb:92:ef:31:63:ac:6c:08:c0:d5:
11:d8:4c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:14:34 2026 by rpki-client