
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
File: H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft (raw, json)
Hash identifier: M1fSHMZdkyLHhEf1ioh0CZ503hC7ijb55QRHzqieSek=
Subject key identifier: A6:4D:81:8F:77:AB:1B:6D:5F:C1:C9:FF:57:18:EF:BF:D1:A3:1B:AE
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Certificate issuer: /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial: 01A1021205528BC901210DDDD20153792947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
Manifest number: 1A9D
Signing time: Sat 03 Oct 2026 14:01:37 +0000
Manifest this update: Sat 03 Oct 2026 14:01:37 +0000
Manifest next update: Sun 04 Oct 2026 14:01:37 +0000
Files and hashes: 1: 1LwTV0768J6dRk8qC5hDLpAsU28.roa (hash: Tt7Jvp1n+IhGVJo847shEW7XeQAdzKOGRJPvl8SARHA=)
2: Bw0gbrbCVB-HoVgeJ9I8CiP3YmM.asa (hash: s5JA+uKeZsK2+gHJiM4h36vliqAxJYuG7Au1gknPnH0=)
3: GzoYbPuA6zt92uMBOAiHk0i8fMs.roa (hash: BhU8n2AYRLl+UcY3HBoFElDvFC16XHDPo9Q/sW3CcM0=)
4: H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl (hash: WFyxEAV/DcN4l982MVqjw8aKQlG13L/yY3o+j0D8T88=)
5: PPH0urtDpS_MEda472ZwCkPCXio.asa (hash: SxpZ02tCEqwvi7zZj6qIuvomh6wN/+YCs9ddviXBtmc=)
6: WlWWJjt9Bx1oCkJxTpZbHaU11Q8.roa (hash: 7iCn7aA9/98SqHuf3K5vlRI49Df9JrqkSps0IfUPR0c=)
7: XZjEEVTSvf1uFBOdMMSBuxOceJQ.asa (hash: V9xhtdGjembvaLEHZRxR9b/kPtaNNliazSgOsSJ//6k=)
8: mGCci6Pw4ws1s2CSrvlwPoNX68w.roa (hash: oF16LqvH0BJX/k1mLJ1/7VpPewRXGKd0nGQ5TY/auD0=)
9: nrMCeYu3mMuo_fDA-GvTCBFPlWA.roa (hash: eBvmstTRO+Qzu9U4Nj16cxuQx8JdP3s1HFl/0VPOS5I=)
10: obRejES73sQ5wKFJZqdpH-4y-rc.asa (hash: bS84HPNJTey4N7MFx/LFScYHC6eK2K0n9randn1r5fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 14:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:12:05:52:8b:c9:01:21:0d:dd:d2:01:53:79:29:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Validity
Not Before: Oct 3 14:01:37 2026 GMT
Not After : Oct 4 14:01:37 2026 GMT
Subject: CN=a64d818f77ab1b6d5fc1c9ff5718efbfd1a31bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3a:21:13:aa:47:4c:6a:5f:f8:c8:c1:2f:86:
35:10:41:c4:bb:8d:18:11:d5:b9:a0:38:9b:6c:0a:
87:90:90:3c:05:24:51:37:7e:75:c7:02:66:22:77:
f0:2c:b3:27:ee:7a:d7:f5:64:14:3a:20:c6:ad:fa:
57:4e:f9:d9:5c:ad:83:27:0d:06:f0:e5:d6:eb:b9:
69:f4:c5:a5:7b:83:b3:e9:89:4a:09:97:36:03:ce:
bd:fe:f9:57:f3:b7:06:72:91:a5:88:46:05:40:a4:
75:3f:27:f3:83:78:72:6d:1d:d7:2a:9a:d7:d6:c0:
94:0f:83:f0:97:ac:6b:6c:ab:2f:5f:b0:87:32:48:
53:38:81:c1:b1:52:9d:9c:00:c2:f7:44:1b:f0:2e:
ec:ae:c7:cf:ca:1c:fe:a1:84:66:68:11:7a:18:01:
14:03:12:2f:ab:fe:a7:a1:75:0d:4b:47:fe:fc:f7:
b8:87:33:c3:75:ca:63:ea:3e:82:ef:d7:38:a3:f3:
88:92:83:dd:8d:7d:b3:e7:ce:ae:59:32:fe:bf:66:
1a:47:17:93:f2:89:cc:eb:98:60:dd:16:af:42:9f:
62:20:53:94:4a:30:41:87:93:26:15:d9:ca:59:45:
8a:bd:a2:c2:07:6c:93:07:0a:27:a5:14:5b:56:cd:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4D:81:8F:77:AB:1B:6D:5F:C1:C9:FF:57:18:EF:BF:D1:A3:1B:AE
X509v3 Authority Key Identifier:
keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f6:5e:b4:f0:65:5c:1f:90:ba:ce:12:93:59:80:f4:fd:8e:
8d:5a:34:94:d9:88:6d:6a:24:78:d8:6b:e0:d6:d0:25:42:88:
e4:a9:fb:b5:bd:b7:da:3b:d0:f3:0c:4f:ea:cf:50:76:b0:77:
32:46:33:e5:d8:7d:d4:ea:a5:63:ce:ed:2d:a8:3b:48:76:83:
25:1a:9d:af:db:a1:b9:e5:45:dd:c0:a3:cd:d8:1d:12:90:5e:
d6:26:23:74:1d:c1:08:09:30:0f:d4:5a:84:49:41:69:73:89:
35:1f:00:7e:7c:8b:29:25:ad:b3:0f:9b:aa:c1:78:87:6c:d5:
28:a4:af:75:da:c9:f0:5f:2c:80:77:6a:01:d0:27:44:58:9e:
63:83:f6:d3:1b:1a:27:10:dc:f2:49:20:3d:6d:1d:01:21:3d:
f2:e4:0e:3e:6f:68:a7:6c:45:eb:80:0d:7f:fa:d7:77:f2:9b:
ab:8d:6c:07:2a:5d:8a:81:8f:c4:89:87:ff:5e:15:34:e6:88:
f1:16:9d:b1:ab:88:56:a7:08:2a:30:ed:18:ae:a3:c2:e6:83:
89:6d:b6:23:d1:95:95:a6:01:87:f5:af:25:3d:fc:a6:25:f4:
70:d6:42:7b:b3:45:65:56:9f:ee:75:df:d2:dd:f8:28:d8:34:
50:68:e4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:11:55 2026 by rpki-client