
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json)
Hash identifier: F3WyF+QTKy0y0OqSFzH3FsNp+pNywBMI71TxlLCxZ7U=
Subject key identifier: F7:D5:CE:14:48:19:E4:DE:B0:A7:19:EE:65:B0:71:79:B1:69:BE:05
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 01A12DA0AD368626606608180F04C75D8B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
Manifest number: 1302
Signing time: Mon 12 Oct 2026 01:01:07 +0000
Manifest this update: Mon 12 Oct 2026 01:01:07 +0000
Manifest next update: Tue 13 Oct 2026 01:01:07 +0000
Files and hashes: 1: 1-aAnZPPZWae4lmSE9DlntwOcXpY.roa (hash: TLz+E6d2U8toIx66GckohN5FWKsxPmC34gYYCDNp0r0=)
2: 4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa (hash: nSZRPOQqe7DVG+VL7Za1u1OIJhF6Aajk+6MyhNvdJuI=)
3: 8mCRXCtonebQyWHGJmlph-emqDk.roa (hash: 4h/4zlSVQ3uClic9xPZW/eCYpC+NvSaS6+RDz79In4U=)
4: LQ3rz3zVoUTed5OAPDBbq1tAQz0.roa (hash: Ar/LKRozDT6A+/9HgHGJRKF1bqwqINiTlNo97b3clYU=)
5: SvWH_F0xbXxOUFZQOL_3i9ck6iw.roa (hash: zNIPgBSX8VCcabNEfftrOoKWD6CfW4gZjvdLbZ3CW10=)
6: TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa (hash: y1ZUup4RV6VYrfrFEeKQot2GjsYXMJViBC6DIcYY0x8=)
7: VvuULWo9vnBO8IgJn77OurAnWAA.roa (hash: ShcVZVH6pnVAy2008Lo5H5VH8tpGQf0z80jAV3QDe0I=)
8: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: ZmTAROmcM6EchhcRLGiOMF2rswar/bCSYMESucOXORo=)
9: _dx2CJojBdg1dQ90hMAD_lCOwHQ.roa (hash: 0ULsxNCLOF7Mmtn3rqBfqWSvtKN6lj6291u6ShH3qyo=)
10: eAYv8vDO2qhIknKZLTDaqDcYe_A.roa (hash: l1XCq+KcyC0Vi5Vj0FihyhILnDir1QdAPneVvVSs4Nc=)
11: h_yiaR3EGim6MLv4wKm89eZLt8A.roa (hash: E2gv1E8KeqioSiQ2UiAhiWEUqE/cYHvimtqkuYdbZCo=)
12: keGrabfGTJ2PEb01MkX--1neS-4.roa (hash: UEjR3a/XAnpTopt/espJ908UvKBCEKVmdYlDVMZv55A=)
13: lFVnv43JGFMjXUtMDg1t8_wpiXE.roa (hash: YLYniFH+If3bpoeshgJ5j5KDhpm+zPn+w+d9vNOzd7M=)
14: oPwG9ExReYsnz5p8vqlzN-e5OB0.roa (hash: a55Jgbq5JGC8OLRc6+/t9QpTipFlzpXiFcszhhlrsgc=)
15: ryuLKef_IroC7PFQdKy3-YDqSJA.roa (hash: RsW64+NIzEg1i7l38AMRGxCtDbntws+JXmRcjIu9krk=)
16: sCs1RNsbbpdtdRshELC1NWwIFUo.roa (hash: j90iLo+GDhNMJvSg6R7KagmOxlr89VNNZUUzZVXbYuI=)
17: tVehCQA-0IdFUBojRkGxC6ziJ8Q.roa (hash: w4l/5QNspHBtCuymre4LSN3BUOt0TxFzN4DS6VDcIh4=)
18: uCQIdQRThP22a-vG2hgUMuJi64o.roa (hash: J4OTf97Q7mJGTx3r4bDe4F/00WPH3RPpof+YFgGU2K8=)
19: uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa (hash: RsHJ5U9eOIuGOA1dGk00xAYGTPYQHBbKZ1jbE2JgsM4=)
