
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
File: zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json)
Hash identifier: 7HZH3rwJpvnKl65QS9+BI1SojNriwf2oPzwu2yyKj1E=
Subject key identifier: BF:A0:7D:ED:71:C2:76:D3:D1:0D:F3:37:5D:04:77:52:D3:F8:48:45
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A08AC3A8D65C07875E3397D497C7842E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
Manifest number: 1BE7
Signing time: Thu 10 Sep 2026 10:01:13 +0000
Manifest this update: Thu 10 Sep 2026 10:01:13 +0000
Manifest next update: Fri 11 Sep 2026 10:01:13 +0000
Files and hashes: 1: 1DEY2MhWiVYKy3UrfKc-S8LBVwg.roa (hash: rDfa0UnfWvaw/u26D87Y7/9PFONL67aavbL9G/vSMYE=)
2: 1YYlM4ouGP3n966YQQJD1J8Ht1c.roa (hash: S2bt8De1mjKmpnVjdK4IwIG1kVZf0VST4BMHZsJGgJk=)
3: 39hNxNp-nuCqNksdTxKZgMGVxJE.roa (hash: zujIoYkl4Zo8pHqy7FDX7Ubdipm6/EZB9d5Au9zY7xk=)
4: 47CsFOJriBbo1mq0-ajVp1jYEUI.roa (hash: aGrtYJNVgjYu/HsVE+4iU/oLDMmucqYc8rXRFsYsUHc=)
5: 5deMRBbWVqmht1sOWTPO9NesZX8.roa (hash: C1Nush/54sAAZxYCTt1+o50yyXszTnYgfSJMssdqdQs=)
6: 7Xre036woZ8vcol8k5XmEu1iA1I.roa (hash: eyn3q3PLjDTVu84Akp3ffRdOxB2vaXhFGWuStQOY2t4=)
7: FtjOuaGj6XuKQSprHYyjG7mq5BY.roa (hash: wmFztbGgVo+esEAQ1u/hISwsJhzp/aC8gT6aH5GO5u4=)
8: Fv-ztF2UG5zf6h5b12hXUB2uIfM.roa (hash: vWzxaASZZO87hMUAoCYoH4niRZRjFfP7/pwFauJSL4Q=)
9: GA1XHzWcpcUGoUmLR47BUH5ZcZc.roa (hash: iAqD74qcYTcBb5sTTSkiYu2s1IkOFMHBUPbsfUe4F2c=)
10: JO2xr2SpG8k5bLsLnvYB8od4wPs.asa (hash: fRSbrwuw/d1qBK8idZqHFRm2f3lneeVglcAeRA4ZIRM=)
11: MBJ1TmxMlUADfhppw87AtlF4BAw.roa (hash: WEd1zzNA+pNvlt4cAOAWiu/zRr1ny+nFIdymaQ/OK8Y=)
12: PisELHxCj9Tij4-2sem6RSDPu4M.roa (hash: oGOd3HB+uRNlF70fF+XYGkQK02LLgQH4jFhzBp8FfFE=)
13: RAdaDsAL6uT6QOjQ8Sv22EVFnsE.roa (hash: ZNDdDY/LbCEeHweol2m/OdT3bO0M0+NtKGLn9lmBaqk=)
14: VBWBCsXJU7oPkU-x2fU7gsAVD8E.roa (hash: 9ciW7V6q401ESHMMgyHdo+xNbpDGKCLEqNll9PJLnT8=)
15: YbFebSl--3J76oaBlTOec6IbHfE.roa (hash: err0DUND/w4jDu2qRwOGdetaJcJ0qm0JNMHMF6v2Z2E=)
16: _dg99Pgu9sXy9n61V1SOyIAsz68.roa (hash: ljG6pKAy2VwHE3QsWNyoPRAh/FEzLDZlVIYW5TWBjuw=)
17: bA4b87f91ryc3jb4SiaTzw70uLA.roa (hash: M9DMYWjQrriYvfIMkTPt89s2T8jCvpnvOvBPbxf8EDE=)
18: bs63AqlU5D-GCU72vha7ypDhurE.roa (hash: RjRSZFAduAT0Z75zwCsE2XziRS51jLEugipeFkuq+7o=)
19: jr-PunQRQJFZJ7OYQwdFrKrkWJ8.roa (hash: q7R0ND36zZ5sAUsSRpGvv9igpHz56injhoG5j1zS828=)
20: kjRidx0D39Ao0112FfgdK6_4QsQ.roa (hash: 1c4wEZ+8x5KA1HUnAkNWdzJa0JfekRogYEyNw7TG30w=)
21: rClGIIO13EpmdapGJJLWbhKvgxk.roa (hash: RZrN3iBPqEfE4qlggDEYCJgP0mBpmcurRx75k/eSElw=)
