
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
File: L6FqsGAgBndApMH7R6kSYi8dByI.mft (raw, json)
Hash identifier: tdk8Lyk6K5vDxFxXmOMZnyqf/xu21eEb4Sont6uqqsA=
Subject key identifier: 3C:70:B6:CA:D6:62:97:70:72:29:10:56:50:F2:EC:37:31:46:49:A8
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01A15F319424C5A88BC019D275CA437D7FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
Manifest number: 1B28
Signing time: Wed 21 Oct 2026 16:00:46 +0000
Manifest this update: Wed 21 Oct 2026 16:00:46 +0000
Manifest next update: Thu 22 Oct 2026 16:00:46 +0000
Files and hashes: 1: 06fSg1kB8ckHlCpjtqtFvEEoGmo.roa (hash: f48NpMpstUXIPO7HPVODVDToQ8B0NiDFbk8U3q4Yolw=)
2: 1zTKaDP4-Zj9mUt7-S5YAcY_mVo.roa (hash: 5+5yfPGg5lDhghBfx+dnbTS3tC9lex/WG7QMbZj26A4=)
3: 3Qr0L0RQ_Z8R5Cc74oenvNgwB5I.roa (hash: pkT85WzVKfS8+6maKuMZ3/z/S227uMf4I4OAK0s81z8=)
4: 71fh7xRTZMQEFeADtvBms8Jxriw.roa (hash: TUhapUQZ7I+Jwf6YXi6D4YZvbKOEtBxwBuVU+O4dqaU=)
5: 7XKrY6sRi0TOpYVIC72L4eR2QMQ.roa (hash: dRjz/HPxAbIEZD8TfYo3oBDmUxS8I/PLZra+7sLx66k=)
6: DEqgDw1OjuvCUcoY_GFoXdYUL-g.roa (hash: uaVIfBigKYn9jPBacBnYHFMS2xbXYfQ5wT7j6FjYz1s=)
7: F8keXq_pkJusVqvderyweZtB2hk.roa (hash: ovV/OvBeut4vp6yHx2cmk6UbzzFtHIGDrJbtwTxbjVE=)
8: IEYsZgA5S8VfmxdDgbohhLTNNns.roa (hash: iEIpm0ezjdj8b3/qEAPdEkQRFU/FlcYxVmHq5++f9/Q=)
9: ITJ_4YK0o5n4s0S4B56m9EJ0ogg.roa (hash: kcpE8+HMiQBohKY0fa+TOjXFBG4SK95c0ErHWF7t+v8=)
10: KH7cexp6-l1q-hMz0XztCASAh_0.roa (hash: n04fnnbHSBbrosj8SpMmI2CoVRjTOGfNu9TSTWPU2ig=)
11: L6FqsGAgBndApMH7R6kSYi8dByI.crl (hash: 9PFjEhTTiacCAxFE3LgPWmMk6MqH3VuSXEn1fOq5RDg=)
12: LY1fBMtbeXqoPs6JAb2Fp7GAya0.roa (hash: Qr2vedHCJgdf38v/J9aAhF6BgY1+sX1GDop+VSlJ8A0=)
13: QV6aNnm8UURvRuqfgI_kdEPt9EA.roa (hash: qGBvHUvU86fHU5nWskcmW6tvE6Bk4I7Gn2L3djwCsps=)
14: V8TjE8GSvc9ONWfF8MfeHY4oWQs.roa (hash: 9uicU4yqb0Tj4JLITI3tteffnbMalR8FCLnIsA3xkvU=)
15: a4eZtsxSoUsQLsQJUSldo0nW-QE.roa (hash: qETNMjbbv6m9d693TJqiz1wFLU2GtcYO5aUb7bDUTdw=)
16: bJtdlvLOuI3jh0oA1qNjEc_zfm8.roa (hash: Tnj06f7lntlh33HAIiByCN+U6C3df5AhbW5/3LmR9bI=)
17: g40iPVEhhkZlqmHJ3xh2amLoibs.roa (hash: pvCD4+RtH1lI+E7q9BwSzx1vYXeOz4FdgT7fvEqT8VE=)
18: hFeItkl0pbB5nCfvB89ws2sKfzE.roa (hash: kvSCEFvXk3oziU8gPMJaY3o3CdcxI9qbdV8zeD0Zlr0=)
19: iFHV-4_PQZAPSbyP-_eKAC5sXQc.roa (hash: YPZedpyXjCCm6shSV1jcGheCVvP+CziI5XLPjJa9XgY=)
20: ikqYwXx4ATF9s6KHl2PLmUXCWlM.roa (hash: B0bQ9MUv2KBsMgq8JKkZLtmuuK5t3EQXBliyDo6a9w8=)
21: inyGcps89W0KJ12qgHdULfVbny0.roa (hash: u8DcCG0CcvnANGvMJRgwaWdMSpZ52dquk6zoYwmbVJ8=)
22: lFBHMnGh4Uq2zrWIYArDZMiTAZ4.roa (hash: 59RbvFMy9HBXnfUPqwhzkRhjnBuLtkItjt3L2lY9NsA=)