20: y1QDMX1RAbu1Kwa57mrptTZjJpE.roa (hash: VJ2cPikLiBRQj2D0yK7yoI27euxpQX3kpa5NIbLsEkE=)
21: zOEbGJULluKjsKP-6SB80Ki-zPM.roa (hash: CbTOwAg9UzNbOO3cwH9W5POV271hMLj4rly3u023LhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:a0:ad:36:86:26:60:66:08:18:0f:04:c7:5d:8b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Oct 12 01:01:07 2026 GMT
Not After : Oct 13 01:01:07 2026 GMT
Subject: CN=f7d5ce144819e4deb0a719ee65b07179b169be05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:23:72:c0:59:24:73:ce:ef:d5:b7:94:06:9d:
9c:97:5d:f4:48:90:b0:85:f2:66:51:fc:5f:62:71:
44:a0:6f:b4:bd:dc:de:cc:20:8b:c4:bf:cb:5f:9e:
92:16:88:5b:d8:b7:f9:19:0e:67:c5:28:73:54:14:
80:e4:54:97:c3:aa:8d:65:b4:48:83:d4:4c:00:6e:
d5:65:14:f9:eb:26:c2:e1:01:a8:56:ef:b5:7d:39:
82:da:07:fb:a8:bb:b9:28:d0:9f:63:2d:84:33:9e:
90:8f:f9:43:ad:8f:f3:83:18:4a:67:d2:7b:34:c4:
94:07:8d:08:00:43:0e:93:6b:2a:37:51:ff:e6:bf:
43:d7:74:97:f8:2e:81:59:9a:8b:bc:f5:69:f6:13:
9a:f6:24:66:3b:b4:99:15:4f:f4:de:5e:db:33:0d:
a0:3b:a1:71:29:1f:b9:fe:84:32:3c:05:a0:e1:26:
5b:e5:18:05:b6:19:31:db:e3:2f:be:b8:52:58:81:
f3:6e:a9:85:b2:85:66:d6:24:b8:df:6b:86:f5:b3:
33:a1:78:70:01:2d:28:3e:7b:d4:a6:3f:bb:ad:95:
2b:d8:7d:4a:d4:42:ca:c1:e9:c2:f9:68:6a:5f:21:
f7:ea:6b:38:11:db:52:f3:cf:98:ee:cb:67:eb:4e:
2c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D5:CE:14:48:19:E4:DE:B0:A7:19:EE:65:B0:71:79:B1:69:BE:05
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:55:91:e1:35:9c:25:a1:71:f4:a2:40:19:0d:96:6e:d8:2d:
8c:08:a7:97:f2:ed:62:40:32:0d:8e:8c:36:53:32:67:70:b4:
e5:59:ab:28:c2:ca:ae:fa:9b:fd:94:16:8b:a8:70:af:22:e8:
89:e5:02:d1:26:38:dd:09:72:e3:ba:7f:d8:e2:fa:9d:e9:62:
3d:37:a1:58:ea:42:f4:ea:39:f4:f1:49:52:69:56:a7:b7:29:
af:bf:e2:6b:e7:d8:b8:c4:93:b9:c3:c6:68:b5:23:4d:ea:ae:
76:1e:97:94:ca:f2:81:68:e8:db:5e:de:76:a7:49:a1:1f:fc:
58:aa:f2:7d:8a:79:9e:9c:e8:b3:78:fa:db:10:c8:7c:d1:20:
32:63:cd:7e:e6:f2:e4:3a:31:b1:c5:6b:2f:c1:a5:ab:46:95:
50:64:56:fd:de:4c:f9:b7:33:6e:7a:3d:ff:7a:3d:79:f3:bf:
3e:9b:8c:16:1f:4a:2a:cb:3e:ca:a6:8d:d8:4b:c1:1c:cc:4b:
88:06:cf:61:36:14:80:cb:26:ed:de:30:8f:35:b7:37:fd:8c:
0e:37:e6:37:f4:b3:ba:5c:7f:37:11:b0:32:40:cb:4b:f1:de:
ff:98:ea:64:6d:78:9a:43:f3:fb:c0:51:4d:c2:26:9f:af:14:
1b:be:73:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:36:37 2026 by rpki-client