
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
File: 9E3jbOZUNyHyemiTo7Orf_-eEiE.mft (raw, json)
Hash identifier: Zclsvkdy3XmuneFbIf+VHdg4/Y8DWx8zhVlPQb9LE1g=
Subject key identifier: FE:89:89:48:D8:EC:ED:40:2C:5F:08:04:C6:9C:44:89:47:31:42:46
Authority key identifier: F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
Certificate issuer: /CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Certificate serial: 01A06CB9A230790715E555E4515E62390D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
Manifest number: B3
Signing time: Fri 04 Sep 2026 14:01:39 +0000
Manifest this update: Fri 04 Sep 2026 14:01:39 +0000
Manifest next update: Sat 05 Sep 2026 14:01:39 +0000
Files and hashes: 1: 1u-gUa9URlrodTmkGb9LRYX3OVU.roa (hash: oC9ByTbYQvO/MlLyyCdsGNzkRESBDij4okyToSMwSRU=)
2: 8d6xXk1vEJlOmHGXhwKrF5m6GFc.roa (hash: hIwaksOJP0zxQbZYSD2p0uscCDCl37ZQQd1k8/2OOCo=)
3: 9E3jbOZUNyHyemiTo7Orf_-eEiE.crl (hash: ErdIrYYQJ1MfCGMe8AV/xfBHWlehgY2YwDC+ggw1wYs=)
4: H_PLuXMHXk9aQMMSv9PL8d9I4p4.roa (hash: lLlcVWkBzyqFZaScNM4rXUJUhmBYgLuz/mF4DSCZsow=)
5: SF34wbOtYdRuApVr6Gux8pIJkSQ.roa (hash: iRP53qSEiGHrITXx04bly+wQA2RkGJTTrL0VEYAoBNk=)
6: bBOHRRkkkTWmeJdZ-1MsrhkPDoY.roa (hash: ORVCT7FJ02Pf6zwRRTxkzn72Y3WbAChmuKaE2k5xVLE=)
7: bya_A4puBY8ZcMoQu4n_j-KniIA.roa (hash: Qnp+qZ0rKbMVjnECifAEcvAP55imofsc5AlVKksg0kc=)
8: cNx7jbTPJ0BRJbQGyp87GkEn9Mo.roa (hash: xhs6LS1Q1Mh7UyOa5htlvASV20ak+TW1Eqf9IPtVEL0=)
9: kQcRJHwrPUjV6MFCrcBkC_Mkn60.roa (hash: wZlAb2i6Q85EuSipXQW0wySIWm8YuhMljUtSh1EvtjE=)
10: xeKZmPgvPMOy0KwEWStwZbewpmQ.roa (hash: FQj3XVymc2AHbwvXpX69Y9LJlgObeqHhy7xHy0+4/mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:b9:a2:30:79:07:15:e5:55:e4:51:5e:62:39:0d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Validity
Not Before: Sep 4 14:01:39 2026 GMT
Not After : Sep 5 14:01:39 2026 GMT
Subject: CN=fe898948d8eced402c5f0804c69c448947314246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:32:a3:45:a1:5e:fd:7f:8d:51:2b:ff:a5:
1b:d6:4a:9a:b9:ce:83:e4:87:24:ae:46:02:44:37:
e4:c0:c6:fd:5c:bc:48:d9:e1:c9:a0:1b:0f:e7:a2:
a2:3f:b5:ca:9d:7a:94:2b:c7:f0:4b:80:71:a9:02:
ae:e2:cc:50:7f:f0:cb:f9:48:86:ac:80:6e:36:6b:
74:da:26:06:9e:8f:6f:60:d4:1f:1f:3d:c4:98:e7:
a3:ec:d9:37:1d:48:52:cb:a5:71:58:ff:d7:af:15:
ce:3d:b8:c9:a3:87:e2:64:bb:4f:fc:2d:7f:8e:0b:
fe:a4:1f:5e:61:92:eb:76:b5:0c:d3:8d:7d:07:e6:
c0:ad:98:38:74:ed:c8:e9:4a:7d:75:1c:17:26:1f:
51:f9:94:04:82:13:55:8e:b9:a7:69:6a:9b:18:9a:
f3:ec:f2:8f:13:f9:d6:f5:ee:d2:48:ea:3f:86:55:
b8:74:43:36:37:8c:40:83:72:50:b7:54:9f:41:ae:
d6:c0:05:84:11:60:05:31:5c:ad:09:a4:31:9a:b6:
9a:46:7b:00:a5:12:7f:08:34:e6:d3:08:82:68:52:
b2:5a:dc:a4:38:c0:7b:fc:9e:53:96:ce:ea:96:05:
27:6b:e4:e9:c4:1c:31:11:5f:38:50:6d:bb:8b:f1:
29:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:89:89:48:D8:EC:ED:40:2C:5F:08:04:C6:9C:44:89:47:31:42:46
X509v3 Authority Key Identifier:
keyid:F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:48:59:35:11:11:26:8b:c3:ff:d3:d0:63:37:8e:1e:22:72:
39:1a:8e:90:c5:c4:7c:77:b3:74:04:3c:6c:f3:f4:0e:43:82:
19:45:bb:24:e3:d5:2f:90:3c:0d:e5:9a:da:ed:a4:af:b2:ce:
29:06:e2:0c:9e:cd:44:6f:43:65:18:db:00:05:a5:f5:cd:97:
98:31:ac:01:f1:33:09:62:77:5e:ed:94:26:c9:95:7d:01:7a:
6d:5f:13:b6:cb:2b:3a:f8:14:6b:26:de:34:84:77:67:7a:22:
e7:51:3e:1a:15:b1:05:18:ad:71:23:81:f9:e2:44:36:1a:43:
07:ce:21:23:a0:f2:51:91:d3:67:04:55:07:a5:7c:2c:d5:9a:
29:b1:0c:ca:16:f0:58:ef:3d:04:68:53:f3:61:d1:df:2b:02:
aa:37:12:18:93:58:4a:ff:ae:68:56:bd:9a:08:c2:81:84:79:
e0:8d:86:96:b6:a2:b5:80:a8:8e:71:a8:1b:c5:c2:db:d7:0a:
72:ee:ea:ab:89:20:26:e5:66:3a:6a:5d:01:bf:a4:a6:fc:60:
08:9f:98:6a:71:de:39:83:92:8b:40:5b:ec:70:1c:97:f0:e3:
27:b4:93:e6:79:46:ec:25:68:c1:d3:6c:59:c7:80:cc:c2:98:
06:f2:1f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:23:09 2026 by rpki-client