
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json)
Hash identifier: 6KYLv7seBFpXY8hlFrLgCc4IKfC3SJzBttvhWW5zjrU=
Subject key identifier: A4:9C:B3:E8:01:0C:C7:D4:08:88:1E:71:52:32:5E:70:18:18:A0:2F
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 01A085D3D63DE0897B6E365DF9EB64A2A6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
Manifest number: 163B
Signing time: Wed 09 Sep 2026 11:00:47 +0000
Manifest this update: Wed 09 Sep 2026 11:00:47 +0000
Manifest next update: Thu 10 Sep 2026 11:00:47 +0000
Files and hashes: 1: 1_FG2YBqdRhKKIdbfUoaXRIcZtY.roa (hash: DZwW0dAX0l87sLjk9z+qjZR2gAmIuChfWqvnjdJSHpE=)
2: ExLhkVGO_IcP9FKIq81f0oI-oCg.roa (hash: 5HCccmMIa3ZS3Rm7UZ7dWL9/99iZ3k4KgXviDu7U84Y=)
3: H6mXElUtGqkaAjyOWeq60UIxFTg.roa (hash: w/TMQtz3h82vi+GWHVA7q+rO8Depf0bjlxba/vl6eeg=)
4: OwOin32AoXhBJ_iuSSZtdUpdHEA.roa (hash: r6AonYcdKDjFrDRqsif54MlJGphnOtEytVNCx0qvCio=)
5: SCLX0yMUDK_0tO4v6NxcoovzWj8.roa (hash: 9dBLmpKDLrwgh9sSkk5HAo/xRWDF0x1027A7nhDZK08=)
6: U2zR2wxNZR-C_elTQ_PCnfByBwY.roa (hash: OLi955MoAoQc7KvGiHIZSl5vpca4xWCeVTWNOe8m2YI=)
7: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: dmLMED/3s1VSi+FavNCBeuYBHhmvXPumn+gS6e6Grfs=)
8: c-5WHUGe7Cokv7tp6uqgS70r8Ic.roa (hash: DoQj2C6sdy5dVILWLV9HA8ZssSHksnBbLRNoxs++EvU=)
9: eHu3rtcXjdq31CwIQ4nx7nvhB2A.roa (hash: eqAtKP8l84cvF2pEaSF30rGhGOuNYfoTW/MjLLS2XHU=)
10: jI-hqwxak8Tg6ancnuy3V90l4fQ.roa (hash: SFQVGGwwzufvH2Q6e3Xanl+xEEo+gFMHtCdjrjGcZV4=)
11: k5tcy3X-bfkTgY-KuojhW38Hb84.roa (hash: /njehwBJ3hy+S6rVtCdBk1btpc3S6jZQpXCGPHURc0Y=)
12: nqJ6Q3D61md2LC4-yJPH7bUWU4A.roa (hash: sLTLPurFLTwE8YAq+DTkGVZv2q4SAYzP5ZK8/ib+u2M=)
13: omuRSlN3uxDC5Q-fxRiwTPk66HM.roa (hash: GxwNrXChKZTEhS9UT+A6aKihcuWe4QoSUJOCbKFbnmw=)
14: ova4DZPGmvsGGPiVCauJt7d6bFk.roa (hash: FJLqImsR5CthuAk7jPWHhT6Jl73gBfGj24WDFfNiWgI=)
15: woLmD7M3XCh8hzd96HJkdchNmr0.roa (hash: IO6F5iDxJpzGWBZGaFRUP1UT9NVbjAY85NrP45yAAgA=)
16: zEU1dCR-4rlXlEW4u-atk395zhk.roa (hash: Kfvh6mjf8zMx7Jx8eSoWtHWYqopwifCIKWlHo0qGGIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:d3:d6:3d:e0:89:7b:6e:36:5d:f9:eb:64:a2:a6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Sep 9 11:00:47 2026 GMT
Not After : Sep 10 11:00:47 2026 GMT
Subject: CN=a49cb3e8010cc7d408881e7152325e701818a02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0c:cd:55:6a:58:26:3c:6d:3e:f1:5f:c9:ae:
53:c2:fb:8f:ee:30:68:6d:50:be:05:34:72:c1:8d:
67:ff:92:0e:dd:18:9c:cd:cb:7b:2a:74:55:be:6b:
7a:98:62:7d:1c:c4:02:04:ef:4c:76:a3:20:eb:19:
b7:a6:3a:79:b3:8d:f2:d1:6a:22:63:1f:3f:f6:76:
3e:ee:9e:d4:70:a2:1c:f6:a7:b9:4b:8d:32:ba:e8:
ce:e4:01:f6:8c:d1:61:00:a5:97:80:f0:d2:78:c9:
2d:82:99:fd:d3:fe:5d:ea:0e:a4:cc:36:32:74:bb:
6d:15:d2:50:e3:ef:c8:69:22:f1:54:29:dc:77:1d:
6c:03:99:89:da:c7:41:e1:aa:85:41:aa:f6:2b:90:
69:13:94:94:76:39:0b:df:12:b7:c0:40:55:4d:a3:
fe:df:e0:16:ff:04:a1:14:71:8f:40:9d:ee:0c:ae:
0f:1b:f1:0a:06:db:bc:c7:81:45:9c:7e:a7:c2:bc:
d4:04:42:85:1c:0b:84:f0:7e:37:48:85:ee:49:7a:
7a:da:f0:11:12:de:48:2c:31:51:e4:91:60:89:0f:
bd:8c:27:c7:7f:97:88:ef:a4:eb:30:41:60:67:2f:
a4:0f:c0:04:e7:b4:92:d1:f5:03:fa:0f:de:ab:09:
a7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9C:B3:E8:01:0C:C7:D4:08:88:1E:71:52:32:5E:70:18:18:A0:2F
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cf:46:36:aa:df:f7:22:4d:94:03:39:cd:8e:c3:8e:ed:1c:
5f:32:bb:ca:d6:f2:4e:62:62:81:a3:a3:7e:8b:a5:58:e1:ae:
1b:3f:f9:e7:27:ed:b5:55:0c:23:69:b6:78:28:a5:64:ca:50:
03:b2:2a:5d:a3:48:17:f0:b0:b1:32:09:47:1f:6f:fa:ad:eb:
0e:17:99:d9:8e:cd:25:36:53:74:e4:44:9c:99:2c:00:e9:88:
91:56:07:17:dd:bb:5f:71:24:fa:a7:f6:03:b2:65:1f:02:15:
ce:20:2d:ea:f5:c4:de:cf:60:d3:dc:e5:c6:68:f9:3d:cd:70:
52:64:dd:e4:70:b7:0e:46:cb:34:74:26:13:fc:ca:9b:31:fa:
59:e9:f1:fc:f6:6c:a1:09:51:1f:12:32:9e:1b:94:f7:31:66:
5f:37:89:08:6c:10:f1:c6:ee:1d:09:08:54:67:14:12:b6:42:
f0:3e:31:90:2e:57:26:98:72:58:20:86:a9:51:29:52:eb:1b:
e8:83:49:6d:c1:e5:5c:0b:85:78:4d:75:2a:78:99:7b:cc:17:
7b:4e:fd:e1:a4:78:79:63:a6:b8:0b:fb:e5:e4:a4:44:d3:ce:
ee:38:af:03:31:08:e7:dd:10:b6:83:16:e4:6e:26:17:80:42:
03:6f:b9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 16:35:50 2026 by rpki-client