
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: sl4go4/+Qv0n7/m8Tl+HRXU2gxvOKiOlTp+xRxD1Ksk=
Subject key identifier: 89:18:16:16:E1:86:5A:C4:98:12:9A:FA:A6:8A:17:94:83:7F:FF:39
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 01A0BFF9C2795861B6D218DF18877CF3D5EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 145C
Signing time: Sun 20 Sep 2026 18:00:11 +0000
Manifest this update: Sun 20 Sep 2026 18:00:11 +0000
Manifest next update: Mon 21 Sep 2026 18:00:11 +0000
Files and hashes: 1: 1GxQmUTb97UmZv7pfW11O7jdoKQ.roa (hash: FmC4+AN9e0K9c8X4YT0jW6rSPs+y4UOdKxP9qZCnFuc=)
2: 2_M3hjSd7CTsmWcIflPRCb5WQkA.roa (hash: lb+AroYfcHpsLjtLQUflH3VlWHXn0bD5oDoLv70oXjU=)
3: BxKZgBdEOXm741z70o-b-8aaZ1U.roa (hash: 9rDM/H8P5h5tG13SRwkUwohyZWN/9GQOe+B0Xl1+fUU=)
4: GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa (hash: 2tMBvhTBaG9FOblLPHKcO+h2HyVM2AobojKlvW5vzV0=)
5: S_cMNHwGmO53SbTaPSTvEUZSyO4.roa (hash: VJ2mNoR51FwtQFNmuZTNPyshVFI+sQ6fyBXwc1Q4lR4=)
6: ZpqqEj-OtTqHMeec7OuBtT0rl_E.roa (hash: 4anR5lz+iPBfqZgtXZg/nhMp2EG3l7fsaSGpS3G04V8=)
7: aMzR14uquK9xRLMlgVieiQnpsL8.roa (hash: LnMZCy9Vc3AkrK23NCsUcwd16nNnZncQK2bQfZFfX7Y=)
8: dYbDdMuBsyQvL7kdUhtnVt9Qq4Q.roa (hash: Uc1pM7+13084KA3rRz3NbQmC1rtfcHSF9LSKdQS99oU=)
9: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: bcYuBH1qoCmDoSeCIfOuKwrWGw8roqrKQihhqDBMcG8=)
10: dwc98g5fGUgPAWxFG8AQgkdTGUE.roa (hash: r33CVUyGl3+7P6ErqgK1Pc1v2YLarpkrErbsExQx0So=)
11: gbf_kkJkJHVfWvhpOZp44zXkSi4.roa (hash: L7TAKQTj5DgzgInyo2Z2o+5W5kIP6WxJWd/ULoNrui4=)
12: izn0gTPOQgQruf6Plz077lbyDvQ.roa (hash: SL5lQV0cHnhG5e9HsORKQLS+k85jrcJmLKm8DFk0UWk=)
13: ltuqnV7zy2DnQsucRbj8arC5CQM.roa (hash: LNO3fd1HW9TV8pQ7/uQgUjVDHYwtyIfoP4cwyPVsgsw=)
14: mBXHe8xwrq_f8wh9M3ZXaWdq8f8.roa (hash: dI8S3nju8gYg5btIsxEkeYY9kQycBzwf9pyizszOFek=)
15: ocHcLPqIiXs39TMNmLocr_HH0to.roa (hash: 2m7W1dsOxKOHHVh+M6gzZPsYBZCOmqgU0+hBomALNJM=)
16: q--OuP_rfB_qdy_7f_RIgPMsU7I.roa (hash: J5d2AOEi0HNsiyJ+nB39gHaVUpXKMLDnfhR+GSmUgHE=)
17: r2wp15RalYZ-BpL4xsNnngK0594.roa (hash: NNjjTsbzbTB3BJf0ScAIqlbHnQQtN/B+x9X2kssrtLQ=)
18: tiWoclLyoubi_eH2eBTEmg_nRPQ.roa (hash: v7vNaiqbe+aP8/SaLVbx8mliFyA9s414yzNmBa2a+SI=)
19: uuy6ECeKU5zPxhagn8FIr283yKQ.roa (hash: OOKXwwUyMmEuY99QE9mTnSKY0ij2Tkkt4XqvRj4K6hc=)
20: vLafL0GwWDvLzC-WXo-ujU2mMjU.roa (hash: WZJnUmwzRASxvhXsgI51USxfQop8j6bDAzzdqadBvsM=)
21: xfzSJZkuJaEFMZbSPNrdm-vtVgk.roa (hash: 03aH6k3XO2w/avcqYf5rOTHSew6NN0Bs9faZ8hBNn0U=)
22: yrbB1vsBIjdbUaylEPRfMMB-k3g.roa (hash: uUmid3sXY3uL8GFqpHsIlPFVeU82iqmCl12sBdQU42s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:f9:c2:79:58:61:b6:d2:18:df:18:87:7c:f3:d5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Sep 20 18:00:11 2026 GMT
Not After : Sep 21 18:00:11 2026 GMT
Subject: CN=89181616e1865ac498129afaa68a1794837fff39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fb:ea:ba:d5:09:6a:82:87:1b:a3:4a:c8:21:
2c:3c:95:e2:66:7c:e6:b0:17:9a:d5:06:01:79:85:
e1:ae:5e:2d:17:50:d6:b2:17:55:09:eb:e5:47:92:
