
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
File: 52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json)
Hash identifier: zDKiCsrHVBzfmaPT0D81GNmNF2YtE3vmg8irUIamnDM=
Subject key identifier: 99:9F:EF:5B:4A:7E:3D:0C:C3:54:83:4B:C5:D3:50:07:02:54:9A:01
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01A0B49AAFD7AE38A905F3224DDCC9374DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
Manifest number: 1AAD
Signing time: Fri 18 Sep 2026 13:00:31 +0000
Manifest this update: Fri 18 Sep 2026 13:00:31 +0000
Manifest next update: Sat 19 Sep 2026 13:00:31 +0000
Files and hashes: 1: 0AHImsbMetIR9BMrmd3qpDL6OSc.roa (hash: DTeCz+/e8dz3wJQ9sOWTPFZL93bF/N1lUR+tm2DzoBc=)
2: 2UdLvPX3YAq1cbjvbaFDJ94Q47o.roa (hash: CfFJBlNu8bngGenYW74kMkvKFLTo885Zt17Qhidzd/I=)
3: 4NasKMzTYIVVFp-ICFK_D4b8RHc.roa (hash: QS3B9ES6p11t5I186zFeNR/WrVazilsqPckCmSgVmek=)
4: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: px3CbD+yk3bvqsY0J62Ee6u++h/qVYU8mPQ2/JSJjOw=)
5: 53LrOjzoo4E_JjsRePn1B73fFtc.roa (hash: NrghBBUU3a/THjQg3AhmUAWYpxF5cPsuE6iPec4zb/o=)
6: BAXXlSV06uuaY8KhG2sNC8heH1s.roa (hash: ajZgoDJ8e9hLXYtp4Hn5DX0X8/kHLIPyvG3eppF2AQs=)
7: E6Wekcit-EQ3TZTNVUcjRu1lw6U.roa (hash: 2zO8BVKL4MFsWKURY5zzeGF0sEV2VJqOByilAEcD1Z0=)
8: SqJOIStSbkS_sk9tOgXlq4DG9kU.roa (hash: ewVntvl+465lh5V5DV4NxkandQKCa7/BAmKlR+Vmpqw=)
9: YGUZmB5y9Pszxg9mTfxKcyU3wP0.roa (hash: 6EGPa2utleZno/C5hAqexr1JPSm93VrZZ+jL9Q+c4xU=)
10: aHOZHoVN5QFnBBDS6rpLN3diXhQ.roa (hash: ogzaNg6aZ7diJ0sN2cYk/78mRgYs+1QRi/kMrxIJaB8=)
11: lC16rIMMnqHHfbg9MNxvqn7mqxk.roa (hash: Mdn1l4dZ+NSM4dG4u4z56RyJO1WeprirQF3/FTo90cM=)
12: rOn4sIWHt6rCUNuLxoNvj-X5Ebc.roa (hash: YE/iZ6y3DFs2Aj9gfYd2A/ANh76BH41kT6FkdNGSzDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:9a:af:d7:ae:38:a9:05:f3:22:4d:dc:c9:37:4d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Sep 18 13:00:31 2026 GMT
Not After : Sep 19 13:00:31 2026 GMT
Subject: CN=999fef5b4a7e3d0cc354834bc5d3500702549a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e9:6b:45:0f:ad:8a:c9:fd:c7:3b:af:cb:4e:
64:58:5f:c8:45:93:e9:a1:3f:03:99:09:66:7a:3f:
eb:82:6f:7a:33:86:33:cd:46:35:2d:2a:53:54:07:
2e:fd:11:cf:d2:cf:9d:81:9a:50:68:f2:0d:1c:6c:
81:7a:25:79:a5:11:95:32:4f:b9:8b:89:8b:35:63:
6e:bf:2f:50:d0:6d:48:c7:d4:b7:bf:60:c8:e0:fb:
e6:2a:0a:90:91:53:1d:f4:0f:de:f2:5c:6f:c6:2c:
ae:37:9c:bc:98:42:a0:02:25:a6:e3:90:dc:b0:32:
7f:d8:1f:e5:f4:cf:b1:07:59:d1:de:31:51:71:c2:
a7:fe:cf:13:45:ae:5e:30:42:5f:9c:2d:de:52:9e:
08:71:a5:90:45:a9:59:72:bf:d0:d5:dd:69:5f:6c:
42:e9:83:2d:0f:56:53:b8:32:95:7e:dd:ea:d3:97:
74:ba:a1:e7:bc:fe:e9:81:ef:48:0e:06:36:57:c4:
d0:cd:81:e9:98:e1:8e:87:90:d1:52:f9:c0:a9:38:
94:8b:7c:ee:4d:ad:af:6e:19:f2:34:8d:e2:4f:55:
bc:e0:09:61:ea:9e:ff:c6:3d:af:4b:ae:76:13:95:
b4:4d:06:d1:8a:cc:fe:5d:55:e3:2f:6e:d7:dc:d8:
2f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9F:EF:5B:4A:7E:3D:0C:C3:54:83:4B:C5:D3:50:07:02:54:9A:01
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:45:2c:49:dc:7c:f3:a1:4d:35:99:fb:20:e9:46:1e:a9:2c:
dd:33:5b:d2:18:26:48:a5:65:b1:a6:21:fa:08:c0:12:94:ec:
5d:7a:31:74:9c:83:7c:78:5c:af:14:b4:38:8c:27:a9:0b:fe:
d3:f7:22:07:40:30:24:ff:dd:49:f3:d0:0d:ec:47:26:f3:d5:
a4:47:bf:f6:36:33:ff:79:d3:f5:ee:eb:d4:82:74:be:bc:37:
80:aa:93:03:5b:1a:7a:45:27:8b:46:10:77:58:83:1f:b4:b0:
4e:55:20:8b:91:d4:d7:0c:20:d0:b2:c9:87:8c:38:7d:ef:9a:
46:a5:e4:f6:8d:96:9f:56:18:85:da:6e:a5:32:86:c0:39:23:
d5:1b:36:80:91:5e:c3:6c:22:2f:1d:75:b3:80:af:00:95:ed:
c9:a2:dd:3b:ae:64:41:e4:88:dd:9c:c9:e0:d4:40:17:8a:f8:
12:c9:68:a7:36:82:58:ce:14:3a:19:28:4b:d9:22:2a:41:0d:
b0:ae:80:45:63:d6:4b:64:2e:69:17:2b:0a:d5:5b:d9:4f:84:
c8:29:98:85:7b:45:08:84:ca:4e:7d:e1:65:e6:04:42:3a:d1:
30:9f:e4:c0:bf:6b:0d:a9:2b:9e:b8:3b:8f:90:70:87:d6:3e:
4b:08:27:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 17:07:02 2026 by rpki-client