23: otaASQB8GGspCrnWLO5XzeVcDtk.roa (hash: oDtuQThG0LQMGhrXFrB1ol0UNfbRDq15W0nys4vTqB4=)
24: r3uWhWQfYQ-7I96xPQgZcGOfgm8.roa (hash: 3XA1JsyB/6+JdqSvjZhGBEJokLbWA2Jq/KVD4Zxhe/g=)
25: vnZI4Od1GtuWmbcfTmasYrA2CVc.roa (hash: hJx0ALHEmU6KnL133ic1OuF6Y0ua/ikvZuJIZHg4VQo=)
26: wnrT0lCYLHW2wtAS-UsPdzbCuE4.roa (hash: BRm89z/l+kKbdn26JzqMifrc7bDhOG/Y4poCpOQIQ3U=)
27: yUTmeS-NkDfKbmdfTdkhxc4774c.roa (hash: agdIY8JzBTM9yK+Bw0ruFZ9HCc1JBNpz+/JAwoXldN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:31:94:24:c5:a8:8b:c0:19:d2:75:ca:43:7d:7f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Oct 21 16:00:46 2026 GMT
Not After : Oct 22 16:00:46 2026 GMT
Subject: CN=3c70b6cad66297707229105650f2ec37314649a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5f:b1:fa:bf:71:c6:77:93:8b:51:7a:b6:94:
e1:3e:b9:5c:a6:1e:fb:7b:1e:f3:d3:b2:ec:a1:b3:
12:20:86:c9:6f:fe:a6:9c:96:f6:ab:69:f9:93:67:
b7:15:00:90:54:2b:61:ca:c0:52:cd:f5:44:c8:52:
77:fb:29:82:e5:e6:7c:48:f6:54:99:83:4e:2e:1f:
31:29:98:d1:75:f9:0c:e3:10:2d:cb:2f:10:9c:91:
43:b6:81:c5:2c:82:f9:de:9e:0a:81:ed:cb:27:d4:
b0:ce:f3:ae:d3:52:21:a2:9d:1f:bb:f6:b2:72:98:
07:7b:de:b3:83:ec:c5:03:26:39:fb:87:74:7c:6c:
20:e0:f9:5e:71:e8:77:90:52:ab:c4:20:59:ce:98:
0f:3c:ca:b4:fa:27:a8:06:00:54:43:d0:19:d4:85:
80:ec:4a:f9:8f:bd:68:21:8f:ba:fb:6d:1b:f0:df:
37:11:c0:16:97:2e:dc:b7:60:17:bf:55:12:69:1f:
47:8e:84:76:05:83:a0:fd:de:dd:31:7a:e1:14:6b:
fc:fa:92:41:c5:66:5c:b4:b5:bd:07:06:1f:0e:d4:
6f:5a:57:99:e9:1c:31:7e:60:08:0e:a9:14:22:bb:
a0:87:52:b0:df:bc:f8:62:1e:62:74:ea:2d:43:45:
eb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:70:B6:CA:D6:62:97:70:72:29:10:56:50:F2:EC:37:31:46:49:A8
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:cb:ef:fb:78:0c:76:4f:53:6b:78:51:8c:49:69:1a:20:82:
cc:f0:fd:1f:b6:08:be:e4:12:ef:72:ff:1f:e5:2e:6f:11:7b:
63:db:c8:09:23:d2:82:f5:b3:c7:07:6c:9c:ae:44:b8:92:34:
e3:39:d9:90:9e:67:40:9d:98:42:37:dd:66:63:bd:d4:24:c0:
34:5e:fa:09:ed:af:37:3a:65:9c:85:76:3a:c5:d7:96:3e:cf:
9f:6c:1d:fb:c9:3f:68:d2:a4:f7:14:5f:25:2c:c8:80:d9:88:
a9:88:14:d0:14:92:e9:79:8c:9a:67:1b:17:cb:81:3d:14:bb:
6a:50:48:00:e6:be:f0:73:e1:fc:0f:5c:36:77:aa:21:7c:a0:
71:50:fe:b7:ed:b6:57:9a:40:09:de:c1:0d:86:03:2e:3f:6b:
25:6f:a2:f3:82:ea:c2:ff:b4:35:17:98:90:d2:04:e7:b3:d9:
12:a6:31:68:1a:22:30:33:a5:b8:10:c5:d8:e5:aa:6b:7f:a9:
90:01:f9:5e:fa:10:87:33:50:5e:ad:d3:12:89:40:e2:9e:ea:
44:25:0f:62:d9:ca:64:fe:1e:e2:23:7f:02:60:25:1f:35:81:
b8:67:b7:d8:79:2f:ec:f5:67:3d:28:3e:88:1a:b1:d8:3c:ae:
b6:c9:01:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:08:09 2026 by rpki-client