01:c4:6c:9a:41:2b:d0:35:aa:8e:a0:e8:ad:20:3f:
61:bc:b2:a1:ac:55:c9:ad:90:1a:f0:d8:d3:71:34:
b8:e2:24:7f:62:8e:33:8c:1b:f8:23:6e:69:bd:cf:
ef:44:df:37:3b:97:0c:4c:7a:b7:07:dc:e4:ca:51:
60:1e:9d:d8:4e:97:06:65:65:11:db:e4:cb:d2:0f:
05:cc:59:f0:5a:5c:99:44:91:15:58:bf:54:25:a8:
0e:ec:6e:80:18:1b:0e:ef:b9:8e:5c:0b:54:99:a3:
ff:15:08:98:46:54:1c:ec:70:30:f7:f1:8e:f8:57:
63:10:cc:66:94:91:b4:b5:a7:f4:d7:10:e0:6e:eb:
28:83:8f:6e:62:49:c5:88:29:e6:40:38:a6:33:21:
2c:e5:fa:e1:89:b7:2c:29:bd:5c:a1:9d:73:24:0e:
16:e6:93:0c:3a:fa:60:2a:44:6b:ff:36:1a:95:20:
e4:8f:01:e6:ab:14:bf:e1:e1:07:c9:78:91:98:b6:
c5:74:de:2c:c2:5d:0b:50:f0:c4:58:43:80:d5:0f:
b0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:18:16:16:E1:86:5A:C4:98:12:9A:FA:A6:8A:17:94:83:7F:FF:39
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1a:42:6b:66:00:26:10:56:6d:bb:73:a8:3b:d5:58:72:63:
2f:e2:3d:1a:bd:77:13:70:a5:fc:e6:b0:bb:cc:cc:85:c5:e1:
5d:3c:4f:21:fe:b2:18:3c:fd:78:b8:3a:9f:e8:05:69:64:14:
e4:eb:d3:7f:ed:82:44:80:7f:c8:79:bb:ee:78:3d:4a:ba:9e:
48:74:5c:c0:70:ca:81:b3:21:54:97:be:46:08:37:9c:95:25:
9f:19:b9:32:71:cb:c5:b5:5d:48:c9:00:71:4c:b4:e3:eb:4f:
fa:27:5a:0c:6c:70:f3:73:f3:66:93:ad:46:bf:39:5b:9b:ec:
d6:d0:31:ce:f1:19:32:16:2d:b3:97:9e:63:dd:1e:06:9c:9b:
41:d2:62:d7:ca:a3:63:e5:ae:8a:98:45:04:33:e5:6a:92:6b:
e3:a1:39:87:e8:25:0b:0b:5b:0f:e1:1c:14:61:48:e3:e8:b0:
8b:07:0b:78:de:45:f2:09:8d:8b:94:2c:ad:1f:b9:04:dc:b3:
4e:42:f0:0f:75:59:11:a9:ef:78:88:51:26:96:2b:80:40:2f:
4a:0a:47:73:fc:53:a4:44:25:7b:d3:1b:15:5a:54:82:dc:20:
88:92:a9:e8:3e:d3:6d:e2:c3:38:1e:26:b1:b4:40:75:a4:69:
c8:14:6f:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/+cJ5WGG20hjfGId889XsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky
MGMzZDkwHhcNMjYwOTIwMTgwMDExWhcNMjYwOTIxMTgwMDExWjAzMTEwLwYDVQQD
Eyg4OTE4MTYxNmUxODY1YWM0OTgxMjlhZmFhNjhhMTc5NDgzN2ZmZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPvqutUJaoKHG6NKyCEsPJXiZnzm
sBea1QYBeYXhrl4tF1DWshdVCevlR5IBxGyaQSvQNaqOoOitID9hvLKhrFXJrZAa
8NjTcTS44iR/Yo4zjBv4I25pvc/vRN83O5cMTHq3B9zkylFgHp3YTpcGZWUR2+TL
0g8FzFnwWlyZRJEVWL9UJagO7G6AGBsO77mOXAtUmaP/FQiYRlQc7HAw9/GO+Fdj
EMxmlJG0taf01xDgbusog49uYknFiCnmQDimMyEs5frhibcsKb1coZ1zJA4W5pMM
OvpgKkRr/zYalSDkjwHmqxS/4eEHyXiRmLbFdN4swl0LUPDEWEOA1Q+wSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkYFhbhhlrEmBKa+qaKF5SDf/85MB8GA1UdIwQY
MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt
NGZiNTU5YjNiOWIzLzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz
LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxpCa2YA
JhBWbbtzqDvVWHJjL+I9Gr13E3Cl/Oawu8zMhcXhXTxPIf6yGDz9eLg6n+gFaWQU
5OvTf+2CRIB/yHm77ng9SrqeSHRcwHDKgbMhVJe+Rgg3nJUlnxm5MnHLxbVdSMkA
cUy04+tP+idaDGxw83PzZpOtRr85W5vs1tAxzvEZMhYts5eeY90eBpybQdJi18qj
Y+WuiphFBDPlapJr46E5h+glCwtbD+EcFGFI4+iwiwcLeN5F8gmNi5QsrR+5BNyz
TkLwD3VZEanveIhRJpYrgEAvSgpHc/xTpEQle9MbFVpUgtwgiJKp6D7TbeLDOB4m
sbRAdaRpyBRvEw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 04:03:14 2026 by rpki-client