
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
File: 52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json)
Hash identifier: gIKn/TcnHgudEzmEHM2UjCzoaqm5cSIHBnnms0tIrz0=
Subject key identifier: 09:55:E0:21:F2:38:04:88:67:8F:D8:7E:1B:E3:2E:FB:74:EC:A4:B1
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01A1A449893155CC15D52D05D160433156C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
Manifest number: 1B2B
Signing time: Wed 04 Nov 2026 02:00:44 +0000
Manifest this update: Wed 04 Nov 2026 02:00:44 +0000
Manifest next update: Thu 05 Nov 2026 02:00:44 +0000
Files and hashes: 1: 0AHImsbMetIR9BMrmd3qpDL6OSc.roa (hash: DTeCz+/e8dz3wJQ9sOWTPFZL93bF/N1lUR+tm2DzoBc=)
2: 2R9OsaPIQ9ouhEROqQfQjLAI808.roa (hash: K9HGA6TBeiJgVTYH+w4hxrgezLcofg8a/HW8iR5Tr/M=)
3: 2UdLvPX3YAq1cbjvbaFDJ94Q47o.roa (hash: CfFJBlNu8bngGenYW74kMkvKFLTo885Zt17Qhidzd/I=)
4: 4NasKMzTYIVVFp-ICFK_D4b8RHc.roa (hash: QS3B9ES6p11t5I186zFeNR/WrVazilsqPckCmSgVmek=)
5: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: smXBkA1cxZwP8p9sRCepU+arKIIPRGSjLMPfA/ku1q4=)
6: BAXXlSV06uuaY8KhG2sNC8heH1s.roa (hash: ajZgoDJ8e9hLXYtp4Hn5DX0X8/kHLIPyvG3eppF2AQs=)
7: E6Wekcit-EQ3TZTNVUcjRu1lw6U.roa (hash: 2zO8BVKL4MFsWKURY5zzeGF0sEV2VJqOByilAEcD1Z0=)
8: SqJOIStSbkS_sk9tOgXlq4DG9kU.roa (hash: ewVntvl+465lh5V5DV4NxkandQKCa7/BAmKlR+Vmpqw=)
9: YGUZmB5y9Pszxg9mTfxKcyU3wP0.roa (hash: 6EGPa2utleZno/C5hAqexr1JPSm93VrZZ+jL9Q+c4xU=)
10: aHOZHoVN5QFnBBDS6rpLN3diXhQ.roa (hash: ogzaNg6aZ7diJ0sN2cYk/78mRgYs+1QRi/kMrxIJaB8=)
11: j1Upirs2MNzHMgU0rSOBfcV3T5w.roa (hash: c56K883yJST4y/mdsdrULKCfe6KxnqP3AYA6irUfMKc=)
12: lC16rIMMnqHHfbg9MNxvqn7mqxk.roa (hash: Mdn1l4dZ+NSM4dG4u4z56RyJO1WeprirQF3/FTo90cM=)
13: rOn4sIWHt6rCUNuLxoNvj-X5Ebc.roa (hash: YE/iZ6y3DFs2Aj9gfYd2A/ANh76BH41kT6FkdNGSzDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a4:49:89:31:55:cc:15:d5:2d:05:d1:60:43:31:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Nov 4 02:00:44 2026 GMT
Not After : Nov 5 02:00:44 2026 GMT
Subject: CN=0955e021f2380488678fd87e1be32efb74eca4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:11:2f:3f:84:bf:69:fe:9d:d2:25:9e:5f:dc:
a2:b7:0c:1f:c3:5b:48:eb:05:7b:8c:0c:b5:4f:9c:
c7:f1:e6:b2:ff:0a:3b:91:1d:f2:80:6e:6e:db:0c:
f5:97:6e:27:1f:fa:50:fa:86:27:f6:ea:00:bc:c7:
7e:84:6d:d8:5b:16:5b:01:ed:a3:75:66:c1:ff:5f:
87:5d:ad:6e:7c:5a:16:45:e7:4b:f9:d3:b5:17:b6:
d9:ff:ef:d0:e1:ba:4f:4e:2e:d3:22:79:81:c3:5b:
9e:83:92:33:14:6f:97:11:17:c5:fd:54:16:5f:b2:
f2:a4:dc:55:79:92:db:6b:ea:a6:8d:e2:0d:5b:78:
ac:a1:b6:f5:6e:8f:85:77:b2:2c:33:f3:a9:09:3b:
4f:a7:d4:6c:0a:01:1e:e5:80:36:8e:0e:db:6e:a8:
28:42:d0:f1:7c:62:2e:be:5d:1f:e1:38:3f:7c:fe:
4d:03:82:7e:a6:1e:b2:99:23:12:c5:35:1a:ce:c6:
d1:3f:2e:1f:db:94:6c:71:a9:bb:03:c8:a1:6e:10:
fd:0f:38:c0:83:b5:58:14:b4:05:44:9e:bb:d1:eb:
50:4f:0f:0d:fe:19:45:8e:09:88:db:30:06:f1:b1:
57:75:a2:00:11:e8:29:f2:68:65:c1:98:d4:73:27:
43:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:55:E0:21:F2:38:04:88:67:8F:D8:7E:1B:E3:2E:FB:74:EC:A4:B1
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:89:1b:21:41:da:e6:10:6c:7d:05:da:f7:ea:4f:4a:f6:03:
2a:ca:ca:b4:64:37:14:6e:08:b6:da:0f:0b:6b:c6:82:44:22:
8d:12:01:a9:85:39:32:0d:b7:9f:c3:51:5d:c5:ab:fd:ca:6f:
1a:4e:86:e1:b3:f5:08:65:09:f0:ae:8c:56:ad:a7:7f:0e:f2:
87:b1:98:66:85:74:a1:cb:52:0f:a2:62:0a:15:45:b6:5b:84:
3e:ac:6e:7f:94:89:2a:7b:ba:34:70:d0:09:8f:19:e1:08:c1:
e9:88:ad:ae:ca:93:0c:2e:b1:63:2e:bf:e0:3b:ce:12:62:e8:
af:85:d9:6a:ba:61:ba:c1:58:31:c3:aa:18:47:11:7e:ee:06:
87:a5:44:9f:ab:87:f0:49:e0:fe:e9:6e:ae:c1:a9:23:cf:ec:
3e:55:a3:62:52:38:ff:fd:25:c9:e5:b3:88:6b:cf:a4:73:4a:
66:16:a6:14:49:c8:92:65:03:51:d0:51:6d:38:3f:c0:41:bf:
89:ee:2c:0f:6a:5d:c6:80:13:c4:77:50:b3:63:8e:bc:e5:98:
7b:af:54:32:6d:21:3e:7d:bb:45:21:f3:00:6e:38:24:95:7c:
14:8f:d9:7c:d7:bf:36:4f:12:c4:37:be:55:69:2d:a9:a4:68:
02:88:d8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 07:49:33 2026 by rpki-client