
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft
File: rrZuxejyQF9vjUhuc_uCuN4N7g8.mft (raw, json)
Hash identifier: ykCUgtOm7D01CSJRCZj5f3yXPBQLqlYxi1MJrweXiLI=
Subject key identifier: 66:F3:7C:88:10:C3:A6:9E:C6:DC:5C:94:A5:2D:05:97:B0:EB:AE:4A
Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Certificate serial: 01A128E7EE8BC1456AF2D46DCFFA8B143251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft
Manifest number: 1A9D
Signing time: Sun 11 Oct 2026 03:00:50 +0000
Manifest this update: Sun 11 Oct 2026 03:00:50 +0000
Manifest next update: Mon 12 Oct 2026 03:00:50 +0000
Files and hashes: 1: 1-Pe2TnywVmfaP-WemWu9F6D1uY.roa (hash: TO2cGriDwgxNlyLdj4bg8MbV1G1jK45ogoJF4793fSo=)
2: 1cuv-12cm2QhTHJFihj8rVlWS38.roa (hash: bcoEGOaQcgkLD12rX+LR5QgbfI3SBiV6QabZt9HzI0k=)
3: 2V5uX7zz8rLZM3EIe_aMe1EFHf4.roa (hash: L4MUyeDgRyRa1SAE3WijwMUBcPHzc9BZm/cEJ6tCJQ0=)
4: 60RghjJR7fbMZmTjDd1goDTxFO4.roa (hash: FTGk3AHz/GL0pHnXXED/nhsF8Ezap2Jkso8Zx9XbdsY=)
5: 7v01OOv6lsa5SDVTbq2sDUyqghU.roa (hash: 674pqR/ZC6RweHjRad+sALRIi4soda9NrCU2Y8CRUAk=)
6: VeUDemYMUkamvLNvu71jm8kXCWQ.roa (hash: sDlj2eIeTmzMHoHM8lIyD6YCl1o4NeFPnKRaymevkd8=)
7: ZMcpzSwF8sfXNSwmkOe8TDMBSJw.roa (hash: +y1O8tgMcUGxxeeg9mLZswZb6MR8jtPoqrvAjwcYJzU=)
8: bcQk1dNiHStablJSpfOMgKvzyB4.roa (hash: vRaLHdtxEoTI3K0Ud0h8BsRxBaZPY4lVipsFC/qsS/8=)
9: eEv6Dzp18N3mnwft_tpFzD3jA9s.roa (hash: Bu5vlAgH4Sy8ybAbPwvMy42MlBplqri0XGE/ouWApbI=)
10: exX8D204pUSMlQDRe6-0vKudRw8.roa (hash: hw0brhXYOTSxVJVmx1MBXDRVxmLR1RsTQRFAr9ka18U=)
11: jCzBcgQ2ecHLxm36fGHNj6MQZAY.roa (hash: pXkAi/m1GNEU9RCztBpU/RufugyhkhNnDbgVYNdhfJo=)
12: rrZuxejyQF9vjUhuc_uCuN4N7g8.crl (hash: /pwOb/t2DbTTlTVNgUeD33xJOTGDZ46Skk6v73quqPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e7:ee:8b:c1:45:6a:f2:d4:6d:cf:fa:8b:14:32:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Validity
Not Before: Oct 11 03:00:50 2026 GMT
Not After : Oct 12 03:00:50 2026 GMT
Subject: CN=66f37c8810c3a69ec6dc5c94a52d0597b0ebae4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d1:c9:aa:31:ea:95:da:57:9f:d7:a9:05:9a:
06:6f:10:00:ee:dc:e6:65:09:d8:81:32:19:cb:5d:
3a:cb:71:f8:73:af:4b:f7:71:2f:08:73:54:cd:e6:
09:6a:a7:28:2a:6f:58:a6:ed:b8:fe:c1:18:b8:40:
fe:70:b6:ee:3c:af:0d:89:da:7b:44:73:cc:bb:e2:
ef:ed:20:43:59:2f:59:bb:ef:ad:b2:90:02:81:e4:
75:97:f8:fa:b3:ad:50:bc:a6:bc:9c:89:95:9a:67:
12:2b:b1:17:9c:9e:e7:0e:a4:9e:48:75:30:0a:17:
3c:c7:42:f6:bf:55:4b:e7:2b:0a:ac:45:d5:07:c4:
3f:7a:41:4b:0c:4d:ec:9e:63:cd:10:fa:1e:39:ca:
50:ff:1a:89:90:96:30:a3:bf:a4:79:82:4a:da:27:
07:a2:bc:74:1e:4b:3a:9d:ce:2a:29:9d:4a:9a:e7:
cf:83:2e:f8:a5:7f:26:8a:f0:54:cf:3d:ac:b1:72:
31:2c:b3:8a:b0:d8:46:33:28:ce:2a:53:c6:0d:9c:
82:2d:3c:4e:c2:88:7d:d8:5a:55:e2:bb:0c:f9:3b:
a4:ff:1c:15:b8:5c:04:d2:cc:d1:66:2d:a6:74:8a:
19:97:bf:8f:cb:ee:b5:ae:7c:f4:67:d7:93:13:11:
ba:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F3:7C:88:10:C3:A6:9E:C6:DC:5C:94:A5:2D:05:97:B0:EB:AE:4A
X509v3 Authority Key Identifier:
keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:40:27:30:15:15:c3:4c:46:f0:26:e9:e6:64:8c:62:0a:26:
20:ab:3c:06:6f:bb:b5:47:7e:aa:a2:ac:74:08:bb:9b:2f:c8:
2d:a6:3a:6b:3a:dc:87:63:a8:64:c9:62:79:8e:ff:de:23:0e:
cf:f9:89:a4:f2:9c:4a:49:75:bd:3f:66:42:ba:77:94:56:53:
8b:6a:48:d8:b0:81:9e:5b:0a:46:00:56:62:a4:0b:88:ec:fb:
ee:33:8b:16:ca:b5:6a:91:f7:a7:98:94:2b:43:7f:e9:f4:b3:
f8:69:c5:67:e2:ac:34:63:45:45:23:54:2a:1e:c9:b9:14:87:
39:7f:5d:f0:6e:2c:33:41:8b:13:34:59:ce:e0:49:08:c8:f3:
7c:3f:0a:48:1b:ad:93:1d:e6:24:92:70:c3:15:28:b5:89:22:
75:b4:a0:fc:8f:9a:9d:31:16:b4:07:bf:36:8f:50:25:81:ca:
56:92:be:c4:39:ce:fe:2b:cb:e6:ce:a0:6d:a4:28:f2:97:01:
89:2a:30:fb:18:01:12:35:21:8e:97:7c:d1:c4:65:d7:31:af:
66:be:bc:e7:66:48:37:53:70:72:ad:93:69:23:bc:ac:90:d6:
2f:3a:06:58:0a:3b:01:bb:51:64:2e:24:50:65:8e:54:55:bb:
1a:2f:b2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:01:52 2026 by rpki-client