
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json)
Hash identifier: 6w6TUTOEHB2MTbvsceWTFHMxuJxU0jN7MP11fFGOaIs=
Subject key identifier: 1C:F6:1C:AC:C8:7A:F8:7A:10:19:8C:82:51:91:C9:51:D1:22:62:E5
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 01A089E7620016878E9DD794E553DD7B8875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
Manifest number: 13E2
Signing time: Thu 10 Sep 2026 06:00:37 +0000
Manifest this update: Thu 10 Sep 2026 06:00:37 +0000
Manifest next update: Fri 11 Sep 2026 06:00:37 +0000
Files and hashes: 1: 1zdYV17WT7I3TXSQzHhVO7RGIDE.roa (hash: ic+QDZW/iaOfXxz3MlR5QNaF9pen8QrjZ3oMD7NWMNg=)
2: 8nl2mLa9KaQYd0gtNecXWVE84vs.roa (hash: e0ZLWW8LXQsY4AnPfxVi/bqwxVjXvo2BrP7yTMcokRY=)
3: E2xtWZV4AV3kjahi3ya1WwpYjn8.roa (hash: eiCt2qdwFMu87Um/GEdb7fiVQB0BZPI+XYBSTsuRYnE=)
4: IyuNOfmUXirly0xEaKEHq8m71oY.roa (hash: uiMdpw1f0VdtzZapJik9ypl9f8HLQKGrIwk+Sh+eMA8=)
5: Uy3ys-nSv2z06iOsWIhlKc85XNk.roa (hash: 2YEBqEQjSApG0xmkrgbwP8dVN1caGGqbA7l5pUFPq34=)
6: WrVfx5xIOyU0VfM4lWHO9zuUBec.roa (hash: XiwYRUE8TPoWMz3FqnBDZHH2r5WpV+Blp9EaBYJYRms=)
7: Zj4CimCazX5aQkiTy0v6Bth5jY0.roa (hash: LI2qWr9NKIdpnEssjh+tl7eWkcbWzEM25rITA+Kd1d0=)
8: Zl7668QzqgpWXy6sh2FJjPCuQUA.roa (hash: 2zmfb9kNRpLa+/F5r/g7AhSNh6Z8kYBICxLEIcI8yZM=)
9: a3JMeBjtG8p-K8DB-gMejb1J5gI.roa (hash: /hvaDpNLcY8jqI3PSI+KI1FyULWGiSrZDc4FkjdXsPM=)
10: b3hSMqZucbTEWGNrQwAs2IFGkRw.roa (hash: z/yFesinyEyBrIjdwqEECuXJOsbqlJbwdnSENUJBacc=)
11: eGy-TWABgnLZkghosaJJHcTee5w.roa (hash: 3UQRNaZvYAqVrxrnLNkAfUX6kjr+I18WMoFH16wNXTg=)
12: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: AgzZIp/MAFlYCBFJf2uW9TBbD0UlMv4XO4SzAk9Pw90=)
13: j575I3ZxuQSG6sUJanicuzsQ9ME.roa (hash: MRXhloo4whFrLVxEGl5ycNzkpjmehaI6LH7jWYZpYC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:62:00:16:87:8e:9d:d7:94:e5:53:dd:7b:88:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Sep 10 06:00:37 2026 GMT
Not After : Sep 11 06:00:37 2026 GMT
Subject: CN=1cf61cacc87af87a10198c825191c951d12262e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:f9:a7:7c:29:30:8b:13:78:70:94:89:57:
11:15:6a:08:ac:65:03:6d:cb:6f:de:c2:a7:28:72:
69:b3:a7:72:2c:ec:a3:2c:c7:20:db:75:ad:78:02:
d5:7d:f9:44:fa:b9:5e:15:b3:3f:26:94:a7:21:2b:
95:d1:12:37:e7:60:b5:c7:cd:c5:4f:05:66:cb:db:
5a:86:ca:f1:14:d8:b6:b7:41:53:98:c1:07:a5:ef:
ea:d1:f3:15:ea:af:cb:2d:87:5a:25:01:b3:41:9c:
1f:8e:ff:01:f4:f5:b8:ae:cd:a5:da:a3:6c:68:62:
ca:b4:ff:24:44:e0:6c:64:b2:ea:64:3c:a8:9a:57:
66:bd:5c:79:f7:53:3c:98:94:58:1c:7d:f7:07:b3:
7f:e4:f4:84:a1:e6:f0:a4:d0:48:c1:de:39:fe:52:
12:26:8c:61:ca:52:3e:b5:24:5f:e4:51:58:17:a4:
1d:c6:e1:3f:33:3f:3f:52:70:2e:17:d2:a9:55:48:
09:a5:a3:ac:df:57:1f:46:20:40:40:16:d0:e7:6b:
6a:26:53:75:fe:a7:0e:42:72:6c:c6:a0:63:ba:dc:
e2:0b:af:e4:63:f4:cb:48:3e:71:7c:61:cf:08:18:
94:ff:c8:d8:b3:f5:c9:ef:e6:1a:d1:20:7d:56:72:
8e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F6:1C:AC:C8:7A:F8:7A:10:19:8C:82:51:91:C9:51:D1:22:62:E5
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:90:c8:f2:b9:bb:74:2d:0d:46:6b:d4:c8:4b:52:dc:06:4f:
69:7a:05:1e:3c:76:5c:d5:54:66:ae:37:b7:3f:92:66:a9:36:
42:eb:53:f6:67:ed:27:a9:59:10:db:d8:b7:28:d9:3e:2e:be:
5f:18:c2:04:82:4d:2c:45:52:95:ef:27:67:4c:56:c0:ac:7a:
49:9c:a0:7e:2d:a5:17:b7:d0:0e:2a:31:e7:41:4c:df:e3:0c:
e5:1a:f6:21:ff:c9:2d:8f:71:92:96:2b:16:71:b7:21:24:f5:
8e:07:eb:00:bb:6e:c3:6c:52:b7:de:a4:19:1d:a8:ed:37:b3:
a9:b3:30:6e:b7:bb:e8:e0:a6:54:75:fc:93:6a:5c:6b:ca:d3:
ce:8b:d6:40:00:33:49:35:99:89:9d:25:39:f3:27:38:b3:78:
a7:ec:bc:2f:00:c7:54:50:47:fd:fc:f5:46:98:aa:50:38:82:
b2:55:ef:0e:6c:37:ce:cb:49:5d:52:18:35:4f:e6:95:4b:47:
b7:49:47:3d:d0:83:64:d9:2a:c3:ad:a2:f8:88:85:f7:f1:46:
14:70:3b:dd:0b:f0:de:d2:66:84:24:ce:d2:7c:99:8a:d9:0a:
04:dc:d4:e2:49:96:a1:2d:88:fc:18:f9:cb:18:02:84:02:72:
cc:1a:0a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:49:01 2026 by rpki-client