
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
File: ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft (raw, json)
Hash identifier: aL45Zi0gVx6XVYu8yR+3VICwAaqwHFXpwBb/XP9zhHg=
Subject key identifier: 8D:98:F5:3A:ED:59:F6:77:DE:04:95:3D:20:ED:AE:D8:04:A4:99:16
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 01A0C934883F1F1D5E68C43BC2EC0B4A6736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
Manifest number: 1AA6
Signing time: Tue 22 Sep 2026 13:00:57 +0000
Manifest this update: Tue 22 Sep 2026 13:00:57 +0000
Manifest next update: Wed 23 Sep 2026 13:00:57 +0000
Files and hashes: 1: 5dAVtaJIi1EXqqYU5USv7fZXPs4.roa (hash: F+ZaLmkSoDDXKvEZfC55Pqn2Kegitmab6UvzlFAoMLA=)
2: EYW0DPWxBVq8OkJlufsQTH29-zg.roa (hash: LYmKFSnt04HxJKJsThK8gfh7k7FUGUtbXQNPAEzqIUM=)
3: ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl (hash: 3emr9FuopHpN3tJSqxRHJAyzx0wPCr9J2/j5+dBjat0=)
4: WyfVVVbupjvPxLzRmrpKaA7AkYw.roa (hash: 02QZajpOlAkNu8PwY46zt4fm5XsA4QV5bfhzU3rgZmo=)
5: Y_29QVsVJvHnxddFaQdcq2kyCOc.roa (hash: ycsC5DW4Lfa6OQ8J1BIx0zDPciZcjwI4JTfmbrMI8V0=)
6: _MW7W40W598GgASR5Eoa_4tP1ko.roa (hash: aru9WUwoYSO6XyN5TKKL7ZyhgIa+93XhWqRZBdE8/Ss=)
7: kyJQs5we30dtkYez5Z5lc7nb1uk.roa (hash: QYkWAPu1QeZJ7qVGGJyIAFdYbqAhnaEmDRslgqPIGEg=)
8: vkSBou13YVLJcpm4RzlvkM2VmEA.roa (hash: Yt5SBPreKEhsGRzUNTyivVfBSSg7gYCaurShg3S49zg=)
9: w66ZldWus98F7FLtFE_HfwzAVOw.roa (hash: dMhZ2iCHZg0KsJ/1R4eui0OO1+pgGYsJE5mhqZ9ftyc=)
10: yGko-YtBNaNvOP4tDs7GDUXg2eA.roa (hash: wSaHrBildo4ZcOo9cc+dzQPk/7VlKqTO3FnCX6x1CG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:88:3f:1f:1d:5e:68:c4:3b:c2:ec:0b:4a:67:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Sep 22 13:00:57 2026 GMT
Not After : Sep 23 13:00:57 2026 GMT
Subject: CN=8d98f53aed59f677de04953d20edaed804a49916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:0a:8c:df:3c:f5:c9:6c:59:d5:d9:2e:3b:
9f:79:bb:f9:57:b2:f1:3e:1a:19:f3:ee:a8:dc:72:
d7:e3:56:1f:5d:2f:20:7a:79:ab:de:83:d7:ae:c8:
4f:d0:3e:8c:a3:64:ad:99:e4:a8:90:1c:a2:ee:02:
54:a6:92:e7:4c:05:00:ca:79:3c:bf:ce:51:84:32:
ec:ee:9e:87:3e:0c:bc:fa:de:b0:5b:3a:e7:c6:d2:
be:60:78:d2:a9:7e:fc:f3:45:0c:8f:6a:d5:64:3f:
16:03:ed:9c:69:0b:30:9e:2c:16:df:ef:63:aa:be:
2f:92:ae:b3:df:e3:27:fd:2b:d5:58:b5:08:37:5f:
5c:53:70:2c:6c:63:66:ef:15:9b:63:87:0f:f8:24:
03:ac:63:23:76:10:7e:93:86:f0:07:f9:f5:33:3d:
f0:c6:1e:ec:1d:83:bf:0d:57:55:35:37:e1:65:53:
6e:b1:01:de:1a:5e:2c:10:ad:0f:ef:f0:96:9c:c1:
31:41:e4:16:43:48:c6:4a:e6:17:04:36:4f:11:22:
80:12:06:db:55:a5:60:bc:5c:05:03:e1:4a:15:33:
32:4d:fa:42:55:88:0a:fe:f7:06:f8:53:ce:67:c9:
27:f6:8c:17:8a:a1:eb:9c:cd:c0:11:51:3f:12:af:
7a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:98:F5:3A:ED:59:F6:77:DE:04:95:3D:20:ED:AE:D8:04:A4:99:16
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3f:a8:0b:ec:b2:ba:86:1d:75:ea:bf:d8:9c:11:2b:4b:49:
44:59:41:0e:b9:df:1c:b1:f7:a5:8c:47:a8:5a:b4:d8:e5:f4:
6e:41:0b:dd:e3:d3:f5:50:19:7d:7b:a2:9f:22:07:ef:1b:d6:
a7:8d:55:ce:71:9e:5e:db:30:cf:37:59:0c:07:fe:15:11:23:
75:d8:20:58:71:30:55:d3:90:f8:b7:1f:78:ee:d3:17:5e:da:
92:97:70:03:70:d9:6c:64:71:f6:06:b7:6d:80:25:ce:42:74:
27:eb:a6:20:a7:d0:53:07:2c:2a:04:75:38:83:7c:ca:67:54:
b3:5a:4e:f3:1a:0d:4a:ad:40:6f:99:ed:f5:48:e8:cd:b6:da:
e5:4e:19:bb:60:ce:1d:66:1e:df:aa:7a:ad:7d:02:8a:6c:da:
bc:07:f2:05:56:26:85:05:42:02:d7:47:b9:1a:f4:13:ed:5d:
0d:3c:5a:e8:a5:de:a0:ed:4f:ff:02:9c:fc:d7:1f:a4:ca:ed:
fe:38:7a:45:3d:9e:10:b7:84:bb:74:c5:a9:b4:10:78:8b:5e:
00:11:f9:b8:be:30:c1:03:d9:21:d1:61:ed:64:de:86:4c:cc:
1f:65:56:ee:8c:2d:d8:dd:74:cf:5c:56:ed:7d:e2:5e:c4:a9:
cf:8b:84:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:02:47 2026 by rpki-client