
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
File: ZeqT2IogLVHTTSqQNZfna48X8Oo.mft (raw, json)
Hash identifier: II5N8CwUNtKGTYM3QS87CulzXaH2yhdj2rTlw4n2CV4=
Subject key identifier: CB:CD:0F:44:0B:EE:91:1F:30:4A:53:78:83:5B:80:C6:90:35:A1:69
Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
Certificate issuer: /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Certificate serial: 01A1AA83897AB6E67E6BB5274F5F4D37C898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
Manifest number: 0501
Signing time: Thu 05 Nov 2026 07:01:49 +0000
Manifest this update: Thu 05 Nov 2026 07:01:49 +0000
Manifest next update: Fri 06 Nov 2026 07:01:49 +0000
Files and hashes: 1: 1-slrJI7IrkjucojDL3PSM-QhQn8.roa (hash: xzBm5rmTZ/YhoTedM66on08Pubr3LWJMwPe9XwQcqH8=)
2: NoZSWhmqqJ-jT-gIkmjqQ8qYPhs.roa (hash: 4FtInJpoGkk+Vb1c+RGpJW0LjEHsFBBNSGv4WPMtxTI=)
3: OPTZ--metoE31gQg_Kb2TtGMPZs.roa (hash: 5B9mvxolESAWRrjNgHOj1iuu7ztWWoCrEFq+GFHk69s=)
4: Olv6LJNY9--jk7Z4zsGLgF8cOqQ.roa (hash: Y+xcg8pb9fawoZIv9oQkXj/C2Ip7behg0aES9y4Lr60=)
5: U8WZUnMa-TahLUNYH6oN_0xrRfY.roa (hash: mHXLAX0IgZLJ42nbFOtKk2Ws8p5epFKPUUJ9r8cz5Y0=)
6: Xyfw_F7Al_ClRr8-ihHfuJGwEGI.roa (hash: FySK//s6n3h8RIZFxfbkqJJANJBH7/F4as5E6MlREIw=)
7: ZeqT2IogLVHTTSqQNZfna48X8Oo.crl (hash: EhWUrsGhx52RjqohxMNUv3VtZJkxaavS9zeMoM62kso=)
8: a5VVVz2Ui_9h3mW5WZQg--lrU_Y.roa (hash: 5VX7qNlklX2fuW/gRGQLSag3AdckFK4/ZchDNd6NNIc=)
9: bjot4b3E6nFOB3m3PoYlSW85ajQ.roa (hash: CtA6MMmy0n2/AhNaEa3R53oBEYwsN+optXLqB6oS7ic=)
10: u8LD6GM5KGyVdLMt4xHc2hEvEv4.roa (hash: r8B0cJyXj35djBArpMf/tZI9LQkRKm/+ERAhPE5VWvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:83:89:7a:b6:e6:7e:6b:b5:27:4f:5f:4d:37:c8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Validity
Not Before: Nov 5 07:01:49 2026 GMT
Not After : Nov 6 07:01:49 2026 GMT
Subject: CN=cbcd0f440bee911f304a5378835b80c69035a169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:1d:53:b5:70:a6:d5:98:5d:73:4f:36:4f:
59:a4:e1:86:45:fa:4b:a7:50:87:2e:ff:89:d1:12:
c3:07:dd:b3:de:a2:49:6d:e6:6a:ec:75:60:b9:d2:
d8:89:31:8e:b1:2b:bf:f6:95:f9:67:1e:60:cf:cb:
e5:21:fa:e4:0f:c6:22:16:e7:4a:10:29:18:30:62:
99:af:84:8f:12:f7:e3:da:7d:b5:15:63:10:5b:ab:
62:19:e9:7f:0c:17:10:02:a0:f1:1f:70:ad:b3:19:
55:90:11:50:47:0e:9b:f7:a9:84:86:95:35:83:f2:
31:d8:6c:26:79:bb:af:61:6c:5e:99:b2:2e:b5:46:
96:f8:88:0b:01:55:15:a1:f7:ef:d7:de:69:e1:5a:
d8:65:25:61:70:6f:a0:00:8b:c0:8c:f9:16:22:32:
2f:1a:0a:6c:31:d3:c4:72:77:fd:f9:6f:c5:5b:18:
06:96:82:8b:6e:a2:93:87:1a:f2:69:55:9a:92:9c:
b9:0c:6c:da:36:6d:83:66:87:8c:73:a8:31:89:51:
28:24:60:0f:fb:7b:d7:f0:bc:eb:7b:99:e9:2b:6a:
4e:4e:db:dd:bc:50:4a:7d:67:7b:cc:9a:c3:a3:b4:
f2:1d:f5:d4:3b:32:39:f8:f4:b0:eb:06:9f:d0:c6:
31:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CD:0F:44:0B:EE:91:1F:30:4A:53:78:83:5B:80:C6:90:35:A1:69
X509v3 Authority Key Identifier:
keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5c:d3:19:4c:97:53:21:37:42:ed:35:ba:e0:ce:c1:f7:af:
09:d7:ba:82:fa:45:22:39:2e:70:cc:8f:24:32:b1:f9:63:31:
3c:61:6e:5e:d3:42:e3:64:40:63:17:cf:c4:c2:fd:a4:6d:98:
0f:c5:75:31:09:cf:76:56:5a:b3:27:92:e6:06:37:ee:6f:9b:
0c:43:d5:f9:e4:5d:ba:c5:5b:b4:0f:87:7f:66:c5:84:7e:08:
e2:90:b2:2f:82:2c:29:ce:ec:8c:d7:40:e1:b6:8f:81:ff:da:
92:61:00:9d:37:aa:f9:07:bd:fd:32:55:92:f1:58:2c:0e:98:
0a:03:0f:f7:e8:5b:03:55:2c:41:06:30:c2:ba:6b:72:89:fe:
08:0c:fa:1e:59:55:2c:13:9f:71:83:f3:8c:3d:da:91:01:b1:
4b:a9:f4:53:17:9b:43:37:d6:96:76:59:24:1c:a7:9d:95:b5:
a3:28:48:e1:ff:21:49:d3:95:be:3d:39:37:09:77:6a:50:0e:
f3:cf:e3:ec:53:c2:ff:89:9f:df:e7:01:84:80:85:4a:4c:bf:
89:ad:6d:6f:35:2d:3b:09:46:eb:74:f3:06:19:22:95:89:ec:
30:f6:eb:8a:d7:3b:6c:b1:b7:94:1e:9d:d8:87:05:0d:24:54:
be:50:e9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:16:53 2026 by rpki-client