
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
File: tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft (raw, json)
Hash identifier: 1Fyz25Rt61xGpJwdtCZsYHsisJwegMvYwykKXwUvW88=
Subject key identifier: 85:A4:CD:87:38:60:C9:5F:D5:FF:E6:64:14:25:16:D7:AC:7B:54:D1
Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Certificate serial: 01A0C4E931171A9AFDA479CF663DBB577875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
Manifest number: 0461
Signing time: Mon 21 Sep 2026 17:00:11 +0000
Manifest this update: Mon 21 Sep 2026 17:00:11 +0000
Manifest next update: Tue 22 Sep 2026 17:00:11 +0000
Files and hashes: 1: 1-Fy84YC95r-bQW2cLl79V6F_YT4.roa (hash: gL15S7gQEZVfvb5bxwrY+zQzlzYDYNRTFbb19+x9mOU=)
2: 1-Nznx-18fNZ6F7fV7FWsvpQVpSk.roa (hash: ESa0OQif8LkNT9zKRORM4Qe3nNaXNgqNLhdo7JNem/0=)
3: 2fYLBv1U0Aal5HtFShitrMTODDk.roa (hash: 2/V+b6fricNVBwCToj237iqhy26fLac2r/viReW4GF4=)
4: 3UqTULNUjwAb8aM5tZWDkdsXWeo.roa (hash: LLkvKetTDyJdMXPZuYokaJPjJ58hhOZl6BKgzGKR4fE=)
5: 4eZ7bkmpJQiebKtBTXoYVZg6Ldg.roa (hash: +qSceZV6AJUPDL56rity8Lx2SMr8wkGezaj/ssbWib4=)
6: 5A-xAaitVd-Z-3EM0tcDIKZtoa0.roa (hash: rvE7dA9kE2RGdYWQzFMr+Rr8fFZi5luB0pquTynO3s8=)
7: 9tWF1GqvjRro3KCeTjhlXGOeJnk.roa (hash: teh4jlkHAaykmKjheyxnAjMWR2tE22/CA39+lQwLfBY=)
8: AAN_C8py2EA1n7GC7uysYX9C8eI.roa (hash: YTXGhX9lVZicuBLsjZQtboD3S2P+2J1oVo6LxafsTbY=)
9: Aw2zWYgv8W7CwrMsEePdbTsLvok.roa (hash: wEinvm1qao+9BCRR0fnnIbv5tbDhJ2a5pDYCtrsJwPc=)
10: HTIxoi8WyFSrHeUOWzzUiEIhzDk.roa (hash: cd0RecHzNsbQYeDphiQhrKlq2//otbl1g44Ke+zy6bw=)
11: HwCEkBXkDVGb_trROXqUO3InBZs.roa (hash: 4VqvdzlCii9J+rZ10d2Ty8zbIKLGsNMqZiNczN/lH5o=)
12: J3Irj20a5Nlbymwp_tuM6NwpZGk.roa (hash: JOo4UjGWzNEE5RC1ZV6KYebK8zPHqC8OTRdKUFsxrbc=)
13: TIVfVbHfouWC6xhaqaOe2rROKk4.roa (hash: f7pxBjbhOpubYs4a19slbS3M7w5nVBiYFx5na8V322c=)
14: W-hqX4V_eWCdg6_rVRWyKKwNsZo.roa (hash: FbBn+Y+2aBjmifhJcGgHM6wc4kqUDt9aYkj9YzgXnQo=)
15: enXU2NRbrmUSLj3aNd49w6CB9kw.roa (hash: bqlmejBH4um+OhcSoaSwzujrI/A1SFNyu4se8eX8Jy8=)
16: fMecL_p_XorOu-OBjgfyWEuIE2g.roa (hash: E6t0K2Pr40cejujMiJaL8HUBY8+SoeQqKn7sy6Ra0fA=)
17: hTbfi8iyqpyBUx58enPyCnAk8B4.roa (hash: iR4m3I4+fi5SXyKVTPF8tJekzYjESRlBnoPf8B3mZQY=)
18: hnOMcA3FLHrspCaukH2G2BOpT8A.roa (hash: lcUqSg3j84OiYjox0KKVZ3oU4xCrQOPVs8tFQBrKuF4=)
19: lI-SGy6V9gbYheStfoup00TtjDg.roa (hash: j9/ph3cCY16/8Ag7j6nb1Eljp7GEHMNtLj6G3JeZuhg=)
20: ma_hJ5Go12WDQL6E3MOLLSFUGZg.roa (hash: ri5qcBP3AFkKJ9Kz9G4biTaRxnIVuPjswlV7TfCNoUM=)
