
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json)
Hash identifier: Xkx9qELAXvApwWnBgWbZQ+Xj+1rBc2XfETDAeH38vqg=
Subject key identifier: 19:54:D4:28:82:A4:12:FB:AF:50:42:5D:93:4E:99:70:A3:FF:A9:41
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 01A179CD2C12D783357B10B8C733A589336F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
Manifest number: 1AEB
Signing time: Mon 26 Oct 2026 20:00:51 +0000
Manifest this update: Mon 26 Oct 2026 20:00:51 +0000
Manifest next update: Tue 27 Oct 2026 20:00:51 +0000
Files and hashes: 1: 0D14gN2WiBa54cFbuKlrQUOrf8M.roa (hash: 2wB51bMRZ+T+HK/B9Edc9OpYAvR825v+i0duj5mr6/E=)
2: 46p9s-6bK1x3IMhZZTLtFnLKSG4.roa (hash: m9iX0hvEzdFtNZKfroikZrbqGhUWZla8pnTb/7pKB2A=)
3: 8alVrjrWY968nNzLuKlTYJqWO5s.roa (hash: n3cPQVf1JqZIIBHl4vdLfSmHsel7C5NhWsG2ov9U0fE=)
4: AfDFx5CztN26DfCfFCFVeLtbfYk.roa (hash: 6hydPd19IUZH5tUXaWmgrdl0J31zdN4Hkjua9Sst5JQ=)
5: Go3pOTuap2_fsOG2Cy2Y4VT2pN0.roa (hash: 0oyx4eIX+vmWlDNgh2kGWbDg44/BIpYISvXYVe/lRmI=)
6: OsaS-W05X64hVseLWVJ98CCH4bg.roa (hash: ZOdWLGxsnjVKDfjbUq3CekoJyLOWeoL5aqMKIGP91V8=)
7: ZGek-6HBksI7UR516vE0gk5R-L4.roa (hash: t0Obkj8sK06HaBNs4kmLvSB4hxDxnIEARfCn1Ni3RSc=)
8: axdSVqIzRJIZuL4bUaXgsCZR0GA.roa (hash: o1y1RiYLt8sTd8RRJ89cjZcmfxt/0UhXCW4mXlZ2wPw=)
9: cY5-1Q-gCudDvvsjntcM9LHNJ5E.roa (hash: 3JUexyB8UKFK23yZaQJY7snnPpz1rOPKcvmbdq5kUeg=)
10: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: Cde2YnCNHgv6ZXyixA+1eGf9rOgBBXcIm+sZwOBdDAA=)
11: nWdXzo03Nv5euYjJfrUQ8HTtaRI.roa (hash: 4zzXn53ZU7R+himiAEAxl3zTsYnZiM207WqrGti69uY=)
12: pJv_j_K2EgBCPVKk6BgeU9sHfR0.roa (hash: FZmisnstiTUOgcPXpHL2ZJ5p2aJPRBsk+SIz8t4Ftlc=)
13: rQ8ohk71V4ClseY7wRU6uUdfWw0.roa (hash: +Un59zWJ5v19ef4G1vmVABla4G6FDYt+TwXokRhf32c=)
14: t6LGbWPehA5-4bGA_0I8d0ATs2A.roa (hash: VJvhwVfSb8eKnL2DGvlH1c5C6AHV73YvtD/x841o6yw=)
15: xpxQq-XYLTeZi1RJOWi2RhOZm6M.roa (hash: stugu/O0ZbeQlykuDSWoq5P19xqk7ytCQZZAgWlL1aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cd:2c:12:d7:83:35:7b:10:b8:c7:33:a5:89:33:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Oct 26 20:00:51 2026 GMT
Not After : Oct 27 20:00:51 2026 GMT
Subject: CN=1954d42882a412fbaf50425d934e9970a3ffa941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c1:19:97:d1:b8:7c:77:df:9c:cb:a0:64:aa:
fa:a7:fb:3b:6b:63:70:fa:ff:78:f5:7e:7a:94:8b:
45:6b:fd:39:9c:13:92:b3:0a:37:28:f3:a4:33:83:
99:63:0e:14:ae:37:44:61:7a:05:7f:24:9b:05:98:
79:f4:9b:b4:37:bd:1d:f3:ca:8d:3c:0e:ad:c1:77:
8c:89:ec:84:d4:fa:0a:0a:83:ab:f8:19:9e:64:31:
84:89:75:b5:d2:22:90:b4:f8:16:f6:6c:d6:5c:60:
35:be:cc:05:9a:c7:13:9b:7b:64:c6:1b:a7:81:74:
ff:4f:05:d5:49:49:f5:51:fc:f2:bb:fe:74:10:ff:
6c:17:1b:4a:e2:6e:c9:f7:4a:d4:f1:57:84:9b:88:
7a:cd:17:03:22:14:38:da:63:b1:8d:11:5e:57:a8:
21:8f:60:c9:a6:ee:d7:39:e0:30:62:d2:7c:d9:a0:
33:b8:f9:dc:46:98:b6:be:5a:b0:a1:2a:86:d9:c3:
91:be:99:7e:cc:9a:5e:a1:ed:1b:7f:52:f4:fb:ab:
b7:a8:9a:fd:1e:50:6c:06:0b:67:18:96:be:e4:98:
09:f1:f3:43:82:d3:43:af:02:28:c1:d4:f5:64:b9:
ca:5e:fe:9f:39:a0:69:b6:52:6c:f3:51:c0:cc:3f:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:54:D4:28:82:A4:12:FB:AF:50:42:5D:93:4E:99:70:A3:FF:A9:41
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9c:0e:88:d6:c0:21:3e:41:74:af:5f:04:a8:8f:6b:b4:2c:
88:f4:1d:50:ee:dc:d6:7d:83:3d:49:32:96:e9:54:aa:6b:77:
9d:f8:92:12:a9:d9:e3:3f:4a:9c:83:19:a4:49:7e:b1:3d:79:
99:7c:82:77:c2:aa:f4:c3:d8:91:6a:c4:58:d4:1d:97:66:2b:
bf:dc:f4:30:8d:bc:17:a3:5b:cf:58:33:c6:1e:89:c4:24:fb:
c5:ab:fa:fd:9c:da:71:75:fe:11:01:42:a5:ba:0c:0d:7b:97:
7b:e2:92:e5:db:be:c3:26:fb:aa:b3:c1:74:3f:ac:d8:e5:8c:
11:8d:4a:d5:28:9d:f3:31:02:0e:5f:af:f0:fd:81:c3:01:84:
48:98:58:ed:dc:a3:c1:17:00:66:05:cf:3b:97:a4:cc:5d:14:
46:c4:46:5d:e1:13:c9:33:31:27:30:3f:b8:77:e4:75:d4:9f:
d7:54:21:56:ee:1b:c7:b5:50:50:22:0e:63:e0:3a:67:d0:9e:
ea:a0:06:72:95:47:74:82:29:35:c4:bb:74:cc:ba:fb:46:4d:
7e:eb:02:a8:52:65:81:62:0e:93:2e:6e:b7:cb:0d:5c:b0:71:
e6:b6:f1:57:82:36:9e:1c:45:0d:45:e0:92:cb:ff:c5:72:53:
39:01:d8:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF5zSwS14M1exC4xzOliTNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj
MDA0OGUwHhcNMjYxMDI2MjAwMDUxWhcNMjYxMDI3MjAwMDUxWjAzMTEwLwYDVQQD
EygxOTU0ZDQyODgyYTQxMmZiYWY1MDQyNWQ5MzRlOTk3MGEzZmZhOTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MEZl9G4fHffnMugZKr6p/s7a2Nw
+v949X56lItFa/05nBOSswo3KPOkM4OZYw4UrjdEYXoFfySbBZh59Ju0N70d88qN
PA6twXeMieyE1PoKCoOr+BmeZDGEiXW10iKQtPgW9mzWXGA1vswFmscTm3tkxhun
gXT/TwXVSUn1Ufzyu/50EP9sFxtK4m7J90rU8VeEm4h6zRcDIhQ42mOxjRFeV6gh
j2DJpu7XOeAwYtJ82aAzuPncRpi2vlqwoSqG2cORvpl+zJpeoe0bf1L0+6u3qJr9
HlBsBgtnGJa+5JgJ8fNDgtNDrwIowdT1ZLnKXv6fOaBptlJs81HAzD8qkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlU1CiCpBL7r1BCXZNOmXCj/6lBMB8GA1UdIwQY
MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt
MTA5NTU0NGM2YzUwLzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw
LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5wOiNbA
IT5BdK9fBKiPa7QsiPQdUO7c1n2DPUkylulUqmt3nfiSEqnZ4z9KnIMZpEl+sT15
mXyCd8Kq9MPYkWrEWNQdl2Yrv9z0MI28F6Nbz1gzxh6JxCT7xav6/ZzacXX+EQFC
pboMDXuXe+KS5du+wyb7qrPBdD+s2OWMEY1K1Sid8zECDl+v8P2BwwGESJhY7dyj
wRcAZgXPO5ekzF0URsRGXeETyTMxJzA/uHfkddSf11QhVu4bx7VQUCIOY+A6Z9Ce
6qAGcpVHdIIpNcS7dMy6+0ZNfusCqFJlgWIOky5ut8sNXLBx5rbxV4I2nhxFDUXg
ksv/xXJTOQHYMA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 06:01:05 2026 by rpki-client