
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json)
Hash identifier: 9um9yChW4CAQvva0Pl+81ChTHIpcGOIWCoElgDcbHF8=
Subject key identifier: 7F:C2:A8:F1:F0:2C:9A:9C:62:07:1C:86:94:C7:6D:6D:F7:AB:A2:F5
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 01A1DF15A01224249DAE19877BAD3DE28D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
Manifest number: 1B0F
Signing time: Sun 15 Nov 2026 12:01:38 +0000
Manifest this update: Sun 15 Nov 2026 12:01:38 +0000
Manifest next update: Mon 16 Nov 2026 12:01:38 +0000
Files and hashes: 1: 1A0OgYXG3iVS7dYyDn-eVIhO8eM.roa (hash: FrUEKKMZAguXIpXWScc68qO/IKUabeFzGLn6njmAiyg=)
2: 8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa (hash: kjvVcc0xOxJUg+x1ocm3gLplTcfZBpQ+nllVK3oSP4I=)
3: BYRF65R_gvTrOamV1sFiMyQQwwo.roa (hash: UcJdHpYQj1TR2O2eeL78WCxx+T3hnx4QNGLSHOCWD40=)
4: Clokdo8iEnkyRg1-72rcFdu0uTM.roa (hash: qI/NxfPHzKCTkxa3q3ZgfCGrWFBeBUVuUQo7H3Os6L4=)
5: IULcSReBl6BR3I_U3liy7HZAnac.roa (hash: 8rcQZaYhRzic9A6LKK6K6/YTQNKz/3wSmuzt2vfN2vM=)
6: X5-PcFCXcBmeXFytRndx1GWZR6M.roa (hash: CusHkyVTE5E1hf9Dcr6iJxa9rL7UUSerxewweRWup5Q=)
7: cpXyEOPsQYnhoiU9YXgEHRotygE.roa (hash: 1cwR9tQfEOIHfGITqs8rBDCiCASn32+xpW4m0FX9NNo=)
8: d7PUDxLVlQHb2Dc0NDQzVZOes0E.roa (hash: bMQ8wqEnr9dnX2pC6dva+/kVC86AP2FCZzjDGc+wVkw=)
9: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: 4Xuso9oYjaj7F4mko7w4t3VY1NiYssaQw4ac6HTYRpo=)
10: nZHqQhlAUfpi-xyQQIlLnT_5zVY.roa (hash: pyPCsxzb7EcyMnd9eFCWZ2gNgE3Dkb4SSpOIKliViJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:a0:12:24:24:9d:ae:19:87:7b:ad:3d:e2:8d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Nov 15 12:01:38 2026 GMT
Not After : Nov 16 12:01:38 2026 GMT
Subject: CN=7fc2a8f1f02c9a9c62071c8694c76d6df7aba2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:5a:0c:d3:24:d6:4b:15:d4:27:84:50:95:
30:ee:a7:d6:44:3c:5f:6d:0f:61:8a:1f:35:d3:63:
9c:4b:f7:78:3f:87:b5:0f:bf:04:69:12:c0:29:8c:
09:2d:ea:d2:9c:21:40:60:10:10:c3:b7:c6:21:21:
72:85:61:de:8c:9f:b6:e8:64:6f:14:b2:43:1f:b4:
d6:79:74:7c:f0:b1:cd:58:b2:33:fe:47:53:a1:dc:
f3:61:51:ea:2c:d3:02:91:50:c1:4f:00:4d:38:df:
09:58:39:52:6a:41:ad:04:40:c7:36:de:ca:bd:4b:
07:7c:35:38:44:52:22:8c:7a:8c:64:b6:56:e3:37:
23:67:07:7f:e4:5b:31:a9:63:45:c1:f3:15:65:9e:
66:b2:29:87:46:f5:87:ec:94:31:a2:cb:d0:27:8f:
0e:6b:5f:4a:90:56:9e:5b:06:12:ce:81:75:76:2f:
b0:5a:06:23:50:38:9c:5e:10:5c:a9:f0:dd:e7:40:
24:a7:e6:c1:86:01:a5:7f:f1:e9:f2:da:23:31:ff:
c9:32:e7:78:74:a3:05:cb:8d:70:d9:df:67:4b:06:
ad:4e:59:5f:fe:81:42:9d:2c:ed:e3:de:46:d5:2a:
ee:d6:e8:5c:47:3e:f7:51:61:8f:c9:78:1e:61:e7:
46:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C2:A8:F1:F0:2C:9A:9C:62:07:1C:86:94:C7:6D:6D:F7:AB:A2:F5
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7a:c6:00:9b:cf:e0:58:dd:4b:1e:ac:ea:fb:4d:66:a1:1e:
f3:e0:41:90:2f:01:2c:20:86:81:56:97:f1:5e:89:a0:ed:e2:
b3:1d:7a:be:f9:4a:d3:7e:dd:da:e0:39:99:54:9a:57:79:72:
bc:54:33:ef:be:94:bb:e6:35:71:ed:e4:8a:9b:06:d6:77:bc:
e7:a2:08:50:43:44:ee:61:e1:5a:a9:9b:84:9f:c5:2c:d8:17:
bc:06:ca:66:b2:e8:f4:a7:af:5f:da:f4:cb:2f:1e:46:ce:bd:
a6:a9:19:fc:e4:7e:44:2f:28:cb:8f:d0:d8:28:62:49:7e:be:
1d:6c:55:2b:fc:de:e0:1b:7b:5e:ea:f9:2d:bc:fc:92:15:88:
59:3c:1d:85:b8:3a:65:15:00:5e:92:33:dd:73:65:c0:53:ae:
36:08:7c:08:8b:82:c4:a0:c6:8c:27:56:06:a5:88:cd:9c:7d:
a4:46:fb:f2:fd:3c:41:45:75:30:9b:2a:40:e7:ee:de:73:96:
2e:08:e0:0f:76:f3:27:50:7c:95:56:e2:83:6c:d2:04:67:d1:
22:b4:8a:31:38:42:e9:61:6f:77:ae:9a:e3:fa:4b:12:fd:7a:
f6:2e:db:9d:f7:69:c8:ec:19:92:67:b9:91:ba:04:95:a0:02:
08:dc:99:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:37:21 2026 by rpki-client