
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json)
Hash identifier: P9+A7uXiCRRADdfWs8nbEoFOeJJXSmeH0+nA8oY0QsY=
Subject key identifier: D1:FF:4B:C4:1D:EB:E0:21:54:B3:96:9C:D4:CB:6B:A4:31:83:90:8C
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 01A08C7BE14A02A64B544245D977063198B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
Manifest number: 1A70
Signing time: Thu 10 Sep 2026 18:02:03 +0000
Manifest this update: Thu 10 Sep 2026 18:02:03 +0000
Manifest next update: Fri 11 Sep 2026 18:02:03 +0000
Files and hashes: 1: 0D14gN2WiBa54cFbuKlrQUOrf8M.roa (hash: 2wB51bMRZ+T+HK/B9Edc9OpYAvR825v+i0duj5mr6/E=)
2: 8alVrjrWY968nNzLuKlTYJqWO5s.roa (hash: n3cPQVf1JqZIIBHl4vdLfSmHsel7C5NhWsG2ov9U0fE=)
3: AfDFx5CztN26DfCfFCFVeLtbfYk.roa (hash: 6hydPd19IUZH5tUXaWmgrdl0J31zdN4Hkjua9Sst5JQ=)
4: Fe9Xj78mLtBv56f9jO8i3r-s8qM.roa (hash: wNTnsyJdnh8/6vp2voiL35CQyX5QiogzfMfKCFUPFDM=)
5: Go3pOTuap2_fsOG2Cy2Y4VT2pN0.roa (hash: 0oyx4eIX+vmWlDNgh2kGWbDg44/BIpYISvXYVe/lRmI=)
6: OsaS-W05X64hVseLWVJ98CCH4bg.roa (hash: ZOdWLGxsnjVKDfjbUq3CekoJyLOWeoL5aqMKIGP91V8=)
7: ZGek-6HBksI7UR516vE0gk5R-L4.roa (hash: t0Obkj8sK06HaBNs4kmLvSB4hxDxnIEARfCn1Ni3RSc=)
8: axdSVqIzRJIZuL4bUaXgsCZR0GA.roa (hash: o1y1RiYLt8sTd8RRJ89cjZcmfxt/0UhXCW4mXlZ2wPw=)
9: cY5-1Q-gCudDvvsjntcM9LHNJ5E.roa (hash: 3JUexyB8UKFK23yZaQJY7snnPpz1rOPKcvmbdq5kUeg=)
10: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: X7ouhg31sJ7B71dOzg/9AwxRrq1juZYKmMPSe6lj2rg=)
11: nWdXzo03Nv5euYjJfrUQ8HTtaRI.roa (hash: 4zzXn53ZU7R+himiAEAxl3zTsYnZiM207WqrGti69uY=)
12: pJv_j_K2EgBCPVKk6BgeU9sHfR0.roa (hash: FZmisnstiTUOgcPXpHL2ZJ5p2aJPRBsk+SIz8t4Ftlc=)
13: rQ8ohk71V4ClseY7wRU6uUdfWw0.roa (hash: +Un59zWJ5v19ef4G1vmVABla4G6FDYt+TwXokRhf32c=)
14: t6LGbWPehA5-4bGA_0I8d0ATs2A.roa (hash: VJvhwVfSb8eKnL2DGvlH1c5C6AHV73YvtD/x841o6yw=)
15: xpxQq-XYLTeZi1RJOWi2RhOZm6M.roa (hash: stugu/O0ZbeQlykuDSWoq5P19xqk7ytCQZZAgWlL1aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:e1:4a:02:a6:4b:54:42:45:d9:77:06:31:98:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Sep 10 18:02:03 2026 GMT
Not After : Sep 11 18:02:03 2026 GMT
Subject: CN=d1ff4bc41debe02154b3969cd4cb6ba43183908c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:19:97:e1:96:9c:85:5a:8c:65:cc:79:a7:75:
50:41:d5:0c:32:6e:1f:b1:08:05:a8:3f:ca:68:42:
4f:83:ee:75:35:d4:37:24:de:a0:f4:02:0a:9b:a2:
69:28:15:b3:77:82:14:08:82:62:42:24:c0:91:5e:
8b:a5:4c:8d:d5:51:23:e0:cb:db:e0:1b:ba:eb:c5:
61:ed:0a:81:7b:88:cd:69:41:cf:4e:4b:21:c1:e1:
1f:d1:b2:de:f8:68:cc:dc:54:92:66:dc:c4:05:d8:
de:ff:b7:5d:4f:44:25:a1:28:50:85:55:88:83:f7:
bb:e0:6a:04:2c:61:dd:63:87:4e:d3:1c:af:54:29:
94:21:a6:6d:eb:df:dc:62:7e:4e:1f:00:d6:90:49:
ff:1b:43:65:03:36:c7:1c:75:78:f7:6c:62:eb:65:
ce:c5:73:89:54:e0:bf:d6:b0:db:50:83:0e:8f:51:
92:09:87:1b:60:f9:74:bb:d5:69:92:11:05:59:37:
95:c4:64:a9:67:77:51:28:bf:54:8d:63:39:c5:66:
80:5e:3b:f0:19:07:2d:7e:97:6f:4f:81:3a:28:38:
66:be:74:57:4a:f4:83:99:93:d3:f9:fa:1a:79:8f:
5d:c5:8d:d8:bb:fe:ee:ee:6e:9e:a5:36:7e:04:5d:
00:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FF:4B:C4:1D:EB:E0:21:54:B3:96:9C:D4:CB:6B:A4:31:83:90:8C
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7c:61:19:00:af:cb:95:23:e9:41:3e:78:28:ca:32:a5:34:
6a:39:22:13:90:f3:5e:a0:47:0c:ed:ee:b2:b3:7d:15:e2:f1:
05:d8:27:9b:c9:83:f5:54:06:13:46:05:e1:55:34:b7:f4:a9:
aa:42:cb:bb:5e:fa:2c:c2:71:f1:ca:5f:87:67:75:3d:c7:96:
c9:4c:cf:e3:97:07:68:c9:57:b4:61:63:bd:0d:4d:ee:2a:56:
56:34:d0:86:1a:bd:4d:23:ae:7e:cd:a0:84:1a:9f:bb:15:aa:
39:44:15:9c:5e:38:54:f5:33:5d:da:8a:bf:5a:53:2f:0a:e0:
d0:80:76:0e:fa:36:1a:8d:08:32:c5:6f:48:6b:4a:4e:ae:3d:
c9:26:2e:a8:43:14:3a:1e:93:0e:b9:24:62:64:3f:e8:a5:03:
a3:a6:33:be:8f:2f:21:e3:a7:34:21:14:7d:9c:88:13:e6:13:
ea:01:ac:a1:1b:55:7d:e8:0d:32:e4:4f:8e:87:f6:34:d8:3f:
41:69:32:03:24:0a:db:31:a7:e2:3f:63:68:66:d4:d0:4a:ae:
4c:67:f1:e0:61:e9:e5:ce:b3:78:43:cf:d4:77:7c:e5:70:a4:
cd:95:57:a1:1d:10:32:b3:03:c1:3f:2b:9d:3d:ad:5b:1b:06:
64:a7:ec:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:51:42 2026 by rpki-client