
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
File: RbvSGTZCUwoBf08cvlYuIXCz370.mft (raw, json)
Hash identifier: Y0uVUfvaVy5ljaDROJMtE+3sTHOibHIyGV4Mz3DfLwo=
Subject key identifier: 86:97:83:D3:62:CF:AB:FD:F1:2C:7A:27:1C:BE:DF:BC:E1:15:EA:87
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial: 01A1BD6405B63FE83111D147EDCF68ADC16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
Manifest number: 12E4
Signing time: Sun 08 Nov 2026 23:00:11 +0000
Manifest this update: Sun 08 Nov 2026 23:00:11 +0000
Manifest next update: Mon 09 Nov 2026 23:00:11 +0000
Files and hashes: 1: 1--457KV1-R-2AyDnu5gwQjLQg_o.roa (hash: 8N9wCT8kfIgyzoJcGZvHmJgv1bgcFxw3DbUmqgeqDIc=)
2: 4aqwAHha90l1eelclAQUVQR1I44.roa (hash: tcKMrTjhcN6vhODlC9CVcmb++R8Mkr/fDJOT6nlWeQ0=)
3: 9hzuEkfOLx6dbtvls8L-DK7YVvk.roa (hash: hKZSYd06joPWfMKvJuesIx8vrhQYzK0wkVb/y/gid8E=)
4: RBeFCjxIM7miAZu7QTFUMKs99XY.roa (hash: 632Ss4tpXpsH0DMtGlQw8IheEnppDKOHlGmiaPoTHgE=)
5: RbvSGTZCUwoBf08cvlYuIXCz370.crl (hash: JCm4CVvUVui+NayVFPDwHuBZ7QLUXv50kZE6E4jtfkE=)
6: e2mICNZ-ktWR8rRC8DNSqAlzYS0.roa (hash: Felav9tNWd/FcQPP7GRNQiXa/u4OHWKkmJPe4XvqDUM=)
7: eSTze8MlBFRraV4dsl31h2iw1VI.roa (hash: lDAECqzqHU746njNX6dpVZo+oFs2oTdwqB1k/OKzU9E=)
8: gxpF5Ywmi9CVdy65UZl-VezFpFY.roa (hash: u4fV+dkW37+bQyCJf6mzLseCn34MI5XSnX8fv1o7KNw=)
9: hLiW33dYFtk93njm1Q1HKa7zbas.roa (hash: tK/30Ejl4gGabl5/3tryRax+Y14BBBbKwIaeKOFx3Oo=)
10: l6wS_VO91DxNt91DRsp0DvYwmuo.roa (hash: 22h/qy7HYLT12nuxMyq//AhQ3qbzsI+VO3MFY5icjPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 17:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bd:64:05:b6:3f:e8:31:11:d1:47:ed:cf:68:ad:c1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Validity
Not Before: Nov 8 23:00:11 2026 GMT
Not After : Nov 9 23:00:11 2026 GMT
Subject: CN=869783d362cfabfdf12c7a271cbedfbce115ea87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:14:41:21:64:e0:96:ef:97:8b:f7:7e:2f:
f4:2b:75:9e:94:2b:28:78:20:ec:6d:62:01:9b:40:
46:a7:67:36:19:45:ab:0f:5f:03:64:ea:2b:c7:bd:
b7:b1:5f:e9:b1:8d:ce:d4:94:48:bf:a2:43:c2:87:
aa:ae:dc:26:88:8c:bb:e6:bc:7f:ed:d9:b9:c8:7c:
48:0c:00:5c:87:65:4c:f8:35:24:a1:63:11:b1:43:
bd:bf:d2:f1:f2:70:46:41:ac:9b:43:cc:7e:d4:34:
e0:fd:ff:57:e4:76:70:3e:fb:a3:80:08:4c:8b:7a:
df:7b:99:8a:29:f8:07:c9:9c:32:1f:88:f7:24:1f:
91:57:ad:41:6d:cd:6a:99:17:07:3b:28:1f:64:87:
4a:87:f1:0b:97:2e:5b:ce:0e:6a:16:0c:41:10:b2:
d5:d0:52:d1:b2:98:24:57:3e:9d:62:ad:87:82:93:
d7:7e:a7:90:49:df:8d:66:ce:b0:58:b8:28:2c:db:
82:62:01:a9:9c:98:7f:01:06:fb:7a:ef:ae:3d:2f:
19:b4:d4:3e:d6:b0:93:c8:60:38:ff:72:09:e8:32:
50:5e:85:38:25:3c:d3:be:bf:99:dd:01:3e:dd:8e:
e7:f5:7d:ba:91:14:f9:a9:97:39:72:7a:1d:ae:a5:
9b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:97:83:D3:62:CF:AB:FD:F1:2C:7A:27:1C:BE:DF:BC:E1:15:EA:87
X509v3 Authority Key Identifier:
keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:80:55:87:a5:96:61:a0:2b:fb:c0:db:00:32:67:a1:6c:78:
0a:ce:1d:19:20:eb:b5:d0:dc:37:0e:63:4d:d3:16:f7:9a:19:
8d:e4:20:39:5d:08:ae:4a:bb:83:8f:2f:af:d2:d8:47:13:d9:
88:30:ba:2b:55:c5:cb:2f:52:2b:c5:f5:e6:01:23:8b:4c:97:
7e:0c:98:48:50:6d:7b:28:f1:89:bb:02:7e:0d:59:c3:f9:21:
1e:1c:c2:a8:3a:8c:34:5c:62:f9:90:a8:af:94:9c:86:ff:62:
ae:62:18:d2:08:5e:a6:01:4b:23:6f:b2:29:28:c3:2b:1d:78:
0a:5c:a7:27:20:4a:b7:cd:9b:5d:f7:be:f8:1c:d6:c7:c0:59:
1b:68:bc:1c:c2:a6:98:fa:0e:c3:b6:20:a1:0c:3f:27:9f:b8:
93:ab:65:f0:48:dc:21:29:41:bd:f1:aa:9b:56:21:fa:a1:ff:
ea:f9:be:08:d6:ce:a8:2b:a6:35:df:c8:28:fb:6e:42:f1:90:
5b:bf:05:46:32:67:12:45:2b:af:90:ca:8e:e2:00:93:c4:59:
62:37:e5:3b:28:ae:70:20:35:d5:93:bd:d9:4e:dd:17:29:f7:
dd:b5:52:1a:f4:76:f4:b7:03:83:c2:70:59:67:49:ae:92:f6:
d9:55:8d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 06:33:31 2026 by rpki-client