21: tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl (hash: Q26lksnIwYgDiDuwQzQNr4Ssv5zNaF1GV+wlIRCdm+k=)
22: xAs-bndcqPd0AUG3p2gqYtNCwKs.roa (hash: RlwLGxg+e7W2Q6yDLdFrjAGx+ZccxU5PdajeFC3InjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:31:17:1a:9a:fd:a4:79:cf:66:3d:bb:57:78:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Validity
Not Before: Sep 21 17:00:11 2026 GMT
Not After : Sep 22 17:00:11 2026 GMT
Subject: CN=85a4cd873860c95fd5ffe664142516d7ac7b54d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:5d:c6:cb:f0:2b:b3:88:23:fd:18:f6:af:
2c:77:40:37:bb:3f:7b:4c:11:37:0e:af:b4:ca:b1:
66:01:d8:f4:96:55:e7:98:90:ce:a8:61:cb:b1:fa:
19:9d:ab:7a:00:34:eb:17:70:ba:76:c1:40:fc:54:
b0:7b:21:fa:14:88:0f:29:33:ad:47:be:2f:b4:ec:
35:70:08:da:f4:16:03:09:3c:c8:74:1d:b4:57:2e:
c0:2d:05:7b:07:00:97:84:7e:69:e9:cc:28:69:8c:
e6:55:d1:26:d0:97:ee:a4:c9:a0:f2:e0:37:52:81:
a1:c5:1a:02:c0:0e:e2:3f:b7:bb:68:7f:2b:cd:d8:
db:fe:45:d9:ae:a2:c8:a9:05:76:38:b3:67:f6:87:
2c:89:d1:02:f8:4f:53:eb:59:53:59:1b:bf:8e:c9:
41:e2:e6:37:b3:3b:e9:52:02:fd:e2:a4:4e:9d:45:
0b:b1:23:b9:5f:48:31:bd:7a:d1:57:3b:42:f1:3b:
09:eb:32:4d:c5:52:ff:2f:af:e0:c3:f5:ab:dc:c7:
e8:3b:4c:17:ab:9f:5c:6f:ef:81:0d:d1:dd:3f:b8:
17:6e:b6:85:d8:0d:38:a6:09:8e:60:98:80:fa:58:
69:6d:03:fa:3d:33:a7:9e:d2:5d:90:25:c3:41:21:
c2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A4:CD:87:38:60:C9:5F:D5:FF:E6:64:14:25:16:D7:AC:7B:54:D1
X509v3 Authority Key Identifier:
keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ff:0d:85:83:eb:af:70:82:19:95:0f:2a:60:76:9c:a6:43:
87:66:d1:a7:b6:bc:2e:5c:f6:a5:f7:74:11:5a:11:82:46:78:
bb:be:60:77:33:e3:d8:ab:42:af:63:28:b8:47:26:1a:6e:e0:
db:1f:7a:ec:0a:d6:72:72:ee:d0:fb:00:ea:bf:ee:f3:d2:5f:
51:21:d6:69:c6:5f:59:70:e5:8e:b7:82:e2:c4:11:d3:91:70:
b4:0d:99:43:e0:aa:a7:37:04:86:87:21:e1:2a:bb:56:57:b5:
8c:36:b0:8f:af:6c:48:5a:4e:48:8a:99:0d:db:f4:14:0c:50:
a9:16:0b:16:15:74:87:60:32:30:68:78:11:17:7c:b3:9e:da:
c8:cd:3c:ca:14:cc:07:72:e6:3f:1b:72:88:dc:1d:91:0f:08:
44:a2:1b:be:1d:af:cc:52:f1:fb:7f:95:a3:e3:4f:49:0e:e1:
b8:ba:12:98:89:c2:10:63:d7:9d:e9:1a:29:15:65:ab:8a:2e:
f8:0c:ba:28:c1:7c:cd:0c:fd:09:03:09:c4:07:d9:b2:95:c1:
bc:7d:16:96:88:c7:89:e5:90:89:40:89:f5:89:55:95:52:59:
cc:46:20:71:0e:1b:9a:92:89:49:e0:7d:e2:cb:6d:22:fc:96:
87:05:9d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:17:28 2026 by rpki-client