
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
File: H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json)
Hash identifier: B59DP2HJCgj5RPaxdo8FeCPzVELZivWmu4mjAOkrj/k=
Subject key identifier: 21:C1:FA:24:92:1C:40:FE:59:B5:0A:8F:33:93:52:72:14:72:32:41
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial: 01A1871B80F4AC2CEEDD8A1781C57BC19FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
Manifest number: 1261
Signing time: Thu 29 Oct 2026 10:01:28 +0000
Manifest this update: Thu 29 Oct 2026 10:01:28 +0000
Manifest next update: Fri 30 Oct 2026 10:01:28 +0000
Files and hashes: 1: 1Ml0a3GV05dVKgyQm1AT6O8-qig.roa (hash: vDmeyy3WLO0HE90pdx4TXzv29kbhC6H5/Xm0kajhfQI=)
2: CyqM0bKo_ElRFFbv0AT5aDspxj8.roa (hash: QCCpwbYRSMOO3zc+/f/cjc8LG2FdpSD4/2ESkOJ9QkE=)
3: G2UXryvMWYgvdYG8XaPdE7pZyDM.roa (hash: PdqBjdoKDV3gCJFELA3WohXvGinSd8Rgt/NVk+mMS2g=)
4: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: 1ogKWypRKuxxwmndcMNmOQgZFUdYsV9Ojc2i4g5kxNk=)
5: Ix1gtJqQKv2Z_pk2hTiqDc-sy3M.roa (hash: MobBhVq4hyLxQ20aOszGD0QH9pUdXdw1af7wh+y1S9w=)
6: MQdJhE7DJVvNK-iEKOuroe7Wk6U.roa (hash: IDeLEFXV5ONQ6stNDvzS0ZYYqNXXaca6TX0gy7MtJtY=)
7: bR6c5Iui3A2Me6RPgnPPN-v7qhE.roa (hash: KNyqXXbQP8d6nmiYFJtuYs5Cbp0q38PpWcydNq1Wl3E=)
8: e-JA2-bFy7B8BkYmpPYNJ1dxBKc.roa (hash: bcrv+YrD4m4ddUBKigxs47ttA/eUpotZwmXx4eRmeE4=)
9: rM2i7X4i-xTENkByKDGS_394QYY.roa (hash: jSokmetv8aQ+53gcEJLpoqZU+R8uF/gkAzUpvjkIlBM=)
10: wkDhDr_SsN96X9kXV0Y2UXgMRcs.roa (hash: mQK1vBfWGnexoaLq4CHPrdHK3U44AmVelxJeh/WjBCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:1b:80:f4:ac:2c:ee:dd:8a:17:81:c5:7b:c1:9f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Validity
Not Before: Oct 29 10:01:28 2026 GMT
Not After : Oct 30 10:01:28 2026 GMT
Subject: CN=21c1fa24921c40fe59b50a8f3393527214723241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:f5:65:cb:4d:d0:74:6c:f3:27:a6:52:6a:
55:f1:4f:d3:e6:bd:89:4c:82:ed:40:1c:4c:62:d4:
05:a2:8b:b3:de:e0:24:6b:e7:3a:d0:53:0d:42:d5:
28:7b:bb:76:65:16:8c:ea:5e:b5:23:ac:ee:b6:ef:
1e:85:b4:c2:ae:be:ca:28:85:bd:b3:4b:ed:d2:08:
66:25:49:9d:56:f5:c7:c4:59:3f:dc:f4:09:0f:53:
d5:3e:81:c3:4c:de:a4:4c:95:a8:5a:f6:c4:82:7c:
d6:c4:e5:9e:ef:dc:40:15:66:c1:8c:ba:60:99:5c:
67:e4:21:5c:c4:eb:b3:2e:5d:6c:99:9a:34:44:bf:
09:af:90:68:85:a5:83:6f:59:67:ae:c0:9f:13:45:
a5:4e:8c:a7:02:32:33:60:3b:0d:6d:ce:53:d0:12:
bd:42:29:58:d5:e2:ed:95:59:bf:dd:7b:6e:95:ed:
98:cd:01:d1:86:2f:76:66:08:04:8f:db:c7:a6:f7:
7f:3d:33:29:72:31:da:e1:34:35:c2:21:04:b5:31:
fa:0d:cd:19:0a:0e:91:27:ba:99:bd:05:c9:78:93:
7c:10:fa:2e:56:c1:5c:fd:67:5e:dc:45:25:38:a2:
17:b1:c8:7f:fb:e0:18:77:2c:4d:f3:8f:09:2f:65:
3d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C1:FA:24:92:1C:40:FE:59:B5:0A:8F:33:93:52:72:14:72:32:41
X509v3 Authority Key Identifier:
keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:87:65:4a:ff:db:a1:7b:e8:bd:94:b3:f2:99:5d:6a:7c:dc:
8a:4c:f5:8c:9b:f2:d8:59:fa:dd:a8:cf:e8:12:36:69:39:73:
c8:5d:02:77:97:5a:dc:c2:f6:3a:7f:9f:8e:4a:2a:b5:c8:bd:
18:bd:2a:2b:5c:05:56:7a:1e:02:e3:39:66:f2:42:02:d2:d7:
fb:4b:ff:bd:96:3b:b7:a9:4d:f0:22:3e:09:f8:34:b3:4c:52:
c1:97:85:1e:82:f3:26:e8:7f:48:9d:06:32:cf:97:58:a2:cf:
d7:72:66:0d:5e:af:6e:42:20:bc:48:9e:a2:ac:83:38:1d:60:
08:9e:3f:f9:d9:04:38:b5:88:09:4b:f5:31:d6:bf:49:04:ad:
82:79:e1:c9:3d:e3:e7:ef:29:93:51:db:70:c6:c5:ad:e2:14:
13:5b:99:03:28:42:8a:8f:85:24:b4:e1:24:1d:08:f6:89:e5:
7c:5a:84:67:e8:a9:ff:26:47:3a:37:4d:e0:7d:8e:df:ec:e7:
f3:1a:98:e7:58:3a:36:4e:23:e4:c0:73:9f:10:b6:e0:09:01:
e6:19:de:d5:bf:b0:d8:a8:46:3f:7a:c1:bd:a1:f7:22:f2:f0:
8d:f2:61:27:41:1a:19:29:a7:06:45:e0:42:ad:f1:2a:16:7c:
ab:54:a5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 20:00:52 2026 by rpki-client