
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
File: RbvSGTZCUwoBf08cvlYuIXCz370.mft (raw, json)
Hash identifier: T+DrJAxyUfD1fXXHDbTMiUKeO82dBfHf42hZzcjDZOs=
Subject key identifier: CB:13:31:9A:97:F8:4F:AB:CA:FC:A0:86:F2:03:03:EF:B0:5C:00:B4
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial: 019CAA21C1E5C1B98BD1B49B18C08A04EFA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
Manifest number: 1042
Signing time: Sun 01 Mar 2026 16:01:04 +0000
Manifest this update: Sun 01 Mar 2026 16:01:04 +0000
Manifest next update: Mon 02 Mar 2026 16:01:04 +0000
Files and hashes: 1: 1--457KV1-R-2AyDnu5gwQjLQg_o.roa (hash: 8N9wCT8kfIgyzoJcGZvHmJgv1bgcFxw3DbUmqgeqDIc=)
2: 4aqwAHha90l1eelclAQUVQR1I44.roa (hash: tcKMrTjhcN6vhODlC9CVcmb++R8Mkr/fDJOT6nlWeQ0=)
3: 9hzuEkfOLx6dbtvls8L-DK7YVvk.roa (hash: hKZSYd06joPWfMKvJuesIx8vrhQYzK0wkVb/y/gid8E=)
4: RBeFCjxIM7miAZu7QTFUMKs99XY.roa (hash: 632Ss4tpXpsH0DMtGlQw8IheEnppDKOHlGmiaPoTHgE=)
5: RbvSGTZCUwoBf08cvlYuIXCz370.crl (hash: YSkhL9c8Lcl7rddaECkVxpHr0oYY2TEJLgk4X68+w4A=)
6: VQ1ZwOAbW4MS7xGndSVhitQi4Xs.roa (hash: oJkOn3Ta/qcPYaOJNNPCoBCLyVWoWrgC98ecap5l1lY=)
7: e2mICNZ-ktWR8rRC8DNSqAlzYS0.roa (hash: Felav9tNWd/FcQPP7GRNQiXa/u4OHWKkmJPe4XvqDUM=)
8: gxpF5Ywmi9CVdy65UZl-VezFpFY.roa (hash: u4fV+dkW37+bQyCJf6mzLseCn34MI5XSnX8fv1o7KNw=)
9: jwno-855Ovj1-3M5zUJzR6aIImg.roa (hash: v10OVfxKZFL1KckYWItkzie2JuQkYgbQ7uuTgDSLZ4I=)
10: l6wS_VO91DxNt91DRsp0DvYwmuo.roa (hash: 22h/qy7HYLT12nuxMyq//AhQ3qbzsI+VO3MFY5icjPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:c1:e5:c1:b9:8b:d1:b4:9b:18:c0:8a:04:ef:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Validity
Not Before: Mar 1 16:01:04 2026 GMT
Not After : Mar 2 16:01:04 2026 GMT
Subject: CN=cb13319a97f84fabcafca086f20303efb05c00b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:38:83:52:6e:6e:11:d7:88:d6:9e:69:96:ba:
bd:a7:48:e4:7b:f1:05:fe:5a:49:64:91:e3:c6:fc:
de:f0:e5:93:40:19:29:ca:23:f1:a8:fa:33:e5:28:
15:10:ca:fa:fa:65:e4:02:e8:b6:3c:00:44:4c:3a:
48:5d:da:c3:9b:fb:0c:08:bc:7a:8e:c8:17:ee:b7:
d4:ee:c7:f9:a4:c4:c7:e2:5a:25:82:a8:df:f6:a2:
23:10:97:25:75:b4:7d:ee:2e:d9:e5:b1:5f:f5:a5:
e5:54:e9:1e:63:01:b1:d3:82:8a:d9:a9:93:4e:bd:
ac:7e:a7:08:c8:10:47:6a:ef:1d:82:ad:29:79:82:
3c:8c:7b:80:a7:33:b2:ed:47:49:ec:a5:83:11:15:
6a:63:79:63:2c:73:62:5e:33:4e:e5:4a:fd:45:1f:
ea:6c:29:1c:b3:27:65:a8:f3:7c:59:b7:64:15:37:
9e:f3:8d:9f:8d:45:b9:e9:55:87:95:e8:32:eb:23:
d9:8e:b7:61:48:46:d8:c1:b6:d8:97:14:e3:dc:18:
20:1a:e8:15:6a:47:ec:a5:4b:f4:6d:fb:b2:b8:91:
89:b2:ad:ec:a3:51:ce:53:73:66:81:cc:71:c3:b3:
51:00:9d:8e:e9:84:c6:bd:10:9d:5a:6e:44:3b:25:
ef:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:13:31:9A:97:F8:4F:AB:CA:FC:A0:86:F2:03:03:EF:B0:5C:00:B4
X509v3 Authority Key Identifier:
keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:9d:e4:c5:dd:ad:8f:e4:e3:1f:ec:25:4e:93:9e:ce:a0:39:
da:2a:25:b5:0a:18:28:51:fa:0a:10:5a:31:63:40:1a:ee:2f:
c5:fe:12:73:c3:b9:51:8f:7e:ef:3c:4a:b0:b4:cd:9f:fe:a1:
20:35:5b:bf:95:80:31:2d:5e:d7:db:05:1c:46:5c:d3:d8:59:
d8:35:10:d5:29:9f:4c:c3:8b:8f:6a:9f:18:35:10:62:ca:19:
13:8b:e1:2d:86:c9:ee:33:62:64:72:96:7d:41:33:b7:50:1b:
18:d4:73:52:35:07:76:9c:77:fc:3d:60:1d:68:0c:ee:89:57:
23:57:c2:d1:e8:72:08:73:ca:d1:f9:05:e0:38:18:7a:b8:b3:
56:25:ca:8a:46:a6:04:ce:9f:95:af:bd:e6:1d:76:c4:e5:6d:
92:10:10:61:4e:8a:d2:c8:72:e3:65:15:0c:8b:2f:4b:58:bf:
1e:8b:6c:71:ee:2b:8f:60:bc:8c:b0:bc:43:5f:a8:cf:bc:bd:
94:6e:0a:05:40:f0:ec:64:b6:0c:c7:07:d7:9f:ce:17:43:6f:
99:56:aa:7d:cb:5e:1c:7b:a1:cb:ab:8a:1e:d3:c3:9e:2d:da:
bb:ae:43:dc:e8:dc:19:1c:09:1b:ae:5c:5c:ff:47:43:0d:34:
95:0c:59:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:36 2026 by rpki-client