
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
File: xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json)
Hash identifier: FEAbsExrGhznqv4lsgRvH9VerIC56KFN4QG6seHbflQ=
Subject key identifier: DE:83:6C:A2:19:67:27:2C:26:61:66:D6:F7:D7:B7:31:8A:21:F4:85
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A1212EBD03628082564E8AE9F62C48B7DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
Manifest number: 1B3D
Signing time: Fri 09 Oct 2026 15:01:13 +0000
Manifest this update: Fri 09 Oct 2026 15:01:13 +0000
Manifest next update: Sat 10 Oct 2026 15:01:13 +0000
Files and hashes: 1: 1scAzSfF6-O4qi-AFUEj_37aURo.roa (hash: eTH807xo4Op+ZKawsAc+aiv/dB4TYhJguB/r2EFj3ME=)
2: 2c-E5BZdiwqZ2Q-DnytRU90rLWI.roa (hash: +KiT1wYNU4xT/dbPCwls8LNvm2nJx4GyHtaKqzRjkQI=)
3: 2g3YqagtveoXivlimUOijGK4Sw4.roa (hash: ygC6oN+dOsYHf4Cjh6O/E1qqcFKMCRFPzFyAC5l12yw=)
4: 43_ZJ3k-TiSjVFeCdb58fosa2us.roa (hash: TUQa+PGydwMlwxuWRcsskqreleLLr+fkGX9oob/3iV8=)
5: 5B28Ei4KPuBfMPCYz_CdjunmzfA.roa (hash: Fh0fY9vBoWA1h/GgmdDXwKoDcv0YIku/VzyUipmtScY=)
6: 5dkqS1kOogdDjOVpwAfLimpJt5w.roa (hash: 4rpahEdjqfHI+J8PiOnxP0jGqurgzE3tQ8tvvK8E+LI=)
7: 847QYcUP5hjUb-CFADZoXL-2EAA.roa (hash: 7A5j1ayEySWaguXhxHGqbzXvWLgn70DxblNYwzAZz1k=)
8: ADU9Ot52SGzefQKh2DGEXePNY-0.roa (hash: V0wapUiJ26KIs+WS34QY65fxOFjUrNBK87fDA6RrJ2c=)
9: DeLLhmnL8UGopy5KKmx7aJEcegM.roa (hash: MiHnbQkuo0f/Ih4buFqhTcosJDlqA6PQQ++HZPqmd5w=)
10: ElfbXSGIDiSMTPPlbo6V-o0SRuY.roa (hash: lKK5rdzCjZE0+7rICMxRWAfKpw9HWxpCs96nQPbHzso=)
11: F3V6NHBiFLHYH9kCeJ_cphI6VuI.roa (hash: S7WFcWfal2pVRy/GM+kUJ9lEuF9xQr0ct0tz3YBvyhU=)
12: GzFILLIkAaT9aB9CvnWDZTFwbdY.roa (hash: Wm6rCP0d9sgkyPeTHrd7psMD7wjPvGW5jHpasqKACzk=)
13: MDrt79mC6kMu5R27ERe_p3PXA7g.roa (hash: Y6CbpK/IdrhzJrPxsU/2B/u64jcq8RAQZg4LE13g3AA=)
14: Usfze6DAgiW4aZ17c8EB3ewbVek.roa (hash: I8qGnxGlHPoZhKeP1eXsLTEpNFnKkEsZVS7uYH3u3VA=)
15: W9AeGn_4EYTr-z8IbzJJXYoLOc0.roa (hash: r/0RiCOSE+WrdRBD5qqcgjI3IcYBeed6dA+B48z6B+E=)
16: ZUQyPtsQSG2-82dh1ccUQgyaC3U.roa (hash: F5s94k1GhD0QSyMs8GhlHlBwNgpTYkiuTjgDbM5XTDc=)
17: cUKcHJFrJ0eH0dvSy-4NvKEMJRg.roa (hash: ay80hlOU/zsjK/Gj33Njc9A5kUM22amUQKa18P+z+G4=)
18: dGXWYRF6cbb2REOzdNYY1MAp4dw.roa (hash: JZ8n7AwgrR1TnNLWkOpomj/B9o6sWmLA0i5q7ytbGDU=)