22: tP-ezWKWhAkf4p1w49tg891CKc0.roa (hash: qn7gDz9gLjNXw/+mpQ3scMnhqsd9j8XgUWH/XG1i/XQ=)
23: zUq98b8i___94VbqFU7J_4ODp-o.roa (hash: /9n8pSxth5HcINO3N8uYE4G/IAGbUmN6Ln6dn0v47CM=)
24: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: 8HUNDk0771ImhNFd/wphGy7ixf8QrY8SjspZnseuD90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:a8:d6:5c:07:87:5e:33:97:d4:97:c7:84:2e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Sep 10 10:01:13 2026 GMT
Not After : Sep 11 10:01:13 2026 GMT
Subject: CN=bfa07ded71c276d3d10df3375d047752d3f84845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:00:66:1f:66:bf:cd:c9:cf:84:f0:e1:cc:a8:
22:1d:41:35:dc:82:1a:80:49:72:57:9a:26:f3:09:
7e:4b:09:c2:1a:20:dc:08:6f:41:e3:f6:18:07:5b:
0e:91:9f:ef:2b:ff:ac:9e:48:54:9f:a9:1c:b5:07:
06:c8:70:49:14:b1:57:5d:13:83:36:37:a0:65:1e:
a1:f6:bc:8e:d2:72:50:41:e7:67:65:ae:3f:f8:68:
34:a8:59:5a:57:2f:72:68:41:8c:ed:72:02:54:11:
97:4b:38:3c:c9:52:90:86:c8:09:bf:8d:d2:ca:f6:
ee:29:6a:1f:58:d8:b5:4d:b5:fd:a1:f5:d0:37:23:
13:3a:d5:27:4c:8f:2e:c1:7e:74:80:64:75:b4:99:
a7:13:d0:bf:f3:67:63:47:7e:35:28:a7:ce:ac:a8:
23:de:bb:c6:ad:d5:00:3a:f9:17:9d:81:dc:89:63:
b5:09:24:61:e9:e9:05:2e:a5:de:d0:42:48:96:bc:
22:88:bc:9b:9b:bd:0e:ce:14:e0:57:ae:2a:51:0a:
e2:39:ef:36:b2:63:37:26:71:b7:ee:f9:94:d3:61:
2e:49:33:64:8d:83:4e:54:be:78:a1:b9:54:ab:33:
db:ec:46:bd:5d:76:de:3b:90:c4:06:53:3d:6a:5b:
ca:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A0:7D:ED:71:C2:76:D3:D1:0D:F3:37:5D:04:77:52:D3:F8:48:45
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:69:82:ca:82:03:29:32:24:12:f3:f7:1d:6e:d0:08:3c:10:
6a:5a:bb:fe:09:b7:26:db:bc:f7:c2:c0:91:59:d9:cd:63:e5:
31:66:52:d3:9a:e0:70:3b:ba:39:a9:45:8a:f6:b5:80:0e:dc:
d8:31:76:bd:6f:b4:ec:fe:61:fc:76:f7:f3:20:14:07:18:81:
f8:6d:70:b4:7d:db:59:c1:5e:ca:fa:c3:8d:e9:ef:43:4e:5e:
a3:b5:d6:48:0e:27:14:b5:c2:5c:36:af:63:6d:bd:15:c2:7d:
0d:26:41:39:94:58:75:6f:7c:b8:0b:18:c2:0f:9e:7e:f2:d5:
53:e1:6f:1e:16:e3:e5:53:91:27:78:76:e8:a6:96:a1:20:98:
63:b7:e1:44:77:76:e6:89:78:28:d0:51:d0:70:65:60:0b:11:
73:6c:6d:4a:a4:6e:09:1b:14:54:9d:4a:85:53:5b:73:d2:bf:
df:9b:6f:6d:b4:51:f6:51:d4:75:c5:0e:f6:46:bb:ca:3b:94:
43:ef:df:4b:59:06:27:17:63:ec:cd:ca:42:a5:f6:d4:53:f1:
6e:55:17:ab:a4:08:f2:11:e0:6e:36:ad:96:ca:5c:4b:10:7b:
7f:92:c8:0d:6a:f8:9a:e7:6e:29:98:a5:02:78:07:37:4d:7a:
3f:4d:dd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:17:09 2026 by rpki-client