
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json)
Hash identifier: 2ru117N4BM13mB4T2CC4aAyxXSlPXRGvVCvjh2ZZR4k=
Subject key identifier: 6E:A3:31:9B:AC:0E:8F:FF:F7:54:E2:56:79:0D:0E:73:30:DE:D8:B6
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 01A06D5E2825E4D020F32E919A075A9724B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
Manifest number: 1A48
Signing time: Fri 04 Sep 2026 17:01:22 +0000
Manifest this update: Fri 04 Sep 2026 17:01:22 +0000
Manifest next update: Sat 05 Sep 2026 17:01:22 +0000
Files and hashes: 1: 5lFyIZmBLBFDx76RfuZHevsHQQY.roa (hash: PI10EPnFAgNZeRBfLyN6vfxKBB4r+mmccm1SKvgO9H0=)
2: 7238-yc1zsJP5-yGaMOBc9f0LR4.roa (hash: URHGrmmmyevt5Yc3E+g4gLi9Y6wbhMdw/A5AP3gBz1Q=)
3: 8JXNaaQmDQHdM4yP_RNeiswPEDI.roa (hash: UUO1y8o89Fboq48v1C/MZYuzKEwlodMmFc6P3ytbtj4=)
4: F1XFKolR75CvzOCyFlTtMYXp3UA.roa (hash: 1NsFIv/Vqxyf17zBRZ7ykgjIIYfbwgtJjmnNI1bztF0=)
5: Ho8BmWtRsGIfoh9TadeITydo350.roa (hash: jhic1+8GxEt2CK46n93QnO3HxEVdv0LVkgGPn/QSDf0=)
6: NDEJ4OPh2jQQg5h1HdKinOuNm1g.roa (hash: 6YV/mvu0IZaB1NRM8e6QdrWu4qWaOce8H7G5lo4LpOc=)
7: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: +ULSnAEhUAGyRVKe7/XdUNxM5GH0gEzvZFD9kypUe0o=)
8: Tj4Mcwc_96ZTjJYw-9rKbpG4AXA.roa (hash: 6X5APSqbz1P2mkb03h8c2CZF8YBdY33egLhUsQ1Fh0E=)
9: VlCsH-gKeuLV89RCvfubppUzoBM.roa (hash: E6tZ0jd2kOODThTzIfCZg56DVUHPrBwKWicp2pqqUq8=)
10: WLquCazhAB0ScMP5a1mkOMpQjSk.roa (hash: X6EOl+E5HOgYEVAmBJUO3eMgT+pMlGAkOYSNqnB4rac=)
11: _Sp9nWnMGENvs_5RlKIg522yEo0.roa (hash: 5BiB2YKH8y+FxStt90RRFoc5lwCZkm5vmcOChmEykmI=)
12: uGLn1rNehfP8gUHfuPWItHTs-Q4.roa (hash: rbb+/QdbyMdZWalyD4M+Cib5fxLsrq9/EvfwTaumIsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5e:28:25:e4:d0:20:f3:2e:91:9a:07:5a:97:24:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Sep 4 17:01:22 2026 GMT
Not After : Sep 5 17:01:22 2026 GMT
Subject: CN=6ea3319bac0e8ffff754e256790d0e7330ded8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:fb:77:10:8f:92:78:f3:31:aa:77:aa:42:
21:40:83:52:06:f8:43:8c:ac:cf:9c:1f:f0:9f:5e:
55:71:7a:16:be:4a:f2:44:04:f7:29:cc:9b:e4:b2:
b1:c1:a1:f1:59:5b:a3:71:20:2c:97:8f:81:01:9f:
e3:f9:66:1c:ae:0d:ff:2c:69:aa:fb:e0:c0:d3:59:
42:ea:ed:73:2c:6d:cd:c1:32:aa:2c:f5:dc:f6:5e:
98:0e:ab:4c:49:9e:d3:fd:5f:64:22:e0:b7:5f:a3:
92:57:d7:6c:ac:b8:30:62:e8:62:27:7b:aa:04:51:
da:48:c5:e6:e5:8e:f9:ea:6f:bd:f7:ba:58:82:d8:
6d:2d:80:54:4d:03:6e:bb:e3:ea:a5:d6:ed:3b:86:
d6:0c:25:16:7b:0b:21:8d:13:4a:ba:65:9e:0c:ea:
55:de:64:bb:e3:3a:f8:d4:c1:a8:65:14:4c:f5:45:
e9:08:73:2d:da:bd:4f:fd:8c:08:7a:17:11:c4:55:
02:c3:61:a2:73:db:51:94:3a:99:f4:b0:bd:72:7e:
ae:c2:1b:c6:1c:14:a1:76:20:e9:83:bb:47:20:48:
f8:1d:39:66:5e:52:98:46:f7:31:55:a2:98:5f:dd:
3e:01:62:39:ff:3a:78:27:89:0d:1f:f5:c4:fd:9d:
c5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A3:31:9B:AC:0E:8F:FF:F7:54:E2:56:79:0D:0E:73:30:DE:D8:B6
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:db:bc:0d:3a:b0:45:8f:e8:9a:88:78:53:f5:6c:b6:93:e0:
95:1b:bf:49:63:3a:7e:51:fe:db:e8:3c:62:c7:89:d2:8a:47:
5b:86:2d:61:a7:52:5f:47:7d:8c:c8:5c:2d:2c:4b:d8:ad:3c:
e8:42:e8:f1:00:88:8c:2e:3d:5f:ce:80:7b:eb:93:35:99:b9:
c7:59:79:4c:ad:35:5e:54:40:9b:bd:d4:a6:3d:cc:ee:0e:84:
b4:2b:70:b5:a9:91:78:f4:51:f4:d6:b3:23:b2:79:df:7a:31:
b8:1e:1d:8e:ea:9b:ef:bd:79:f1:f5:e6:4e:df:35:a1:fa:00:
2a:63:a2:12:0e:52:79:9f:3e:23:2c:61:26:7f:d0:3a:65:5a:
8e:d8:d5:1a:ee:b7:67:ff:12:7f:00:52:21:74:4e:3f:38:a8:
bc:ce:08:20:e0:ed:ca:4f:97:b1:ce:04:df:cc:97:c4:df:a5:
0d:04:40:c5:17:26:53:8f:9d:ad:a6:37:70:6a:b5:5a:3d:d8:
fc:72:99:44:6d:71:62:e5:3f:f0:be:1a:ae:b1:b8:80:b3:00:
25:0c:14:7c:f5:95:2f:f2:b8:2b:18:84:4d:33:98:13:2c:81:
83:7d:82:77:3e:2a:e7:b2:26:2f:39:c8:81:f4:4d:a0:b8:17:
bd:0f:7e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:37:35 2026 by rpki-client