19: gMYRXePhXBj5QEchP90fA4n6PTI.roa (hash: n3t3ay/80ZRLXPkmrmKkNg7PYGv+vXmzByKb6p1QvZ8=)
20: hbdbuaRvg2tTLKp10GziAeSgyRU.roa (hash: H+cM7/5ALMd58f/dYxV/Q5+dv/fO2eB8PR2xGdT8ZXc=)
21: iE31HcpgdKKrdPMldO0jIS93Go4.roa (hash: q2vi84j7Hjeqqy/+pd9xsj/QdQIOk9oRPO1utxPcNqU=)
22: jX-4IWGmG4eMlD0i54uclcBT7Oo.roa (hash: fjR22bEWcrZfBSNMZjc/CuGiPhNuJQZ9SlzDLkoJWZM=)
23: jpMS12QCO2gdD3cuexYC2wQ8Qeo.roa (hash: nMFW9BQneK7T1fgc0t6oA8jRIcD7rZtWnJMbSrXrhdQ=)
24: llmpvsJp6iJllq8aPzCHiXy7pDI.roa (hash: DANl4OSIWpehyMk+CpY4YG/h/rDOrMDg4VQVT2cFg7g=)
25: ms0wuT7v6-h1UgnL6n_jgWkOkVU.roa (hash: QBEq8rCcXKzWf4ULJs+y+Nad4kF1AXFNATRKBuEGesA=)
26: nm-KZislIGz6wosxLU6C90OgEBY.roa (hash: eiBhQ/2d82wkJoJ8lwkynR/qT2+hnESyOr9AACLRf+E=)
27: ugtI-QyWNOjJ59RgJ8WbbnFfW4U.roa (hash: aT3mMJhpwKfI0RkCBtFq/BKu85xA6+3aVTdjvSvqPZQ=)
28: w6gmNc7f_bvjPNIJjuhS3RSIpZQ.roa (hash: GdBjwBkJ4iGW3k1Xd7AiPym4634yoaPZu5TSA3ZGyx8=)
29: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: g8hzankRuJNNjEwxLy3OVRSazF+GftX1cqF55rr60L0=)
30: zAc0y9f47MhF7tmtrfVqaAD-nlg.roa (hash: iBJqOiR1P3Y+3+FsFM/Tj/uBiIpz68n/JO7l/j8Ihrk=)
31: zPpg6IVM4o-i4jinuCnEdex0dqQ.roa (hash: uIlAbF8c+38K/x3ETxFNnYAiumMWGn5GI23E2fbm2gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2e:bd:03:62:80:82:56:4e:8a:e9:f6:2c:48:b7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Oct 9 15:01:13 2026 GMT
Not After : Oct 10 15:01:13 2026 GMT
Subject: CN=de836ca21967272c266166d6f7d7b7318a21f485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:30:0d:2d:bd:46:74:8a:dd:2e:7e:64:bd:02:
87:ef:8e:1a:be:2a:78:62:4e:3c:d1:df:1a:8b:53:
c8:52:40:62:58:99:b1:7c:e1:d7:03:70:98:60:45:
61:10:fc:c8:b4:12:82:90:df:b9:86:73:9e:ed:ec:
f9:9a:b0:27:ff:96:af:0f:ab:a4:b9:62:60:c6:8b:
5e:e8:ee:15:df:f5:fc:2c:88:7c:dd:80:e1:7e:13:
97:d0:d9:9e:a6:61:d5:c0:47:1c:29:f8:56:c8:71:
6b:5b:ed:cd:fc:6c:e2:40:aa:d9:38:5d:f4:67:8f:
77:09:d8:39:4f:52:ad:08:a4:d3:3f:0f:4e:d0:d8:
a3:85:4b:dc:9c:2d:c5:6c:92:4b:d4:d4:5d:53:4d:
3d:1d:c6:f3:db:2f:b0:b7:54:f5:c0:52:0c:eb:7f:
ff:77:03:4a:32:92:37:9b:cc:1c:ba:3c:ff:1a:e1:
93:5d:bb:02:b2:ac:4c:9a:66:b4:c7:20:47:91:58:
ae:f9:cb:80:a0:cb:4f:fc:b6:14:69:a2:03:37:9c:
a2:9e:5c:02:ae:6a:02:d8:55:66:37:92:76:84:9f:
fe:e2:4d:c3:3e:f4:f3:c1:84:f6:93:4a:01:e7:05:
96:bc:e3:14:eb:06:8a:20:7d:bf:7a:24:c6:1f:dc:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:83:6C:A2:19:67:27:2C:26:61:66:D6:F7:D7:B7:31:8A:21:F4:85
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f7:e3:44:da:9f:c9:35:30:9a:2b:3a:ab:a2:e0:71:8f:8c:
23:d4:1f:ff:d2:f6:9e:9a:f1:75:fe:a6:da:6f:f8:20:b2:a4:
fd:4b:55:f5:aa:2c:85:87:fd:11:f8:ba:1d:ea:88:6d:8b:0e:
80:7a:05:1f:eb:2d:fa:cd:fd:d3:d3:c4:4a:7c:31:03:bf:f8:
25:a0:a4:dc:4d:94:b0:43:7b:21:28:39:67:6f:53:ae:75:d1:
84:45:a3:9d:fb:21:6e:bc:4e:6e:76:ad:d3:0b:5a:99:dc:7f:
db:49:f5:65:00:31:ca:8d:ff:8e:de:96:97:ec:e2:e9:bc:e8:
bd:5d:2d:f9:2c:06:f7:26:62:c4:ef:d7:b2:c7:33:4e:b8:26:
19:41:f8:2f:ee:7d:e4:4e:0c:1c:34:fd:66:5f:81:1e:4f:fe:
fd:95:f0:5c:49:16:1a:ec:a2:c9:85:cd:07:8c:7f:e1:98:6f:
1f:5f:f8:c8:8b:d5:97:2f:55:26:bf:79:08:91:ae:c5:3f:d8:
86:78:5d:7f:6c:65:ab:43:34:e5:22:6d:8f:b9:b1:3b:a8:47:
f5:4a:85:9f:6f:23:b1:a2:49:bd:bf:30:44:c5:7b:c4:85:8f:
97:45:b4:73:cc:02:2c:54:2e:8e:42:8c:62:2e:2a:12:5c:d3:
78:ab:04:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEhLr0DYoCCVk6K6fYsSLffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjYxMDA5MTUwMTEzWhcNMjYxMDEwMTUwMTEzWjAzMTEwLwYDVQQD
EyhkZTgzNmNhMjE5NjcyNzJjMjY2MTY2ZDZmN2Q3YjczMThhMjFmNDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjANLb1GdIrdLn5kvQKH744avip4
Yk480d8ai1PIUkBiWJmxfOHXA3CYYEVhEPzItBKCkN+5hnOe7ez5mrAn/5avD6uk
uWJgxote6O4V3/X8LIh83YDhfhOX0NmepmHVwEccKfhWyHFrW+3N/GziQKrZOF30
Z493Cdg5T1KtCKTTPw9O0NijhUvcnC3FbJJL1NRdU009Hcbz2y+wt1T1wFIM63//
dwNKMpI3m8wcujz/GuGTXbsCsqxMmma0xyBHkViu+cuAoMtP/LYUaaIDN5yinlwC
rmoC2FVmN5J2hJ/+4k3DPvTzwYT2k0oB5wWWvOMU6waKIH2/eiTGH9yLawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6DbKIZZycsJmFm1vfXtzGKIfSFMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvfjRNqf
yTUwmis6q6LgcY+MI9Qf/9L2nprxdf6m2m/4ILKk/UtV9aoshYf9Efi6HeqIbYsO
gHoFH+st+s3909PESnwxA7/4JaCk3E2UsEN7ISg5Z29TrnXRhEWjnfshbrxObnat
0wtamdx/20n1ZQAxyo3/jt6Wl+zi6bzovV0t+SwG9yZixO/XssczTrgmGUH4L+59
5E4MHDT9Zl+BHk/+/ZXwXEkWGuyiyYXNB4x/4ZhvH1/4yIvVly9VJr95CJGuxT/Y
hnhdf2xlq0M05SJtj7mxO6hH9UqFn28jsaJJvb8wRMV7xIWPl0W0c8wCLFQujkKM
Yi4qElzTeKsEAw==
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:13:38 2026 by rpki-client