
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json)
Hash identifier: 78XYfBj+GfI9y8oYHmdQfA9X+Fo435AESE1saozSllE=
Subject key identifier: 98:36:23:EE:64:3E:B7:14:11:27:E6:E1:96:9C:18:E1:A2:04:8C:88
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01A1254283A82A7B9694E294FF9E49E353A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
Manifest number: 14A6
Signing time: Sat 10 Oct 2026 10:01:18 +0000
Manifest this update: Sat 10 Oct 2026 10:01:18 +0000
Manifest next update: Sun 11 Oct 2026 10:01:18 +0000
Files and hashes: 1: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: Pd3t++gcpcZNtqyWflf/AVctzIicvZ9VEafOL7oaHRQ=)
2: 7jf8I0eBdO6b1-zkApo8w-11x1A.roa (hash: TAvMnNu0WnFxQxz9XL8UPta+cg+ATM89elfXvIUl798=)
3: BLTLVOtXSHYCVOoxyeo_0IvC-JY.roa (hash: NYaQAuEgTk5rfLHUlgc+7BWUhoUqRHnvCyLgXnpHIrs=)
4: JCYdzJTMcHHvvNsrGsRbncy3QwM.roa (hash: +DWRjinwclN/RO9c2/UhMsI9n5ugj19x09Oj5LQrJ7g=)
5: LVzm6PScS-DUr1dRA7Al1IZOWMU.roa (hash: XX+xZLdfHxaIHsXWoOFRjP0yYXn9msAV6LYRZEB20lo=)
6: Naq_nl1pE5uhLvd9ifQny82LIis.roa (hash: OYltBhd5Cp/g4vCxZqMX6TRvztkTMT5cyE/NCsPsb/s=)
7: RAlCx5dBkXErr4GLU_5m2X54NZU.roa (hash: ObC2XXv43nkDqryZk3TpQdoXImX/CEh8RrHJ0Kt/ht4=)
8: TbKjk9biFGhLJW-0EAJ-G1mE3dg.roa (hash: NXGH0uYXNrJkmlvbFICP94ZCbP2H5y85Tnuyfhnefi8=)
9: WRpDDqEVnBPTCAUWhvtGHnRTNpE.roa (hash: w26uNtXV7/rSV+FlLM4bjKvRX0N4Aqz+ftFHbrZVRBs=)
10: d2sssZgiWQxoiwpeGhpD4-ZdyBc.roa (hash: eiBlGU6Gm1VLOcjq2l2JBGaaGY93PAF3cSre6J4TW8k=)
11: nkciQnEuEjOQTOgeL1hdYkyj4wg.roa (hash: BWV+AnPSsesbRoWnrQx/NY6wOXo+WFzBX3YuFsngh7M=)
12: prwVIWLchRMQh4wLMP_5AL-rJeY.roa (hash: pBy/6NiY8dt/IGcrx7wYr9+LEFZ5rOBd3e190L4AGRc=)
13: qFCJx5kPHVIDEJbLb768fD6gip4.roa (hash: CJnw0mwbH5wAlci3rG6FQARWz8se15SlPgqgPC5AzgM=)
14: ydtp6Ra8yv13dJRlj5U4vEpL5aQ.roa (hash: JitW8Hw4fE5VESE5RyEswxbTMms7e/IC9YGFZn0te0w=)
15: zgNSYrgLKBjJKEAyj0UQCw39lwk.roa (hash: A2YWYKZi8ufFfaCpWTZIhU0UIlJwdT93/7iunuMFhi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:42:83:a8:2a:7b:96:94:e2:94:ff:9e:49:e3:53:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Oct 10 10:01:18 2026 GMT
Not After : Oct 11 10:01:18 2026 GMT
Subject: CN=983623ee643eb7141127e6e1969c18e1a2048c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:69:00:3e:8e:b3:a6:50:ca:8e:13:d8:3f:e3:
40:4f:e2:95:97:a4:fe:d0:f9:0f:cb:95:be:de:25:
f6:3b:2c:29:05:02:b3:26:ce:1c:a7:de:2d:1e:45:
1e:f0:82:05:d5:50:ff:4c:78:9c:21:8d:42:f6:94:
5d:9e:10:6b:ce:18:55:20:21:62:c5:42:77:ce:b7:
4f:b7:35:f9:e2:aa:42:ba:8b:89:ed:58:5d:bd:fc:
6f:71:74:9b:cc:e1:52:e7:21:fc:8d:75:56:af:65:
58:4b:53:99:2a:2b:ce:f5:09:0e:01:14:06:8f:ce:
54:c5:a7:f3:dc:b2:a9:62:9a:f8:58:39:9e:50:e6:
31:20:0d:1a:1f:e6:d0:29:b2:e1:2b:28:08:9d:5a:
0a:53:f5:79:89:a8:1d:07:11:0b:6b:66:12:32:3e:
07:33:ba:b5:bc:53:48:9b:6c:72:57:be:a8:04:27:
36:fd:30:70:3b:d0:17:91:f9:7c:a9:81:a5:fd:5e:
17:a5:a1:c4:eb:d2:92:ac:57:58:7f:7b:a8:8f:86:
78:db:42:98:ea:f3:ad:34:e0:10:da:58:49:83:57:
5e:5f:23:b6:7c:e1:32:d6:d9:79:32:75:15:0e:07:
9a:2a:9c:c4:19:23:3e:1a:70:e1:bc:7c:47:23:2e:
da:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:36:23:EE:64:3E:B7:14:11:27:E6:E1:96:9C:18:E1:A2:04:8C:88
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ce:34:ef:e1:9e:68:76:bf:a5:8e:8e:61:b9:97:a1:99:07:
42:29:20:dd:97:db:d7:ad:1f:bf:5b:3c:5a:d7:42:50:41:b7:
36:59:2e:f3:e2:c2:35:9a:09:38:68:82:ba:18:f3:3d:39:af:
8b:c5:82:cf:45:81:49:23:c6:8f:e3:13:71:c8:ce:02:7d:d5:
ad:00:5e:25:c4:dc:00:ad:3a:ce:95:16:58:95:8e:d3:f3:17:
b9:16:a0:7e:61:99:04:2d:2e:c0:bc:c4:82:9b:a1:8b:0d:b4:
26:09:01:13:5c:20:7c:d1:b2:b0:51:a1:74:e0:c3:f2:68:b6:
ad:f7:e4:b3:c7:e7:7b:25:a6:77:9a:a7:27:90:b0:2f:c1:14:
d8:96:9a:02:03:43:c7:cc:0a:4a:d3:74:3b:ee:ff:c6:66:a2:
fc:c8:21:ec:6d:05:80:a1:44:b3:85:f2:b1:8c:6b:66:81:45:
81:b1:27:37:b6:b7:1f:b5:ad:e0:70:b0:b9:23:c7:4c:28:7c:
69:c7:dd:90:14:09:68:91:28:c0:be:e0:62:7b:f6:98:87:3d:
4c:32:72:94:a7:19:53:d8:f4:7f:63:e8:46:96:48:a9:a8:db:
d0:84:64:f0:4c:11:30:e3:c1:ef:2d:84:fd:67:de:cf:45:08:
d6:40:ea:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:44:34 2026 by rpki-client